last executing test programs: 12.718067567s ago: executing program 1 (id=3061): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000004c0)="be8a3a5fb57f77b004a679ee115e5b18e20138836b8eeeb1080cd36887c9d4999ee6c019bf51b56ae979e496d2a2b420e34623526f75f44e4c9122f74c64a2b79fe83e8c4646a582823ac288d623e772", 0x50, 0x4000044, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0xb, 0x6, @random="83750d2c642e"}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xcf0, 0x2c285829, &(0x7f0000006680)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004340)={0x50, 0x0, r5}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r6}, 0x20) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000002200)) write$FUSE_LK(r3, &(0x7f00000021c0)={0x28, 0x0, r7}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x40047440, 0x20004000) 11.723482387s ago: executing program 1 (id=3067): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f0000000680)=""/29, 0x1d}, {&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000a80)=""/171, 0xab}], 0x5}}], 0x2, 0x10002, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000080)=' ', 0x3fffff}]) r4 = eventfd(0x2) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x84800) r6 = eventfd(0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRES32=r8, @ANYRES16=r7], 0x26}}, 0x0) r10 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r11 = memfd_secret(0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite6\x00') preadv(r12, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0xa3, 0x0) r13 = eventfd(0xfffffffd) io_submit(r3, 0x8, &(0x7f0000001c00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd, 0x0, r1, &(0x7f0000000200)="f55059e43d1d2975c832aa55d147c0025715dc4d1de8882498fd53aa08139bfb109cd7b3494e0af7db8066469c794f6acce568f206a2200c9b60b3313d52a44c18f83c4fed0bc6225f25adee0375f94ce2b6d27973cb3939175524c67d0531a1ae7b93dc329441", 0x67, 0xa1e, 0x0, 0x3, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xffff, r1, &(0x7f0000000480)="ff877f6748a0cdbcd88a7c21e4058f267bf310b9df9d9d62a67380bbd5b8dc01103664c9587a4abb04bd3c3728179dabd3", 0x31, 0xfffffffffffffff8, 0x0, 0x0, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000540)="761507259a9994a157252bc3f400e32762fc08cc43b5ba46be92e46bafa0c4164ad70981d1b777aed8f7f32b131b309975cb9a702a67bf65894c2145ac90c332826f23eec351bce707feb49cb1", 0x4d, 0x4, 0x0, 0x3, r6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8b8da9de16907ee6, 0x65, r9, &(0x7f0000000700)="0530f0bde34bd244f52682119c142d9867130a4b5821c6c4b51cea70098c7f2766abf9c11040a1786b773bb6728c670effe856493271511b8a8db55f5d8fd8ba2b0825619ea08942443a5f5cb7ded1c59ac2a7e87d7c9063939a43b44807cf92805c14e213e4f4e8bd62ddefcf998428dd76974bedf80291a5acc17fef3ed0027ed595e183ec64d73916b25027da5eeb598b014f3019a468049c3179fde90be3a049f50f62389213e9c40f384824f42bc5ba911d4c44428e9f2b98c0a7230e9fe07fb622efe109ba675c0f551cf75d2bb86e77df2c49df126c1f7f5edb0baa84b850af91a8ffd6d3bdc57c2c6075f6b12eb8c641f76799619f", 0xf9, 0xfffffffffffffffd, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x40, r10, &(0x7f0000000840)="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", 0xfb, 0x10}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000980)="9e83f64c3874ad6031d1305eac5464a636141c5431d457d073bb12ceb937281f358d43d1411fefe7d7eaf2cbee5c6a44a8ef1a0c15b4142f575a9d2077db0c50616fcdfd92ce5adf379f17515f1bb200abe73416c8b0054813788c90c1cf809a729dc527dcbac370292574804f05031bc6f080459b17a34d0df9170392ea12a3b0", 0x81, 0x1, 0x0, 0x2, r11}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000b40)="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", 0x1000, 0x6, 0x0, 0x1, r12}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x3, 0xa69, r1, &(0x7f0000001b80)="f853abcc106d363984b44016d93a8b", 0xf, 0x9, 0x0, 0x2, r13}]) 11.591491539s ago: executing program 2 (id=3068): r0 = syz_io_uring_setup(0x5ad, &(0x7f0000000100)={0x0, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000000)) io_setup(0x1, 0x0) io_destroy(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xa810) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) openat$bsg(0xffffffffffffff9c, 0x0, 0x21000, 0x0) connect$inet6(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff], 0x1) 11.47007707s ago: executing program 1 (id=3069): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0xc8000) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r4, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x15) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f00000002c0)=0x10, 0x80000) 11.293925143s ago: executing program 2 (id=3071): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x1698, &(0x7f0000000140)={0x0, 0x3, 0x800, 0xfffffffe, 0x3a4, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r7 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f000007f000/0x3000)=nil, &(0x7f0000994000/0x2000)=nil, 0x0, 0x0, 0x0, 0x5, 0xb}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'team0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000040), 0x0) 10.341151245s ago: executing program 2 (id=3075): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x20040600) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0xffffff39, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x373, 0x0, 0x39}, {0x91e, 0x0, 0x1}]}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xfffffffe}, 0x8) close(0xffffffffffffffff) r8 = timerfd_create(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045540, &(0x7f0000000080)) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000240), 0x4) timerfd_gettime(r8, 0x0) 9.866140135s ago: executing program 0 (id=3078): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x1, 0x1, 0x52, @dev={0xfe, 0x80, '\x00', 0x30}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x10, 0x0, 0x5a}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x982, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0xb0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x40000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.855881942s ago: executing program 4 (id=3079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x3a070a00) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) unshare(0x60400) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ppoll(&(0x7f0000000080)=[{r7, 0xa13b}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0xffffff39, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x373, 0x0, 0x39}, {0x91e, 0x0, 0x1}]}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r10 = timerfd_create(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xb2ad, 0x0) r12 = fsopen(&(0x7f00000007c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000500)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xc0cM\x97\xa9E\x9f^\x1f\x17g]\xd2\x8cX\x1dV\x15\x19!\xa5a\x93\xb7\xb8m\xe0\x87B\xd6\xf1\xd3/G\xbb_\x9b\xaf\xa5Sb\xbf\xf7\xd5\x1b\xf2\xc9\xb2r\xee\xb5G\xa8\x87\x1b\x7f\x13\xb4\xf4v\x16\xdey\x89\x04x\xfcFV}\xeb\xf4\x127\xd6\xe1\xb6\x01\xf8\x0e&NE\x113\x95\xccP\xeb@!\xca\x89\xed/0\x01\xa5\xe0\xa8(\xa0\xcd\xb5-\xd3\x8a\xdd\xee\xa86\x19\x10]\x93\xa3k\t{\x938\xbbV\x87^;\x94\xce\xb2$\x96\xd3\xf1\xef:\xf50H\xbb\xd1<\xd3\xe4W\xeb.\xe4{\xe1\xe2c\a\xbf\xc4G\xbe\xfe\x9c\x97\xe0\xc3\x18\xf3\xd6\xdbA6\xf0|\xd8\xef\xd0%\x9a\xd0\xc7\xcf<\x05^\x82\xa7_u\x97\xe4(\x9dz', &(0x7f0000000280)='so\x02kfs\x00H~\xef\x92\x83tc\x84\xfa11\x1a\x11\xb2\xcd\xb7\b\x89g\xf2#K\x95\xa6\xaew\xd2\x82\xfa\x83\xd1\xbd\xfd($\x9b5\x92\x12\vDP\xb8\xda\xff\xc8e.\xe3\xc3\x91\x96\x7f\xbfI`\xd8{\x0f\xc8P{\x92\xe8f\x8c]\f+', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000000080)) timerfd_gettime(r10, 0x0) 9.141552761s ago: executing program 2 (id=3080): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0xc8000) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r4, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x15) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f00000002c0)=0x10, 0x80000) 7.082263872s ago: executing program 4 (id=3081): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x4, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x300, 0x300}, 0x38) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x14) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x130, 0x26010000, 0x288, 0x130, 0x3a0, 0x220, 0x220, 0x3a0, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x288, 0x0, {0x0, 0x25e}, [@common=@unspec=@connlabel={{0x28}, {0x7f00}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @private}, @mcast1, [], [], [], 0x4000}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:fsadm_log_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000004c0)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x52) getdents(r6, 0x0, 0x18) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r7, 0x40046104, &(0x7f0000000080)) 6.762067932s ago: executing program 4 (id=3083): r0 = socket(0x40000000015, 0x5, 0x0) r1 = creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x43) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, &(0x7f0000000000)) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xfef, 0x0, 0x0, &(0x7f0000000180)) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x400448c9, &(0x7f0000002e80)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$cgroup_devices(r1, &(0x7f0000000080)={'c', ' *:* ', 'w\x00'}, 0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c) 6.714769954s ago: executing program 0 (id=3084): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000000), 0x4) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r2, &(0x7f0000000040), 0x0, 0x1b) r3 = syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x50182, 0x90, 0x3c}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r8, 0x0) 6.172333064s ago: executing program 2 (id=3085): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='\r', 0x1}], 0x1}}], 0x1, 0x400c878) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002200010600000000000000000500000000060000"], 0x1c}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r7, 0x2287, &(0x7f0000000000)) r8 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000380)=[{r5, 0xc0}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r1, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) 5.975476034s ago: executing program 0 (id=3086): ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400410000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0xcc, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0xb0, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x5a, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc0"}, {0xdd, 0x26, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737"}]}}]}, 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000180), 0xd103, 0x32d2c2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r4, @ANYRES64]) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r8, 0x4, 0xb, 0x0, 0x9, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x7500, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061103c000000000062000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r10, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x33c9bfd944701c4c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.906127855s ago: executing program 4 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x9) r5 = eventfd(0x0) request_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)='/\x00', 0xfffffffffffffffe) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe) r6 = eventfd(0x1) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r6, 0x0, 0x2, r5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r6, 0x0, 0x2, r4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r8, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff}) fcntl$lock(r6, 0x24, &(0x7f00000002c0)={0x0, 0x1, 0xff34, 0x200005}) fcntl$lock(r8, 0x6, &(0x7f0000000180)={0x2, 0x0, 0x20000000101, 0x7ffffffd}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$swradio(0x0, 0x0, 0x2) r11 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000340)) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f041}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r13, 0x1) io_uring_setup(0x2c1f, &(0x7f0000000200)={0x0, 0x23fd, 0x200, 0x1, 0x249}) read$midi(r8, &(0x7f00000003c0)=""/130, 0x82) poll(&(0x7f0000000200), 0x0, 0x4) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 4.282029986s ago: executing program 4 (id=3088): r0 = memfd_create(&(0x7f0000000b40)='\x00\x00\x00\x00\x00\x1ez\x9b\xb6\xe8V%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\xdf\xff\xf2\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90CTe\xe1#\xc2\a\xcaFe\x0e\xa8\xb6\xe5\x82\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xdc\x87g\xb6\xabW\xac\rT\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO\x0f\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfdW\xab\xa0\xd6\xc1\xf9\v%\x81&\x82\x9d\xc4\x98\xe7Xrj\xb1j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)\x83\xb7\xd3\xad/*\xeb\xdfZ\xde\x948\x93\xa7\xbc\xf0\xf4\xd5R\xff\x02\x7f\xda]1\x8ez\xe6\xee\r\xd3n\x17\xfd\xe93\x94q\xea\xf5\xf8h\xed\x9e\xda\x9f\xf6\xa7=\xae\xbeq\x95H\x98VO\xf3\x05\xf9@\rC\xc8\x10;G\xfa\xf5\f\xb3+d\x9f\x19C\xc8\xcb\xf4\xe8OI\xe7r.\xa0\xf0\xc1w\x0eGY\xd3{\xbb\xf6\xac\xa0\x00\x98`.\x03\xe1m{\v\xb6u\x01 \xee3\xfa\x8f\xe4\baB\xed7\xda\xed\xa4\xd2\xf6\xa7\xfb\xbc\x8d\xe0Xz\t\x90K<*m\x1e\xaf\xae,\xf6\x17\x9f\xf9\x14\xfd\xda\x81\r\x92\xb9!O)\xc9=\x84}z\x1d\xb1\xe4\x16\"\xdc\x92\xa6\xf2\xf2\xdfy\xbe\x94Iz%\x12\xa5p\t\xcf\x1e\xd6VX\x1d\xc5\x86C\xa9\xcb\xc3\x0e\xb7\x1c\xcb\xa6\xe4\xd2\a\x0e\x1f\xfb\ve\xe9M^F9\xe8\x02\'-\x93\xd1\xc4\x88\r>{!uWl\xb1\x01\xe1\xdf\r\xb4V\x82Y\xe3\x8d\x00\xb8\xff\xcfW\xdb\x93\xd3=\xcf\xf5\xdb\xa1yx1o\'3\xe2V\x04\xf7\xc38CL\x8d\x13\xca\xf14\x000t,\xd0I#\x17\xdf\x95\x9a\xaaR\x06\xa5 \x8c\xd2\xd6\xc7\xcf\xe5\xa5F%mT\x8a\xc6\xfb\x19\x05YW\f\x98 \xd96\x1f3X\x17\xd4u\x82I\x7f\xe3\x9c\v\xdd6\xba\x86y\x88\x94\xce\xcf\x18r\xc7\xba^\xad\x913\x10*\xd8\xe8\n`\x13\xf8\x81\xe6%\xf1\xd0|\xba\xd3\xf1\xa1=+D\xe9\x17\x85\xa4\xd3|<\x14\x8c\xf2\xae\xa5\xc7\x15:\x16\xe0\xfcs\v\xd3\x91\x01\xfd', 0x5) r1 = memfd_create(0x0, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fd\x00') munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000004000a000200aaaaaaaaaaaa0000080009"], 0x30}}, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r4 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='veno\x00', 0x5) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7}}, 0x30) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r6 = dup3(r2, r4, 0x0) fchdir(r6) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x4000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10812, r1, 0x0) write$binfmt_elf64(r0, 0x0, 0xfebe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.745553s ago: executing program 2 (id=3089): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.6847174s ago: executing program 3 (id=3090): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2000}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x4, 0x42) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000007f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@iv={0x100, 0x117, 0x2, 0xe6, "7bb4e3e3898755312b2ffb75ad0280657094e54ca36946556b81c8eea527f3e0b7cbbd060d3ea0aadd70f276c9cef68679a8f6915b12c11e4f7e310e800323db3db1143e2e3564646ca52a67c2f27d93ff08e61cd0e476935991d1037242641df2057e2d76c0d13ef2d5a96359c09dcf7d0c2bfbb64f5a3908691233d45a35abf1c044712fcd77d828211ee2001849468233c1f49084bcb8e7b6a2bf753eca1285dea4655fcd2c17f7f8f6a72ddd0e60990eb6a0931511b13287976e5d7b71de09b5b9521720d8cd2936525c4b5b97e05c571c702fa0b315644be55fd3eed1a630b3b8619327"}, @assoc={0x18, 0x117, 0x4, 0x55e}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @iv={0xa0, 0x117, 0x2, 0x87, "da06ca822c5a91e0055bc44756ab5894b89d2d3b4eb9a4dcf53da46b0fe4dce8e47df3a1020d8399cdf40a1eda7f4c748e210748514cb5f86c370237dbfeae4fca4a266653072367cf929163d4598f9696ba1bf4427617eb4d01e4007fa652115a74166de9831a28323a7bfceeef18b0af60917c685e32677d9a1c181087b9bcb18406178ad305"}], 0x2c8, 0x4040045}], 0x1, 0x20000081) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r4, @ANYBLOB="0009000500003d3f12c7cc7aad93c0118e78698ea44572db12f73b38ed67bbec59038862afe038f81a805a68d8baee8e6c2329dee74df8c349f333051c2cb925cdfaf51241900fca0fbb67c9946059022f383307e4d8e3c56848809871d5f98832f00316199f1a586e5d2f0c5d7c39391a2f442fd88a825e649f0afd94bd343ecb32d4620fd8ee82006e5aff5fcf743e44b59ef008747339e4a81fcb808e11925aa828050ca37f4a4061e9c2952ad774fe80eb153d687da2ec648de4c66e84cf0099231c481bf9c69651868e634ecd8f2fc2d29a624bbecb76a41b5ef289ec2652f51e32901b6035"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x3825, &(0x7f0000000300)={0x0, 