last executing test programs: 1m44.834874593s ago: executing program 32 (id=16): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)=ANY=[@ANYBLOB="c80400001800040028bd7000fbdbdf25e00000020000000000000000000000007f0000010000000000000000000000004e2007ff4e2000170cb500a067000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x4c8}, 0x1, 0x0, 0x0, 0x200448d2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xa, 0x2, 0xa, 0x0, [{0x8, 0x1, 0xa, '\x00', 0x3}, {0x4, 0x2, 0x8, '\x00', 0xff}, {0x4, 0xff, 0x81}, {0x3, 0xbb, 0x9, '\x00', 0x8}, {0x1, 0x8, 0x1}, {0x92, 0x7, 0x0, '\x00', 0x1}, {0x5, 0x1, 0x40, '\x00', 0x1}, {0x8, 0x3, 0xf}, {0x7, 0x8, 0x1}, {0x9, 0x5, 0xf3, '\x00', 0x8}, {0xc0, 0x39, 0x7, '\x00', 0x41}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x28, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x3, 0xba}, {0x7, 0xfb, 0x8, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x3, 0x7, 0xf5}, {0x30, 0x6, 0x1, '\x00', 0x3}, {0xff, 0xe3, 0x9, '\x00', 0x9}, {0x3, 0x1, 0x4, '\x00', 0x10}, {0x5a, 0x0, 0x3}, {0x8, 0xa0, 0x3, '\x00', 0xc4}, {0x3, 0x9, 0x9, '\x00', 0x5}, {0x7f, 0xb3, 0x5, '\x00', 0x90}]}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)=ANY=[@ANYBLOB="c80400001800040028bd7000fbdbdf25e00000020000000000000000000000007f0000010000000000000000000000004e2007ff4e2000170cb500a067000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x4c8}, 0x1, 0x0, 0x0, 0x200448d2}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xa, 0x2, 0xa, 0x0, [{0x8, 0x1, 0xa, '\x00', 0x3}, {0x4, 0x2, 0x8, '\x00', 0xff}, {0x4, 0xff, 0x81}, {0x3, 0xbb, 0x9, '\x00', 0x8}, {0x1, 0x8, 0x1}, {0x92, 0x7, 0x0, '\x00', 0x1}, {0x5, 0x1, 0x40, '\x00', 0x1}, {0x8, 0x3, 0xf}, {0x7, 0x8, 0x1}, {0x9, 0x5, 0xf3, '\x00', 0x8}, {0xc0, 0x39, 0x7, '\x00', 0x41}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x28, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x3, 0xba}, {0x7, 0xfb, 0x8, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x3, 0x7, 0xf5}, {0x30, 0x6, 0x1, '\x00', 0x3}, {0xff, 0xe3, 0x9, '\x00', 0x9}, {0x3, 0x1, 0x4, '\x00', 0x10}, {0x5a, 0x0, 0x3}, {0x8, 0xa0, 0x3, '\x00', 0xc4}, {0x3, 0x9, 0x9, '\x00', 0x5}, {0x7f, 0xb3, 0x5, '\x00', 0x90}]}}) (async) 1m39.545326898s ago: executing program 33 (id=40): openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xd40, 0x5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x62, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x1, r0}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m26.305163332s ago: executing program 3 (id=99): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0xfffffff8, 0x1ff, {{0x1a, 0x4, 0x1, 0x24, 0x68, 0x64, 0x0, 0x9, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x44, 0xe9, 0x1, 0x6, [{@local, 0x3}, {@private=0xa010102, 0xcb}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x800007}, {@empty, 0x2}, {@empty, 0x80}, {@rand_addr=0x64010100, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}]}, @ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x0, [{0x6, 0x6, "04631757"}]}]}}}}}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@loopback, 0x4e24, 0x8, 0x4e21, 0xc, 0xa, 0x20, 0x20, 0x0, r3, r4}, {0xd7, 0x5, 0xffff, 0x3, 0x8, 0x39, 0x23, 0x3c078000}, {0x696, 0x8000000000000001, 0x9}, 0x9, 0x6e6bb5, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3500, 