last executing test programs: 19.857725012s ago: executing program 3 (id=422): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x30}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x10, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @md5sig={0x13, 0x12, "c851616c0500cb080000000000e79490"}, @sack={0x5, 0xe, [0x0, 0x0, 0x567]}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @mptcp=@capable={0x1e, 0xc}]}}}}}}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0xff, 0x1f, 0x0, 0x2, "01800000cd91582af51d010000000000004000"}) r7 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) 17.836921709s ago: executing program 3 (id=442): r0 = socket$inet6(0x10, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x71, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) r3 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r3, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000200)=[@assoc={0x10, 0x29, 0x3e}], 0x10, 0x44810}], 0x1, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x10, 0x1, '$#*$//-:/}\x85\x00'}]}, 0x24}}, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 17.790755174s ago: executing program 1 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x20001100, 0x4fa5}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) openat$rdma_cm(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0x44, 0x4, 0x424, 0xffffffff, 0xc8, 0x294, 0xc8, 0xffffffff, 0xffffffff, 0x35c, 0x35c, 0x35c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0xffffffff], [], 'nr0\x00', 'veth0_vlan\x00'}, 0x203, 0xa4, 0xc8, 0x8502}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0x1cc}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x480) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f00000013c0)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f51dab5ebe8523e54dd8db33ab6214499c610051df74b67269c9b554b25c70c3238ffaa908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87fd2a4d0d5857b9e2559a5a0a857b845f0e1495e8d9b574b0f4d1a55ec8d93c148a50c5c4228c653be69a7d728fa4983e129ec4e7b821ce041be389d37efd40b81a9704e5182b9cdca1f2d3312351e9edaa8ac96088c465a953e0ec3e8f26aa17ea3e1913b4d147141d1aef80b3ed959d14fad4ead4de92e10f0faca7acdce7c712ab95a11ff4c72798565f0794d7bc50f5082b52b34a1de7c5609e31e1fcc05fc7dbd73973b5dfc92896f57f5b76fd9df5067eb273f0960560df3dfd00ba068e28812244f700d76da4197bb332245f00112b73659c63dfb854eb8eed1a9881e5c49399b2c6932b540d3464d470cabb65a62fe8119c6543923bb11bfd61db06f5455d202681199fc176e67c4714335e8f479725a37a9dea710b98e3583539fb99a076b773ecf636293b98cc5ce8302e739016b20a70e80d1227c9ac1d2d9324c8bc8312179130a44ad1528b2759f08fecded5aa3eb91f3d54928c59d7bbaeba2cc870e9b767e16e510f2b142e7b249bba2bdc19b10996643a26b9631c4dddcf7e310c7bffeff3dd7d22c4e009842059b8e14b3ef308e4bc849fcd77d6fcb2731b1f7a3c00908c1551932784e7ce430d123f4c8249a34d6b347b8507b8a2eb71a6965c5475eb63678da3cfc876dd26971dfe5755eedbe578858e938a039b312466b37a076166fb7c971f14bde339d88bc7ce7acf0cbc005d9dab73da57af154203cace21ee8cc4ab28c98467e61a5258f096aa768b2d8fb2f5618c7686464d2c69d8e817506471369865cc0c1aab81600c5e0c0300eea38c6102c02a2b9432259ccce10be43801ce79a6bb38479c40e9cbba16958d3b24a7a171e8bc3f8dc4788d072bd2f29672f182eeec86ef53400db8416e69b36cdc925322b479ed07a749161af1a03c3d7ed25ac4a43bf2c0e5bbe21cf5e43421adf7f960aca86f06d4e8744fe630571ea5c16e7772fe9b28e6a02d95d8eab4c5062569327f66140e786ae7504850472aea61884e6b05bba6387886a17b6739447e54669d50676543c4eda9b9840865e3930d00ebed9b1eeb4782297edecccaab84e34207ad569fd00a28539395b432b29bc98634a0e335ceacb3370a498095ef22ca0c080781689020e07171b8ff6d9bf4fd671eed3fa8aaa54d4d854c4da3b434332d7724aff7bec9941a07999567a49ae64f9bcbcca4f298497b940a2ab2a8aa2293362f18da3d16a6dae61e87fe2fc072ec53b0142ccf4d9080f3fd2bc244bc194ee9be3f08d256b99305ddfbef01521d262ae93ccd0c11244a90fa2460b16985e5ae68652f1d8564d5e8d94bfbc3f25f86b1b749ea14e9664bfa53eac14aba49d313689e7f8052a633573484569de148aa3296c369f969ed9f148841b277538965a6b9832d7b272d21fb773b8d59eb95ad8dcef4f877115aa0179cde53b497d15e5291a3aaef5d46b0d676798c8524d2dd2c579025ef57802dc0450b3c698611305349836ebf7c0946b07dcbc07e6e8f273eded8c7a7cb43048a8c0aa8f0cad9df1bf0b79cada49f30db48a021d7f2ff3ee535af6ef47ac9e38086c62ebbbaec8768f67", 0x581, 0x0, 0x0, 0x0) sendto(r3, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000680)='veth0_to_hsr\x00', 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 17.598314787s ago: executing program 3 (id=446): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3450, &(0x7f0000000080)) madvise(&(0x7f00002ec000/0x1000)=nil, 0x1000, 0x12) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) gettid() r1 = socket$kcm(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x200}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002e04db7201d0650c1ddd001020301090212000105481008097c7202009cc5b907"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000179fd2ce35a01931e4dfd8442bea5eee98bb413f38f2808244c05b12aaf2fc3630ceed8fcccc144c0619c877711e7871531d37fe99f6749b597d9a925d77bc09af98a7db3b9b442fdcb8f30d8837c6ac1668aa4e9649b5a1a80bb3d3d62192f0a16312ec1b06cf245965976738f88290a7b05aef365fadeead73c2d4b8405da2f86353358aa384aac4255a643810e69a36744b92700e08f0c520541bebc646fde95b658fdc4ce472a4f10884739c1d4d0f4c9d227fb80c69954e2444339f4a1705e72c6872636a74e13f73350598206c85a9349"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x30, 0x0, 0x1, 0x201, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x30}}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) getpid() munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) 17.505673989s ago: executing program 1 (id=448): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0) r2 = io_uring_setup(0x3e76, &(0x7f0000000000)) dup2(r1, r2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d6268fca6b3fc43da09b1d0a95d18e26a8e0ddd857f4911abb72ced02e4f1fe5ebb35042436374c7119229c019819a8491bdd74a299ca4fa71ee05f4c49c99de404b76d08fb1938674fa45fd06104cfcc08e9c017a2769a77e1a9e4da0e451353ca53b990500b18e4f4bb5cf1309fe4707c3f7200"/218, 0xda}, {&(0x7f0000000640)="ffb3ef96fd55310531a92b9d4b2ebcb168c3e90db153fe8bc3c9e2cfd50d22329495b92a7e12a948fff8e40f44798512135fd8fec900cca0c10e9e61d61cff5507f9298209ab8dd95ba0cb024a07dc20d07ac8940c729de29318e23818b2169da4374e8ec904573105b3dafbed9c3958b6570ec6117f2a8b7823b94056c0bcfd679f57db483bb7631bfd74f5f73cdebd19d4bd31a81d7c73c4428a65dc3820987e1ea1c45773112d4e2b1cc8064f220c7b2d673f84d4b1a5a9aedc2063b740198f57d0848358b2cf118bfcdc7c40303dee672f1ca6384e006460df438bde154a0c", 0xe1}, {&(0x7f0000000140)="74812905b8bd297a48dc5adfa4052d6e7cdd8c1615a231859ac522b4ae78d7f1b3619ed73f0e93cf3ccd30f4e58303dfd9d20af483a3406d486bad53698267", 0x3f}, {&(0x7f0000000000)="7c73c1e117e291cb6cef4163ed06963af9a19a5183aa91163ef7aa02b707e09546e781172decfece433c", 0x2a}, {&(0x7f00000004c0)="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", 0x156}], 0x5) 17.298971339s ago: executing program 1 (id=451): r0 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80401, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x1, 0x1, 0x8, 0x1, {{0x28, 0x4, 0x3, 0x26, 0xa0, 0x67, 0x0, 0xc0, 0x29, 0x0, @broadcast, @loopback, {[@end, @ssrr={0x89, 0x17, 0x4f, [@rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback]}, @generic={0x86, 0xd, "5400456006edd524538ba3"}, @lsrr={0x83, 0x1b, 0x4d, [@multicast2, @rand_addr=0x64010100, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}]}, @cipso={0x86, 0x10, 0x8000000000000006, [{0x5, 0xa, "11396aa70138d6f0"}]}, @cipso={0x86, 0x11, 0x3, [{0x2, 0xb, "02862f6dd04aa3f06d"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x8e, 0x0, 0x1, [0x4, 0x5, 0xae, 0x303e, 0x6, 0xffffffff, 0x9f]}]}}}}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x2, 0x9, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x20, 0x3, 0x1}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f40)={0x2c, r10, 0x211, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000d00)=@delchain={0xe54, 0x65, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff0}, {0x9}, {0xffff, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3, 0x81}}, @filter_kind_options=@f_route={{0xa}, {0xde8, 0x2, [@TCA_ROUTE4_ACT={0xde4, 0x6, [@m_csum={0x60, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xe, 0x8, 0x9, 0x5102e979}, 0x71}}]}, {0x17, 0x6, "9bebd0407d37454b331ff3d3d4456854320941"}, {0xc, 0x7, {0x0, 0x9154dc3e034df718}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x214, 0x14, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0xffffffffffffffff, 0x9, 0x2ec}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x1, 0x8, 0x4, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0xffffffffffffffff, 0x2, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x3007, 0x8, 0x39bb67e4, 0x9}, 0x4, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x334, 0x0, 0x2, 0x800}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe0e, 0x0, 0x1, 0x8, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x7, 0x200, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x9, 0x2, 0xfffffff4, 0xfffffff7}, 0x4, r8}}]}, {0xe5, 0x6, "176d62e5b703acfa2ed9ec738ab8ced694892e5be1db39078bc10099875303e4e864a66646add0b2f426860447af6c204bf3a1914ea866ecce535897e537347d89c13f54af95e8b78e74753accfd6eb34ec78b8c79bd59d006495d5ed076dee84e1a9270581d20efce7f10dbfbaa0909e8712084cd1ed3d5055bd9e456fcf2681e673b956c75d970a74495872ed0b09090fc8ce246a468a19adcbf08e4164c0816b10ba0b33b2b4692de9de443611eff3bf606ec43c22f3e52d8ec8aec0fa8131170e8f729dcb5dde50773ad2ab142a00f0d4e28de441d92d277de60b2be1a10dd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ct={0x108, 0x0, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x101}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xce, 0x6, "8dc6d6e078445f656a5a649aa2d575e59d44e023292926ff175cd3d9b332afc442ef684ac5448814dd3f208274a04e20eec25adfa8c46ea27a19f7f8d6c99f64a571180f2441bef6c6a2c8093a75959f45a21df75769684c31077924204f1f3fdc28e808284c7c7b06e9b646cbe826e909cde5e642d29feac35d793fb4ae1b61557e7805ea8796996860756a8b9154a37f40200f84b62ab34574350fea7954009c880822b01949b41ca9ac27642bd6d2f541a5ed13093eecaa2c7013336cc6c9a61fa5be45e3ac4ec910"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_bpf={0xcc, 0x1e, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x7d, 0x6, "474a369c96b4e6ecba8b65b00716c343f3c64c725d09d2e79b5a2cc2e362536a1a4377fe6c3c1de7f1f1b46220e263da970be3d114933a0ab2b73c6ad960d0ae8901c0ae2fcc33c5b43c69033c451ede398527ff5825596cd4679e2bbdfaceaa63287133b4404f89c4f366a7248c7055cfadf44dce44bce4fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x8a4, 0x1e, 0x0, 0x0, {{0xb}, {0x870, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x84}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xca72, 0x3892, 0x3, 0x5, 0x6, 0x8, 0x800, 0x5, 0x36, 0x97, 0x40, 0xffff8001, 0x4, 0x6, 0x62be, 0x1, 0xfffffffc, 0x8000, 0x2, 0x7, 0x7, 0x3, 0xffffff81, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x3de3, 0xd894, 0x2, 0x80000001, 0x7, 0x548, 0xa4ab, 0x4, 0x56e14cbe, 0xfe, 0x1, 0x4, 0x7, 0xa1e, 0x7, 0xfffff817, 0xc0000, 0xf, 0x4, 0x9, 0x6, 0x964, 0x5, 0x4, 0x1, 0x93, 0x7, 0x0, 0x2, 0x401, 0x4, 0x3174, 0x6, 0x2, 0x2, 0x238b1bf7, 0xffffffff, 0x3ff, 0x3, 0xb, 0x0, 0x6, 0xffff, 0x6, 0x31f, 0x2, 0xc9, 0x38, 0x8, 0xcc9, 0x0, 0x64, 0x8, 0x0, 0x8, 0x5e, 0x7f, 0x0, 0xc000, 0x7f, 0xe, 0x7ff, 0xfff, 0x4, 0x6, 0x2, 0x6, 0x4, 0x7, 0x8, 0x5, 0x3a, 0x7, 0x7, 0x598d865e, 0x100, 0x4, 0x3, 0x200, 0x8, 0x1, 0x9e1a, 0x7f, 0xd, 0x400, 0x9, 0x100, 0x0, 0x6c2, 0x0, 0x259, 0x10001, 0x7, 0x400, 0x4, 0x800, 0x748, 0x8, 0x4, 0x1000, 0xde, 0x0, 0x5, 0x8, 0x2, 0x8, 0xffff, 0xa7, 0x3, 0x1, 0xfff, 0x5, 0x7, 0x9, 0xce, 0x101, 0x7ff, 0xb, 0x0, 0x2, 0xfff, 0x8001, 0x8, 0xfffffffd, 0x4, 0x8f, 0x3, 0x101, 0x400, 0x42, 0xa21, 0x2, 0xaa2, 0x10001, 0x1, 0x7, 0x1, 0x101, 0x3, 0x8, 0x8, 0xb829, 0x8001, 0x4, 0x0, 0x0, 0xffff9f05, 0x1, 0x6, 0xff800000, 0x1b, 0x2, 0x9, 0xff, 0x0, 0x8, 0x1, 0x200, 0x8001, 0x7, 0x6, 0x43, 0x9, 0x9, 0x9, 0x10000, 0x80000001, 0x6, 0x80000001, 0x34a, 0x13ab, 0x8, 0x8001, 0x9, 0x5, 0x9, 0x7, 0x8, 0x2, 0xfffffffb, 0x2, 0x7, 0xe, 0x7ff, 0x5, 0x2, 0x7, 0x200, 0x8, 0x2, 0x9, 0x7ff, 0x7fff, 0xe, 0x3e, 0x8, 0x9, 0x4, 0x2, 0xb2b, 0x5f5, 0x8, 0xb88, 0x403, 0x5, 0xa2, 0x8, 0x9, 0x1, 0x8, 0x9d08, 0x40, 0x7c, 0x3, 0x7, 0x5bcb, 0x8, 0x100, 0x9c58, 0x3, 0xffff, 0xaa3d, 0x0, 0x1000, 0xfffffffc, 0x0, 0x95ed]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb0, 0x3, 0xffff, 0x8b5, 0x3f2, 0x6, 0x7a, 0x7, 0x3ee, 0x824, 0x5, 0xcdd, 0x4, 0xfffffff7, 0x261, 0x9, 0x101, 0x0, 0x40, 0xe8d, 0x8000, 0x1, 0x3, 0x101, 0x8, 0xa, 0xffff20f8, 0x530, 0x6, 0x67, 0x40, 0x8001, 0x6c5, 0x0, 0x3, 0x72, 0x3, 0x5, 0xa72, 0xc8, 0x5, 0x2c6, 0x8, 0x5, 0x3b5, 0x8, 0x1, 0x2, 0x2c6, 0x10001, 0x200, 0x0, 0x3d7, 0x14c00, 0x0, 0x3, 0x81, 0x2, 0x2ec, 0x1, 0x7fffffff, 0x4, 0xff, 0x6, 0x7fff, 0x7, 0x0, 0x0, 0xd, 0x4, 0x8, 0x200, 0xfffffffb, 0x3, 0x7, 0x4, 0x1, 0x3, 0xd, 0x5, 0xfffffff4, 0xffffffff, 0x7, 0xd, 0x80, 0x5, 0x80000001, 0xfffffffb, 0xab2, 0x7, 0x1, 0x8fb, 0x83, 0x8fa, 0x7, 0x5, 0xffffffff, 0x7, 0x5, 0x3ff, 0x80000000, 0x8, 0xe, 0x4, 0x400, 0x7, 0x6, 0x3, 0x800, 0xfff, 0x3, 0x0, 0x7, 0x7, 0x6, 0x7f, 0x2, 0x32, 0x6137, 0x5, 0x6e2, 0x5, 0xfff, 0x5, 0x80000001, 0xb, 0x4, 0x1, 0xb0, 0x6, 0x4, 0x4, 0x401, 0x563, 0x7, 0x7fffffff, 0x6, 0x40, 0xfffffffc, 0x64, 0x0, 0x200, 0x7fff, 0x10, 0x5, 0xffff, 0x9, 0x5, 0x9a5, 0x3, 0x7, 0x8, 0x3, 0x13fa, 0xfffffffc, 0x7, 0xffff0001, 0x0, 0x2, 0xb56, 0x3, 0xae, 0x20, 0x2, 0xfffff397, 0x5, 0x2, 0x8, 0x8, 0x3, 0xe5, 0x9, 0xbb3, 0xffffa609, 0x5, 0xfff, 0x8001, 0x4, 0xe, 0x1, 0x7fff, 0x5, 0x6263, 0x9, 0x2, 0x80000000, 0x800, 0x10, 0x2, 0xc99f, 0x6, 0x0, 0x7fff, 0x1, 0x4, 0x400, 0xffffffff, 0x63, 0x7, 0x8f, 0x1, 0x727, 0x6, 0x3, 0x8, 0x7, 0x2, 0x10, 0x2, 0xa1, 0x800, 0x9, 0xc82f, 0x9, 0xc, 0xd2b, 0x0, 0x1, 0xe133, 0x0, 0xfffffff6, 0x9, 0x3, 0x5, 0x5, 0x9, 0x0, 0x7f, 0x5, 0x9, 0x101, 0x0, 0x877, 0x4, 0x0, 0x8, 0xb5, 0x5, 0x1, 0x6, 0x8c, 0x2, 0x2, 0x4, 0xe09d, 0x7, 0x5, 0x589c, 0x5, 0x2, 0x9, 0x80, 0x9c, 0x3, 0x7, 0xb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0x9, 0x6, "1c6fe3d0ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0xf4, 0x1f, 0x0, 0x0, {{0xc}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffe, 0x1, 0x5, 0x5, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xad3, 0x20000000, 0x7, 0xfffff7d1}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf00000, 0x4, 0x2, 0x9, 0x50}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe}]}, {0x4f, 0x6, "c1514d52ec3d10a43f0bb6aa1540c7dcee0485525d16a5f99820c33906329b10195b3f4ef7042afd781f42a14ff24000b439a00cc991db53e37b3885db05daa915cc221abf537a781dd930"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf0}}]}, 0xe54}, 0x1, 0x0, 0x0, 0x80}, 0xc800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) 16.371122299s ago: executing program 3 (id=464): socket$igmp6(0xa, 0x3, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04120800aaaaaaaaaa1000345383563bd4ac4cf4a6c65046fd1c528c73af4d6363e61c3993b01934636ee2d7a885c07f66fe971aea310fd7dee81057384a61756899cdbf5bf8908938b0740c71592597d0c04dc1c80d6e10dc"], 0xb) (async) syz_io_uring_setup(0x590a, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x113) (async) chroot(&(0x7f0000000000)='./file0\x00') r4 = landlock_create_ruleset(&(0x7f0000000040)={0xc208}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) (async) chroot(&(0x7f0000000280)='./file0/../file0/../file0\x00') (async) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) (async) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/186, 0xba) (async) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x150, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xdcf}}, {0x0, 0x0, 0x2, 0x0, 'fd'}}, {{}, {0x0, 0x200, 0x6, 0x0, '^&.*(#'}}]}, 0x0, 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16.212537691s ago: executing program 4 (id=467): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000940)=""/175, 0xaf}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000004680)=""/4094, 0xffe}, {&(0x7f0000000140)=""/96, 0x60}, {&(0x7f0000000380)=""/151, 0x97}], 0xc}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902"], 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/12, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="000000000100000000000000000000003e25133c03"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYRES64=r1], 0x48}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 16.129558002s ago: executing program 2 (id=468): r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000100), 0x18100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005540)=""/4099, 0x1003}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4088, 0xff8}, {&(0x7f0000000140)=""/171, 0xab}, {0x0}], 0x5}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000e40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="08020000", @ANYRES16=r3, @ANYBLOB="080029bd7000fedbdf25650000000800010001000000840103808800008084000200553375b2f07b6d9b85018e1a945a75961c6d1f0b1c87d8bb3da9a82c5c7ead39b56cc396ecfcb7b3563f26874a9455d179e354701223edecec3809f7337daccf5ed199d5b75857ce5e9fe444ead632073753127e0b5b30d9a50918826426d892a25cfda469a943114bb43b961048b2bcbff21ca20fe6b4f2c8feeb130d77c7a5ec000080e8000200851da12f771d8d89d4c0fec2237ec7398845ed11d9b40b9d426941f816460ee9e194812504d64c64565731c52a05b8b319c31be5b49fcf18766acbdbe6b515a67fd235c65c316c84c620fd0653a2ed56e5018beaf8e07cbb78e4ffff484297d2cb26f5c0687613111feaa610df273cd1324a10b32ea25c5f040b9b7b1083dd3d535584ee7f7f5e04be996c41d6fe4ce20561ac30089f7e47e2ad170bb0e8545893fbfd224a46b86520f0f1416de2964f429068d1b70138ceb165822bfde0ac29b1cf397a7f75cd7c4b45a7281e1237d9d7307c50f1b55ef1be5cd58ae62a2481120e376c0c0000800800030003000000080002000000000048000380380000803100010010a094ff629517ee95cc4bdc5b0082c756212291b876501258b3888a281a4d659ce3cdb90f9898c92ef6d52b210000000c0000800800030006000000080002000100000008000100b1ea00000800020000000000bd289e3048c7e257b436a0c801b48ef1a743a4ca8f9b2d1046d371b5ebb66aea1e4a0e90b785715d76aa3d4c93f8d129159c284b6bb0cfda35653ab528f604425eb558e01a830a4cd61cc5f9916ac97890982286604ec04329f289b46e8072f3ebbb1c27f8a6de96de0b1c5ce72067bd31bbba382ac812074abaae2e09783f7f20981e"], 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="2c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000899606000a002ae505fea9764c57b963758d7911360200800300699f2eece950f51b7136ed000300007fc3478ec40400ca01f1fd352395aa983868f2c5d6c588d1cb10c9795c63a267cd2a3e6bb6192fd88f1b833810e75d6282b4f9f4c9bf8437834805c6fbb5283ec800"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) gettid() syz_usb_disconnect(r6) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6}, @qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}, {0x0}], 0x2) r11 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r11) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r12, &(0x7f0000000500)=""/41, 0x29) getdents(r12, 0x0, 0x58) bind$packet(r2, &(0x7f0000000000)={0x11, 0x6, r5, 0x1, 0xc, 0x6, @remote}, 0x14) sendmsg(r2, &(0x7f0000000b40)={&(0x7f0000000340)=@ll={0x11, 0x5, r5, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000400)="a8e0674ec974159238568fc71696fd064ca5c41a9784434315f723c2749025e753524f539825535354a5127e3ed8ea65b1adc02d4d718a46053ea08766d0dadb87a0faee885bae1ab2756560e2ae9b1f1176762f7e52cf25cd033a1a072276a999ed9ccec55870ff638ffa5928b2c0713006448efae6fee56ceb8e92d988cde68519dc2ad809659d9f01c705874286123e8072086d1dd07072eaac96c9008d", 