0x10003d49, 0x2000, 0x0, 0xffffffff, 0x0, r1}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x88) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000200)={0x6, 0x7f, {0xffffffffffffffff}, {0xee00}, 0x7, 0x7}) capset(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1008001, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x84) socket(0x40000000015, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r9, 0x540a, 0x2) 3.586621924s ago: executing program 1 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') readv(r3, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) removexattr(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="89878347638e"]) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) unshare(0x2c020400) socket(0x2, 0x2, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 3.29449626s ago: executing program 4 (id=3091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0xf, 0x1, 0x80000000) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) close(r2) syz_emit_ethernet(0x4e, &(0x7f0000000f80)=ANY=[], 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', 0x0}) 2.789498664s ago: executing program 0 (id=3092): syz_clone3(&(0x7f00000002c0)={0x8500, 0x0, 0x0, 0x0, {}, 0x0, 0x11, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) 2.735224301s ago: executing program 3 (id=3093): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c00)={@ifindex, 0xffffffffffffffff, 0x32, 0x2008, 0xffffffffffffffff, @value}, 0x20) 2.625167045s ago: executing program 3 (id=3094): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015050a005300000800ff"], 0x17) 2.577263123s ago: executing program 0 (id=3095): openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000000), 0x4) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r2, &(0x7f0000000040), 0x0, 0x1b) r3 = syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4c, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x50182, 0x90, 0x3c}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r8, 0x0) 2.014267611s ago: executing program 3 (id=3096): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.811912265s ago: executing program 3 (id=3097): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x300, 0x0, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 1.528168062s ago: executing program 0 (id=3098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x4b40, 0xfffffffffffffffc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000000)=""/72) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0}) 690.29619ms ago: executing program 1 (id=3099): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r0, 0x9) 455.621052ms ago: executing program 1 (id=3100): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) r3 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x5, 0x100) ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f00000003c0)={0x59a, "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"}) write$hidraw(0xffffffffffffffff, &(0x7f0000000c00)="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", 0x1000) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000001c00)="4a1e4c0c4f4638a86f10da42bfab0acb75a19da59d7190532870570f66b0913c4f6de19dcdf3d593b5ef25bfc5118bc610cc5e2cbb1d525e9c8f17b8029673fdae3b30493d86a0c8d6f2a11a0e0e48ebc61f3a8b3fc8a17d305c732e078aa4e2c2a8cf0233bb204e21edda3bbea5002d12bcff644b10c6eaf3542c1729703ac768b0449f443178516a17c272489c5ccc406fdc71b4c36e538b90edaabfcde4abca644d2ab249ce50035159", 0xab) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x0, 0x2, "12d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000d80)={0x0, 0x0, 0xf, "13c823cb9122298f0f4da33858a1d0"}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x4f3a, 0x4) connect$inet(r5, &(0x7f0000002d80)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffc}}) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000b100007006000000002000020d3"]) 0s ago: executing program 3 (id=3101): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffb6) symlinkat(0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xffffffff, 0x32315659, 0x780, 0x438}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1a0682) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client0\x00', 0x4, "da92a01666c16f98", "2000ef2eb76cb641d16000", 0x3}) write$sndseq(r2, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x80, 0xff}, @raw8={"a357b6b140cbb6215dd33459"}}, {0x5, 0x5, 0x6, 0x3, @time={0x9, 0x1}, {0x7, 0x3}, {0xc, 0xfa}, @quote={{0xfa, 0x4}, 0xff11, &(0x7f0000000300)={0x4, 0x38, 0xc, 0x0, @tick=0x8, {0x82, 0x3}, {0x6, 0x9}, @raw8={"4fd3874bab9aae4f90659df3"}}}}], 0x54) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000092}, 0x4000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x0, &(0x7f0000000440)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[], 0xb0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x84, 0x81, 0x80000001}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a000100000000000000200002"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x8845) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000180)=0x272) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000140)={0x7}) kernel console output (not intermixed with test programs): [ T51] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 772.296643][ T51] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 772.303111][ T938] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 772.394395][ T51] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 772.433288][ T51] usb 5-1: USB disconnect, device number 86 [ 772.481912][ T51] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 772.525942][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 772.534609][ T51] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 772.562135][ T51] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 772.576191][ T938] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 772.607385][ T938] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 772.615190][ T51] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 772.636475][T17579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.639278][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 772.674331][ T51] keyspan 5-1:0.0: device disconnected [ 772.682971][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 772.769822][ T938] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 772.794222][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.803112][ T938] usb 4-1: Product: syz [ 772.810485][ T938] usb 4-1: Manufacturer: syz [ 772.818249][ T938] usb 4-1: SerialNumber: syz [ 772.831678][ T35] hsr_slave_0: left promiscuous mode [ 772.834745][ T938] usb 4-1: config 0 descriptor?? [ 772.887201][ T35] hsr_slave_1: left promiscuous mode [ 772.897515][ T938] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 772.923853][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.946985][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.989630][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.004450][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.169330][ T35] veth1_macvtap: left promiscuous mode [ 773.194184][ T35] veth0_macvtap: left promiscuous mode [ 773.199837][ T35] veth1_vlan: left promiscuous mode [ 773.221591][ T35] veth0_vlan: left promiscuous mode [ 773.477581][ T5229] Bluetooth: hci2: command tx timeout [ 773.508994][ T938] imon:send_packet: packet tx failed (-71) [ 773.534300][ T938] imon 4-1:0.0: panel buttons/knobs setup failed [ 773.754355][ T938] rc_core: IR keymap rc-imon-pad not found [ 773.760603][ T938] Registered IR keymap rc-empty [ 773.774298][ T938] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 773.804762][ T938] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 773.805353][T12775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.821222][ T938] imon:send_packet: packet tx failed (-71) [ 773.830768][T12775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.851812][ T938] imon 4-1:0.0: remote input dev register failed [ 773.859480][T12775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.881231][T12775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.888937][ T938] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 773.907851][T12775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 773.915877][T12775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.952519][ T938] imon 4-1:0.0: unable to initialize intf0, err 0 [ 773.959140][ T938] imon:imon_probe: failed to initialize context! [ 773.972825][ T938] imon 4-1:0.0: unable to register, err -19 [ 773.995127][ T938] usb 4-1: USB disconnect, device number 69 [ 774.603297][ T35] team0 (unregistering): Port device team_slave_1 removed [ 774.797722][ T35] team0 (unregistering): Port device team_slave_0 removed [ 774.877069][T17722] ALSA: mixer_oss: invalid OSS volume '' [ 775.554168][T12775] Bluetooth: hci2: command tx timeout [ 775.829183][T17579] team0: Port device team_slave_0 added [ 775.863177][T17579] team0: Port device team_slave_1 added [ 775.876535][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 775.876551][ T29] audit: type=1326 audit(1728564321.434:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 775.912072][ T29] audit: type=1326 audit(1728564321.464:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 775.936977][ T29] audit: type=1326 audit(1728564321.464:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 775.960552][ T29] audit: type=1326 audit(1728564321.464:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 775.983622][ T29] audit: type=1326 audit(1728564321.464:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.006632][ T29] audit: type=1326 audit(1728564321.464:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.047596][T12775] Bluetooth: hci0: command tx timeout [ 776.055516][ T29] audit: type=1326 audit(1728564321.464:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.078857][ T29] audit: type=1326 audit(1728564321.464:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.102142][ T29] audit: type=1326 audit(1728564321.464:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.141882][ T29] audit: type=1326 audit(1728564321.464:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17727 comm="syz.4.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a8e57dff9 code=0x7ffc0000 [ 776.144776][T17579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.171371][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.200242][T17579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.214374][T17579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.221547][T17579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.249312][T17579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.372374][T17579] hsr_slave_0: entered promiscuous mode [ 776.385045][T17579] hsr_slave_1: entered promiscuous mode [ 776.485848][T17711] chnl_net:caif_netlink_parms(): no params data found [ 776.608709][ T35] IPVS: stop unused estimator thread 0... [ 776.651468][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 776.897011][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.919624][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.944869][T17711] bridge_slave_0: entered allmulticast mode [ 776.976680][T17711] bridge_slave_0: entered promiscuous mode [ 777.013628][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.037711][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.053681][T17711] bridge_slave_1: entered allmulticast mode [ 777.073679][T17711] bridge_slave_1: entered promiscuous mode [ 777.200586][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.235491][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.488304][T17711] team0: Port device team_slave_0 added [ 777.514405][T17711] team0: Port device team_slave_1 added [ 777.636118][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 777.648422][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 777.657113][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 777.667932][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 777.675674][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 777.684572][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.693618][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.737741][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.784341][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.808345][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.818050][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.844492][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.944097][ T938] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 778.048722][T17711] hsr_slave_0: entered promiscuous mode [ 778.067792][T17711] hsr_slave_1: entered promiscuous mode [ 778.081140][T17711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.091292][T17711] Cannot create hsr debugfs directory [ 778.114532][T12775] Bluetooth: hci0: command tx timeout [ 778.127411][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 778.156668][ T938] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 778.172784][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.220783][ T938] usb 5-1: config 0 descriptor?? [ 778.386870][T17763] chnl_net:caif_netlink_parms(): no params data found [ 778.458781][ T938] usb 5-1: USB disconnect, device number 87 [ 778.503389][T17579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 778.522818][T17579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 778.588715][T17579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.618550][T17579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.779643][T17711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.862511][T17763] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.874130][T17763] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.905020][T17763] bridge_slave_0: entered allmulticast mode [ 778.924787][T17763] bridge_slave_0: entered promiscuous mode [ 778.987033][T17711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.017578][T17763] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.034254][T17763] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.042635][T17763] bridge_slave_1: entered allmulticast mode [ 779.056399][T17763] bridge_slave_1: entered promiscuous mode [ 779.073593][T17784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.148020][T17784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.241587][T17711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.292008][T17763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.323349][T17763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.387663][T17711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.463088][T17763] team0: Port device team_slave_0 added [ 779.481635][T17763] team0: Port device team_slave_1 added [ 779.569324][T17763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.584158][T17763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.626148][T17763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.640195][T17763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.650029][T17763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.694076][T17763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.795595][T12775] Bluetooth: hci1: command tx timeout [ 779.882946][T17579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.895081][T17763] hsr_slave_0: entered promiscuous mode [ 779.902248][T17763] hsr_slave_1: entered promiscuous mode [ 779.909775][T17763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.942801][T17763] Cannot create hsr debugfs directory [ 779.990709][T17711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 780.147526][T17711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.177294][T17711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.195424][T12775] Bluetooth: hci0: command tx timeout [ 780.242209][T17579] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.280491][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 780.325582][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 