0x2, 0x0, 0x4, 0x7c, 0x7, 0x40}}, 0xe4) (async) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) 1m26.053894463s ago: executing program 3 (id=100): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f61640034000280080004400000000008000840080000000800024000000000080005400000000008000340"], 0x9c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x6e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x2a, 0x4e4d}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40150000000900020073797a31000000000900010073797a300000000008000540000000150c00098008000140ff"], 0x98}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000002bc0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000040) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x13}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ff00951c5f1a"}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x40881) 1m25.937458714s ago: executing program 3 (id=101): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000280)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x195d80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f00000000c0)={0x6, 0x0, 0x10001}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x11d982, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='auxv\x00') openat$cgroup_ro(r4, &(0x7f0000000300)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x7, 0x7, 0x9, 0x20001, r2, 0x6, '\x00', 0x0, r3, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40086436, &(0x7f0000000100)={r1, 0x100}) r5 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x80, 0x80000001, 0x1, @mcast2, @mcast2, 0x7, 0x20, 0x800, 0x74c7c84a}}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x208, 0x480482) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0}) 1m25.155097253s ago: executing program 3 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4b6e05, 0x0) (fail_nth: 2) 1m25.146471943s ago: executing program 3 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17}) socket$inet(0x2, 0x80000, 0x7) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r5, 0x10, 0x0, @in6={0xa, 0x4e20, 0x80000000, @loopback, 0x6}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0xfffffecd) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r6, 0x99d}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000580)={0x6, 0x118, 0xfa00, {{0x8, 0x9, "7a0a3a11146a0afdd6dd98edfa594154ff4ef6c2e28689bd93afe4df7b595717709c56029a3a4e1bf7b84379d5f4cd2028625cde39479d10b4b7f7b2f2adf6b53d5bc6eecfb7cf2b375dbb8b0c2a2d7d9a70280c35cef8cba8b008e1e5ccba20c907ef6b9c06b14c32e9474e66f7b483a093dd3019839b11bb93b95a9d4e65f3f542358b7db2ac6d13e9a606be756f6aaa9a932de4407f753d75ea329a0db1397e86a6b9d79bdb55d1dec40b97fedf29104e00a89c19a1cc9a2d0e504d00a44601af01d1d3c06372913210a6f6c2dc133cd606921368e884d0611bf9c89c327d1e3731be245983e543575062320558ff17fa4ac32b41e5e64597ef738958fbdd", 0x6, 0x8, 0x66, 0x0, 0xfc, 0x8, 0x1}, r6}}, 0x120) exit(0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000006c0)=[{0x0, 0x0, [0xa, 0x547d, 0x1, 0xcec3, 0x9, 0x5, 0xe, 0xe1, 0x1ff, 0x9, 0xca31, 0x400000, 0x2000, 0x1ff, 0x3, 0x4]}], r7, 0x1, 0x1, 0x48}}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 1m24.580398155s ago: executing program 34 (id=110): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1m24.528515906s