0x9f}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="12b5a11b22989c32fe270513152c56b7e1b92a1957935b8f33c5aaf1e71fa2e43bf3f9ceec183f5ea8424aa8b8d233cc095c40e2b8a125ab5fd0a24e1ce4ad00048c21ffcb2a4e3139ddefbe58f5f316ee308a66d73bc19e7587fcbd9409423dbc2fe80e7c2777b1b8989b59f8806f4d144870b17d1486d51f643bd5e7ce25c49110e54368973412d654c33834aa69de66912d81981a6bf060d29293532823fa8aeb2576ffbe277a60f75679c52dde3cdde02bd86865eaa9dd5dbeb4b1188bf9e10fc9e95da3915cf24bde85570fcf9ab33dd03ada82fb62e98cd91cd3be6c8f6875eab5b8ccb4cde2feff3197d3dba712b987587eb254deda23cdd52fbea798e9be7be0868f66fefc574eea07df433a2c55717c80ad6f3fbf295a7ddf457af9ab35ab4389f5aba9d18dc0c596314df7bc79e6a1ad342fb6125f2c11d8c520ce914173bc212cd1b2b57d31e423504d8c7d5d60f2dfdd430e6091b58e65672b5978140e9dbf7fbba11f7c005ba8660def4a42de34c3a87231b52404de6264dee9ae581bd125603f7926b1528ad099a9f6ed858b37f9f122787547ed4d6f31c0d546ef69b43ab1c7b23e95012346765973f759dadda2edb94d401615295abe74118fabeac1e1c2f927bafc4f12ad67723708396bd3098e0c7db187aaca683b5bfe81390684a3064e4cd0f021c3be29a47df21fbe6bd66b4db5d40df3334c50e7318186614192cbe86995c8ce5334e486887176f5af5fbd5ffce52c3aab761b46b3ed01de634a0ec501d2cfe38c25c78118f65579d0dacaae01aec5639a26bb4c1d08dde46594bced6a4fd8587e61a4d4210d858612e69eb621d17e943e38164560421f79828a7b10423566a4cabbbb1e0d13a32d65311a0eef67ca6ee87b4a4a48e24411ca4c03061b74ffccbdb09531e846ee3bd4724a0b9e4ac8ff6e6f7d99ae820f85566147225b56640545436248ae06d05640effb4f3c3a3b52952c89b416a2e06756041a9e71e6dc700ea9c90c8859ff5c67d56798198cf6d136e1d32b0447ee7dd36b3da0e2d275c0de75d219c28fafbb9e9f0ef6ae1f628374ece2232e681895bd2afee6adad2b86b8602a8cc412ac5ecaa77c75c6c6547c7f6bc0de67973a605252f1195147c3b192ba46b5f9f0bd3bb9e54570ae8eabebb74a9256e98ee00a319d8e979100aef7fb6e01635fd790356318e99ac88d1dad883d083dbedf89650ca24c9cb3781f689b1e7c5072b5b49bfa2ff9bbcf6b90e3840f35b4ca42bfe6b75bdcc3e07c288f0519c94207c2c8e5befe7cb9197aa111a482d064c229b9aa5c0144fdc01c7bad23bfbd0a170ce3016434a55583ed0bf36aac6fbcc0c2156e15c0aa9d6fb93a97fafc3978fe5980142bfe774c5495eabad27387b2bae075d182c715e1becade80a2cf8bc91989d22676c58eb6152ac0c32f1035a760b2f863f55066c135442086caeb46551b8843f538aae34b27c4c354e077d53c1c70fc6d3f8ca1a42fc216672ae7def7e7a1030d69e05f6ecbd8f18e1acd16443633f641dfc03491409eaf6faae1ee0f49094d4ce19cea446c9ef4e1444b5533e4e538d2c72e01522f905c70e16cc390ae34d538c4c9014981dfb3cadfb6642f3d739417e608f4fb8d9e4f1c094b904eab20bb8fc0810ade72a6e0c2b5c066e64be5a62e7a7aece609f1d31f734957f27147b0cc91fbb865ce3eb0bae639041d4c3686658be044e78ae992d6af26cb7ccf63f07b9f30ce9904392822124546825b436a4b612e0592c05462a86a68a46ff9a91c4944cdd2b42b87c94df01f69394c280e2987bde7ea0d7a2f06069258e3ae31083952f09fa3fb7097b6b253a05cf8fbf09af9524955320334d1fea9835d951ccd6443a725ba3025944d48fd13e23fd61fd779a78141414098d003ece7d9d3e6ee95e1eeb6e3b0a322245b8c051d78629f0b76df8298f19824ac426fd81a459144027944a3c719840ddcdba24b2b28e894278bb6e2529045914585256c5e20fbaf4dfd2b79a389398a07679ca27add8c2bed2c4f199bde209ddb31b724c5bedb1b09476314b474269e5b5d7b8615d2faadbc6edd986bddeea74cd8628a77d300d28094859c13531bcd16e6e5db96bf8e4aa7d67cf4ae162cc82d3cdb884e4524282849dee81e0c6166062b3bcc6799b354784b88ca93d0a735ec0dad2981452f2a735d2d126bd7196e9ab2754f18a6c39f1df9fd8e0e5c360792b2eccc9fb579101b98719e9eeb1cbd0645865c3d3e0bed4f2b5989e4840fa6361dd3c72c6c11fc959c075d976b0203c7e03994478bcc49e4e547afec27d129ed10a1e220a5bb57d7b65a2baa5cb5ed052317abf48a42ff848e1ae9d38930eb37c3b99933cc2bf6fd08ea25ae2a82d3ac139c6aa291163d8e0d31bdb94239a834e956abec832ad80c8a17938539d202e22786eb09aaf6ade23848b54444d19780c8210c344aa73372866f27194b91b987023d91c8eb6818b88889812ab2a337d762763387b67b1e0a28e05a6654f6ef7eeea2c2d333eb53a3a336c5f20fe081d94f822e3eaf497fe57403ee98d281611b2612cb76b7cb95b554a2159d5569ef1dc17ef21e7c963e3e4dc896924884581ad8f86f27e220c4724a9e035ff24dc5286fe9f656e75a54321cfe0db46b4e5d9755860d13557b3a845284f16b129b08095a391c427893059bd585eaab5cbf87dc40b0feda1c9555512affaf5dad9086ebafa775411058a6432bb4d51af91d7d3334d69cd809eb026fa48a2c66eec253d798fa753e8880ac1e7cc4156e5c655d03c0ee73234f22364feb0db0851e5e7f4551ffa0319beff82727dc0fcfc851ae7222144c351ddecfbf2868c2b85fdcd63fac6e9bb1c39ab515e3012d0b633cab9e7305f11113e1684b5a417b3987f2d22036136880af4ef59a06b8ea3a18ae3bdf55d59800395c06edc30c6ecc877acd3a7db0899e778a4c2a3bf0b568b82280d6029d15b1adc63e15ba4176adbf10b295f66047b44b0b480e5033bd10c15853f0633b518f093bd39fbbe791de5ca03b6b447f08534380ef98b165efc8848136ba7fa951c20617b0ff99639347e1645139c80d4fb4542cb1eec2c89d9a7a6a97cc710ce5b44cfea7d29cb498592aa0549a07fb0309ea06819e7702229768f28a34102d42000ad26491662cb03c3f86526da5a30f19dfa7f9ecaa17b70c3a0b64a35cfdf42b739a73874111af99ffb489712cbc47196113dcd8aa4d16ec3b3289eadb17112dc80129c347a1bb6f440c7194f41ff2743cecedf362edc7b50b89d5faa7211c13775c312ee3bcfc2f0bb02e0400610ae2a86dcf8c5dea26b95d4001d0770f7874068f42d5b3bc1b680cf0fae34c3624cb2dcbd166f515a8cba3ae8fa038b8347aa09eaeec441625ccf04332a372917a00d9882047a3a97f6360bebc617d0ff5c01fd835433ac6034431749ff73971c7ce594556fec72ff6dbcc3a7e2932383431d4189efb8cc62890e73f9307b56762cc0ea131c4d0aa6903a88837a921150f5984258ad423686d353370fce46d2d70ba93106e3a1750d70dfcc762931da37e2bae34f924eb5974649dc1f6134ad23f058319dd9e3b162ba9b77ce8bd48c994510564838162d7b405af8e0a22e450559aae751fa5885c0f18d4a20f328268434296723cd9001273e5148bce27f94752b7027083590af38bc581b92350184c9727c1772cf7f520a28596337fae3f13c13c0fbca526d6e1c77ea5b78e6de93e4837ac95162ba8714e2fbe76cfc6b3a039e3c99639b4a42e503e7a2c2287780b92b35ddf76e454117507dd2df8391207ae6d4a6b027134f02fbc67b24aa1954e237594975a11403edcb5ec7ed0748a79ed803c1c27ef2f49d6e9e93b2ff64207f76c07e241ecab6289c6a4e3f37b29296852d973bd3b3a1230f1b6692b7b8ebff076d24410079daa98b8714d002ba06c57d2585f22bcec89f4eecf358e681f2f868c032bec7a53d47055490b17efb94cd27f578602fa83856e1df73ac21b4f26505f6c130686d139994f9e270fb5d5928122e9905ee6f0b81faef0782f2b24ee73c65275f7c56aba8d8b790a2b4f0c6065f83b9e4fd7450c0dddb81f1e5ac55041893e3880ecc792500c8a164c838ddbb284239a89791970265ab9937176e7d0b3b140fac41c70a15e5ceea83023e983ee3a202d6bd4ce7acbd247dffd70498b7bb5fc8c40b62d4f583cac619597d8b91a504165fe4f26e80a80647c1f082dbef48d1feb096b055416c62c1bdea288bc08d1f4282ae4962bc6e9846145718b1fe9872b0fb7f7023d576266556165ed568d49bb2843d737948664f3f0773363d59e2bebf65baf821519dc2d623c43d082fc952e35efbc25bdd719de80b53804c8a656a4e25a2562f1baa28ef41f2f48bfe1e370db4d1ed6a846951600ba2d5953bd2f57e2b44a40641cbd70e78b7afd64f3f6e0301433dc9563440862c87418a1b16b5cbe1fb2aefa11bc6cc24103aa1aebeffe5edd0948d7aa25ae9a48cfebd11e49f660748a8c8c553be587bb6bbe3a88b621c353ce10fc67df1611f9496f80abafb24d2561f471006206c78d3c840ac78b72a1b31797f5cefef43bce7ed520f0c7e65790a6c17417c9f73442d3a867a1bd24599fad9a559291f34fa257ae1b7065b16b0c7ef60b32a3167d9a57783a8c33f22e80ece731fabe14b0f7f6b410cb21e1163a8316144973e3c36401ad5156db4812e68af958fe02175d597f4bc8ee03776f219a1eae837cfcd1fcdf616d1b80ca621d943893e3710bba6fadee3936b32880e2ebc86f61b8e3172c5a9ab126158f799ea1d43453ecf3fe4faba984f1f722ccaa67074debac501f5181c1ea2009f15fb8a3381d1709f72ede9129fb7a580205e4af42e126484cbd501e616cf307d955466442ab3b46b314b3e0593101da2b1989bd889d87e1e9416105aad578e64d02246a6d014eb8812421528dc59405c3f38d7ba9e801591440be5c5a87a514616fd1aa16e8ced15d68aa2aa35c18e1b8e876104ff8b2813a24728bda9c5590931c3fdaf9c2de798314eee3e2f4f089c032e5ae3c406da61faa47cfafce600c87df65616c2094aef002cb92bfa2de75c6527eebdf0f1f2b1ef600e23c5399e32ba154b7c6e59707de414288fe4af4468f825920d28ff649c66d1f5c037c82f2dc6b57197f4fd355a85b4b903038dd110ceb2920b6ee11814f3042202ea5191f2c1189cf24df66c92d0657564a6741c5eb4c851b95f2bfa5fd165e27510bdfea334f23bb5889773c4906eaa9711e9b4ae98ea086c95f69ab2d3e8eb1444c28e10b3f4c6653ece28f43b1b679a75c40d5a46db4d3647ebebb7bc327cc6d79b59363a1fcd652530eaff35d0fa92d78d19b74d5f95d376c23b45818d469652c1239a50bb7860cb6d8c892336de20c854b07ddb87d334cf924e441105172eeaa7f622a734a7da30a3e61e2ee281cf0a0954664188627d583ea8ce233d574f9615f02cf6600194171a1127ac04daefdacb94a4e37204bc3f888ae847899bbc28b7ee775106f4151cc4d0bf9be63d36cce9d640817ef6e2ec9c3b6190d5cf8e186132624f2762279b5f129dfa9af8de81ca9908f4eaca87ea85c639b29e5b8c465e70c2709e1bdae7863cb5f6dc34d6087bf076a163bec2aba415a547561855b97342bc4872f74bb1c4b5caa7dea383535434aaeb6a754b33f9832ae95337764c76532345d10edf07c88b5e9595451c7e7d1b79948503eb8799c5b6d447c7015217faaf1bb3a3b0872b2d6c90cf82d9b67063e52", 0x1000}, {&(0x7f00000004c0)="239397c10af33918b7856b990a0223eb359bb2a6096263de3882af4256b8eff366a56353a2a04a83a495b5f7b535c29c0fa45447f58d5d79d0114317eb45764f", 0x40}, {&(0x7f0000000540)}, {&(0x7f0000000580)="4c284a533c4c678d12190da1720cc3725c7bafb3143e1a5abeab82bf736cb5418d13a2cddb25436e785b8fc277b3b9e59f1c9ac0fcda78a2de553199e00f1fdf8bebe081ffd432e306728d15af3aa4deb1e403b9ac778e8129b34da4c22a397fcac7c9e37a9b73c230ba3cfd0feab59f0691bd39a94017eda8e662cc9e9b8cec9d18de4e55705c3786cc341a09c53906eb7ddfa68d517eba78a5dfb02186cc4880a55da6d10507bd03a8c72fb6e66258eeee8fb16c69399141049a721ee01458bd3d7ac448127d9f941d2c0523db73c06de074f85a1006bed58769f3562d69312ed057ed1513e4528f424774", 0xec}, {&(0x7f0000000680)="b14a78fc75312acdae93f9093259ad5fc9f6c3a5e34ae823a2cb8205eabc850fa5cf59ae965b1a04e5c15e133186b31c14e54a252f163eb264d862b5c121555ade5e7eb43713403dc9964edf794f5ae68f59987efac3cb4078bc1fc7d2ac5ad06d8d89989acc4e0c532fc96b16c434b33d99746f81a02187fec27b809bb0bce89d533796674783b362305e83ffb428f71297e717d15fcd338d0f219b53f57d443c7a863488dfe4be08df0474917da5ef1f", 0xb1}, {&(0x7f0000000740)="c6b2b45b5f78261e437c81f49096e12d1cae3b1b42aa2d6309890a5cc3dd4986c3dd30f16906fc21e6cec85eff91f272be0ff7c825f3485cc438d270a638d2a8da2a8f6d17abc604f2a94087be83f6b829a5ae5b349147bbe3cfc29b2d225f997b2022e507ea9c6cbb0823ba57f7922aac219d17ede2ef169dacc67948bd87de1a2f651c27d0f6f9c5d8901680f31dcdd5726cf7a1573e081914c3f6a56202136a2ec8760066a5f234c044e744082aaac112ae10b6c7cf13baaee3471c95d8dcd4e633dc1f6d3c6bdd2287a610b9492884c0ba7c46a9443bf40765fd76b0f504718d", 0xe2}, {&(0x7f0000000840)="bebf21fbb36d0d972f32a713abd87011e341ba7b63145ccf275b07345c12c8c57b6d1a24cb2283a103c269", 0x2b}, {&(0x7f0000000880)="358413c5cbe06db501be575fc4a8b821fe4cfde62b72f33faa62559b822f04f41e994f69c9bf815bb5fc177041c82e6b2e4ef22862668a71d85b241778352ba949", 0x41}], 0xa, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1b0}, 0x400c100) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000bc0)={'pim6reg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 16.071923892s ago: executing program 3 (id=469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000440)={0xa, 0x4e24, 0x80000, @empty, 0xff}, 0x1c) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x24, &(0x7f00000001c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "8144"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000540)={0x0, 0x0, 0x2, "cd74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.715961584s ago: executing program 3 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d0c5}, 0x40) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000002600)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x1, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="1c00000029000000370000000600000000000000010200000000000014"], 0x188}}], 0x2, 0x0) 15.315147817s ago: executing program 1 (id=474): r0 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x2bca, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1f}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xf5}}], 0x1, 0x20000890) 14.860089791s ago: executing program 1 (id=476): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) 14.560374808s ago: executing program 4 (id=478): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) 14.397616088s ago: executing program 4 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}, @NFTA_BITWISE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 14.296819092s ago: executing program 2 (id=480): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0x182d, 0x0, 0x3, 0x2a3}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0xc00, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x0) 14.063839158s ago: executing program 4 (id=481): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, &(0x7f0000000200)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe220000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002800800", @ANYRES32=r8], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r9], 0x20}}, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r11 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x723801, 0x0) ioctl$PPPIOCGIDLE32(r11, 0x8008743f, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000600)) rt_sigprocmask(0x1, &(0x7f0000000340)={[0x3106, 0x8]}, &(0x7f0000000400), 0x8) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000280)={0x9, 0x9, 0x0, 0x2000000, 0x0, 0x9}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000ff"], 0xb8}}, 0x8810) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000da29b5408205c4005fac000000010902120001000000000904"], 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001e000100fbffffff000000001c000000", @ANYRES32=0x0, @ANYBLOB="000000000a00ebffffff00000000000049cb35c4fecf8d0d0cf8ddd25e6de7382e7a4dbace153c48cb17504ac551992663d628df4e756ffd33bf6607a0283ca690efb3fa02ff06b9f937082c31478228484dcbbd92ebe2b64b9131a570c5d9ce845cfcf5968ead5947d654b2b81aecde2db7fbefa64acb228f3ad842afd11e968d9121f9597941a8b8b8dd6afa97d3218dbbe721113c22e012487105cecb98bb4e3d5afeb78ab9ef66449361366eb6826c3b67032fd2b9d61bd67e6778fcb15a65c61e9b83cc95540f4961fc8b5b2f8801397466685ed442cdc9d10f04312cf0720fc5cd2ccc249bcaa642"], 0x28}}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 13.602554657s ago: executing program 2 (id=482): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x51, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "02f332ac"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x87, 0x6}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[], &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x0, 0x11, r3, 0xfffff000) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x0, 0xb, 0x25, {0x25, 0x1, "6fa469d3ed7f57f85b7f1492d9deb96cd1555a664fcb6b4b4274b8a6d940852b01e930"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "9cb99d3bcd7db0f9247893831f78c1d1b18dd9283e535ad0e602b25cfb04dd60091a271efdaeb0e6061348017862bebbcda18df8d655ee9142193866007c7514aab6fac55da9fb57d3fef09d358e6e4f5276197e41d16c77be74aaff78093684e62bf06a7702f627"}}, &(0x7f00000001c0)={0x0, 0x22, 0x18, {[@local=@item_4={0x3, 0x2, 0xa, "285d8958"}, @main=@item_012={0x2, 0x0, 0xa, "00de"}, @main=@item_4={0x3, 0x0, 0x9, "0bdcbcf2"}, @global=@item_012={0x2, 0x1, 0x7, "8d5d"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x1, "b009ac83"}, @local=@item_012={0x1, 0x2, 0x1, '\"'}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xbc8, 0xa0, 0x1, {0x22, 0xf11}}}}, &(0x7f0000000500)={0x18, &(0x7f00000002c0)={0x40, 0xd, 0xc3, "73ba4cb6d02a1175fcc9d9a45735b13b6c12ba6f814e37656762565a168cdcdb93152cf3dbd609c3097ece064b3fc330aa3c78c8a8de4e8deffef19915b54c71d205f822ec02e45a8ebcd9b83adb66bf818569638d21985ad0e2b1e775e8a7fecaecaf406b5a3b0a403944c9255fe6ac92e8af3d3b2a56cab813cdde05f977bd3bb2f640334b62c325fdee4c97eef199ec1cef80cde79152f51dadbd1b2c7bedb449dee3e6fa511155420136464697f8758d3014ed2a50273c046cf1df65893602fa8d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xc0}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x1, 0x65, "97e6bac7a4e8ea047308c7d406c0043c21d5fa7a34656b940d69bd7661aa41e1e96a3d63b9e178dd59e25af570f99a73e288ee3991f2a97a417878e945b650dbbfa34dfeb10d0afa88c80b46bac04ce42c4cd6aff694b0ed9cf4a913e1467574fd8556c8a9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x4}}) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000040)={0x0, 0x47, 0x6}) 12.682596077s ago: executing program 4 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800c0001006269747769736500280002800800034000000001080001400000000608000640000000010800024000000016040005fb0900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0xc, 0x0, 0x0, 0x0, @str='nl80211\x00'}]}]}, 0x28}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_usb_connect(0x0, 0x1b, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x17, 0xff, 0xa2, 0x20, 0xccd, 0x62, 0x75a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0xb0, 0xd0, 0x1}}]}}, 0x0) 10.315720045s ago: executing program 2 (id=488): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="83", 0x1}], 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_cancel(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="d1e2a87d91114a9dad3b3fb92cefe5093bc1e48b048886c719e51a37bbce78bac47e4b34790d15af867b4b0ab4305b0fff1fb9938655953405142415f0b2221825a0e21c29b2616272773422110fd971c91911ba71ddabe5773663f990d6f17e63698fb5e4509fe97d21a20e5a48052bf138908135c848fcd167b7b8770e5fbe2ce0952d8a3c389178a52eeca5f2a8fe93ada742df0fa7d754", 0x99, 0x5, 0x0, 0x2}, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/52) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) pipe(0x0) 10.300537268s ago: executing program 4 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000300)={0xb6, 0xffffffff, 0x4, 0x3, 0x3, [{0x1, 0x9, 0x1, '\x00', 0x400}, {0x3, 0x9, 0x2, '\x00', 0x103}, {0x7fff, 0x0, 0x4, '\x00', 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507005c0ef5dcc0d6eb07000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x244, 0x24, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x3, 0x5}, {0x6, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xb9, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x47}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x2, 0x1000000, 0x1, 0x59a1, 0xe6, 0x8}}, {0x14, 0x2, [0x8000, 0x9, 0x8001, 0x81, 0x3, 0x8, 0x7, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x9, 0x6, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0xc2, 0x6, 0xff, 0x1, 0x1, 0x3ff, 0x273, 0x3}}, {0xa, 0x2, [0x4, 0x7f, 0x78a5]}}, {{0x1c, 0x1, {0x0, 0x3, 0x1, 0x8, 0x2, 0x3, 0xfffffffe}}, {0x4}}]}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3f, 0x37, 0x0, 0x9bd, 0x0, 0x10001, 0x5ca, 0x1}}, {0x6, 0x2, [0x8283]}}, {{0x1c, 0x1, {0x21, 0x6, 0x5, 0xa, 0x0, 0xffffffff, 0xe}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x1, 0x7, 0x2b, 0x1, 0x0, 0xfffffff9, 0x3}}, {0xa, 0x2, [0x8, 0x9, 0xffab]}}, {{0x1c, 0x1, {0x6, 0xbb, 0x0, 0x3, 0x0, 0x5, 0x6, 0x2}}, {0x8, 0x2, [0x8, 0xbad4]}}, {{0x1c, 0x1, {0x0, 0x8, 0x9, 0x6, 0x1, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0x7, 0x6]}}, {{0x1c, 0x1, {0x7, 0x7, 0x8, 0xf, 0x2, 0x40, 0x6, 0x4}}, {0xc, 0x2, [0x3, 0x7, 0xa, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10000}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x3, 0x5ad, 0x1, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0x2, 0x400, 0x2]}}, {{0x1c, 0x1, {0x9c, 0x0, 0x3, 0x5, 0x0, 0xfff, 0x7}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x8, 0x40, 0x8, 0x0, 0xfffdffff, 0x3, 0x1}}, {0x6, 0x2, [0x751]}}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000648fb2c40a7a64d86bc3c97940628100"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32=r10, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) 9.364468572s ago: executing program 2 (id=491): unshare(0x20000400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x18) 9.06125867s ago: executing program 2 (id=492): r0 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000000900)=[{&(0x7f0000000380)=""/96, 0x60}, {&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000000700)=""/176, 0xb0}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f0000000e40)=""/37, 0x25}], 0x8, &(0x7f0000000580)=""/144, 0x85}, 0x6}, {{&(0x7f0000000a00)=@qipcrtr, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a80)=""/197, 0xc5}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/86, 0x56}, {&(0x7f0000000c00)=""/42, 0x2a}, {&(0x7f0000000c40)=""/142, 0x8e}, {&(0x7f0000000d00)=""/83, 0x53}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x7, &(0x7f0000003c00)=""/4096, 0x1000}}, {{&(0x7f0000000dc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000000f00)=""/123, 0x7b}, {&(0x7f0000000f80)=""/176, 0xffffffffffffffa5}, {&(0x7f0000001040)=""/193, 0xc1}, {&(0x7f00000008c0)=""/62, 0x3e}, {&(0x7f0000005c00)=""/4096, 0x1000}], 0x6, &(0x7f0000004c00)=""/4096, 0x1000}, 0x2}], 0x3, 0x2, &(0x7f0000001240)={r1, r2+60000000}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x1, @private2, 0x5}, {0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x0, {[0x3, 0xe5f, 0xdb7, 0x1ff, 0xfb1e, 0x80000000, 0x6, 0x100401]}}, 0x5c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x2, 0x0, 0xf, 0x2}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4000, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x6, "339f0243d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695458d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539d3289737f0374c72a964a024478c5df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e174f000000004000000010e200", [0x0, 0x7]}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=@known='security.apparmor\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f0000000280)='./file0\x00') sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000008a"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d000905820349"], 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_request_inode\x00'}, 0x10) r5 = syz_clone(0x14800, &(0x7f00000000c0), 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="c40e4146d064f7906a1afc4227a37ed30724fd67bdf6e975cccbd8aa64f656b36fd66dc4a645575dd9ace825e5f2296db9e630fa01b6d91c85bc5b367ae318c5c19aa7357369d7bf3922f947eeead2de7d78e31b70ee961317c601ba0e1dbc2c216c1524cbc4aa38f70b545100a0143611fca1be09e7c986c5dac69b3a5cbd18c72ee7a8f26b4fbf8f0727d52c78d2ce78fc2cbcaedfe6ccf8d46ddfbc6abbc659c928037983e78321ebc540d53077085d62b96e2029b9405f0ea550fd043d62b529ac1af203f431f42093f17f019431b73f6f1ed4cadf7cfaf620a856b552580a50f3630b1da884c462a1c320203497546b34cea4ab2ded00df") open(&(0x7f0000000100)='./bus\x00', 0xc0341, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) write$FUSE_INTERRUPT(r6, &(0x7f0000000940)={0x10, 0xfffffffffffffff5}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000300), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r8, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f0000000180)={0x0, @sdr}) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/mnt\x00') syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffdeffff0000080000000011424203"], 0x0) 7.9607712s ago: executing program 0 (id=493): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5692db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a69151fccaefc6e9b770c9ac124da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb11803"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x2000}, {}, {}, @quote}], 0x38) 7.530277062s ago: executing program 0 (id=494): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') getdents64(r0, 0xffffffffffffffff, 0x43) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203010200000000000000000000009e"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_complete(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x1fc3, &(0x7f00000002c0)) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x4000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) ioctl$SG_IO(r8, 0x2285, 0x0) r10 = fcntl$dupfd(r8, 0x0, r8) write$sndseq(r10, &(0x7f0000000180)=[{0x0, 0x3, 0x0, 0x0, @tick=0x4, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xa1}, @raw32={[0xdb98, 0x5]}}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r10, 0x2286, &(0x7f00000018c0)) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x2, "ce9eccf55997b50ff489745eb894fe62b44b4b7445ac8514a0e6f7957f933b37", 0x3631564e}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0xc040aed4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x22}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc8e82df1af5d2b6d}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000500), 0x24, 0x0) 4.363753135s ago: executing program 0 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0xfffffff8, 0x4]}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x20000000000001f2, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x0, @pix_mp={0x0, 0x3, 0x39555659, 0x0, 0x0, [{0xcabc, 0x81}, {0x0, 0x3}, {0xffffffff, 0x1}, {0x5, 0xa1b7}, {0x7, 0x7f}, {0x9a4, 0x10000}, {0x8, 0x8}, {0x8, 0x1}], 0x4, 0x3, 0x6, 0x2, 0x2}}}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc82, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x40605414) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000007c0)={{0x6, 0x0, 0x1000, 0x5}, 'syz1\x00', 0x4c}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16=r4, @ANYRES32=r6, @ANYRES8=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10a0800, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYBLOB="83796881bd00f2b79928cb5654200b8f72771d5a314f6307e4f1a430b29f8229fe86c31a2bfd5b4b162c8ff5c484bbf85251dd778bd3b1424071c28e28e64e06148da9cfab1edcdcd54ff2d1887b8bbe7e5fa33dba62c9ada2c55bd21dfeae15727ea5af696c5b5c5e0239e53003104ccfad8dff4bfe6896011c5f869c98e3d0e924", @ANYBLOB=',rootmode=0000000000000000040S00,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r8]) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r9}, 0x50) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000300)=[&(0x7f0000967000/0x2000)=nil], &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[0x0, 0x0], 0x6) mbind(&(0x7f0000492000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000540)=0xe, 0xfff, 0x1) 2.474823085s ago: executing program 0 (id=496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa00180133070000000f0000bd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x2000000, &(0x7f0000000340)=[{&(0x7f00000003c0)="0bd905ef33ee288dc4", 0x9}, {&(0x7f00000001c0)="75bbf8406512d05b", 0x8}], 0x2}], 0x1, 0x0) 2.168049858s ago: executing program 0 (id=497): syz_emit_ethernet(0x14, &(0x7f0000000680)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@generic={0x88f5, "3bf9"}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x80) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x38) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101}, 