780.338474][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 780.350452][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.357629][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.367079][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.374328][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.382484][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 780.391847][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 780.396321][T17711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 780.406658][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 780.708840][T17763] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.802407][T17820] syzkaller0: entered promiscuous mode [ 780.814151][T17820] syzkaller0: entered allmulticast mode [ 780.904740][T17763] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.884287][T12775] Bluetooth: hci1: command tx timeout [ 782.285876][T12775] Bluetooth: hci0: command tx timeout [ 782.525606][T12775] Bluetooth: hci4: command tx timeout [ 783.964293][T12775] Bluetooth: hci1: command tx timeout [ 784.037372][T17579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 784.076629][T17763] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.225490][T17763] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.249504][T17579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.361201][T17711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.381245][T17811] chnl_net:caif_netlink_parms(): no params data found [ 784.541535][T17579] veth0_vlan: entered promiscuous mode [ 784.595372][T12775] Bluetooth: hci4: command tx timeout [ 784.642062][T17763] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.659712][T17711] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.688100][T17763] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.701925][T17763] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.732992][T17579] veth1_vlan: entered promiscuous mode [ 784.745750][T17763] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 784.778721][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.785875][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.816597][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.823731][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.832128][T17811] bridge_slave_0: entered allmulticast mode [ 784.839869][T17811] bridge_slave_0: entered promiscuous mode [ 784.848073][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.855259][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.862680][T17811] bridge_slave_1: entered allmulticast mode [ 784.869877][T17811] bridge_slave_1: entered promiscuous mode [ 784.904766][T17579] veth0_macvtap: entered promiscuous mode [ 784.913948][T17579] veth1_macvtap: entered promiscuous mode [ 784.930726][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.941517][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.951664][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.962327][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.972457][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 784.983243][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.993326][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.004187][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.014586][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.025365][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.035404][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.046597][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.056851][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.067361][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.077352][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.087970][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.097849][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.108346][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.119815][T17579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.130964][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.142064][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.152401][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.163209][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.173202][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.183720][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.193617][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.204095][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.213923][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.224453][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.234521][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.245652][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.255911][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.266457][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.276338][T17579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.286855][T17579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.298175][T17579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.356579][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.383072][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.390196][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.405545][T17579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.424247][T17579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.433035][T17579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.443482][T17579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.465534][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.556913][T17811] team0: Port device team_slave_0 added [ 785.644490][T17811] team0: Port device team_slave_1 added [ 785.704528][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.711500][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.750506][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.782150][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.799795][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.811170][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.825580][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.852748][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.919833][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.930289][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.973444][T17811] hsr_slave_0: entered promiscuous mode [ 785.982274][T17811] hsr_slave_1: entered promiscuous mode [ 785.989028][T17811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.996958][T17811] Cannot create hsr debugfs directory [ 786.008531][T17711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.044718][T17711] veth0_vlan: entered promiscuous mode [ 786.061400][T12775] Bluetooth: hci1: command tx timeout [ 786.119576][T17711] veth1_vlan: entered promiscuous mode [ 786.227294][T17763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.244476][T17763] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.290549][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.297759][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.319842][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.327015][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.353573][T17711] veth0_macvtap: entered promiscuous mode [ 786.395739][T17711] veth1_macvtap: entered promiscuous mode [ 786.484436][ T5282] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 786.499411][T17811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.562715][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.575586][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.586370][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.597340][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.607605][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.618397][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.628721][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.639576][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.647519][ T5282] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 786.659243][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.666514][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.673203][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.688014][T12775] Bluetooth: hci4: command tx timeout [ 786.688524][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.703950][ T5282] usb 4-1: Product: syz [ 786.703973][ T5282] usb 4-1: Manufacturer: syz [ 786.708754][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.713034][ T5282] usb 4-1: SerialNumber: syz [ 786.723476][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.748737][ T5282] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 786.754424][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.791446][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.809427][ T5238] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 786.822454][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.846580][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.870228][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.898854][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.910680][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.923910][T17711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.974146][T17811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.041700][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.052504][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.064939][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.076227][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.088206][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.099030][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.110450][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.132504][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.142717][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.153613][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.163969][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.174710][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.186321][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.196921][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.207053][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.219292][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.229349][T17711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.242051][T17711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.254339][T17711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.322700][T17811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.381743][T17711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.404291][T17711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.413096][T17711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.422318][T17711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.471878][ T51] usb 4-1: USB disconnect, device number 70 [ 787.513750][T17811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.620377][ T9676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.732923][ T9676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.861047][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.867650][ T9676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.881149][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.889839][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.901712][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.909980][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 787.919185][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 788.048095][ T9676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.113684][T17811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 788.122491][ T5238] usb 4-1: Service connection timeout for: 256 [ 788.131522][ T5238] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 788.143467][ T5238] ath9k_htc: Failed to initialize the device [ 788.152192][T17811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 788.175176][ T51] usb 4-1: ath9k_htc: USB layer deinitialized [ 788.186528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.205793][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.250323][T17811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 788.275130][T17811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 788.288220][T17763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.373397][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.397451][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.612320][T17763] veth0_vlan: entered promiscuous mode [ 788.620566][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 788.620584][ T29] audit: type=1326 audit(1728564334.174:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17908 comm="syz.3.2948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0813d7dff9 code=0x0 [ 788.660088][ T9676] bridge_slave_1: left allmulticast mode [ 788.666930][ T9676] bridge_slave_1: left promiscuous mode [ 788.675835][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.719594][ T9676] bridge_slave_0: left allmulticast mode [ 788.752061][ T9676] bridge_slave_0: left promiscuous mode [ 788.758571][T12775] Bluetooth: hci4: command tx timeout [ 788.774291][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.568080][ T9676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.593456][ T9676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.607102][ T9676] bond0 (unregistering): Released all slaves [ 789.685165][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 789.694631][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 789.735966][T17763] veth1_vlan: entered promiscuous mode [ 789.751307][T17811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.984410][T12775] Bluetooth: hci2: command tx timeout [ 790.015050][T17893] chnl_net:caif_netlink_parms(): no params data found [ 790.103388][T17811] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.118213][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 790.519135][T17763] veth0_macvtap: entered promiscuous mode [ 790.543009][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.550217][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.596306][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.603450][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.699437][ T9676] hsr_slave_0: left promiscuous mode [ 790.705967][ T9676] hsr_slave_1: left promiscuous mode [ 790.724849][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.753573][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.762514][ T9676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.784528][ T9676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.854153][ T9676] veth1_macvtap: left promiscuous mode [ 790.859734][ T9676] veth0_macvtap: left promiscuous mode [ 790.883610][ T9676] veth1_vlan: left promiscuous mode [ 790.889733][ T9676] veth0_vlan: left promiscuous mode [ 791.580283][ T9676] team0 (unregistering): Port device team_slave_1 removed [ 791.658519][ T9676] team0 (unregistering): Port device team_slave_0 removed [ 792.035399][T12775] Bluetooth: hci2: command tx timeout [ 792.584518][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 792.593496][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 792.727438][T17893] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.736316][T17893] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.756200][T17893] bridge_slave_0: entered allmulticast mode [ 792.763773][T17893] bridge_slave_0: entered promiscuous mode [ 792.786249][T17763] veth1_macvtap: entered promiscuous mode [ 792.840029][T17893] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.846988][T17983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2962'. [ 792.854274][T17893] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.895753][T17893] bridge_slave_1: entered allmulticast mode [ 792.903750][T17893] bridge_slave_1: entered promiscuous mode [ 