ago: executing program 3 (id=113): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="597798f1b2"], 0x0) 1m23.994867769s ago: executing program 35 (id=113): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f00000000c0)) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="597798f1b2"], 0x0) 1m20.030035814s ago: executing program 1 (id=127): syz_emit_ethernet(0x269, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x233, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1e, '\x00', @rand_addr=' \x01\x00', [{0xe, 0x1b, "4c8044ea81ccf6c4205df2c354d9da1487fa1a3f7ddfac5276fc6ed8579666624a24f0215b2868f371594676e67f6afa3a8bf744cd8eb53d323f1fb14451f768e11770b90a95fe79420b534af89e497613f09651297d0a0871f891d5011043fadded7529fcd90c7d67eaae3120399a41571a1682e49bcb1727ebb401e838fa62e38590ce09c8d417f1ecdf70ed189dbf4d35a5a304221f0acf586717f99be012ad89469afaa620c402219b1bd2f8a8e2dae97d558f72c35f8229ab9100eabef7c514f11f67a087d67a19d804c8d8972022511897ddae794fa4"}, {0x22, 0x11, "19b432126188f9129b8f0562f0e65a20b79275d8c5c1399a308314bcc7f515eb0acd3ae666d8b960d1765c33c3dffb7ddff9ead63d2959e6a3ac4270fd04ff598d9c2f059c238aebcc8e03c835880c94b55d55ffbcf7fa6712355af2e630145a97afb7f0741aa45cbc393b8378025e6c15d17209c4b55ddc5f84a4d42717eea8946f7f999d41a9daeb8963cee0"}, {0x22, 0x16, "b1ba13e02fceade2f91ca59793dd306067bb25339e093c9b6c3eff3937d9ec65c259592ece509335127c28ba93d44e181a031a130b758f51318fcc8e5d04b39c605535db23730bc36705f9d43021795140d72dd422da1c6fae43d88590effe0c0baddd2dcc23d4333d24efbee1333f1a80a2d645be373731e1fe4b266cdc57cecd427b7f7bb8bbffba99cf9ba420943d3029cd8ba887f3bd66b3f4bcb4252bde4d52674673b29847a285ceea023be5"}]}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='cgroup\x00') unshare(0x22000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000540), 0x0, 0x0, 0xeb) unshare(0x0) 1m19.95016837s ago: executing program 1 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) 1m19.862623811s ago: executing program 1 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) (async) r1 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x18fc}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0x9f0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20004000) 1m18.312649973s ago: executing program 1 (id=133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x8}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000004940)="4f50356c9e70ce6dcbe3d22a41991ada3384a3cc61e92a72df663226dcad115a3308ae59bd26134ca5b1d27458f3aebf34acb004e78edccd1c3d66ebfda95d8369a12684acfd2a04e36c20ef64cbf1b5bbc16a9783fcf708a9b8b981d1439e1a70c847592b26218c9a35c8cbf385a246ac35fb857113366f18ebf2038f6f5fe538f19afed142f05dfa55e8e5ec4234f6bd050a4d3033bb36ec207606c74bdbb57dc854f6df4c8c9baa253c94555881384fe2f47514f5b07ec99616b751cfb680bc45603bd053c910f9cd9f7d954178f2385becf76f2acacd3a5f570f9ec36203fdd74b03259ce7df7c4c833708d24e1da50717cf88499739f009f6a0d0f9cfeee33134e807ff90cd8984a2f377c22595be32493ade61f85925cb5803dad77b642a067d357d05fd01e6af9a0b3c1d8e2f871bf2e5d082fb410ca5b5a8b67471a2024d8d8a8f54bb82fc7a858223aed1a741e89cd539823ff5417f0bdd5963502c243a126d3a9bbf66adf1631148a90693467a4d255260760389a5717c9b3c79a0057061c4cfe3ca8d9d5d179526090dad4ea4816f291bb8649ed07de9128e6881f581a7989c9533c7bb6186c1c4266f813ad201d0ac241d9dc7990092b0f59d11bd5d457f722ededd6a147bc22e11d28c48d80f