0x14}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) ioctl$KVM_NMI(r2, 0xae9a) (rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe], 0x0, 0x80000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = memfd_secret(0x80000) r5 = syz_io_uring_setup(0x5a6, &(0x7f0000000300)={0x0, 0xc9c5}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x74, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x34}, 0x20040001) (async, rerun: 32) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x23456}) (async, rerun: 32) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KDDISABIO(r4, 0x4b37) (async, rerun: 64) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=499): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x2c, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@remote}]}]}, 0x2c}], 0x1}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0x8910, &(0x7f0000004240)={0x0, 0x0, 0x0, [0x0, 0x0, 0x7fffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}, "f2dfbc81cfe0ca1b360883fff0380bc5"}}}}, 0x0) kernel console output (not intermixed with test programs): T6482] netlink: zone id is out of range [ 136.086428][ T6482] netlink: zone id is out of range [ 136.092504][ T6482] netlink: zone id is out of range [ 136.098380][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.129078][ T6482] netlink: zone id is out of range [ 136.152370][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.164101][ T6482] netlink: zone id is out of range [ 136.182138][ T6434] bridge_slave_0: entered allmulticast mode [ 136.189698][ T6434] bridge_slave_0: entered promiscuous mode [ 136.203470][ T6482] netlink: zone id is out of range [ 136.211429][ T6482] netlink: zone id is out of range [ 136.273683][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.303249][ T6493] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 136.316872][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.339287][ T6434] bridge_slave_1: entered allmulticast mode [ 136.360231][ T6434] bridge_slave_1: entered promiscuous mode [ 136.431050][ T5234] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 136.440887][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.467805][ T5234] usb 1-1: config 0 descriptor?? [ 136.485219][ T52] hsr_slave_0: left promiscuous mode [ 136.496897][ T52] hsr_slave_1: left promiscuous mode [ 136.499543][ T5234] usb 1-1: can't set config #0, error -71 [ 136.515374][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.531639][ T5234] usb 1-1: USB disconnect, device number 10 [ 136.543080][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.592853][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.607043][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.622410][ T5283] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 136.656179][ T52] veth1_macvtap: left promiscuous mode [ 136.681137][ T52] veth0_macvtap: left promiscuous mode [ 136.694581][ T52] veth1_vlan: left promiscuous mode [ 136.700539][ T52] veth0_vlan: left promiscuous mode [ 136.795913][ T5283] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.816580][ T5283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.852592][ T5283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.886221][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.934663][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.978717][ T5283] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 137.008714][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 137.028189][ T5283] usb 3-1: Product: syz [ 137.035442][ T5283] usb 3-1: Manufacturer: syz [ 137.063843][ T5283] cdc_wdm 3-1:1.0: skipping garbage [ 137.069346][ T5283] cdc_wdm 3-1:1.0: skipping garbage [ 137.097538][ T5283] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 137.122066][ T5283] cdc_wdm 3-1:1.0: Unknown control protocol [ 137.122234][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 137.153390][ T54] Bluetooth: hci1: command tx timeout [ 137.286003][ T6493] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 137.658076][ T52] team0 (unregistering): Port device team_slave_1 removed [ 137.702830][ T52] team0 (unregistering): Port device team_slave_0 removed [ 138.258006][ T6511] netlink: 'syz.4.249': attribute type 29 has an invalid length. [ 138.260900][ T5234] usb 3-1: USB disconnect, device number 20 [ 138.315007][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.380539][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.693737][ T6434] team0: Port device team_slave_0 added [ 138.734339][ T6434] team0: Port device team_slave_1 added [ 138.995902][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.175583][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.185011][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.194788][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.205271][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.213252][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.234094][ T5240] Bluetooth: hci1: command tx timeout [ 139.385408][ T6538] process 'syz.2.255' launched './file1' with NULL argv: empty string added [ 139.402941][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.411478][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.512030][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.568755][ T6534] netlink: 3 bytes leftover after parsing attributes in process `syz.4.257'. [ 139.621607][ T6548] netlink: 32 bytes leftover after parsing attributes in process `syz.1.256'. [ 139.688880][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.721485][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.748323][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.998527][ T6434] hsr_slave_0: entered promiscuous mode [ 140.088836][ T6434] hsr_slave_1: entered promiscuous mode [ 140.125742][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.133770][ T6434] Cannot create hsr debugfs directory [ 140.932499][ T5234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 140.965421][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.112001][ T5234] usb 2-1: device descriptor read/64, error -71 [ 141.312285][ T54] Bluetooth: hci1: command tx timeout [ 141.382390][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.412067][ T5234] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 141.493085][ T54] Bluetooth: hci2: command tx timeout [ 141.569877][ T6585] net_ratelimit: 6 callbacks suppressed [ 141.569905][ T6585] netlink: set zone limit has 4 unknown bytes [ 141.582572][ T5234] usb 2-1: device descriptor read/64, error -71 [ 141.692325][ T5234] usb usb2-port1: attempt power cycle [ 141.750457][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.967921][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.032148][ T5234] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 142.084369][ T5284] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.092649][ T5234] usb 2-1: device descriptor read/8, error -71 [ 142.252129][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 142.271227][ T5284] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.298800][ T5284] usb 3-1: config 0 has no interface number 0 [ 142.312546][ T5284] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.330874][ T52] bridge_slave_1: left allmulticast mode [ 142.332198][ T5234] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.337322][ T52] bridge_slave_1: left promiscuous mode [ 142.362036][ T5284] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.377256][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.386278][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.397237][ T52] bridge_slave_0: left allmulticast mode [ 142.402856][ T5234] usb 2-1: device descriptor read/8, error -71 [ 142.417118][ T5284] usb 3-1: config 0 descriptor?? [ 142.423494][ T52] bridge_slave_0: left promiscuous mode [ 142.430229][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.446519][ T5284] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 142.515360][ T5234] usb usb2-port1: unable to enumerate USB device [ 142.677542][ T5234] usb 3-1: USB disconnect, device number 21 [ 142.686100][ T5234] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 142.979487][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.993455][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.008291][ T52] bond0 (unregistering): Released all slaves [ 143.029635][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 143.552713][ T54] Bluetooth: hci2: command tx timeout [ 143.610151][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.628767][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.647890][ T6544] bridge_slave_0: entered allmulticast mode [ 143.658825][ T6544] bridge_slave_0: entered promiscuous mode [ 143.673476][ T6614] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 143.754292][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.762589][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.770302][ T6544] bridge_slave_1: entered allmulticast mode [ 143.782667][ T6544] bridge_slave_1: entered promiscuous mode [ 143.802693][ T6434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.858378][ T52] hsr_slave_0: left promiscuous mode [ 143.872784][ T52] hsr_slave_1: left promiscuous mode [ 143.891790][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.909106][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.927840][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.936449][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.952445][ T5284] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 143.981409][ T52] veth1_macvtap: left promiscuous mode [ 143.993882][ T52] veth0_macvtap: left promiscuous mode [ 144.000349][ T52] veth1_vlan: left promiscuous mode [ 144.008992][ T52] veth0_vlan: left promiscuous mode [ 144.112881][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 144.149139][ T5284] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 144.171825][ T5284] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.192128][ T5284] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.215432][ T5284] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.241430][ T5284] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.267418][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.277862][ T5284] usb 2-1: Product: syz [ 144.287680][ T5284] usb 2-1: Manufacturer: syz [ 144.294863][ T5284] usb 2-1: SerialNumber: syz [ 145.008773][ T52] team0 (unregistering): Port device team_slave_1 removed [ 145.043001][ T6632] netlink: set zone limit has 4 unknown bytes [ 145.128454][ T6634] Cannot find del_set index 0 as target [ 145.128497][ T52] team0 (unregistering): Port device team_slave_0 removed [ 145.387370][ T6641] xt_SECMARK: invalid mode: 0 [ 145.634123][ T54] Bluetooth: hci2: command tx timeout [ 145.856027][ T6434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.877216][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.892979][ T6434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.918848][ T6434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.955068][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.050512][ T5284] usb 2-1: USB disconnect, device number 19 [ 146.222989][ T6544] team0: Port device team_slave_0 added [ 146.248673][ T6544] team0: Port device team_slave_1 added [ 146.355822][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.376217][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.419183][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.444365][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.460175][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.504149][ T5234] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.513432][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.613793][ T6544] hsr_slave_0: entered promiscuous mode [ 146.620915][ T6544] hsr_slave_1: entered promiscuous mode [ 146.629205][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 146.662057][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 146.673422][ T5234] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.687274][ T5234] usb 3-1: config 0 has no interface number 0 [ 146.709962][ T5234] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.732751][ T5234] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.744826][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.763093][ T5234] usb 3-1: config 0 descriptor?? [ 146.789486][ T5234] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.828459][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.955054][ T6652] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 146.985169][ T6652] sctp: [Deprecated]: syz.4.281 (pid 6652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.985169][ T6652] Use struct sctp_sack_info instead [ 147.023849][ T5234] usb 3-1: USB disconnect, device number 22 [ 147.027591][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.045409][ T5234] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected [ 147.146080][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.153635][ T5568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.189656][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.197679][ T5568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.245476][ T5284] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 147.268482][ T6666] netlink: set zone limit has 4 unknown bytes [ 147.470443][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.484146][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 147.499630][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 147.521965][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 147.532898][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 147.610802][ T6676] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.285'. [ 147.657241][ T6434] veth0_vlan: entered promiscuous mode [ 147.675264][ T5284] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 147.684638][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.693018][ T5284] usb 2-1: Product: syz [ 147.697220][ T5284] usb 2-1: Manufacturer: syz [ 147.702145][ T5284] usb 2-1: SerialNumber: syz [ 147.710489][ T5284] usb 2-1: config 0 descriptor?? [ 147.718549][ T54] Bluetooth: hci2: command tx timeout [ 147.758389][ T6434] veth1_vlan: entered promiscuous mode [ 147.888439][ T6434] veth0_macvtap: entered promiscuous mode [ 147.935409][ T6434] veth1_macvtap: entered promiscuous mode [ 147.959640][ T6544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.977002][ T6544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.988808][ T6544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.011228][ T6544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.043338][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.055027][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.065658][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.076550][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.090830][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.108927][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.122073][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 148.129072][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.137799][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.145390][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.155244][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.162314][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.174309][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.180933][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.201239][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.218479][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.229331][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.247535][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.258868][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.269959][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.282918][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.286467][ T8] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.289746][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.308546][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.310309][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.320904][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.332079][ T8] usb 5-1: Product: syz [ 148.335312][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.342089][ T8] usb 5-1: Manufacturer: syz [ 148.351387][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.359336][ T8] usb 5-1: SerialNumber: syz [ 148.362105][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.372962][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.388304][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.396009][ T8] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.401235][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.409749][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.419496][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.464027][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.466509][ T5234] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.480618][ T5284] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 148.516926][ T5284] input input9: Timeout waiting for response from device. [ 148.529910][ T6434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.562789][ T5284] usb 2-1: USB disconnect, device number 20 [ 148.571959][ T6434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.611673][ T6434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.627866][ T6434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.936789][ T937] usb 5-1: USB disconnect, device number 14 [ 148.970732][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.981620][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.290'. [ 149.046896][ T6707] netlink: 'syz.1.290': attribute type 6 has an invalid length. [ 149.089104][ T6707] netlink: 'syz.1.290': attribute type 8 has an invalid length. [ 149.234387][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.350178][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.409124][ T6716] netlink: set zone limit has 4 unknown bytes [ 149.418083][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.447331][ T5568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.466955][ T5568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.562147][ T5234] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 149.587437][ T5234] ath9k_htc: Failed to initialize the device [ 149.591538][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.616635][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.624721][ T937] usb 5-1: ath9k_htc: USB layer deinitialized [ 149.635873][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.645091][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.660539][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.672760][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.681141][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.850097][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.865869][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.898491][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.105297][ T6739] xt_SECMARK: invalid mode: 0 [ 150.115196][ T6544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.142914][ T6544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.245067][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.252420][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.261955][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.269626][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.402919][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.447851][ T12] bridge_slave_1: left allmulticast mode [ 150.455177][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.473442][ T12] bridge_slave_1: left promiscuous mode [ 150.496863][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.502445][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 150.528086][ T6752] netlink: 'syz.4.298': attribute type 3 has an invalid length. [ 150.553847][ T12] bridge_slave_0: left allmulticast mode [ 150.570036][ T12] bridge_slave_0: left promiscuous mode [ 150.592910][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.623840][ T8] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 150.635796][ T8] usb 4-1: config 0 has no interface number 0 [ 150.655496][ T8] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.669306][ T8] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.723399][ T8] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 150.735689][ T8] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 150.753914][ T8] usb 4-1: Manufacturer: syz [ 150.769677][ T8] usb 4-1: config 0 descriptor?? [ 151.207554][ T6743] CIFS: VFS: Malformed UNC in devname [ 151.269210][ T8] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000A/input/input10 [ 151.387933][ T8] sony 0003:054C:03D5.000A: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 151.440625][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 151.682138][ T25] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 151.720344][ T54] Bluetooth: hci0: command tx timeout [ 151.861932][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 151.876558][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 151.886777][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.907930][ T25] usb 2-1: Product: syz [ 151.914555][ T25] usb 2-1: Manufacturer: syz [ 151.919436][ T25] usb 2-1: SerialNumber: syz [ 151.935378][ T25] usb 2-1: config 0 descriptor?? [ 151.948443][ T25] gspca_main: spca500-2.14.0 probing 046d:0900 [ 151.962485][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.006480][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.040397][ T12] bond0 (unregistering): Released all slaves [ 152.080474][ T6726] chnl_net:caif_netlink_parms(): no params data found [ 152.096967][ T5333] usb 4-1: USB disconnect, device number 7 [ 152.177493][ T25] gspca_spca500: reg write: error -71 [ 152.227936][ T25] gspca_spca500: reg write: error -71 [ 152.288214][ T25] gspca_spca500: reg write: error -71 [ 152.335471][ T25] gspca_spca500: reg write: error -71 [ 152.376923][ T25] gspca_spca500: reg write: error -71 [ 152.428791][ T25] gspca_spca500: reg write: error -71 [ 152.480259][ T25] gspca_spca500: reg write: error -71 [ 152.516945][ T25] gspca_spca500: reg write: error -71 [ 152.576128][ T25] gspca_spca500: reg write: error -71 [ 152.610545][ T25] gspca_spca500: reg write: error -71 [ 152.652901][ T25] gspca_spca500: reg write: error -71 [ 152.694657][ T25] gspca_spca500: reg write: error -71 [ 152.719402][ T25] gspca_spca500: reg write: error -71 [ 152.782621][ T25] gspca_spca500: reg write: error -71 [ 152.808330][ T25] usb 2-1: USB disconnect, device number 21 [ 153.310316][ T6544] veth0_vlan: entered promiscuous mode [ 153.362800][ T6804] FAULT_INJECTION: forcing a failure. [ 153.362800][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 153.410063][ T12] hsr_slave_0: left promiscuous mode [ 153.414233][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.3.304 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 153.426314][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.436528][ T6804] Call Trace: [ 153.439848][ T6804] [ 153.442823][ T6804] dump_stack_lvl+0x241/0x360 [ 153.447612][ T6804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.452868][ T6804] ? __pfx__printk+0x10/0x10 [ 153.457616][ T6804] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 153.463897][ T6804] ? __pfx___might_resched+0x10/0x10 [ 153.469629][ T6804] ? aa_label_sk_perm+0x4f3/0x6c0 [ 153.474785][ T6804] should_fail_ex+0x3b0/0x4e0 [ 153.479544][ T6804] should_failslab+0xac/0x100 [ 153.484267][ T6804] ? __alloc_skb+0x1c3/0x440 [ 153.489075][ T6804] kmem_cache_alloc_node_noprof+0x71/0x320 [ 153.495275][ T6804] __alloc_skb+0x1c3/0x440 [ 153.499965][ T6804] ? __pfx___alloc_skb+0x10/0x10 [ 153.505156][ T6804] netlink_sendmsg+0x638/0xcb0 [ 153.510848][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.517774][ T6804] ? __pfx_lock_release+0x10/0x10 [ 153.522953][ T6804] ? aa_sock_msg_perm+0x91/0x160 [ 153.528042][ T6804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.533438][ T6804] __sock_sendmsg+0x221/0x270 [ 153.538282][ T6804] ____sys_sendmsg+0x52a/0x7e0 [ 153.543390][ T6804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.548943][ T6804] __sys_sendmsg+0x292/0x380 [ 153.553682][ T6804] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.559023][ T6804] ? __pfx_vfs_write+0x10/0x10 [ 153.564194][ T6804] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.571114][ T6804] ? lockdep_hardirqs_on+0x99/0x150 [ 153.576391][ T6804] __do_fast_syscall_32+0xb4/0x110 [ 153.581683][ T6804] ? exc_page_fault+0x590/0x8c0 [ 153.586767][ T6804] do_fast_syscall_32+0x34/0x80 [ 153.591682][ T6804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.598561][ T6804] RIP: 0023:0xf740d579 [ 153.602910][ T6804] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.623786][ T6804] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 153.632454][ T6804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 153.640846][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.648919][ T6804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.657412][ T6804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.665905][ T6804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.674148][ T6804] [ 153.687096][ T12] hsr_slave_1: left promiscuous mode [ 153.695862][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.747052][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.804135][ T54] Bluetooth: hci0: command tx timeout [ 153.812880][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.822094][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.954194][ T12] veth1_macvtap: left promiscuous mode [ 153.960023][ T12] veth0_macvtap: left promiscuous mode [ 153.992858][ T12] veth1_vlan: left promiscuous mode [ 153.998380][ T12] veth0_vlan: left promiscuous mode [ 154.007811][ T6809] FAULT_INJECTION: forcing a failure. [ 154.007811][ T6809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.029882][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.3.308 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 154.040763][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.051146][ T6809] Call Trace: [ 154.054499][ T6809] [ 154.057502][ T6809] dump_stack_lvl+0x241/0x360 [ 154.062654][ T6809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.068902][ T6809] ? __pfx__printk+0x10/0x10 [ 154.074190][ T6809] ? __pfx_lock_release+0x10/0x10 [ 154.079954][ T6809] should_fail_ex+0x3b0/0x4e0 [ 154.084807][ T6809] _copy_from_iter+0x1ed/0x1d60 [ 154.089989][ T6809] ? __virt_addr_valid+0x183/0x530 [ 154.095447][ T6809] ? __pfx_lock_release+0x10/0x10 [ 154.100871][ T6809] ? __alloc_skb+0x28f/0x440 [ 154.106160][ T6809] ? __pfx__copy_from_iter+0x10/0x10 [ 154.111513][ T6809] ? __virt_addr_valid+0x183/0x530 [ 154.116906][ T6809] ? __virt_addr_valid+0x183/0x530 [ 154.120391][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.122129][ T6809] ? __virt_addr_valid+0x45f/0x530 [ 154.122170][ T6809] ? __check_object_size+0x48e/0x900 [ 154.122202][ T6809] netlink_sendmsg+0x73d/0xcb0 [ 154.122236][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.122262][ T6809] ? __pfx_lock_release+0x10/0x10 [ 154.122294][ T6809] ? aa_sock_msg_perm+0x91/0x160 [ 154.134178][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.134945][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.145082][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.145210][ T6809] __sock_sendmsg+0x221/0x270 [ 154.152861][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.155721][ T6809] ____sys_sendmsg+0x52a/0x7e0 [ 154.161497][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.167621][ T6809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.167675][ T6809] __sys_sendmsg+0x292/0x380 [ 154.167703][ T6809] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.167741][ T6809] ? __pfx_vfs_write+0x10/0x10 [ 154.174720][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.180060][ T6809] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 154.239487][ T6809] ? lockdep_hardirqs_on+0x99/0x150 [ 154.244784][ T6809] __do_fast_syscall_32+0xb4/0x110 [ 154.249938][ T6809] ? exc_page_fault+0x590/0x8c0 [ 154.254900][ T6809] do_fast_syscall_32+0x34/0x80 [ 154.259946][ T6809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.266315][ T6809] RIP: 0023:0xf740d579 [ 154.270447][ T6809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.290637][ T6809] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 154.299268][ T6809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 154.307274][ T6809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.315281][ T6809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.323289][ T6809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.331299][ T6809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.339603][ T6809] [ 154.413171][ T5333] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.578680][ T5333] usb 5-1: Using ep0 maxpacket: 8 [ 154.602838][ T5333] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 154.625727][ T5333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.644047][ T5333] usb 5-1: Product: syz [ 154.648510][ T5333] usb 5-1: Manufacturer: syz [ 154.655169][ T5333] usb 5-1: SerialNumber: syz [ 154.674106][ T5333] usb 5-1: config 0 descriptor?? [ 154.694743][ T5333] gspca_main: spca500-2.14.0 probing 046d:0900 [ 154.833119][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 155.204281][ T5333] gspca_spca500: reg write: error -32 [ 155.210843][ T5333] gspca_spca500: reg write: error -32 [ 155.223864][ T5333] gspca_spca500: reg write: error -32 [ 155.235548][ T5333] gspca_spca500: reg write: error -32 [ 155.243613][ T5333] gspca_spca500: reg write: error -32 [ 155.252524][ T5333] gspca_spca500: reg write: error -32 [ 155.263476][ T5333] gspca_spca500: reg write: error -32 [ 155.274399][ T5333] gspca_spca500: reg write: error -32 [ 155.280925][ T5333] gspca_spca500: reg write: error -32 [ 155.302810][ T5333] gspca_spca500: reg write: error -32 [ 155.311072][ T5333] gspca_spca500: reg write: error -32 [ 155.321577][ T12] team0 (unregistering): Port device team_slave_1 removed [ 155.326001][ T5333] gspca_spca500: reg write: error -32 [ 155.343202][ T5333] gspca_spca500: reg write: error -32 [ 155.349430][ T5333] gspca_spca500: reg write: error -32 [ 155.436622][ T12] team0 (unregistering): Port device team_slave_0 removed [ 155.875466][ T5240] Bluetooth: hci0: command tx timeout [ 155.965462][ T5240] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 155.975280][ T5240] Bluetooth: hci3: Injecting HCI hardware error event [ 155.984501][ T54] Bluetooth: hci3: hardware error 0x00 [ 156.109727][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.118877][ T6726] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.132587][ T6726] bridge_slave_0: entered allmulticast mode [ 156.141064][ T6726] bridge_slave_0: entered promiscuous mode [ 156.207581][ T5284] usb 5-1: USB disconnect, device number 15 [ 156.214461][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.240399][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.267252][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.272453][ T5240] Bluetooth: hci4: command tx timeout [ 156.287106][ T6726] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.312427][ T6726] bridge_slave_1: entered allmulticast mode [ 156.319393][ T6726] bridge_slave_1: entered promiscuous mode [ 156.357225][ T6544] veth1_vlan: entered promiscuous mode [ 156.414737][ T6726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.446633][ T6726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.575401][ T6726] team0: Port device team_slave_0 added [ 156.589952][ T6726] team0: Port device team_slave_1 added [ 156.726283][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.738643][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.774120][ T6726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.824907][ T6544] veth0_macvtap: entered promiscuous mode [ 156.870598][ T6726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.880986][ T6726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.922142][ T6726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.964074][ T6544] veth1_macvtap: entered promiscuous mode [ 157.090682][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.155642][ T6726] hsr_slave_0: entered promiscuous mode [ 157.184134][ T6726] hsr_slave_1: entered promiscuous mode [ 157.197413][ T6726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.223207][ T6726] Cannot create hsr debugfs directory [ 157.316102][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.350857][ T6811] chnl_net:caif_netlink_parms(): no params data found [ 157.373407][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.385093][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.398736][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.411200][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.423185][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.433978][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.446329][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.508769][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.524953][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.537280][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.548975][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.561090][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.575827][ T6544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.588037][ T6544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.600229][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.615691][ T6544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.624842][ T6544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.634272][ T6544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.643389][ T6544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.689414][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.816392][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.842451][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.849836][ T6811] bridge_slave_0: entered allmulticast mode [ 157.863165][ T6811] bridge_slave_0: entered promiscuous mode [ 157.901272][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.922206][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.929445][ T6811] bridge_slave_1: entered allmulticast mode [ 157.939165][ T6811] bridge_slave_1: entered promiscuous mode [ 157.952213][ T5240] Bluetooth: hci0: command tx timeout [ 158.033718][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 158.169100][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.215661][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.237562][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.263360][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.352563][ T54] Bluetooth: hci4: command tx timeout [ 158.572283][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.581469][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.591065][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.600430][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.612073][ T6811] team0: Port device team_slave_0 added [ 158.619631][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 158.627650][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.636208][ T12] vlan2: left allmulticast mode [ 158.641112][ T12] vlan2: left promiscuous mode [ 158.652905][ T940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.656047][ T12] bridge0: port 3(vlan2) entered disabled state [ 158.679456][ T12] bridge_slave_1: left allmulticast mode [ 158.687268][ T12] bridge_slave_1: left promiscuous mode [ 158.693375][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.703207][ T12] bridge_slave_0: left allmulticast mode [ 158.708910][ T12] bridge_slave_0: left promiscuous mode [ 158.715768][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.850320][ T940] usb 4-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=b5.80 [ 158.863570][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.871745][ T940] usb 4-1: Product: syz [ 158.876275][ T940] usb 4-1: Manufacturer: syz [ 158.880927][ T940] usb 4-1: SerialNumber: syz [ 158.889991][ T940] usb 4-1: config 0 descriptor?? [ 158.904325][ T940] ttusb_dec_send_command: command bulk message failed: error -22 [ 158.915200][ T940] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 159.130572][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.143579][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.155785][ T12] bond0 (unregistering): Released all slaves [ 159.166548][ T6811] team0: Port device team_slave_1 added [ 159.179075][ T5568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.188279][ T5568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.307593][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 159.334687][ T6866] batman_adv: batadv0: Adding interface: dummy0 [ 159.341069][ T6866] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.372302][ T6866] batman_adv: batadv0: Interface activated: dummy0 [ 159.391537][ T6867] batadv0: mtu less than device minimum [ 159.399565][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.412656][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.424348][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.436305][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.449437][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.461440][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.474369][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.486305][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.498212][ T6867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 159.595979][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.603406][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.631298][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.657880][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.671675][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.698421][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.914342][ T6811] hsr_slave_0: entered promiscuous mode [ 159.932049][ T6811] hsr_slave_1: entered promiscuous mode [ 159.941234][ T6811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.950132][ T6811] Cannot create hsr debugfs directory [ 159.986598][ T12] hsr_slave_0: left promiscuous mode [ 159.996557][ T12] hsr_slave_1: left promiscuous mode [ 160.022421][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.029921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.063574][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.072378][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.111193][ T5283] usb 4-1: USB disconnect, device number 8 [ 160.117175][ T12] veth1_macvtap: left promiscuous mode [ 160.117249][ T12] veth0_macvtap: left promiscuous mode [ 160.117383][ T12] veth1_vlan: left promiscuous mode [ 160.135539][ T12] veth0_vlan: left promiscuous mode [ 160.352026][ T940] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 160.441941][ T5240] Bluetooth: hci4: command tx timeout [ 160.524142][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 160.534258][ T940] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 160.551374][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.560270][ T940] usb 1-1: Product: syz [ 160.565200][ T940] usb 1-1: Manufacturer: syz [ 160.570151][ T940] usb 1-1: SerialNumber: syz [ 160.584616][ T940] usb 1-1: config 0 descriptor?? [ 160.686772][ T5240] Bluetooth: hci3: command tx timeout [ 160.827405][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.881408][ T12] team0 (unregistering): Port device team_slave_0 removed [ 161.016957][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.043896][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.102403][ T940] usb 1-1: Cannot retrieve CPort count: -110 [ 161.118719][ T940] usb 1-1: Cannot retrieve CPort count: -110 [ 161.129800][ T940] es2_ap_driver 1-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 161.274391][ T6886] xt_hashlimit: max too large, truncated to 1048576 [ 161.284749][ T6886] xt_hashlimit: overflow, try lower: 0/0 [ 161.647386][ T940] usb 1-1: USB disconnect, device number 11 [ 162.005290][ T6726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.029583][ T6726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.057659][ T6902] xt_SECMARK: invalid mode: 0 [ 162.119603][ T6726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.151017][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 162.189494][ T6726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.512166][ T5240] Bluetooth: hci4: command tx timeout [ 162.739348][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.748005][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.752963][ T5240] Bluetooth: hci3: command tx timeout [ 162.759059][ T6865] bridge_slave_0: entered allmulticast mode [ 162.769995][ T6865] bridge_slave_0: entered promiscuous mode [ 162.838150][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.861290][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.870310][ T6865] bridge_slave_1: entered allmulticast mode [ 162.879927][ T6865] bridge_slave_1: entered promiscuous mode [ 163.109165][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.143532][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.176995][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.230728][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.303628][ T6865] team0: Port device team_slave_0 added [ 163.450543][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.484221][ T6865] team0: Port device team_slave_1 added [ 163.674888][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.703557][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.720935][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.776716][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.816232][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.852806][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.883056][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.912977][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.044830][ T6811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.072843][ T6811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.128180][ T6811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.149363][ T6811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.172142][ T5333] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.200149][ T6726] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.263350][ T6865] hsr_slave_0: entered promiscuous mode [ 164.280993][ T6865] hsr_slave_1: entered promiscuous mode [ 164.292231][ T6865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.320064][ T6865] Cannot create hsr debugfs directory [ 164.344896][ T5333] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 164.353961][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.354048][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.370137][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.377579][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.411467][ T5333] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895 [ 164.433114][ T5333] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 164.451659][ T5333] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 164.462633][ T5333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.471037][ T5333] usb 1-1: SerialNumber: syz [ 164.494845][ T5333] usb 1-1: config 0 descriptor?? [ 164.515712][ T6958] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 164.527444][ T5333] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 164.622309][ T12] bridge_slave_1: left allmulticast mode [ 164.628321][ T12] bridge_slave_1: left promiscuous mode [ 164.648252][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.683204][ T12] bridge_slave_0: left allmulticast mode [ 164.689648][ T12] bridge_slave_0: left promiscuous mode [ 164.698239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.833037][ T5240] Bluetooth: hci3: command tx timeout [ 164.840283][ T5283] usb 1-1: USB disconnect, device number 12 [ 165.340572][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.356589][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.369483][ T12] bond0 (unregistering): Released all slaves [ 165.784306][ T937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 165.933353][ T937] usb 1-1: device descriptor read/64, error -71 [ 166.123178][ T12] hsr_slave_0: left promiscuous mode [ 166.140642][ T12] hsr_slave_1: left promiscuous mode [ 166.153249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.160752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.190225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.198942][ T937] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.198988][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.244611][ T12] veth1_macvtap: left promiscuous mode [ 166.250254][ T12] veth0_macvtap: left promiscuous mode [ 166.269066][ T12] veth1_vlan: left promiscuous mode [ 