793.066065][T17893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.135569][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.174640][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.205390][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.221680][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.250735][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.273089][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.296269][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.325372][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.336006][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.347245][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.357156][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.367757][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.377681][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.388226][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.398251][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.408817][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.418759][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.429921][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.440618][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.451167][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.462659][T17763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.481778][T17893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.557652][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.577179][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.589351][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.600442][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.610737][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.621563][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.631661][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.644869][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.655086][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.665648][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.684345][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.704101][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.713953][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.744157][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.762263][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.780987][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.805367][T17763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.824119][T17763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.855705][T17763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.003396][T17893] team0: Port device team_slave_0 added [ 794.073283][T17893] team0: Port device team_slave_1 added [ 794.106300][T17763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.115623][T12775] Bluetooth: hci2: command tx timeout [ 794.147748][T17763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.169072][T17763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.208601][T17763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.317132][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 794.352435][T18014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 794.395201][T17893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.402173][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.465487][T17893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.508264][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.524759][T17893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.533021][T17893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.579836][T18024] ALSA: seq fatal error: cannot create timer (-22) [ 794.613967][T17893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.926697][T17893] hsr_slave_0: entered promiscuous mode [ 794.963321][T17893] hsr_slave_1: entered promiscuous mode [ 795.083095][T18029] ALSA: mixer_oss: invalid OSS volume '' [ 795.129795][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.200655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.268618][T17811] veth0_vlan: entered promiscuous mode [ 795.435149][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.436100][T17811] veth1_vlan: entered promiscuous mode [ 795.449017][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.543433][T17811] veth0_macvtap: entered promiscuous mode [ 795.634813][ T5238] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 795.663408][T17811] veth1_macvtap: entered promiscuous mode [ 795.741901][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.766267][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.789900][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.813950][ T5238] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 795.825502][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.844265][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.854740][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.872814][ T5238] usb 4-1: config 0 descriptor?? [ 795.892085][ T5238] cp210x 4-1:0.0: cp210x converter detected [ 795.892703][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.928498][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.950498][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.974156][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.995008][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.006031][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.018116][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.028978][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.052910][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.094729][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.103899][T18036] ptrace attach of "./syz-executor exec"[15892] was attempted by "./syz-executor exec"[18036] [ 796.125966][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.157129][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.190100][ T5238] usb 4-1: cp210x converter now attached to ttyUSB0 [ 796.191025][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.204368][T12775] Bluetooth: hci2: command tx timeout [ 796.225541][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.252495][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.286011][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.314101][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.327477][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.393575][ T25] usb 4-1: USB disconnect, device number 71 [ 796.428047][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 796.458862][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.471904][ T25] cp210x 4-1:0.0: device disconnected [ 796.481729][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.494667][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.506145][ T5238] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 796.516354][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.526579][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.537773][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.548195][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.559181][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.569472][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.580546][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.591364][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.609963][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.620328][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.631312][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.641542][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.652768][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.663726][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.675080][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 796.681488][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.692115][ T5238] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 796.704467][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.719160][ T5238] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.730510][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.743235][ T5238] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.752785][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.763369][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.771529][ T5238] usb 3-1: Product: syz [ 796.776228][ T5238] usb 3-1: Manufacturer: syz [ 796.787651][ T5238] usb 3-1: SerialNumber: syz [ 796.794501][ T5238] usb 3-1: config 0 descriptor?? [ 796.802686][ T5238] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 796.814876][ T5238] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 796.883417][T17811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.895681][T17811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.905003][T17811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.917195][T17811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.079888][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.101485][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.216373][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.219995][T17893] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.231263][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.253368][T17893] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.273676][T17893] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.284757][T17893] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 797.420102][ T5238] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 797.438952][ T5238] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 797.519122][T17893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.590315][T17893] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.625240][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.632415][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.699901][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.707385][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.960454][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 797.969925][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2978'. [ 798.133266][ T5238] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 798.182478][T17893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.226001][T17893] veth0_vlan: entered promiscuous mode [ 798.237805][T17893] veth1_vlan: entered promiscuous mode [ 798.264786][T17893] veth0_macvtap: entered promiscuous mode [ 798.286849][T17893] veth1_macvtap: entered promiscuous mode [ 798.378736][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.391188][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.402472][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.413661][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.423876][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.449443][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.461257][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.472208][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.482468][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.510191][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.525125][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.536245][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.547368][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.563338][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.573803][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.586704][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.589847][T10406] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 798.597240][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.597264][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.597282][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.597297][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.597313][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.597327][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.597343][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.597384][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.599380][T17893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.852988][T10406] usb 2-1: config 0 has no interfaces? [ 798.860123][T10406] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 798.874181][T10406] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.889047][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.892736][T10406] usb 2-1: config 0 descriptor?? [ 798.965039][ T5238] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 798.974854][ T5238] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 798.996852][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.008440][ T5238] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 799.015906][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.032662][ T5238] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 799.051573][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.066906][ T5238] usb 3-1: USB disconnect, device number 72 [ 799.103216][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.156822][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.194245][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.213530][ T1177] usb 2-1: USB disconnect, device number 70 [ 799.220814][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.244112][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.261466][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.306118][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.332938][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.361477][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.383631][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.394495][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.404519][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.415339][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.432518][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.444197][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.455041][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.465858][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.477936][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.493916][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.525069][T17893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.569891][T17893] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.596107][T17893] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.636674][T17893] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.674168][T17893] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.825245][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.894242][ T1177] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 800.006162][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.058705][ T1177] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 800.080154][ T1177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 800.110493][ T1177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 800.141362][ T1177] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 800.163223][ T1177] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 800.179633][ T1177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.180118][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 800.207496][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 800.208221][ T1177] usb 3-1: config 0 descriptor?? [ 800.225849][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 800.247791][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 800.257588][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 800.269188][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 800.363056][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.427664][T18147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.460438][T18147] batadv_slave_0: entered promiscuous mode [ 800.600102][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.614139][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.640950][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 800.658929][ T1177] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max [ 800.672529][T18151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 800.680698][ T1177] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving [ 800.740669][ T1177] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 800.860543][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.870860][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.175150][ T35] bridge_slave_1: left allmulticast mode [ 801.180841][ T35] bridge_slave_1: left promiscuous mode [ 801.221376][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.237089][ T35] bridge_slave_0: left allmulticast mode [ 