5ed97b66eed8f974ad611c03c76420332deb2bdccf260c7182b5ce9aaef10bfad7241d285bf4beea9d3ffd4e5933c4048ca9a041dac8a712836fafe4988ec3849330c6e929f5a0520bfd21079f603b990986202c08f589c3017c10b087f8fdec4fc56d0f89c2b00bcd5d931daa4219e6efc054f60d0988a3ac98f81324d22b5909bfc1f4d1b7172b30e0ec3b21f776553a4507ef0bd813a94d76733e84b0c7067457650e9fcde01840bf5a04399cf4d40b4c66ac1bb55b1aca704afbae4db5744953acb0e6cb0448153f848c774f74282e6c541f9bd1bec0e1b5044423425f182b95949edc8074e257056241df49812c2cf7ceb0b8d28f65f317523b4a47b9e2b693a89ef7c95d180b318ef70b7ee2d6e0a0cad96043c1df61f09613c1cd6f6d6461a761c8ef9c1338cd918318774502da24b0b9d38030533ff6c0359d3b273a18815a1f0a71df5e6452252fa0ddeefe55e6f9d6e3f7941ee84d76143ffb4d32093351ed67674c9862c5df14ae5f430012ebad4d8bd546e8149facb0c2b15ae86f38588ee617ff2874a668e7f755061460094f8e7e56590ba3f30582fa5341b0339b3d6115d631178424f2d8698a2efd847a5567f54e67eb555d4d8a8b548edaa48d47a7b9c06b04d03ee1ecfdfbda40049d0e2eac6150866bc3102bcd5feb4a62b0ac49601adc9c19450530685d54cd53c654fa4bcee4862b010cf6875a97a77e8c6dd1395d440c003091f241baa97eb2995e363b54e1f23f143e3c45af005100fc582e7730c0abf1ef58170942740709f9946f1d29765ed85f3d13bdeb7816afff414d806d80c2033493d2f3fa80a7ad476037891feca18d7625b27779ec4cd8d14de8afdc6c428005513e795f2e7a1e3410201474d9cf4e315f8e05ba591b242f14094149bfe42812ee05e387b5e791107a32578e2a8297238a0075bbda9a4427f379841ea86508c5fba5e235ed4a3754c846569e9a329494d579d066777ec2f189de2aa55a3549e87bf7cda53b7e9af98355b04264189cc95205bf2955e4ffc692e0e6c48d816758ff322244b4268f69a0b72274c429128d8489e13064c925b9d5f3c82be62445860545927b2ea2f3e439888795780e7c4a2b3f3ff62ff2d25e4a44013f9df631c3a0b68bbad82ebe551bf4ff36f1a260f6347c59685ba09d9d9871ef910cce643ba01c5d3f17a50d7daffa2010d274da5570dd19acdd373b55e55701e638f8d31c6d31315a50cdeda2aaad2b71bccd321619120be8cc92dbc696d810b188119ddfb578054bbd343fd5e9e889719dffdae9488c410bc2ce68ec2f85a337ec8fd5bd522bde64b930813efdd670193d91b37fd93aa02f68f67e884130ada337fcf873a984d91467896a703e15b3718e6fd5f6993da9288dabb6f3876a6db06bd8be05b14a5bc63db5ee4f55103640cf30746cdafa8563f5e8c1cccbb58e538b484e0565ed140f2de8437a20ca422f173c829311919a2156d22f3b8bf349f299494c5e37283b1a373390e08df6a551c608ba42ee6e1577043adf6b9e7c0edbd20be866279cd9ae36af67f198e43fd31737cf70312776f4e695327b4fe957641cd3a46b48b198c32a8fd1998b20ace3d9780d1258b3e131ac51c946d022ddec1daebd8b2d225580efd68c7035b301860f6070daf273637e626c3380226a550a33a0346ebb3b87c2b26f15c923b9a490d97a05fb6fcaa5cab19101ce26adb3dc5bbd9604bd5299ceaa872a8ea956a48772852d5702ae3f322f8bb97e79805f7355b781c4fb7dc55e0f1fbc3125def8973302fb48052605366082dce1c8d92fdfa5d8f56f12bd2f73ae2c3c8a12215428861fdd247f36538c8ef0dacd594a709c656124fd8bdf36d69ff1cbb3903c35ae0a36129f64f65190fe37fa22c173ba32d22d61ba7411b3ca9d94a48022c0f0d305e5986cf008cc3e775b683ce5600f25f85dbed4b6c4a3a596da796b03d67ed072991ecfab88a8c7b5fced1bdd8c6049da0b3caec8e46eb9606ba6e53ad058cf8f7da4f107878ab0208c7324e125440d54749b10f64fb27b236feae37a427b287e0ef6a54cd5e864faedc4fb2125a0dd88ac96732ca025f5989e33ab7b521e6fa98ed3af16c83a6661864dc067b9072c980f64e2d008fafc676e60a26703f1fc7330a0c9503d88872d780bebb6c815e52608c04e74e48bbe66e1c0dab838f36c705957cfaab2ed98692db57ebac0c48b257e9386a8584aba15f86019e20cbcfe0b3b57be3b3407c48256e4531efdeca186c93bc3e9bfbc8f45ec864f32f7b38a63479a3bb4fa75a8b25f606f35b1147c1b53ebfd590418f926bad