166.287487][ T12] veth0_vlan: left promiscuous mode [ 166.320778][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 166.330182][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 166.342245][ T937] usb 1-1: device descriptor read/64, error -71 [ 166.348941][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 166.376472][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.385059][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 166.402709][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.452213][ T937] usb usb1-port1: attempt power cycle [ 166.803452][ T937] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 166.834700][ T937] usb 1-1: device descriptor read/8, error -71 [ 166.918755][ T5240] Bluetooth: hci3: command tx timeout [ 167.048825][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.072207][ T937] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 167.104621][ T937] usb 1-1: device descriptor read/8, error -71 [ 167.114091][ T12] team0 (unregistering): Port device team_slave_0 removed [ 167.214063][ T937] usb usb1-port1: unable to enumerate USB device [ 167.691265][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.770225][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.935062][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.979557][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.986802][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.000391][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.007616][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.024591][ T6726] veth0_vlan: entered promiscuous mode [ 168.087922][ T6726] veth1_vlan: entered promiscuous mode [ 168.259953][ T6865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.285451][ T6726] veth0_macvtap: entered promiscuous mode [ 168.304871][ T6726] veth1_macvtap: entered promiscuous mode [ 168.319396][ T6865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.354207][ T6865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.368138][ T6865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.400809][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.411809][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.422898][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.434446][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.446204][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.457656][ T7020] chnl_net:caif_netlink_parms(): no params data found [ 168.512465][ T5240] Bluetooth: hci1: command tx timeout [ 168.527497][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.577972][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.610405][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.623471][ T6726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.635524][ T6726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.647869][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.727382][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.760093][ T6726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.770594][ T6726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.780699][ T6726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.794933][ T6726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.797870][ T7050] net_ratelimit: 10 callbacks suppressed [ 168.797887][ T7050] netlink: set zone limit has 4 unknown bytes [ 168.860548][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.896001][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.022918][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.135282][ T5568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.148221][ T5568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.153235][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.163596][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.188395][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.197135][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.205278][ T7020] bridge_slave_0: entered allmulticast mode [ 169.214151][ T7020] bridge_slave_0: entered promiscuous mode [ 169.319345][ T6865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.337458][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.347602][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.360793][ T7020] bridge_slave_1: entered allmulticast mode [ 169.376359][ T7020] bridge_slave_1: entered promiscuous mode [ 169.515984][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.579408][ T6865] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.588338][ T6811] veth0_vlan: entered promiscuous mode [ 169.601577][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.685095][ T12] bridge_slave_1: left allmulticast mode [ 169.690833][ T12] bridge_slave_1: left promiscuous mode [ 169.697800][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.728878][ T12] bridge_slave_0: left allmulticast mode [ 169.735916][ T12] bridge_slave_0: left promiscuous mode [ 169.741910][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.773675][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 169.802299][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 169.834766][ T7069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.347'. [ 169.853340][ T7069] netlink: 104 bytes leftover after parsing attributes in process `syz.2.347'. [ 170.342547][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.366700][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.404562][ T12] bond0 (unregistering): Released all slaves [ 170.437477][ T7020] team0: Port device team_slave_0 added [ 170.532966][ T7020] team0: Port device team_slave_1 added [ 170.559193][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.566558][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.592278][ T5240] Bluetooth: hci1: command tx timeout [ 170.624414][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.631712][ T5568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.740460][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.759053][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.787892][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.801178][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.808453][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.851215][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.872275][ T6811] veth1_vlan: entered promiscuous mode [ 170.909456][ T12] hsr_slave_0: left promiscuous mode [ 170.921373][ T12] hsr_slave_1: left promiscuous mode [ 170.928614][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 170.937374][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 170.945773][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.953600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.961794][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.969612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.988428][ T12] veth1_macvtap: left promiscuous mode [ 170.994773][ T12] veth0_macvtap: left promiscuous mode [ 171.000647][ T12] veth1_vlan: left promiscuous mode [ 171.012098][ T12] veth0_vlan: left promiscuous mode [ 171.142072][ T937] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 171.319356][ T937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.342038][ T937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.359178][ T937] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.368731][ T937] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.377437][ T937] usb 3-1: Manufacturer: syz [ 171.384854][ T937] usb 3-1: config 0 descriptor?? [ 171.733990][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.782743][ T12] team0 (unregistering): Port device team_slave_0 removed [ 171.944110][ T940] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.139963][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.160672][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.170664][ T940] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 172.179931][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.200622][ T940] usb 1-1: config 0 descriptor?? [ 172.413455][ T7020] hsr_slave_0: entered promiscuous mode [ 172.428791][ T7020] hsr_slave_1: entered promiscuous mode [ 172.445806][ T7020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.455368][ T7020] Cannot create hsr debugfs directory [ 172.682175][ T5240] Bluetooth: hci1: command tx timeout [ 172.697158][ T6865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.726097][ T6811] veth0_macvtap: entered promiscuous mode [ 172.787911][ T6811] veth1_macvtap: entered promiscuous mode [ 172.946512][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.967520][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.983128][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.995517][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.008529][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.061794][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.081001][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.100055][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.111451][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.129497][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.195497][ T6811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.212793][ T6811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.227101][ T6811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.247471][ T6811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.266634][ T6865] veth0_vlan: entered promiscuous mode [ 173.301396][ T6865] veth1_vlan: entered promiscuous mode [ 173.468634][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.497335][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.499484][ T6865] veth0_macvtap: entered promiscuous mode [ 173.527790][ T940] uclogic 0003:256C:006D.000B: v1 frame probing failed: -71 [ 173.545539][ T940] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 173.568781][ T6865] veth1_macvtap: entered promiscuous mode [ 173.572374][ T940] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 173.589411][ T7020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.608161][ T940] usb 1-1: USB disconnect, device number 17 [ 173.614045][ T7020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.623702][ T5568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.641821][ T5568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.726034][ T7020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.749956][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.769864][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.780486][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.808502][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.825946][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.838250][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.859035][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.883175][ T7020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.927753][ T5568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.939459][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.951445][ T5568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.966706][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.978278][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.989794][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.000274][ T6865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.011316][ T6865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.025051][ T6865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.030185][ T940] usb 3-1: USB disconnect, device number 23 [ 174.036924][ T6865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.067510][ T6865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.102224][ T6865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.127922][ T6865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.406215][ T7129] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 174.424509][ T7129] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 174.452983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.479618][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.500020][ T7129] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 174.559491][ T7135] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 174.653530][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.661440][ T7137] netlink: set zone limit has 4 unknown bytes [ 174.677012][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.696550][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.752404][ T5240] Bluetooth: hci1: command tx timeout [ 174.771180][ T7020] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.876378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.883883][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.974949][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.982429][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.107464][ T7152] FAULT_INJECTION: forcing a failure. [ 175.107464][ T7152] name failslab, interval 1, probability 0, space 0, times 0 [ 175.181834][ T7152] CPU: 1 UID: 0 PID: 7152 Comm: syz.4.315 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 175.192532][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.202927][ T7152] Call Trace: [ 175.206253][ T7152] [ 175.209320][ T7152] dump_stack_lvl+0x241/0x360 [ 175.214243][ T7152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.219856][ T7152] ? __pfx__printk+0x10/0x10 [ 175.224533][ T7152] ? fs_reclaim_acquire+0x93/0x140 [ 175.229706][ T7152] ? __pfx___might_resched+0x10/0x10 [ 175.235078][ T7152] should_fail_ex+0x3b0/0x4e0 [ 175.239836][ T7152] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 175.245972][ T7152] should_failslab+0xac/0x100 [ 175.250975][ T7152] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 175.256796][ T7152] __kmalloc_noprof+0xd8/0x400 [ 175.261662][ T7152] tomoyo_realpath_from_path+0xcf/0x5e0 [ 175.268381][ T7152] tomoyo_path_number_perm+0x23a/0x880 [ 175.273997][ T7152] ? tomoyo_path_number_perm+0x208/0x880 [ 175.279881][ T7152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.286022][ T7152] ? __pfx_lock_acquire+0x10/0x10 [ 175.291284][ T7152] ? __fget_files+0x29/0x470 [ 175.296074][ T7152] ? __fget_files+0x3f3/0x470 [ 175.297662][ T7156] warning: `syz.2.362' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.301412][ T7152] security_file_ioctl_compat+0xc6/0x2a0 [ 175.320053][ T7152] __se_compat_sys_ioctl+0xd6/0xc90 [ 175.325685][ T7152] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 175.331653][ T7152] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.336860][ T7020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 175.337760][ T7152] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.354877][ T7152] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 175.361527][ T7152] ? lockdep_hardirqs_on+0x99/0x150 [ 175.366765][ T7152] __do_fast_syscall_32+0xb4/0x110 [ 175.371924][ T7152] ? exc_page_fault+0x590/0x8c0 [ 175.376827][ T7152] do_fast_syscall_32+0x34/0x80 [ 175.381708][ T7152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 175.388179][ T7152] RIP: 0023:0xf743d579 [ 175.392295][ T7152] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 175.412668][ T7152] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 175.421494][ T7152] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000400c4150 [ 175.429697][ T7152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.438164][ T7152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.446271][ T7152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 175.454384][ T7152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.462697][ T7152] [ 175.490600][ T7020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.539035][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.562352][ T940] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 175.586122][ T7152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.755346][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 175.770113][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.789632][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.825189][ T7020] veth0_vlan: entered promiscuous mode [ 175.834983][ T940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.875594][ T7020] veth1_vlan: entered promiscuous mode [ 175.890405][ T940] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.908711][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.950272][ T940] usb 1-1: config 0 descriptor?? [ 176.008989][ T7020] veth0_macvtap: entered promiscuous mode [ 176.093984][ T7020] veth1_macvtap: entered promiscuous mode [ 176.110689][ T7172] netlink: 'syz.4.369': attribute type 29 has an invalid length. [ 176.132827][ T7172] netlink: 'syz.4.369': attribute type 29 has an invalid length. [ 176.148455][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.159928][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.170116][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.182431][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.193860][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.205259][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.221211][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.237814][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.249842][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.270140][ T7172] netlink: 'syz.4.369': attribute type 29 has an invalid length. [ 176.359054][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.389792][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.409383][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.412908][ T940] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 176.421227][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.442982][ T940] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 176.462649][ T940] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 176.473344][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.502167][ T940] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input11 [ 176.504705][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.574076][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.584241][ T7020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.594934][ T7020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.637252][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.682775][ T7020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.713393][ T7020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.748867][ T7020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.757935][ T7175] xt_SECMARK: invalid mode: 0 [ 176.791951][ T7020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.940747][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.982716][ T940] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 177.022442][ T940] usb 1-1: USB disconnect, device number 18 [ 177.050148][ T7181] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.374'. [ 177.092647][ T7181] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.374'. [ 177.199461][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.245806][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.267569][ T7186] FAULT_INJECTION: forcing a failure. [ 177.267569][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 177.282253][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.2.376 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 177.293292][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.303574][ T7186] Call Trace: [ 177.306913][ T7186] [ 177.309897][ T7186] dump_stack_lvl+0x241/0x360 [ 177.314734][ T7186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.319999][ T7186] ? __pfx__printk+0x10/0x10 [ 177.324663][ T7186] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 177.330390][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.330679][ T7186] ? __pfx___might_resched+0x10/0x10 [ 177.342944][ T7186] ? __netlink_dump_start+0x533/0x790 [ 177.343768][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.348556][ T7186] should_fail_ex+0x3b0/0x4e0 [ 177.357471][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.360202][ T7186] should_failslab+0xac/0x100 [ 177.368639][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 177.371903][ T7186] ? __alloc_skb+0x1c3/0x440 [ 177.371935][ T7186] kmem_cache_alloc_node_noprof+0x71/0x320 [ 177.371971][ T7186] __alloc_skb+0x1c3/0x440 [ 177.372001][ T7186] ? __pfx___alloc_skb+0x10/0x10 [ 177.372030][ T7186] ? netlink_ack_tlv_len+0x6e/0x200 [ 177.372066][ T7186] netlink_ack+0x13f/0xa30 [ 177.372096][ T7186] ? __pfx_lock_acquire+0x10/0x10 [ 177.372128][ T7186] ? __pfx_devlink_nl_sb_tc_pool_bind_get_dumpit+0x10/0x10 [ 177.372173][ T7186] netlink_rcv_skb+0x262/0x430 [ 177.382271][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.383735][ T7186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.439107][ T7186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.444544][ T7186] ? __netlink_deliver_tap+0x77e/0x7c0 [ 177.450129][ T7186] genl_rcv+0x28/0x40 [ 177.454130][ T7186] netlink_unicast+0x7f6/0x990 [ 177.460071][ T7186] ? __pfx_netlink_unicast+0x10/0x10 [ 177.465382][ T7186] ? __virt_addr_valid+0x183/0x530 [ 177.471441][ T7186] ? __check_object_size+0x48e/0x900 [ 177.476783][ T7186] netlink_sendmsg+0x8e4/0xcb0 [ 177.481577][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.486911][ T7186] ? __pfx_lock_release+0x10/0x10 [ 177.492006][ T7186] ? aa_sock_msg_perm+0x91/0x160 [ 177.497011][ T7186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.502329][ T7186] __sock_sendmsg+0x221/0x270 [ 177.507032][ T7186] ____sys_sendmsg+0x52a/0x7e0 [ 177.511849][ T7186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.517202][ T7186] __sys_sendmsg+0x292/0x380 [ 177.521885][ T7186] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.527053][ T7186] ? __pfx_vfs_write+0x10/0x10 [ 177.531871][ T7186] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 177.538613][ T7186] ? lockdep_hardirqs_on+0x99/0x150 [ 177.543898][ T7186] __do_fast_syscall_32+0xb4/0x110 [ 177.549145][ T7186] ? exc_page_fault+0x590/0x8c0 [ 177.554114][ T7186] do_fast_syscall_32+0x34/0x80 [ 177.559188][ T7186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 177.565549][ T7186] RIP: 0023:0xf7f61579 [ 177.569677][ T7186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 177.589760][ T7186] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 177.598199][ T7186] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 177.606210][ T7186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.614301][ T7186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 177.622411][ T7186] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 