801.244242][ T35] bridge_slave_0: left promiscuous mode [ 801.250032][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.498921][T10406] usb 3-1: USB disconnect, device number 73 [ 802.362150][ T5229] Bluetooth: hci4: command tx timeout [ 802.987059][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.034660][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.051572][ T35] bond0 (unregistering): Released all slaves [ 803.136304][T18146] chnl_net:caif_netlink_parms(): no params data found [ 803.657822][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 803.667331][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'. [ 804.185770][ T29] audit: type=1326 audit(1728564349.744:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18229 comm="syz.3.3005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0813d7dff9 code=0x0 [ 804.236818][T18146] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.246388][T18146] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.253580][T18146] bridge_slave_0: entered allmulticast mode [ 804.292230][T18146] bridge_slave_0: entered promiscuous mode [ 804.339593][ T35] hsr_slave_0: left promiscuous mode [ 804.347751][ T35] hsr_slave_1: left promiscuous mode [ 804.373432][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.390268][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.434404][ T5229] Bluetooth: hci4: command tx timeout [ 804.460707][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.469390][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.530155][ T35] veth1_macvtap: left promiscuous mode [ 804.556918][ T35] veth0_macvtap: left promiscuous mode [ 804.572420][ T35] veth1_vlan: left promiscuous mode [ 804.585342][ T35] veth0_vlan: left promiscuous mode [ 804.694261][ T5281] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 804.871441][ T5281] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 804.893622][ T5281] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 804.930659][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.956150][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.965651][ T5281] usb 3-1: Product: syz [ 804.969951][ T5281] usb 3-1: Manufacturer: syz [ 804.975076][ T5281] usb 3-1: SerialNumber: syz [ 805.010730][ T5281] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 805.765340][ T35] team0 (unregistering): Port device team_slave_1 removed [ 806.060290][ T35] team0 (unregistering): Port device team_slave_0 removed [ 806.515045][ T5229] Bluetooth: hci4: command tx timeout [ 807.526134][T18146] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.533731][T18146] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.541646][T18146] bridge_slave_1: entered allmulticast mode [ 807.549070][T18146] bridge_slave_1: entered promiscuous mode [ 807.556429][T18234] netlink: 'syz.2.3006': attribute type 27 has an invalid length. [ 807.621678][T18234] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.629050][T18234] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.756428][T18234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.777550][T18234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.851491][T18234] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.862301][T18234] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.876120][T18234] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.885472][T18234] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.960660][T18235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.969411][T18235] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.982369][T18235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.019985][T10406] usb 3-1: USB disconnect, device number 74 [ 808.077993][T18146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.137065][T18146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.260799][T18146] team0: Port device team_slave_0 added [ 808.269407][T18146] team0: Port device team_slave_1 added [ 808.324777][T18146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.331765][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.360172][T18146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.372902][T18146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.381183][T18146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.407915][T18146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.567667][T18146] hsr_slave_0: entered promiscuous mode [ 808.594283][ T5229] Bluetooth: hci4: command tx timeout [ 808.604149][T10406] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 808.617511][T18146] hsr_slave_1: entered promiscuous mode [ 808.677868][T18146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.694431][T18146] Cannot create hsr debugfs directory [ 808.764986][T10406] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 808.798571][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 808.838181][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 808.881839][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 808.913328][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 808.930855][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.939486][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.967574][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.014530][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.037665][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.062934][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.104425][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.122770][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.142345][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.175855][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.188171][ T5280] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 809.205149][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.222489][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.254327][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.272025][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.314270][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.354205][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.365487][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.375143][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 809.391138][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.405650][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.424810][ T5280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 809.443880][ T5280] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 809.453687][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.474280][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.483816][T10406] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 809.498905][ T5280] usb 2-1: config 0 descriptor?? [ 809.514152][T10406] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 809.535594][T10406] usb 3-1: config 0 interface 0 has no altsetting 0 [ 809.565859][T10406] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 809.579797][T10406] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 809.621632][T10406] usb 3-1: Product: syz [ 809.634412][T10406] usb 3-1: Manufacturer: syz [ 809.665061][T10406] usb 3-1: SerialNumber: syz [ 809.671666][T10406] usb 3-1: config 0 descriptor?? [ 809.691869][T10406] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 809.712344][T18275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3016'. [ 809.922127][T18293] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 810.064239][T18296] bridge0: port 3(team0) entered blocking state [ 810.095477][T18296] bridge0: port 3(team0) entered disabled state [ 810.102054][T18296] team0: entered allmulticast mode [ 810.135646][T18296] team_slave_0: entered allmulticast mode [ 810.175312][T18296] team_slave_1: entered allmulticast mode [ 810.252428][T18296] team0: entered promiscuous mode [ 810.277633][T18296] team_slave_0: entered promiscuous mode [ 810.300787][T18296] team_slave_1: entered promiscuous mode [ 810.328459][T18296] bridge0: port 3(team0) entered blocking state [ 810.334908][T18296] bridge0: port 3(team0) entered forwarding state [ 810.580498][T18146] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 810.617419][T18146] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 810.638792][T18146] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 810.655270][T18146] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 810.900023][ T1177] usb 2-1: USB disconnect, device number 71 [ 811.049245][T18146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.121350][T18146] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.152138][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 811.174756][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.181947][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.276657][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.283804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.303610][ T5280] usb 3-1: USB disconnect, device number 75 [ 811.323732][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3023'. [ 811.360696][ T5280] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 811.509102][T18146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.688244][T18146] veth0_vlan: entered promiscuous mode [ 811.768120][T18146] veth1_vlan: entered promiscuous mode [ 811.836579][T18146] veth0_macvtap: entered promiscuous mode [ 811.857401][T18146] veth1_macvtap: entered promiscuous mode [ 811.880590][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.891309][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.901455][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.912218][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.922368][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.933037][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.942992][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.953490][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.964504][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.975824][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.985821][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 811.996373][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.006282][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.016810][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.026692][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.034180][T10406] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 812.037408][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.054795][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.065327][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.076029][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.087284][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.098852][T18146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.112570][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.124151][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.134601][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.145122][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.155068][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.165616][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.176300][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.187570][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.197645][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.208472][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.218358][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.228880][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.238253][T10406] usb 3-1: Using ep0 maxpacket: 32 [ 812.238729][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.248749][T10406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.254278][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.254303][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.254320][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.254345][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.254359][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.254382][T18146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.254396][T18146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.255765][T18146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.328640][T10406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.341299][T18146] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.365217][T18146] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.374774][T18146] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.383503][T18146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.408867][T10406] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 812.455270][T10406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.477633][T10406] usb 3-1: config 0 descriptor?? [ 812.495944][T10406] hub 3-1:0.0: USB hub found [ 812.566507][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.603789][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.675751][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.703707][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.705786][T10406] hub 3-1:0.0: 1 port detected [ 812.907853][T10406] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 812.918472][ T5280] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 812.927614][T10406] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 813.094806][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 813.101929][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.133335][ T5280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.177940][ T5280] usb 2-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 813.189998][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.222941][T18374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.237700][ T5280] usb 2-1: config 0 descriptor?? [ 813.263247][T18374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.396047][ T1177] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 813.574168][ T1177] usb 5-1: Using ep0 maxpacket: 32 [ 813.606491][ T1177] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 813.628361][ T5281] usb 2-1: USB disconnect, device number 72 [ 813.634441][ T1177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.634472][ T1177] usb 5-1: Product: syz [ 813.634489][ T1177] usb 5-1: Manufacturer: syz [ 813.634506][ T1177] usb 5-1: SerialNumber: syz [ 813.640603][ T1177] usb 5-1: config 0 descriptor?? [ 813.745338][ T1177] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 814.033679][T12775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 814.049439][T12775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 814.058544][T12775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 814.067987][T12775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 814.078941][T12775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 814.092734][T10406] usbhid 3-1:0.0: can't add hid device: -71 [ 814.092933][T12775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 814.128229][T10406] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 814.176825][T10406] usb 3-1: USB disconnect, device number 76 [ 814.429530][T18385] chnl_net:caif_netlink_parms(): no params data found [ 814.597528][T18385] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.605322][T18385] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.612741][T18385] bridge_slave_0: entered allmulticast mode [ 814.621717][T18385] bridge_slave_0: entered promiscuous mode [ 814.636942][T18385] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.644486][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.651895][T18385] bridge_slave_1: entered allmulticast mode [ 814.659901][T18385] bridge_slave_1: entered promiscuous mode [ 814.699115][T18400] xt_l2tp: invalid flags combination: 0 [ 814.828184][T18385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.866257][T18385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.962265][T18385] team0: Port device team_slave_0 added [ 814.996098][T18385] team0: Port device team_slave_1 added [ 815.029848][T18403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3037'. [ 815.053081][T18385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.073727][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.123572][T18385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.142892][T18385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.150092][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.177413][T18385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.270255][T18385] hsr_slave_0: entered promiscuous mode [ 815.285244][T18385] hsr_slave_1: entered promiscuous mode [ 815.294950][T18385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.315670][T18385] Cannot create hsr debugfs directory [ 815.354478][T12775] Bluetooth: hci1: unexpected cc 0x2027 length: 2 > 1 [ 815.757977][T18385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.941768][T18385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.087183][T18385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.201442][ T5229] Bluetooth: hci3: command tx timeout [ 816.260014][T18385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.612043][ T1177] gspca_stk1135: reg_w 0x351 err -71 [ 816.618476][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.627303][ T1177] gspca_stk1135: Sensor write failed [ 816.647095][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.661385][T18385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.671771][ T1177] gspca_stk1135: Sensor write failed [ 816.686104][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.693122][T18385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.701496][ T1177] gspca_stk1135: Sensor read failed [ 816.715715][T18385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.724839][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.733575][ T1177] gspca_stk1135: Sensor read failed [ 816.747874][T18385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 816.755472][ T1177] gspca_stk1135: Detected sensor type unknown (0x0) [ 816.766054][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.798140][ T1177] gspca_stk1135: Sensor read failed [ 816.825355][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.857957][ T1177] gspca_stk1135: Sensor read failed [ 816.881433][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.898978][ T1177] gspca_stk1135: Sensor write failed [ 816.914964][ T1177] gspca_stk1135: serial bus timeout: status=0x00 [ 816.950586][ T1177] gspca_stk1135: Sensor write failed [ 816.974953][ T1177] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 816.998504][T18385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.016181][T18385] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.028698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.035905][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.059739][ T1177] usb 5-1: USB disconnect, device number 88 [ 817.078914][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.086116][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.238770][T18385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.314858][T10406] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 817.319122][T18385] veth0_vlan: entered promiscuous mode [ 817.340045][T18385] veth1_vlan: entered promiscuous mode [ 817.385738][T18385] veth0_macvtap: entered promiscuous mode [ 817.410144][T18385] veth1_macvtap: entered promiscuous mode [ 817.436680][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.447379][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.462104][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.474903][T10406] usb 3-1: Using ep0 maxpacket: 8 [ 817.484711][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.485048][T10406] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 817.497094][ T1177] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 817.514324][T10406] usb 3-1: config 179 has no interface number 0 [ 817.521134][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.530941][T10406] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 817.533946][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.557739][T10406] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 817.571963][T10406] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 817.572870][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.583804][T10406] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 817.609550][T10406] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 817.636766][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.653702][T10406] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 817.653777][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.675648][T10406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.692730][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.700503][T18413] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 817.705403][ T1177] usb 5-1: Using ep0 maxpacket: 8 [ 817.717314][T10406] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 817.742760][ T1177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.756139][ T1177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.778714][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.789347][ T1177] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 817.798579][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.809441][ T1177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.818398][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.829876][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.839809][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.850438][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.860321][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.870851][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.881261][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.892087][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.902007][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.918993][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.930669][T18385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.941800][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.952379][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.963671][ T1177] usb 5-1: config 0 descriptor?? [ 817.973939][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.998383][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.008416][ T1177] usbhid 5-1:0.0: can't add hid device: -22 [ 818.008503][ T1177] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 818.047175][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.071346][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.081498][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.102198][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.119952][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.143196][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.177711][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.214641][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.241901][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.266233][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.274351][ T5229] Bluetooth: hci3: command tx timeout [ 818.286375][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.314852][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.331741][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.351655][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.379726][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.404180][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.433461][T18385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.454111][T18385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.476072][T18385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.552637][T18385] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.635461][ T5238] usb 3-1: USB disconnect, device number 77 [ 818.654177][T18385] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.733120][T18385] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.744300][T18385] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.987279][ T9679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.038074][ T9679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.143600][ T9679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.163613][ T9679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.404366][ T5229] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 819.413410][ T5229] Bluetooth: hci1: Injecting HCI hardware error event [ 819.423432][ T5229] Bluetooth: hci1: hardware error 0x00 [ 819.680732][T18445] Cannot find add_set index 0 as target [ 820.272086][T10406] usb 5-1: USB disconnect, device number 89 [ 820.357520][T12775] Bluetooth: hci3: command tx timeout [ 820.472981][T18454] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 821.116536][ T29] audit: type=1326 audit(1728564366.644:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.144139][ T29] audit: type=1326 audit(1728564366.644:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.186640][ T29] audit: type=1326 audit(1728564366.644:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.209689][ T29] audit: type=1326 audit(1728564366.644:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.232160][ T29] audit: type=1326 audit(1728564366.644:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.254883][ T29] audit: type=1326 audit(1728564366.644:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.269158][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 821.277531][ T29] audit: type=1326 audit(1728564366.644:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.287889][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 821.310150][ T29] audit: type=1326 audit(1728564366.644:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.345777][ T29] audit: type=1326 audit(1728564366.644:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.368371][ T29] audit: type=1326 audit(1728564366.644:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18471 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e3517dff9 code=0x7ffc0000 [ 821.577033][ T5229] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 822.268989][T18500] fuse: Bad value for 'fd' [ 822.434658][ T5229] Bluetooth: hci3: command tx timeout [ 822.521496][T18505] snd_dummy snd_dummy.0: control 0:0:15:syz0:0 is already present [ 822.793521][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 823.602249][T18525] fuse: Bad value for 'fd' [ 823.969736][T18533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.980616][T18533] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.989498][T18533] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.001872][T18533] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.009628][T18533] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 824.018754][T18533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 824.226372][T18529] fuse: Bad value for 'fd' [ 824.523401][T18535] chnl_net:caif_netlink_parms(): no params data found [ 824.703779][T18535] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.711048][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.732786][T18535] bridge_slave_0: entered allmulticast mode [ 824.783056][T18535] bridge_slave_0: entered promiscuous mode [ 824.804402][T12775] Bluetooth: hci4: unexpected cc 0x2027 length: 2 > 1 [ 824.890033][ T5281] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 824.900615][T18535] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.948163][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.971354][T18535] bridge_slave_1: entered allmulticast mode [ 824.987177][T18535] bridge_slave_1: entered promiscuous mode [ 825.095152][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 825.138035][ T5281] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 825.169194][ T5281] usb 4-1: config 179 has no interface number 0 [ 825.194697][ T5281] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 825.208187][ T5281] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 825.220285][ T5281] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 825.242392][ T5281] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 825.246593][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.254363][ T5281] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 825.336516][ T5281] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 825.354735][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.364566][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.394277][ T938] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 825.407545][T18542] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 825.436072][ T5281] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 825.473492][T18535] team0: Port device team_slave_0 added [ 825.509696][T18535] team0: Port device team_slave_1 added [ 825.564184][ T938] usb 5-1: Using ep0 maxpacket: 8 [ 825.572191][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.580749][ T938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.593662][ T938] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 825.603411][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.613970][ T938] usb 5-1: config 0 descriptor?? [ 825.654223][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.794330][T12775] Bluetooth: hci3: command 0x0405 tx timeout [ 825.802785][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.851955][ T938] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 825.874667][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.910434][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.976347][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.004233][ T5281] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 826.114435][T12775] Bluetooth: hci0: command tx timeout [ 826.184461][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 826.220668][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.282416][T18535] hsr_slave_0: entered promiscuous mode [ 826.288924][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.303724][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 826.313591][T18535] hsr_slave_1: entered promiscuous mode [ 826.324523][T18535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 826.328588][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.368383][T18535] Cannot create hsr debugfs directory [ 826.401524][ T5281] usb 3-1: config 0 descriptor?? [ 826.456192][ T5281] hub 3-1:0.0: USB hub found [ 826.645102][ T5281] hub 3-1:0.0: 1 port detected [ 826.852938][ T5281] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 826.877449][ T5281] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 827.132483][T18535] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.176361][T18558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.233996][T18558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.340365][T18535] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.526990][ T938] usb 5-1: USB disconnect, device number 90 [ 827.546253][ T938] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 827.753942][T18535] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.846159][ T5281] usbhid 3-1:0.0: can't add hid device: -71 [ 827.852548][ T5281] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 827.861627][ T5238] usb 4-1: USB disconnect, device number 72 [ 827.984239][ T5281] usb 3-1: USB disconnect, device number 78 [ 828.047373][T18535] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.104681][T18571] random: crng reseeded on system resumption [ 828.197386][T12775] Bluetooth: hci0: command tx timeout [ 828.439774][T18535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.508679][T18535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.619305][T18535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.740960][T18535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.855066][T12775] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 828.865729][T12775] Bluetooth: hci4: Injecting HCI hardware error event [ 828.882986][T12775] Bluetooth: hci4: hardware error 0x00 [ 829.057806][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.125753][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.139647][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.146834][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.225032][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.232165][ T9676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.234396][ T51] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 