177.630787][ T7186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 177.638799][ T7186] [ 177.733031][ T5281] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 177.797730][ T7188] IPVS: Scheduler module ip_vs_ not found [ 177.846162][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.875975][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 177.930549][ T5281] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 177.945314][ T5281] usb 5-1: config 0 has no interface number 0 [ 177.961449][ T1071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.970776][ T5281] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.985335][ T5281] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.004722][ T1071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.021427][ T5281] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 178.032823][ T5281] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 178.041139][ T5281] usb 5-1: Manufacturer: syz [ 178.067354][ T5281] usb 5-1: config 0 descriptor?? [ 178.088040][ T7199] xt_SECMARK: invalid mode: 0 [ 178.137653][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.152091][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.228086][ T12] bridge_slave_1: left allmulticast mode [ 178.249090][ T12] bridge_slave_1: left promiscuous mode [ 178.267829][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.281001][ T12] bridge_slave_0: left allmulticast mode [ 178.297742][ T12] bridge_slave_0: left promiscuous mode [ 178.306574][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.518001][ T7183] CIFS: VFS: Malformed UNC in devname [ 178.554353][ T5281] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.000D/input/input12 [ 178.730984][ T5281] sony 0003:054C:03D5.000D: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 179.316414][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.349349][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.375659][ T12] bond0 (unregistering): Released all slaves [ 179.407195][ T7210] netlink: 'syz.0.381': attribute type 29 has an invalid length. [ 179.433084][ T7214] netlink: 'syz.0.381': attribute type 29 has an invalid length. [ 179.461628][ T7213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'. [ 179.507690][ T5281] usb 5-1: USB disconnect, device number 16 [ 179.561312][ T7216] netlink: 'syz.0.381': attribute type 29 has an invalid length. [ 179.713116][ T54] Bluetooth: hci4: command tx timeout [ 179.725684][ T7226] xt_SECMARK: invalid mode: 0 [ 180.001524][ T7240] openvswitch: netlink: Duplicate or invalid key (type 0). [ 180.019516][ T7240] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.178998][ T7243] : renamed from vlan0 (while UP) [ 180.281974][ T5283] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 180.333914][ T12] hsr_slave_0: left promiscuous mode [ 180.353642][ T12] hsr_slave_1: left promiscuous mode [ 180.370831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.390954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.417297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.449047][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.452085][ T5281] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 180.486475][ T5283] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 180.501549][ T5283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.545333][ T12] veth1_macvtap: left promiscuous mode [ 180.551073][ T12] veth0_macvtap: left promiscuous mode [ 180.555544][ T7261] usb usb8: usbfs: process 7261 (syz.2.396) did not claim interface 0 before use [ 180.567399][ T5283] usb 1-1: config 0 has no interface number 0 [ 180.576507][ T12] veth1_vlan: left promiscuous mode [ 180.583350][ T12] veth0_vlan: left promiscuous mode [ 180.590640][ T5283] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 180.600961][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.609207][ T5283] usb 1-1: Product: syz [ 180.615320][ T5283] usb 1-1: Manufacturer: syz [ 180.620027][ T5283] usb 1-1: SerialNumber: syz [ 180.624241][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.628278][ T5283] usb 1-1: config 0 descriptor?? [ 180.648718][ T5281] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 180.660331][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.672549][ T5283] ims_pcu 1-1:0.41: probe with driver ims_pcu failed with error -22 [ 180.687730][ T5281] usb 5-1: config 0 descriptor?? [ 180.772112][ T5279] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.885619][ T5333] usb 1-1: USB disconnect, device number 19 [ 180.932184][ T5279] usb 4-1: Using ep0 maxpacket: 16 [ 180.965453][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 180.987984][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 181.000510][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.024050][ T5279] usb 4-1: config 0 descriptor?? [ 181.047421][ T5279] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 181.131085][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.175868][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.249833][ T29] audit: type=1326 audit(1727825746.341:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.4.393" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x0 [ 181.324903][ T5281] mcp2221 0003:04D8:00DD.000E: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 181.380112][ T5283] usb 4-1: USB disconnect, device number 9 [ 181.386618][ T4669] bcm5974 4-1:0.0: could not read from device [ 181.503808][ T7259] bcm5974 4-1:0.0: could not read from device [ 181.531514][ T5226] bcm5974 4-1:0.0: could not read from device [ 181.678732][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.727552][ T12] team0 (unregistering): Port device team_slave_0 removed [ 181.792969][ T54] Bluetooth: hci4: command tx timeout [ 182.379485][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 182.454515][ T7272] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 182.468144][ T7273] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 182.528660][ T7274] netlink: 'syz.3.398': attribute type 29 has an invalid length. [ 182.804858][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.835716][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.844479][ T7189] bridge_slave_0: entered allmulticast mode [ 182.860236][ T7189] bridge_slave_0: entered promiscuous mode [ 182.897671][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 183.003554][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.026057][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.053972][ T7189] bridge_slave_1: entered allmulticast mode [ 183.072293][ T937] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.093728][ T7189] bridge_slave_1: entered promiscuous mode [ 183.209754][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.233105][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.234367][ T937] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 183.296359][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.358119][ T7189] team0: Port device team_slave_0 added [ 183.368532][ T7189] team0: Port device team_slave_1 added [ 183.413812][ T937] usb 4-1: config 0 descriptor?? [ 183.440462][ T5281] usb 5-1: USB disconnect, device number 17 [ 183.461721][ T937] usb 4-1: selecting invalid altsetting 1 [ 183.483842][ T937] flexcop_usb: set interface failed. [ 183.519039][ T937] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 183.674308][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.681340][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.704418][ T937] usb 4-1: USB disconnect, device number 10 [ 183.732033][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.789047][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.822000][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.872337][ T54] Bluetooth: hci4: command tx timeout [ 183.936374][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.164981][ T7189] hsr_slave_0: entered promiscuous mode [ 184.177999][ T7189] hsr_slave_1: entered promiscuous mode [ 184.194180][ T7189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.202511][ T7189] Cannot create hsr debugfs directory [ 184.238929][ T7464] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.405'. [ 184.283621][ T5282] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.294857][ T7464] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.405'. [ 184.498584][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 184.579717][ T5282] usb 1-1: New USB device found, idVendor=05da, idProduct=00b6, bcdDevice=cd.b7 [ 184.589276][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.604603][ T5282] usb 1-1: Product: syz [ 184.610014][ T5282] usb 1-1: Manufacturer: syz [ 184.619849][ T5282] usb 1-1: SerialNumber: syz [ 184.644995][ T5282] usb 1-1: config 0 descriptor?? [ 184.671346][ T5282] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 184.708243][ T7541] xt_SECMARK: invalid mode: 0 [ 184.871776][ T5281] usb 1-1: USB disconnect, device number 20 [ 185.112212][ T5282] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 185.252051][ T5282] usb 3-1: device descriptor read/64, error -71 [ 185.348705][ T7189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.365364][ T7189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.390400][ T7189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.411223][ T7189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 185.513696][ T5282] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 185.652211][ T5279] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.663191][ T5282] usb 3-1: device descriptor read/64, error -71 [ 185.687555][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.783131][ T5282] usb usb3-port1: attempt power cycle [ 185.796035][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.802006][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 185.814818][ T5279] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 185.835510][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.842765][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.851335][ T5279] usb 5-1: can't read configurations, error -22 [ 185.899359][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.906633][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.952172][ T54] Bluetooth: hci4: command tx timeout [ 186.002302][ T5279] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 186.089395][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.142083][ T5282] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 186.182166][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 186.201642][ T5279] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 186.207934][ T7189] veth0_vlan: entered promiscuous mode [ 186.228137][ T7189] veth1_vlan: entered promiscuous mode [ 186.253518][ T5282] usb 3-1: device descriptor read/8, error -71 [ 186.262633][ T5279] usb 5-1: can't read configurations, error -22 [ 186.264331][ T7189] veth0_macvtap: entered promiscuous mode [ 186.290956][ T7189] veth1_macvtap: entered promiscuous mode [ 186.309957][ T5279] usb usb5-port1: attempt power cycle [ 186.349271][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.380885][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.401639][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.412921][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.423158][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.438861][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.449694][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.486595][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.506849][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.522460][ T5282] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 186.535150][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.559029][ T5282] usb 3-1: device descriptor read/8, error -71 [ 186.574121][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.587452][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.598962][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.632368][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.654799][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.661989][ T5279] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 186.688606][ T5282] usb usb3-port1: unable to enumerate USB device [ 186.704252][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 186.709747][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.720832][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.731814][ T5279] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 186.750550][ T5279] usb 5-1: can't read configurations, error -22 [ 186.759472][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.828877][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.417'. [ 186.843923][ T7643] netlink: 'syz.3.418': attribute type 29 has an invalid length. [ 186.863644][ T7645] netlink: 'syz.3.418': attribute type 29 has an invalid length. [ 186.897660][ T5279] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 186.907914][ T7643] netlink: 'syz.3.418': attribute type 29 has an invalid length. [ 186.926291][ T7189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.945467][ T7189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.956388][ T5279] usb 5-1: Using ep0 maxpacket: 8 [ 186.971457][ T7189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.991566][ T5279] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 25 [ 187.007033][ T5279] usb 5-1: can't read configurations, error -22 [ 187.014181][ T7189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.025279][ T5279] usb usb5-port1: unable to enumerate USB device [ 187.050502][ T7651] xt_SECMARK: invalid mode: 0 [ 187.169076][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.196510][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.263357][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.294577][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.602207][ T5282] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.764862][ T25] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 187.797703][ T5282] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 187.830278][ T5282] usb 4-1: config 0 has no interface number 0 [ 187.844696][ T5282] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.861080][ T5282] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.873868][ T5282] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 187.894806][ T5282] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 187.908302][ T5282] usb 4-1: Manufacturer: syz [ 187.929917][ T5282] usb 4-1: config 0 descriptor?? [ 187.954285][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 187.985694][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.016409][ T25] usb 2-1: config 0 has no interface number 0 [ 188.032941][ T25] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.056070][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.082906][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.115110][ T25] usb 2-1: config 0 descriptor?? [ 188.161685][ T25] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 188.361118][ T7675] CIFS: VFS: Malformed UNC in devname [ 188.389358][ T5333] usb 2-1: USB disconnect, device number 22 [ 188.466486][ T5333] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 188.474634][ T5282] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.000F/input/input14 [ 188.535189][ T7751] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 188.546962][ T7751] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 188.557708][ T7751] netlink: 'syz.4.429': attribute type 29 has an invalid length. [ 188.595364][ T5282] sony 0003:054C:03D5.000F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 188.639434][ T5282] usb 4-1: USB disconnect, device number 11 [ 188.729343][ T7766] xt_SECMARK: invalid mode: 0 [ 188.754299][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.430'. [ 189.213822][ T7797] vlan2: entered promiscuous mode [ 189.252213][ T7797] vlan2: entered allmulticast mode [ 189.269267][ T7797] hsr_slave_1: entered allmulticast mode [ 189.286781][ T7797] hsr_slave_1: left allmulticast mode [ 189.403037][ T7811] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.512190][ T7817] xt_SECMARK: invalid mode: 0 [ 189.704086][ T7822] capability: warning: `syz.3.446' uses 32-bit capabilities (legacy support in use) [ 189.736970][ T7837] fuse: Bad value for 'fd' [ 189.922605][ T5282] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 189.946787][ T7846] IPVS: Scheduler module ip_vs_ not found [ 190.022234][ T937] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 190.083771][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 190.107380][ T5282] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.122164][ T5282] usb 1-1: config 0 has no interface number 0 [ 190.128534][ T5282] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.149173][ T5282] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 190.166804][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.174432][ T937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.176971][ T5282] usb 1-1: config 0 descriptor?? [ 190.197672][ T937] usb 4-1: not running at top speed; connect to a high speed hub [ 190.211944][ T937] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 190.217494][ T5282] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 190.223651][ T937] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=d0.dd [ 190.258645][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.283954][ T937] usb 4-1: Product: syz [ 190.292045][ T937] usb 4-1: Manufacturer: syz [ 190.295373][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.458'. [ 190.314342][ T937] usb 4-1: SerialNumber: syz [ 190.328154][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 190.363140][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 190.477872][ T5282] usb 1-1: USB disconnect, device number 21 [ 190.511686][ T5282] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 190.584050][ T937] usb 4-1: USB disconnect, device number 12 [ 190.611947][ T5281] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 190.762192][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 190.771613][ T5281] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 190.781631][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.804305][ T5281] usb 2-1: Product: syz [ 190.808743][ T5281] usb 2-1: Manufacturer: syz [ 190.821915][ T5281] usb 2-1: SerialNumber: syz [ 190.859391][ T5281] usb 2-1: config 0 descriptor?? [ 190.890505][ T5281] gspca_main: spca500-2.14.0 probing 046d:0900 [ 190.936327][ T7912] netlink: set zone limit has 4 unknown bytes [ 190.951495][ T7914] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 190.974025][ T7914] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 191.086852][ T5281] gspca_spca500: reg write: error -71 [ 191.117279][ T5281] gspca_spca500: reg write: error -71 [ 191.123774][ T5281] gspca_spca500: reg write: error -71 [ 191.130058][ T5281] gspca_spca500: reg write: error -71 [ 191.132239][ T7930] xt_cluster: node mask cannot exceed total number of nodes [ 191.135909][ T5281] gspca_spca500: reg write: error -71 [ 191.157323][ T5281] gspca_spca500: reg write: error -71 [ 191.165396][ T5281] gspca_spca500: reg write: error -71 [ 191.171320][ T5281] gspca_spca500: reg write: error -71 [ 191.177719][ T5281] gspca_spca500: reg write: error -71 [ 191.189535][ T5281] gspca_spca500: reg write: error -71 [ 191.197052][ T5281] gspca_spca500: reg write: error -71 [ 191.203546][ T5281] gspca_spca500: reg write: error -71 [ 191.210320][ T5281] gspca_spca500: reg write: error -71 [ 191.217275][ T5281] gspca_spca500: reg write: error -71 [ 191.233211][ T5281] usb 2-1: USB disconnect, device number 23 [ 191.251991][ T937] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 191.346525][ T5282] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 191.412313][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 191.423929][ T937] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 191.436953][ T937] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 191.440327][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.454666][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.479330][ T937] usb 5-1: Product: syz [ 191.488191][ T937] usb 5-1: Manufacturer: syz [ 191.498245][ T937] usb 5-1: SerialNumber: syz [ 191.509460][ T937] usb 5-1: config 0 descriptor?? [ 191.531674][ T5282] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 191.564466][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.609643][ T5282] usb 3-1: Product: syz [ 191.621271][ T5282] usb 3-1: Manufacturer: syz [ 191.621691][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.642255][ T5282] usb 3-1: SerialNumber: syz [ 191.657717][ T5282] usb 3-1: config 0 descriptor?? [ 191.727413][ T7914] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 191.757088][ T7914] netlink: 'syz.4.467': attribute type 29 has an invalid length. [ 191.809876][ T937] usb 5-1: USB disconnect, device number 22 [ 191.921655][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.957731][ T5281] usb 3-1: USB disconnect, device number 28 [ 192.101695][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.163698][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.180694][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.198941][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.221654][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.231129][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 192.239216][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.488330][ T64] bridge_slave_1: left allmulticast mode [ 192.496337][ T64] bridge_slave_1: left promiscuous mode [ 192.509779][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.535532][ T64] bridge_slave_0: left allmulticast mode [ 192.548938][ T64] bridge_slave_0: left promiscuous mode [ 192.555075][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.636362][ T5333] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 192.647655][ T8030] netlink: set zone limit has 4 unknown bytes [ 192.838486][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.861971][ T5333] usb 1-1: Using ep0 maxpacket: 16 [ 192.863517][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.869879][ T5333] usb 1-1: too many configurations: 246, using maximum allowed: 8 [ 192.879873][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.893277][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.904438][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.912119][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.983292][ T5333] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 192.999664][ T5333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.018649][ T5333] usb 1-1: Product: syz [ 193.043952][ T5333] usb 1-1: Manufacturer: syz [ 193.048772][ T5333] usb 1-1: SerialNumber: syz [ 193.081728][ T5333] r8152-cfgselector 1-1: Unknown version 0x0000 [ 193.090031][ T5333] r8152-cfgselector 1-1: config 0 descriptor?? [ 193.338949][ T940] r8152-cfgselector 1-1: USB disconnect, device number 22 [ 193.348356][ T5282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 193.434970][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.447708][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.459384][ T64] bond0 (unregistering): Released all slaves [ 193.485836][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 193.523373][ T5282] usb 5-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=ac.5f [ 193.546171][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.557810][ T5282] usb 5-1: config 0 descriptor?? [ 193.592311][ T8044] bond1: entered allmulticast mode [ 193.890716][ T5282] usb 5-1: USB disconnect, device number 23 [ 193.902901][ T940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 194.103508][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 194.129232][ T940] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 194.150519][ T940] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 194.168752][ T940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.179635][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.216671][ T940] usb 3-1: SerialNumber: syz [ 194.237579][ T8101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.312110][ T5240] Bluetooth: hci1: command tx timeout [ 194.389892][ T64] hsr_slave_0: left promiscuous mode [ 194.414045][ T64] hsr_slave_1: left promiscuous mode [ 194.451685][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.458578][ T8101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 194.466446][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.485641][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.499654][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.545862][ T64] veth1_macvtap: left promiscuous mode [ 194.558294][ T64] veth0_macvtap: left promiscuous mode [ 194.565583][ T64] veth1_vlan: left promiscuous mode [ 194.571394][ T64] veth0_vlan: left promiscuous mode [ 194.572212][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 194.595788][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.607301][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.932026][ T5283] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 194.992499][ T5240] Bluetooth: hci4: command tx timeout [ 195.092100][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 195.105298][ T5283] usb 5-1: config 0 has no interfaces? [ 195.116270][ T5283] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=75.a1 [ 195.125981][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.138648][ T5283] usb 5-1: Product: syz [ 195.143169][ T5283] usb 5-1: Manufacturer: syz [ 195.147917][ T5283] usb 5-1: SerialNumber: syz [ 195.156317][ T5283] usb 5-1: config 0 descriptor?? [ 195.362751][ T64] team0 (unregistering): Port device team_slave_1 removed [ 195.440688][ T64] team0 (unregistering): Port device team_slave_0 removed [ 195.469062][ T8334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.487786][ T8334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.177085][ T5283] usb 5-1: USB disconnect, device number 24 [ 196.231731][ T940] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 196.232810][ T8038] chnl_net:caif_netlink_parms(): no params data found [ 196.329306][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 196.352549][ T5240] Bluetooth: hci1: command tx timeout [ 196.568425][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.601188][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.642203][ T8038] bridge_slave_0: entered allmulticast mode [ 196.661032][ T8038] bridge_slave_0: entered promiscuous mode [ 196.685559][ T5282] usb 3-1: USB disconnect, device number 29 [ 196.694339][ T5282] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 196.737895][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.765756][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.806564][ T8038] bridge_slave_1: entered allmulticast mode [ 196.819431][ T8038] bridge_slave_1: entered promiscuous mode [ 196.884039][ T8452] validate_nla: 2 callbacks suppressed [ 196.884064][ T8452] netlink: 'syz.0.487': attribute type 29 has an invalid length. [ 196.959773][ T8480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.977976][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 197.072782][ T5240] Bluetooth: hci4: command tx timeout [ 197.088971][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.121664][ T8460] netlink: 'syz.0.487': attribute type 29 has an invalid length. [ 197.205529][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.271490][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.283671][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.291020][ T7988] bridge_slave_0: entered allmulticast mode [ 197.322099][ T7988] bridge_slave_0: entered promiscuous mode [ 197.332021][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.339293][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.362439][ T7988] bridge_slave_1: entered allmulticast mode [ 197.383791][ T7988] bridge_slave_1: entered promiscuous mode [ 197.669369][ T8038] team0: Port device team_slave_0 added [ 197.785136][ T8038] team0: Port device team_slave_1 added [ 198.114392][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.171212][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.302414][ T8038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.363788][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.370804][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.455369][ T5240] Bluetooth: hci1: command tx timeout [ 198.569865][ T8038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.652171][ T5281] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 198.852085][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 198.875730][ T5281] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 198.910206][ T5281] usb 3-1: config 0 has no interface number 0 [ 198.924315][ T8038] hsr_slave_0: entered promiscuous mode [ 198.956200][ T5281] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.994296][ T8038] hsr_slave_1: entered promiscuous mode [ 199.010535][ T5281] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.064235][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.085234][ T8038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.131697][ T8038] Cannot create hsr debugfs directory [ 199.152695][ T54] Bluetooth: hci4: command tx timeout [ 199.183781][ T5281] usb 3-1: config 0 descriptor?? [ 199.262407][ T5281] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 200.240029][ T8038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.512073][ T54] Bluetooth: hci1: command tx timeout [ 201.232051][ T54] Bluetooth: hci4: command tx timeout [ 203.101858][ C0] sched: DL replenish lagged too much [ 207.376396][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.390352][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.399960][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.412768][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.420607][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.428534][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.589598][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.599536][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.611055][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.620366][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.628571][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.636696][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 209.472148][ T5240] Bluetooth: hci5: command tx timeout [ 210.672106][ T5240] Bluetooth: hci6: command tx timeout [ 211.561247][ T5240] Bluetooth: hci5: command tx timeout [ 212.752148][ T5240] Bluetooth: hci6: command tx timeout [ 213.638492][ T5240] Bluetooth: hci5: command tx timeout [ 214.832155][ T5240] Bluetooth: hci6: command tx timeout [ 215.713519][ T5240] Bluetooth: hci5: command tx timeout [ 216.912143][ T5240] Bluetooth: hci6: command tx timeout [ 217.981667][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.993207][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.002394][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.020911][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.031567][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.045419][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.112295][ T5232] Bluetooth: hci7: command tx timeout [ 222.197179][ T5232] Bluetooth: hci7: command tx timeout [ 224.277165][ T5232] Bluetooth: hci7: command tx timeout [ 226.352106][ T5232] Bluetooth: hci7: command tx timeout [ 254.646668][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 254.663635][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 254.679587][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 254.689129][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 254.696948][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 254.704601][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 255.159094][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.170231][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.182099][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.193959][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.204430][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 255.213576][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.033861][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.040228][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.752119][ T5240] Bluetooth: hci8: command tx timeout [ 257.322319][ T5240] Bluetooth: hci9: command tx timeout [ 258.832043][ T5240] Bluetooth: hci8: command tx timeout [ 259.392091][ T5240] Bluetooth: hci9: command tx timeout [ 260.911984][ T5240] Bluetooth: hci8: command tx timeout [ 261.472160][ T5240] Bluetooth: hci9: command tx timeout [ 262.992042][ T5240] Bluetooth: hci8: command tx timeout [ 263.236955][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 263.552021][ T5240] Bluetooth: hci9: command tx timeout [ 268.789690][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 268.799258][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 268.810279][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 268.819531][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 268.832255][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 268.841026][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 269.609995][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 269.623213][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 269.631710][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 269.653068][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 269.662993][ T5236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 269.682419][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 273.472141][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 278.778035][ T5230] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 278.787979][ T5230] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 278.796777][ T5230] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 278.805033][ T5230] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 278.817338][ T5230] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 278.826122][ T5230] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 283.717990][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 314.441543][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 315.320886][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 315.330483][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 315.339096][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 315.349683][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 315.357532][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 315.365090][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 315.774474][ T5242] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 315.787839][ T5242] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 315.796790][ T5242] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 315.805265][ T5242] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 315.815402][ T5242] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 315.824548][ T5242] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 317.479048][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.485621][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.632065][ T8826] Bluetooth: hci4: command 0x0406 tx timeout [ 329.597019][ T8831] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 329.614493][ T8831] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 329.623094][ T8831] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 329.631746][ T8831] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 329.641338][ T8831] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 329.651192][ T8831] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 329.792050][ T8831] Bluetooth: hci5: command 0x0406 tx timeout [ 330.329538][ T8841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 330.339219][ T8841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 330.348937][ T8841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 330.357878][ T8841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 330.367397][ T8841] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 330.376513][ T8841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 334.912104][ T8822] Bluetooth: hci6: command 0x0406 tx timeout [ 339.474849][ T8850] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 339.486230][ T8850] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 339.494943][ T8850] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 339.503173][ T8850] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 339.511332][ T8850] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 339.522042][ T8850] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 341.152305][ T30] INFO: task kworker/u8:4:64 blocked for more than 143 seconds. [ 341.160043][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 341.217186][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.271880][ T30] task:kworker/u8:4 state:D stack:21264 pid:64 tgid:64 ppid:2 flags:0x00004000 [ 341.367464][ T30] Workqueue: netns cleanup_net [ 341.405670][ T30] Call Trace: [ 341.409032][ T30] [ 341.439701][ T30] __schedule+0x1895/0x4b30 [ 341.446685][ T30] ? __pfx___schedule+0x10/0x10 [ 341.451629][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.465707][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.471244][ T30] ? kthread_data+0x52/0xd0 [ 341.495902][ T30] ? schedule+0x90/0x320 [ 341.500238][ T30] ? wq_worker_sleeping+0x66/0x240 [ 341.514085][ T30] ? schedule+0x90/0x320 [ 341.518417][ T30] schedule+0x14b/0x320 [ 341.530534][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.539093][ T30] __mutex_lock+0x6a7/0xd70 [ 341.549144][ T30] ? __mutex_lock+0x52a/0xd70 [ 341.556985][ T30] ? gate_exit_net+0x30/0x100 [ 341.567502][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.575525][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 341.580709][ T30] gate_exit_net+0x30/0x100 [ 341.595150][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 341.600354][ T30] cleanup_net+0x89d/0xcc0 [ 341.610376][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 341.619626][ T30] ? process_scheduled_works+0x976/0x1850 [ 341.629658][ T30] process_scheduled_works+0xa63/0x1850 [ 341.642038][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.648110][ T30] ? assign_work+0x364/0x3d0 [ 341.661076][ T30] worker_thread+0x870/0xd30 [ 341.666113][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 341.679941][ T30] ? __kthread_parkme+0x169/0x1d0 [ 341.685174][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.702000][ T30] kthread+0x2f0/0x390 [ 341.706616][ T30] ? __pfx_worker_thread+0x10/0x10 [ 341.723180][ T30] ? __pfx_kthread+0x10/0x10 [ 341.727846][ T30] ret_from_fork+0x4b/0x80 [ 341.739114][ T30] ? __pfx_kthread+0x10/0x10 [ 341.746605][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.751456][ T30] [ 341.761403][ T30] INFO: task dhcpcd:4898 blocked for more than 143 seconds. [ 341.770427][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 341.785234][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.801154][ T30] task:dhcpcd state:D stack:20608 pid:4898 tgid:4898 ppid:4897 flags:0x00004002 [ 341.815591][ T30] Call Trace: [ 341.819458][ T30] [ 341.827326][ T30] __schedule+0x1895/0x4b30 [ 341.836070][ T30] ? __pfx___schedule+0x10/0x10 [ 341.840997][ T30] ? __pfx_lock_release+0x10/0x10 [ 341.850357][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 341.861100][ T30] ? schedule+0x90/0x320 [ 341.869818][ T30] schedule+0x14b/0x320 [ 341.879325][ T30] schedule_preempt_disabled+0x13/0x30 [ 341.889143][ T30] __mutex_lock+0x6a7/0xd70 [ 341.909402][ T30] ? __mutex_lock+0x52a/0xd70 [ 341.918025][ T30] ? rtnl_dumpit+0x99/0x200 [ 341.930620][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 341.937258][ T30] ? __alloc_skb+0x28f/0x440 [ 341.949948][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 341.955391][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 341.960566][ T30] rtnl_dumpit+0x99/0x200 [ 341.973571][ T30] netlink_dump+0x647/0xd80 [ 341.978191][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 341.991642][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 341.998788][ T30] __netlink_dump_start+0x5a2/0x790 [ 342.012120][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 342.017306][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 342.032250][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.037797][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 342.051252][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 342.056888][ T30] netlink_rcv_skb+0x1e3/0x430 [ 342.061727][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.075420][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.080812][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.091824][ T30] netlink_unicast+0x7f6/0x990 [ 342.096698][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 342.110721][ T30] ? __virt_addr_valid+0x183/0x530 [ 342.117233][ T30] ? __check_object_size+0x48e/0x900 [ 342.131717][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 342.136650][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.150022][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 342.155905][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.161255][ T30] __sock_sendmsg+0x221/0x270 [ 342.172297][ T30] __sys_sendto+0x39b/0x4f0 [ 342.176876][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 342.190649][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 342.198386][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.211926][ T30] __x64_sys_sendto+0xde/0x100 [ 342.216773][ T30] do_syscall_64+0xf3/0x230 [ 342.230165][ T30] ? clear_bhb_loop+0x35/0x90 [ 342.236948][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.250846][ T30] RIP: 0033:0x7fb555ebcad7 [ 342.255701][ T30] RSP: 002b:00007ffc117d2828 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 342.271960][ T30] RAX: ffffffffffffffda RBX: 00007ffc117d3950 RCX: 00007fb555ebcad7 [ 342.280029][ T30] RDX: 0000000000000014 RSI: 00007ffc117d3870 RDI: 0000000000000008 [ 342.298397][ T30] RBP: 00007ffc117d38e0 R08: 00007ffc117d3854 R09: 000000000000000c [ 342.311156][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 342.324994][ T30] R13: 00007ffc117d3854 R14: 00007ffc117d3870 R15: 0000000000000105 [ 342.337728][ T30] [ 342.340968][ T30] INFO: task syz-executor:7988 blocked for more than 144 seconds. [ 342.354524][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 342.370204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.381339][ T30] task:syz-executor state:D stack:21440 pid:7988 tgid:7988 ppid:1 flags:0x20000004 [ 342.398313][ T30] Call Trace: [ 342.401669][ T30] [ 342.409641][ T30] __schedule+0x1895/0x4b30 [ 342.423962][ T30] ? __pfx___schedule+0x10/0x10 [ 342.428913][ T30] ? __pfx_lock_release+0x10/0x10 [ 342.442319][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 342.447883][ T30] ? schedule+0x90/0x320 [ 342.461494][ T30] schedule+0x14b/0x320 [ 342.466198][ T30] schedule_preempt_disabled+0x13/0x30 [ 342.471722][ T30] __mutex_lock+0x6a7/0xd70 [ 342.482620][ T30] ? __mutex_lock+0x52a/0xd70 [ 342.487370][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.499228][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 342.504695][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 342.511176][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 342.536541][ T30] ? __lock_acquire+0x1384/0x2050 [ 342.541661][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.555390][ T30] netlink_rcv_skb+0x1e3/0x430 [ 342.560237][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.572070][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.577464][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.590710][ T30] netlink_unicast+0x7f6/0x990 [ 342.599558][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 342.614456][ T30] ? __virt_addr_valid+0x183/0x530 [ 342.619818][ T30] ? __check_object_size+0x48e/0x900 [ 342.656274][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 342.661243][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.672469][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 342.677516][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.694084][ T30] __sock_sendmsg+0x221/0x270 [ 342.698851][ T30] __sys_sendto+0x39b/0x4f0 [ 342.711881][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 342.718746][ T30] ? __might_fault+0xaa/0x120 [ 342.731439][ T30] ? __might_fault+0xc6/0x120 [ 342.736990][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 342.752155][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 342.758573][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 342.775784][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 342.781071][ T30] __do_fast_syscall_32+0xb4/0x110 [ 342.789227][ T30] ? exc_page_fault+0x590/0x8c0 [ 342.801090][ T30] do_fast_syscall_32+0x34/0x80 [ 342.808965][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.821879][ T30] RIP: 0023:0xf7fa0579 [ 342.826029][ T30] RSP: 