829.409068][ T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.476607][ T51] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 829.491035][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.566414][ T51] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.576060][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.586452][ T51] usb 3-1: Product: syz [ 829.590909][ T51] usb 3-1: Manufacturer: syz [ 829.598027][T18535] veth0_vlan: entered promiscuous mode [ 829.609226][T18535] veth1_vlan: entered promiscuous mode [ 829.618519][ T51] usb 3-1: SerialNumber: syz [ 829.659253][ T51] usb 3-1: config 0 descriptor?? [ 829.793361][T18535] veth0_macvtap: entered promiscuous mode [ 829.821980][T18535] veth1_macvtap: entered promiscuous mode [ 829.921444][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 829.953742][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.978690][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.004182][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.020373][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.045285][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.049081][ T1177] usb 3-1: USB disconnect, device number 79 [ 830.056327][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.101048][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.117640][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.129037][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.145860][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.157002][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.169515][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.180675][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.196061][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.207629][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.228893][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.244269][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.265862][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.277448][ T5229] Bluetooth: hci0: command tx timeout [ 830.304462][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.315047][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.326273][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.336464][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.347114][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.362807][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.392494][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.422042][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.450812][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.472670][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.495547][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.508148][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.519699][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.530474][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.540563][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.571594][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.581932][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.594412][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.608220][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.621168][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.631448][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.642289][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.653127][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.663930][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.685547][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.696491][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.722560][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.736696][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.747034][T18535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.758464][T18535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.771073][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.810800][T18535] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.830976][T18535] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.857780][T18535] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.867003][T18535] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.029981][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.055269][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.088475][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.096953][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.154812][T12775] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 831.304502][ T51] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 831.489390][ T51] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 831.523842][ T51] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 831.621454][ T51] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 831.641150][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.930092][T18593] [U]  [ 831.971774][T18592] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3089'. [ 832.035923][T18592] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 832.355879][T12775] Bluetooth: hci0: command tx timeout [ 832.461248][ T51] usb 3-1: string descriptor 0 read error: -71 [ 832.516121][ T51] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 832.607761][ T51] usb 3-1: USB disconnect, device number 80 [ 833.284343][ T1177] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 833.488477][ T1177] usb 4-1: Using ep0 maxpacket: 16 [ 833.520335][ T1177] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 833.562110][ T1177] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.630928][ T1177] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 833.716489][ T1177] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 833.759544][ T1177] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 833.789470][ T1177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.810889][ T1177] usb 4-1: Product: syz [ 833.829271][ T1177] usb 4-1: Manufacturer: syz [ 833.839395][ T1177] usb 4-1: SerialNumber: syz [ 834.133744][ T1177] usb 4-1: USB disconnect, device number 73 [ 834.684334][ T5238] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 834.859144][ T5238] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.876856][ T5238] usb 2-1: config 0 has no interface number 0 [ 834.895046][ T5238] usb 2-1: too many endpoints for config 0 interface 1 altsetting 0: 32, using maximum allowed: 30 [ 837.574023][ C0] sched: DL replenish lagged too much [ 837.778150][ T5238] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 839.260268][ T5238] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 839.335188][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.348093][T18629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3101'. [ 839.396287][ T5238] usb 2-1: config 0 descriptor?? [ 842.032709][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.037138][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.038261][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.040433][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.042082][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 842.042474][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.494898][T12775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 842.506102][T12775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 842.508613][T12775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.509679][T12775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 842.511414][T12775] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 842.511806][T12775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 844.116786][ T5229] Bluetooth: hci5: command tx timeout [ 844.348995][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 844.351795][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 844.353044][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 844.354940][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 844.356360][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 844.362758][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 844.438330][ T5238] usb 2-1: can't set config #0, error -110 [ 844.594668][ T5229] Bluetooth: hci6: command tx timeout [ 845.620889][T12775] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 845.623389][T12775] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 845.634862][T12775] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 845.638246][T12775] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 845.638849][T12775] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 845.639136][T12775] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 845.998304][T18533] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 846.001441][T18533] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 846.002763][T18533] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 846.003639][T18533] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 846.005378][T18533] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 846.005677][T18533] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 846.203064][T18533] Bluetooth: hci5: command tx timeout [ 846.422476][T18649] chnl_net:caif_netlink_parms(): no params data found [ 846.434460][T18533] Bluetooth: hci7: command tx timeout [ 846.675496][T18533] Bluetooth: hci6: command tx timeout [ 848.282262][T18533] Bluetooth: hci5: command tx timeout [ 848.514631][T18533] Bluetooth: hci7: command tx timeout [ 848.754577][T18533] Bluetooth: hci6: command tx timeout [ 850.354435][T18533] Bluetooth: hci5: command tx timeout [ 850.594644][T18533] Bluetooth: hci7: command tx timeout [ 850.834650][T18533] Bluetooth: hci6: command tx timeout [ 852.674575][T18533] Bluetooth: hci7: command tx timeout [ 870.414667][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.414723][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 902.211274][T18664] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 902.214925][T18664] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 902.224242][T18664] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 902.227260][T18664] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 902.227879][T18664] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 902.228200][T18664] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.723199][T18668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 902.726705][T18668] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 902.727787][T18668] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 902.728709][T18668] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 902.729287][T18668] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 902.729583][T18668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 904.823376][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 904.828470][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 904.829622][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 904.830441][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 904.831024][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 904.833011][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 906.084558][T18678] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 906.088342][T18678] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 906.089392][T18678] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 906.090261][T18678] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 906.090828][T18678] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 906.091223][T18678] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 906.253222][T18672] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 906.257616][T18672] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 906.258689][T18672] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 906.260449][T18672] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 906.261096][T18672] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 906.261390][T18672] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 931.800346][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.800403][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.567875][T18672] Bluetooth: hci12: command tx timeout [ 940.569226][T18678] Bluetooth: hci11: command tx timeout [ 941.874460][ T54] Bluetooth: hci8: command tx timeout [ 942.116386][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 942.274419][ T54] Bluetooth: hci9: command tx timeout [ 942.434756][ T54] Bluetooth: hci2: command tx timeout [ 942.594493][T18664] Bluetooth: hci11: command tx timeout [ 942.595399][T18664] Bluetooth: hci12: command tx timeout [ 942.595882][T18664] Bluetooth: hci4: command tx timeout [ 942.605011][ T54] Bluetooth: hci10: command tx timeout [ 943.954380][ T54] Bluetooth: hci8: command tx timeout [ 944.354370][ T54] Bluetooth: hci9: command tx timeout [ 944.514433][ T54] Bluetooth: hci2: command tx timeout [ 944.684708][ T54] Bluetooth: hci10: command tx timeout [ 944.684754][ T54] Bluetooth: hci4: command tx timeout [ 944.684788][ T54] Bluetooth: hci12: command tx timeout [ 944.684819][ T54] Bluetooth: hci11: command tx timeout [ 946.034322][T18664] Bluetooth: hci8: command tx timeout [ 946.434372][T18664] Bluetooth: hci9: command tx timeout [ 946.594442][T18664] Bluetooth: hci2: command tx timeout [ 946.754554][T18664] Bluetooth: hci11: command tx timeout [ 946.754604][T18664] Bluetooth: hci12: command tx timeout [ 946.754638][T18664] Bluetooth: hci4: command tx timeout [ 946.754670][T18664] Bluetooth: hci10: command tx timeout [ 948.115290][ T54] Bluetooth: hci8: command tx timeout [ 948.514352][ T54] Bluetooth: hci9: command tx timeout [ 948.674380][ T54] Bluetooth: hci2: command tx timeout [ 948.834365][ T54] Bluetooth: hci10: command tx timeout [ 948.834412][ T54] Bluetooth: hci4: command tx timeout [ 963.699272][T18678] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 963.701659][T18678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 963.703835][T18678] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 963.707678][T18678] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 963.708280][T18678] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 963.708590][T18678] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.743022][T18672] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.747169][T18672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.748168][T18672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.749112][T18672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.749768][T18672] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 963.755201][T18672] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.601096][T18672] Bluetooth: hci5: command 0x0406 tx timeout [ 965.271830][T18668] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 965.284344][T18668] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 965.287200][T18668] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 965.288118][T18668] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 965.288758][T18668] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 965.289068][T18668] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 966.527236][ T5229] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 966.538012][T18654] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 966.539228][T18654] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 966.541186][T18654] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 966.543131][T18654] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 966.546495][T18654] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 966.547488][T18654] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 966.548170][T18654] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 966.548477][T18654] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 966.564664][T18672] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 966.566864][T18672] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 966.574665][T18672] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 969.734208][T18664] Bluetooth: hci6: command 0x0406 tx timeout [ 969.734276][T18668] Bluetooth: hci7: command 0x0406 tx timeout [ 970.914602][T18672] Bluetooth: hci1: command tx timeout [ 970.995049][T12775] Bluetooth: hci15: command tx timeout [ 970.996334][T12775] Bluetooth: hci14: command tx timeout [ 970.997010][T12775] Bluetooth: hci0: command tx timeout [ 971.009099][T18672] Bluetooth: hci13: command tx timeout [ 972.994622][T12775] Bluetooth: hci1: command tx timeout [ 973.074552][T12775] Bluetooth: hci0: command tx timeout [ 973.074601][T12775] Bluetooth: hci13: command tx timeout [ 973.074635][T12775] Bluetooth: hci14: command tx timeout [ 973.074666][T12775] Bluetooth: hci15: command tx timeout [ 975.074701][T18672] Bluetooth: hci1: command tx timeout [ 975.154408][T12775] Bluetooth: hci14: command tx timeout [ 975.154455][T12775] Bluetooth: hci13: command tx timeout [ 975.154488][T12775] Bluetooth: hci0: command tx timeout [ 975.159812][T18672] Bluetooth: hci15: command tx timeout [ 977.154565][T18672] Bluetooth: hci1: command tx timeout [ 977.234505][T18668] Bluetooth: hci0: command tx timeout [ 977.234552][T18668] Bluetooth: hci13: command tx timeout [ 977.234585][T18668] Bluetooth: hci14: command tx timeout [ 977.234654][T18672] Bluetooth: hci15: command tx timeout [ 992.595024][ T30] INFO: task syz.0.3098:18621 blocked for more than 143 seconds. [ 992.595058][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 992.595072][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 992.595083][ T30] task:syz.0.3098 state:D stack:23520 pid:18621 tgid:18620 ppid:17893 flags:0x00004006 [ 992.595138][ T30] Call Trace: [ 992.595147][ T30] [ 992.595162][ T30] __schedule+0x1895/0x4b30 [ 992.595217][ T30] ? __pfx___schedule+0x10/0x10 [ 992.595247][ T30] ? __pfx_lock_release+0x10/0x10 [ 992.595277][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 992.595312][ T30] ? schedule+0x90/0x320 [ 992.595337][ T30] schedule+0x14b/0x320 [ 992.595365][ T30] schedule_preempt_disabled+0x13/0x30 [ 992.595390][ T30] __mutex_lock+0x6a7/0xd70 [ 992.595424][ T30] ? __mutex_lock+0x52a/0xd70 [ 992.595446][ T30] ? tty_release_struct+0xb1/0xe0 [ 992.595473][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 992.595511][ T30] tty_release_struct+0xb1/0xe0 [ 992.595537][ T30] tty_release+0xd06/0x12c0 [ 992.595572][ T30] ? __pfx_tty_release+0x10/0x10 [ 992.595596][ T30] __fput+0x23f/0x880 [ 992.595634][ T30] task_work_run+0x24f/0x310 [ 992.595661][ T30] ? __pfx_task_work_run+0x10/0x10 [ 992.595689][ T30] ? switch_task_namespaces+0xe4/0x110 [ 992.595718][ T30] do_exit+0xa2f/0x28e0 [ 992.595748][ T30] ? __pfx_do_exit+0x10/0x10 [ 992.595770][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 992.595799][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 992.595829][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 992.595855][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 992.595884][ T30] do_group_exit+0x207/0x2c0 [ 992.595905][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 992.595929][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 992.595959][ T30] get_signal+0x16a3/0x1740 [ 992.595997][ T30] ? __pfx_get_signal+0x10/0x10 [ 992.596031][ T30] arch_do_signal_or_restart+0x96/0x860 [ 992.596062][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 992.596086][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 992.596126][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 992.596156][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 992.596186][ T30] do_syscall_64+0x100/0x230 [ 992.596207][ T30] ? clear_bhb_loop+0x35/0x90 [ 992.596232][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.596264][ T30] RIP: 0033:0x7ff921b7dbfb [ 992.596286][ T30] RSP: 002b:00007ff922a32f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.596310][ T30] RAX: fffffffffffffffc RBX: 0000000000000008 RCX: 00007ff921b7dbfb [ 992.596326][ T30] RDX: 00007ff922a33fe0 RSI: 0000000080085502 RDI: 0000000000000008 [ 992.596342][ T30] RBP: 00007ff922a33fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 992.596358][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 992.596372][ T30] R13: 0000000800000000 R14: 0000000020000080 R15: 00007ff921bfa273 [ 992.596409][ T30] [ 992.596434][ T30] [ 992.596434][ T30] Showing all locks held in the system: [ 992.596446][ T30] 3 locks held by kworker/0:1/9: [ 992.596460][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 992.596526][ T30] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 992.596588][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 992.596647][ T30] 3 locks held by kworker/u8:0/11: [ 992.596661][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 992.596722][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 992.596783][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 992.596847][ T30] 1 lock held by khungtaskd/30: [ 992.598701][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 992.598776][ T30] 4 locks held by kworker/u8:4/68: [ 992.598789][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 992.598851][ T30] #1: ffffc900015d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 992.598909][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 992.598971][ T30] #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 992.599054][ T30] 2 locks held by kworker/u8:8/3198: [ 992.599073][ T30] 2 locks held by getty/4982: [ 992.599086][ T30] #0: ffff88802e72c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 992.599145][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 992.599227][ T30] 3 locks held by kworker/0:4/5281: [ 992.599242][ T30] 3 locks held by kworker/0:7/10406: [ 992.599266][ T30] 1 lock held by syz-executor/17893: [ 992.599279][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 992.599342][ T30] 1 lock held by syz.2.3089/18606: [ 992.599356][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 992.599420][ T30] 1 lock held by syz.4.3091/18599: [ 992.599435][ T30] 1 lock held by syz.0.3098/18621: [ 992.599448][ T30] #0: ffffffff8f16a388 (tty_mutex){+.+.}-{3:3}, at: tty_release_struct+0xb1/0xe0 [ 992.599507][ T30] 1 lock held by syz.1.3100/18625: [ 992.599521][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 992.599578][ T30] 4 locks held by syz.3.3101/18628: [ 992.599592][ T30] 2 locks held by syz-executor/18636: [ 992.599606][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.599666][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 992.599728][ T30] 2 locks held by syz-executor/18638: [ 992.599741][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.599801][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 992.599862][ T30] 2 locks held by syz-executor/18641: [ 992.599876][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.599935][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 992.599996][ T30] 1 lock held by syz-executor/18645: [ 992.600010][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 992.600068][ T30] 2 locks held by syz-executor/18649: [ 992.600082][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 992.600139][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 992.600200][ T30] 2 locks held by syz-executor/18667: [ 992.600214][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600273][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600332][ T30] 2 locks held by syz-executor/18670: [ 992.600345][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600410][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600468][ T30] 2 locks held by syz-executor/18674: [ 992.600482][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600541][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600600][ T30] 2 locks held by syz-executor/18679: [ 992.600612][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600671][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600730][ T30] 2 locks held by syz-executor/18682: [ 992.600743][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600803][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600862][ T30] 2 locks held by syz-executor/18695: [ 992.600876][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.600935][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.600993][ T30] 2 locks held by syz-executor/18696: [ 992.601007][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.601066][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.601125][ T30] 2 locks held by syz-executor/18699: [ 992.601138][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.601198][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.601256][ T30] 2 locks held by syz-executor/18704: [ 992.601270][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.601328][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.601386][ T30] 2 locks held by syz-executor/18705: [ 992.601405][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 992.601465][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 992.601523][ T30] [ 992.601531][ T30] ============================================= [ 992.601531][ T30] [ 992.601542][ T30] NMI backtrace for cpu 1 [ 992.601563][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 992.601590][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 992.601603][ T30] Call Trace: [ 992.601612][ T30] [ 992.601622][ T30] dump_stack_lvl+0x241/0x360 [ 992.601646][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.601667][ T30] ? __pfx__printk+0x10/0x10 [ 992.601704][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 992.601733][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 992.601754][ T30] ? _printk+0xd5/0x120 [ 992.601778][ T30] ? __pfx__printk+0x10/0x10 [ 992.601802][ T30] ? __wake_up_klogd+0xcc/0x110 [ 992.601827][ T30] ? __pfx__printk+0x10/0x10 [ 992.601856][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 992.601882][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 992.601908][ T30] watchdog+0xff4/0x1040 [ 992.601935][ T30] ? watchdog+0x1ea/0x1040 [ 992.601963][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.601986][ T30] kthread+0x2f0/0x390 [ 992.602006][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.602028][ T30] ? __pfx_kthread+0x10/0x10 [ 992.602049][ T30] ret_from_fork+0x4b/0x80 [ 992.602074][ T30] ? __pfx_kthread+0x10/0x10 [ 992.602093][ T30] ret_from_fork_asm+0x1a/0x30 [ 992.602131][ T30] [ 992.602140][ T30] Sending NMI from CPU 1 to CPUs 0: [ 992.602175][ C0] NMI backtrace for cpu 0 [ 992.602187][ C0] CPU: 0 UID: 0 PID: 10406 Comm: kworker/0:7 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 992.602206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 992.602217][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 992.602239][ C0] RIP: 0010:debug_check_no_obj_freed+0x2a7/0x580 [ 992.602262][ C0] Code: 00 00 00 ad de 48 83 c0 22 49 89 44 24 08 4c 89 e7 e8 ed 0c 00 00 41 ff c7 48 8b 44 24 38 48 85 c0 0f 84 a4 02 00 00 49 89 c4 <49> 89 c5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df 41 80 7c 05 00 [ 992.602276][ C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000086 [ 992.602290][ C0] RAX: ffff888064b7e5e8 RBX: ffff88804daf5ec0 RCX: dffffc0000000000 [ 992.602303][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000007960 [ 992.602315][ C0] RBP: ffffc90000007be0 R08: 0000000000000003 R09: fffff52000000f2c [ 992.602328][ C0] R10: dffffc0000000000 R11: fffff52000000f2c R12: ffff888064b7e5e8 [ 992.602341][ C0] R13: 1ffff11009b5ebd5 R14: ffff888066dd8d50 R15: 0000000000000003 [ 992.602353][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 992.602368][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.602380][ C0] CR2: 00007fcefbfcdff0 CR3: 0000000057a0c000 CR4: 00000000003526f0 [ 992.602395][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 992.602405][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 992.602417][ C0] Call Trace: [ 992.602423][ C0] [ 992.602430][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 992.602448][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 992.602470][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 992.602488][ C0] ? nmi_handle+0x2a/0x5a0 [ 992.602512][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 992.602530][ C0] ? nmi_handle+0x14f/0x5a0 [ 992.602546][ C0] ? nmi_handle+0x2a/0x5a0 [ 992.602563][ C0] ? debug_check_no_obj_freed+0x2a7/0x580 [ 992.602583][ C0] ? default_do_nmi+0x63/0x160 [ 992.602601][ C0] ? exc_nmi+0x123/0x1f0 [ 992.602618][ C0] ? end_repeat_nmi+0xf/0x53 [ 992.602639][ C0] ? debug_check_no_obj_freed+0x2a7/0x580 [ 992.602664][ C0] ? debug_check_no_obj_freed+0x2a7/0x580 [ 992.602685][ C0] ? debug_check_no_obj_freed+0x2a7/0x580 [ 992.602706][ C0] [ 992.602711][ C0] [ 992.602719][ C0] ? ref_tracker_free+0x4ef/0x7e0 [ 992.602738][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 992.602759][ C0] ? rcu_core+0xaaa/0x17a0 [ 992.602774][ C0] ? handle_softirqs+0x2c5/0x980 [ 992.602793][ C0] ? do_softirq+0x11b/0x1e0 [ 992.602810][ C0] ? wg_packet_tx_worker+0x160/0x810 [ 992.602828][ C0] ? process_scheduled_works+0xa63/0x1850 [ 992.602847][ C0] ? worker_thread+0x870/0xd30 [ 992.602865][ C0] ? ret_from_fork+0x4b/0x80 [ 992.602883][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 992.602904][ C0] ? dst_destroy+0x2ac/0x460 [ 992.602920][ C0] kmem_cache_free+0x11f/0x420 [ 992.602942][ C0] dst_destroy+0x2ac/0x460 [ 992.602957][ C0] ? rcu_core+0xa37/0x17a0 [ 992.602972][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 992.602988][ C0] rcu_core+0xaaa/0x17a0 [ 992.603010][ C0] ? __pfx_rcu_core+0x10/0x10 [ 992.603041][ C0] handle_softirqs+0x2c5/0x980 [ 992.603062][ C0] ? do_softirq+0x11b/0x1e0 [ 992.603081][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 992.603104][ C0] do_softirq+0x11b/0x1e0 [ 992.603121][ C0] [ 992.603127][ C0] [ 992.603133][ C0] ? __pfx_do_softirq+0x10/0x10 [ 992.603151][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 992.603171][ C0] ? mod_peer_timer+0x21/0x260 [ 992.603189][ C0] ? rcu_is_watching+0x15/0xb0 [ 992.603207][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 992.603226][ C0] ? mod_peer_timer+0x21/0x260 [ 992.603243][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 992.603262][ C0] ? mod_peer_timer+0x21/0x260 [ 992.603280][ C0] ? mod_peer_timer+0x212/0x260 [ 992.603298][ C0] wg_packet_tx_worker+0x160/0x810 [ 992.603319][ C0] ? process_scheduled_works+0x976/0x1850 [ 992.603339][ C0] process_scheduled_works+0xa63/0x1850 [ 992.603370][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 992.603394][ C0] ? assign_work+0x364/0x3d0 [ 992.603414][ C0] worker_thread+0x870/0xd30 [ 992.603437][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 992.603459][ C0] ? __kthread_parkme+0x169/0x1d0 [ 992.603481][ C0] ? __pfx_worker_thread+0x10/0x10 [ 992.603500][ C0] kthread+0x2f0/0x390 [ 992.603514][ C0] ? __pfx_worker_thread+0x10/0x10 [ 992.603533][ C0] ? __pfx_kthread+0x10/0x10 [ 992.603548][ C0] ret_from_fork+0x4b/0x80 [ 992.603567][ C0] ? __pfx_kthread+0x10/0x10 [ 992.603581][ C0] ret_from_fork_asm+0x1a/0x30 [ 992.603606][ C0] [ 992.614131][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 992.614151][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 992.614175][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 992.614188][ T30] Call Trace: [ 992.614196][ T30] [ 992.614206][ T30] dump_stack_lvl+0x241/0x360 [ 992.614234][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.614255][ T30] ? __pfx__printk+0x10/0x10 [ 992.614277][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 992.614310][ T30] ? vscnprintf+0x5d/0x90 [ 992.614334][ T30] panic+0x349/0x880 [ 992.614360][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 992.614383][ T30] ? __pfx_panic+0x10/0x10 [ 992.614422][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 992.614445][ T30] ? __irq_work_queue_local+0x137/0x410 [ 992.614471][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 992.614493][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 992.614514][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 992.614538][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 992.614563][ T30] watchdog+0x1033/0x1040 [ 992.614588][ T30] ? watchdog+0x1ea/0x1040 [ 992.614617][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.614639][ T30] kthread+0x2f0/0x390 [ 992.614658][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.614681][ T30] ? __pfx_kthread+0x10/0x10 [ 992.614700][ T30] ret_from_fork+0x4b/0x80 [ 992.614725][ T30] ? __pfx_kthread+0x10/0x10 [ 992.614744][ T30] ret_from_fork_asm+0x1a/0x30 [ 992.614780][ T30] [ 992.615022][ T30] Kernel Offset: disabled