002b:00000000f758f810 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 342.842771][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f758f824 [ 342.850831][ T30] RDX: 0000000000000000 RSI: 00000000f7f94568 RDI: 00000000f742bff4 [ 342.869040][ T30] RBP: 00000000f7f94568 R08: 0000000000000000 R09: 0000000000000000 [ 342.880173][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 342.896475][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.909094][ T30] [ 342.918951][ T30] INFO: task syz.4.489:8579 blocked for more than 144 seconds. [ 342.936703][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 342.948924][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.967797][ T30] task:syz.4.489 state:D stack:27104 pid:8579 tgid:8477 ppid:6865 flags:0x20000004 [ 342.981870][ T30] Call Trace: [ 342.985202][ T30] [ 342.988172][ T30] __schedule+0x1895/0x4b30 [ 343.000218][ T30] ? __pfx___schedule+0x10/0x10 [ 343.005487][ T30] ? __pfx_lock_release+0x10/0x10 [ 343.010576][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 343.020846][ T30] ? schedule+0x90/0x320 [ 343.032164][ T30] schedule+0x14b/0x320 [ 343.036652][ T30] schedule_preempt_disabled+0x13/0x30 [ 343.049483][ T30] __mutex_lock+0x6a7/0xd70 [ 343.054421][ T30] ? __mutex_lock+0x52a/0xd70 [ 343.059153][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.077227][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 343.083175][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 343.088180][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 343.101220][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.109087][ T30] ? ref_tracker_free+0x643/0x7e0 [ 343.121830][ T30] netlink_rcv_skb+0x1e3/0x430 [ 343.128975][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 343.142725][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.148119][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.163212][ T30] netlink_unicast+0x7f6/0x990 [ 343.168072][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 343.180271][ T30] ? __virt_addr_valid+0x183/0x530 [ 343.188505][ T30] ? __check_object_size+0x48e/0x900 [ 343.200632][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 343.207136][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.219183][ T30] ? __pfx_lock_release+0x10/0x10 [ 343.227498][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 343.240189][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.248863][ T30] __sock_sendmsg+0x221/0x270 [ 343.260220][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 343.267157][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.279129][ T30] __sys_sendmsg+0x292/0x380 [ 343.285381][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.290599][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 343.306819][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 343.316284][ T30] __do_fast_syscall_32+0xb4/0x110 [ 343.321456][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 343.331918][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 343.341738][ T30] do_fast_syscall_32+0x34/0x80 [ 343.347233][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.364014][ T30] RIP: 0023:0xf743d579 [ 343.368147][ T30] RSP: 002b:00000000f54c156c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 343.385230][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040 [ 343.398661][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.411810][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.419841][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.436915][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.449492][ T30] [ 343.459375][ T30] [ 343.459375][ T30] Showing all locks held in the system: [ 343.470121][ T30] 1 lock held by khungtaskd/30: [ 343.480419][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 343.495298][ T30] 4 locks held by kworker/u9:0/54: [ 343.500460][ T30] #0: ffff88806296f148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.521379][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.541852][ T30] #2: ffff888068504078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 343.569755][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 343.588414][ T30] 4 locks held by kworker/u8:4/64: [ 343.595214][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.612203][ T30] #1: ffffc900015f7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.631830][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 343.651109][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: gate_exit_net+0x30/0x100 [ 343.660555][ T30] 8 locks held by kworker/0:2/940: [ 343.674421][ T30] 3 locks held by kworker/u8:5/1045: [ 343.679759][ T30] #0: ffff88802dadb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.700828][ T30] #1: ffffc90003d27d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.729270][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 343.750247][ T30] 5 locks held by kworker/u9:1/4622: [ 343.756013][ T30] #0: ffff888022ba1948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.775321][ T30] #1: ffffc9000d7bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.802111][ T30] #2: ffff88801b7a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 343.820255][ T30] #3: ffff88801b7a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 343.830423][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 343.849915][ T30] 2 locks held by dhcpcd/4898: [ 343.854845][ T30] #0: ffff88806acbe6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 343.875923][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 343.887883][ T30] 2 locks held by getty/4992: [ 343.897965][ T30] #0: ffff88802e2030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 343.917846][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 343.929810][ T30] 4 locks held by kworker/u9:2/5230: [ 343.942989][ T30] #0: ffff888034acf148 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 343.965444][ T30] #1: ffffc90004007d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 343.984904][ T30] #2: ffff88802966c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 343.999172][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 344.015190][ T30] 6 locks held by kworker/u9:3/5232: [ 344.020528][ T30] #0: ffff88807dfa3948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.035864][ T30] #1: ffffc90004017d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.058162][ T30] #2: ffff8880618c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 344.070237][ T30] #3: ffff8880618c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 344.087967][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 344.100143][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 344.119720][ T30] 4 locks held by kworker/u9:4/5236: [ 344.129982][ T30] #0: ffff888044126948 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.147082][ T30] #1: ffffc90004057d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.169145][ T30] #2: ffff8880129c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 344.181025][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 344.202334][ T30] 5 locks held by kworker/u9:5/5238: [ 344.207679][ T30] #0: ffff88807df25148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.229178][ T30] #1: ffffc90004077d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.250169][ T30] #2: ffff888078e5cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 344.267232][ T30] #3: ffff888078e5c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 344.288662][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 344.300194][ T30] 5 locks held by kworker/u9:6/5239: [ 344.314173][ T30] #0: ffff88803132c148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.331860][ T30] #1: ffffc90002e8fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.354247][ T30] #2: ffff888060b00d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 344.371060][ T30] #3: ffff888060b00078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 344.385717][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 344.401119][ T30] 4 locks held by kworker/u9:7/5240: [ 344.410990][ T30] #0: ffff88803d690948 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.430734][ T30] #1: ffffc90004087d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.455876][ T30] #2: ffff88805386c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 344.471834][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 344.492234][ T30] 5 locks held by kworker/u9:8/5241: [ 344.497585][ T30] #0: ffff88806281a148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.516716][ T30] #1: ffffc90004097d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.538065][ T30] #2: ffff88802dda0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 344.551124][ T30] #3: ffff88802dda0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 344.569296][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 344.581389][ T30] 4 locks held by kworker/u9:9/5242: [ 344.592092][ T30] #0: ffff888097008148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.620720][ T30] #1: ffffc90002d6fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.641107][ T30] #2: ffff88807b338078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 344.661855][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 344.680415][ T30] 3 locks held by kworker/0:5/5282: [ 344.686134][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.701877][ T30] #1: ffffc900042c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.722989][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 344.741454][ T30] 3 locks held by kworker/0:6/5283: [ 344.747042][ T30] 3 locks held by kworker/1:5/5284: [ 344.762706][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 344.784132][ T30] #1: ffffc900042e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 344.802510][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 344.820170][ T30] 1 lock held by syz-executor/7988: [ 344.827027][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 344.841814][ T30] 8 locks held by syz-executor/8038: [ 344.847148][ T30] #0: ffff88802417e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 344.867328][ T30] #1: ffff888011cb4c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 344.887157][ T30] #2: ffff888027a0bf08 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 344.901871][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 344.923695][ T30] #4: ffff88807ba0c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 344.941861][ T30] #5: ffff88807ba0a250 (&devlink->lock_key#19){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 344.958778][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 344.969903][ T30] #7: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 344.991153][ T30] 3 locks held by kworker/u8:9/8198: [ 344.999097][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 345.018763][ T30] #1: ffffc90009397d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 345.030287][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 345.048780][ T30] 1 lock held by syz.4.489/8579: [ 345.054122][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 345.069311][ T30] 1 lock held by syz.4.489/8591: [ 345.078948][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 345.092039][ T30] 1 lock held by syz.2.492/8609: [ 345.097040][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 345.112105][ T30] 1 lock held by syz.0.499/8739: [ 345.117093][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 345.134123][ T30] 2 locks held by syz-executor/8746: [ 345.139464][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.152170][ T8857] Bluetooth: hci7: command 0x0406 tx timeout [ 345.169698][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.189499][ T30] 2 locks held by syz-executor/8754: [ 345.195586][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.213461][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.232424][ T30] 2 locks held by syz-executor/8764: [ 345.237760][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.251812][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.271679][ T30] 2 locks held by syz-executor/8774: [ 345.279118][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.297679][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.309581][ T30] 2 locks held by syz-executor/8783: [ 345.326137][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.339013][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.357167][ T30] 2 locks held by syz-executor/8791: [ 345.364216][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.381816][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.400485][ T30] 2 locks held by syz-executor/8799: [ 345.406177][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.421814][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.441318][ T30] 2 locks held by syz-executor/8808: [ 345.447467][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.462119][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.483746][ T30] 2 locks held by syz-executor/8817: [ 345.489097][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.504919][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.519593][ T30] 4 locks held by kworker/u9:10/8822: [ 345.529100][ T30] #0: ffff8880531c4148 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 345.549564][ T30] #1: ffffc90028d3fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 345.570262][ T30] #2: ffff888040428078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 345.582470][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 345.602128][ T30] 2 locks held by syz-executor/8824: [ 345.607804][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.625850][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.651056][ T30] 5 locks held by kworker/u9:11/8826: [ 345.660766][ T30] #0: ffff88802e3be948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 345.680154][ T30] #1: ffffc9002d59fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 345.703935][ T30] #2: ffff888011f20d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 345.721557][ T30] #3: ffff888011f20078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 345.739894][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 345.750458][ T30] 4 locks held by kworker/u9:12/8827: [ 345.763393][ T30] #0: ffff888097683148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 345.782697][ T30] #1: ffffc9002ad67d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 345.801860][ T30] #2: ffff888062900078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 345.822105][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 345.840767][ T30] 5 locks held by kworker/u9:13/8831: [ 345.846551][ T30] #0: ffff888011d0e948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 345.861814][ T30] #1: ffffc9002f5d7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 345.886260][ T30] #2: ffff888061ad4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 345.905793][ T30] #3: ffff888061ad4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 345.927889][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 345.942165][ T30] 2 locks held by syz-executor/8836: [ 345.947498][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 345.966891][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 345.987486][ T30] 4 locks held by kworker/u9:14/8841: [ 345.996550][ T30] #0: ffff88803d0f0148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 346.016980][ T30] #1: ffffc9002f5c7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 346.040005][ T30] #2: ffff88809d3b8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 346.050623][ T30] #3: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 346.069412][ T30] 2 locks held by syz-executor/8844: [ 346.075292][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 346.093455][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 346.111698][ T30] 5 locks held by kworker/u9:16/8850: [ 346.118445][ T30] #0: ffff888062a88948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 346.138859][ T30] #1: ffffc90034647d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 346.153377][ T30] #2: ffff88805dc4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 346.170259][ T30] #3: ffff88805dc4c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 346.188703][ T30] #4: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 346.210801][ T30] 2 locks held by syz-executor/8855: [ 346.216594][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 346.235093][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 346.250793][ T30] [ 346.257655][ T30] ============================================= [ 346.257655][ T30] [ 346.270413][ T30] NMI backtrace for cpu 1 [ 346.274791][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 346.285335][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.295424][ T30] Call Trace: [ 346.298737][ T30] [ 346.301696][ T30] dump_stack_lvl+0x241/0x360 [ 346.306416][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.311652][ T30] ? __pfx__printk+0x10/0x10 [ 346.316296][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 346.321276][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 346.326772][ T30] ? _printk+0xd5/0x120 [ 346.330978][ T30] ? __pfx__printk+0x10/0x10 [ 346.335612][ T30] ? __wake_up_klogd+0xcc/0x110 [ 346.340505][ T30] ? __pfx__printk+0x10/0x10 [ 346.345146][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 346.350213][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 346.356237][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 346.362264][ T30] watchdog+0xff4/0x1040 [ 346.366558][ T30] ? watchdog+0x1ea/0x1040 [ 346.371023][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.375747][ T30] kthread+0x2f0/0x390 [ 346.379871][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.384598][ T30] ? __pfx_kthread+0x10/0x10 [ 346.389226][ T30] ret_from_fork+0x4b/0x80 [ 346.393777][ T30] ? __pfx_kthread+0x10/0x10 [ 346.398406][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.403227][ T30] [ 346.407186][ T30] Sending NMI from CPU 1 to CPUs 0: [ 346.412967][ C0] NMI backtrace for cpu 0 [ 346.412983][ C0] CPU: 0 UID: 0 PID: 940 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 346.413004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.413015][ C0] Workqueue: events nsim_dev_trap_report_work [ 346.413040][ C0] RIP: 0010:nsim_dev_trap_report_work+0x578/0xaa0 [ 346.413061][ C0] Code: 05 00 00 00 e8 59 6a d2 fd 89 c3 42 0f b6 44 35 00 84 c0 0f 85 e5 03 00 00 66 41 89 1f 48 8b 84 24 90 00 00 00 42 0f b6 04 30 <84> c0 48 8b 9c 24 98 00 00 00 0f 85 e1 03 00 00 8b 2b 4d 89 f5 48 [ 346.413075][ C0] RSP: 0018:ffffc90003937ae8 EFLAGS: 00000246 [ 346.413089][ C0] RAX: 0000000000000000 RBX: 00000000ffff376a RCX: 000000000000c895 [ 346.413102][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.413112][ C0] RBP: 1ffff1100f963003 R08: ffffffff84f33b05 R09: ffffffff899a9aa3 [ 346.413125][ C0] R10: 0000000000000003 R11: ffff888025ebda00 R12: ffff88803c3073c0 [ 346.413136][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88807cb18018 [ 346.413148][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 346.413162][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.413174][ C0] CR2: 000000000c366112 CR3: 000000000e734000 CR4: 00000000003526f0 [ 346.413191][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.413201][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.413212][ C0] Call Trace: [ 346.413218][ C0] [ 346.413225][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 346.413245][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 346.413269][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 346.413287][ C0] ? nmi_handle+0x2a/0x5a0 [ 346.413311][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 346.413331][ C0] ? nmi_handle+0x14f/0x5a0 [ 346.413347][ C0] ? nmi_handle+0x2a/0x5a0 [ 346.413364][ C0] ? nsim_dev_trap_report_work+0x578/0xaa0 [ 346.413381][ C0] ? default_do_nmi+0x63/0x160 [ 346.413401][ C0] ? exc_nmi+0x123/0x1f0 [ 346.413419][ C0] ? end_repeat_nmi+0xf/0x53 [ 346.413438][ C0] ? in_aton+0x323/0x410 [ 346.413458][ C0] ? ip_fast_csum+0x1e5/0x2b0 [ 346.413477][ C0] ? nsim_dev_trap_report_work+0x578/0xaa0 [ 346.413495][ C0] ? nsim_dev_trap_report_work+0x578/0xaa0 [ 346.413514][ C0] ? nsim_dev_trap_report_work+0x578/0xaa0 [ 346.413532][ C0] [ 346.413537][ C0] [ 346.413550][ C0] ? process_scheduled_works+0x976/0x1850 [ 346.413572][ C0] process_scheduled_works+0xa63/0x1850 [ 346.413612][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.413636][ C0] ? assign_work+0x364/0x3d0 [ 346.413658][ C0] worker_thread+0x870/0xd30 [ 346.413682][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 346.413707][ C0] ? __kthread_parkme+0x169/0x1d0 [ 346.413729][ C0] ? __pfx_worker_thread+0x10/0x10 [ 346.413750][ C0] kthread+0x2f0/0x390 [ 346.413765][ C0] ? __pfx_worker_thread+0x10/0x10 [ 346.413785][ C0] ? __pfx_kthread+0x10/0x10 [ 346.413802][ C0] ret_from_fork+0x4b/0x80 [ 346.413823][ C0] ? __pfx_kthread+0x10/0x10 [ 346.413838][ C0] ret_from_fork_asm+0x1a/0x30 [ 346.413866][ C0] [ 346.767020][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 346.773937][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 346.784476][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 346.794600][ T30] Call Trace: [ 346.797914][ T30] [ 346.800877][ T30] dump_stack_lvl+0x241/0x360 [ 346.805595][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.810842][ T30] ? __pfx__printk+0x10/0x10 [ 346.815472][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 346.821507][ T30] ? vscnprintf+0x5d/0x90 [ 346.825900][ T30] panic+0x349/0x880 [ 346.829870][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.836067][ T30] ? __pfx_panic+0x10/0x10 [ 346.840525][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 346.845936][ T30] ? __irq_work_queue_local+0x137/0x410 [ 346.851525][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 346.856928][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 346.863120][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 346.869311][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 346.875519][ T30] watchdog+0x1033/0x1040 [ 346.879927][ T30] ? watchdog+0x1ea/0x1040 [ 346.884408][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.889141][ T30] kthread+0x2f0/0x390 [ 346.893251][ T30] ? __pfx_watchdog+0x10/0x10 [ 346.897964][ T30] ? __pfx_kthread+0x10/0x10 [ 346.902595][ T30] ret_from_fork+0x4b/0x80 [ 346.907055][ T30] ? __pfx_kthread+0x10/0x10 [ 346.911679][ T30] ret_from_fork_asm+0x1a/0x30 [ 346.916507][ T30] [ 346.919871][ T30] Kernel Offset: disabled [ 346.924195][ T30] Rebooting in 86400 seconds..