68807279027617af0d06651e5f977c615055f4dc91819bff755f8e6a2e0fb46dd7b1283de2652944d2b1cde5c72f43fd6456149ab2bda78e4cb8de135c160877e0b0820f95c4524e4cd386d44991055ea3accd2a698fb23793e57e49913f3cb86501bce08795695bfef260dd2d14761e404ce593e3b1e661a01d16b492a3cedf683736840178d08ea575534865c699bef830dbd0d259da79e5c05d7003af642412fa55b59ee5f2c032f1919af3c5067afe6876b154e29065d14224481971f94bc5ed45e48371053d69635e78b7a46cf76d999418011b58cff533c009316e33e87093117951fa4821241eaeef61d1122cd4e2962d6596259b7acf9e46d23d4efe9739189d99a9cf8776a34ad90a6e901872fd377c4f58886787baf9c2785ea437aa54195fbd34f2c5f5b4c4a76a018f5689feeccb6b153b34fc23cd0a8fa0699bff806521cb11172e4d4d45a1fad1cc8c4646b1846f1ba04f99a91db12da738ac1ee104ba3193119f325c600ab4f10e1e664dd7c17e285924487d394c7323ced471fd42728ceb9c25822885c1c6ab6b012d7a9b876958b2819e1a708afaacc537e6ac588e58c33934cea32ed3bfa27bb3d63554539e19bf69f30d03e0f47db84132a39a6dbbfddfdb673dd5cabe21d6d552317db8be0477536a69e2fe4f2e9a772dedc8a3ef34256565090c488c08fef2a3dd247fcbc2864d1862676ad5cfed2fd86871cce47b2ba28625ee67dd7518a6da3345614ff18307f20c27f68a69e4a1a6a3c8f76cf31df45b3b0b660aadbcf9698a32d36829c8aef481b09dabc8c9e449b96a2571af8eeef04bcb1785b596709f5aa1ace3804fc703ed9ec544667f350cb8bfb40a86caad45feb77d58aa1888f203cd963bcd9296feb0b68e0a695ed5cf8e7bca26a77d2bd61662f07bc721233a868805202469d8ee504be1d7cf135bc1bf7a215bbb96ff5514eeba1c0ffb68e4b3d6c20e1afadd2a3cecb002fc5ae0c59315dbf8f775ae5c63da31056a9c088e18477e2f925f7ff88df2786e8d014f0c98c58f218e931cd8cdb258c4d8ed82b7f9beab0db9ae0b35b2790ff7e02d11fcf992b365ce82b94eaa0d5b2fec4aeb984f29c6af84e10ce4aa6df7e9c6b0ee842027c8d2552efc6b4084ef9af751524b3acbca12c5c313381b443cd44e862d8c8b0394dda05aeccda371226ebdf5aed6efd6dfcba73b09ae8e92ad54d4b43db9b7f84b46b307c66a4ec69933e47ef22244250f1c82fe42683fc13fcbfcd1c2ed1b537adb2e83885bb368209f89cfe8d4bc59e6df61ec794fa310f290e56320b39fb843163752a726240236b3a45b59927333e94d0c0b30a862d61c6144ac0a59f96e08651fba2d299a37a1a1010ac12ead549404421bce2b95a05d54d44f0df5d08ac469cbc7e1988e4fc913d98e3eb9a8102ed7d40021274948acf58a10c43f1078076e36ee7cbe548638b273a40347415d20dd153885b6429af1c8e82d8d9f22bcd5b48f60484aca751c29c0ac031001e8d5dd49a889665e4ec41e257e8f3013eeab0e382b281c3463c035d3412a0ab0fadf5753ed735f250e56f24bedce1748accb4af749b12f8cf660127d7b9e710f19483cd9bb09d292355103188625a5fb4b81f22a87498d63a5dbdd78e64b4d2feecba4a3dd881a1c4103f9697e09a23ed1db866e40dcb51aba96b83766028b653cabc365fe5694b4f946ad32d9681252373e6017a9413f5fd02ec689dd9e1e179fa9d607b6a8ede028420b0fe6da5f9a678b3b717df1d48e862c2485f789947dd5baf8c3a4a641e460279827354fee33d97bea7ed36546160354bce0f2f58815e28622590418b99b1499250d5469a66d1d461852b384e99073906c64e0aba5d6a0dc7813ff58c63d32e3992b0fb89be5811a646056714718a7039cfbb82678eebeec54bc4350ea85446ba062e53e239d74509dea0d2c1d5c803e333d37761d311f5c402bf43e6b8d84d036d35c0fbe98d7eb9d5bc6165a5771d048647ad16061c55e57c53dbf64c1a08a2a639672d650b4cc6c0f90ab3b8b3ebfc1ff1844e9791ead72b167ef6b57b81f7b6c751fba73a0835edb2c68a55b5e2d2b2c350bac375153c15e6a1180f09f9c2b984ccab971926ad85980026c4610b7dbcae8bb86b98136ed27facd94e571270187a6bb194cc0ebf24b7acada441b23dbe380c7c3221d1677e5af7bc81c3264a958fb5ceee61e4795dc863da2f13cc59a2fce73070af121983410df1a99fdd864bb62d67c30ab0a98300597d7160646bd2759b950bc0468fe74918dca8fc59c9dbdcff736f0f61d234328f1b560bdf6df54663c7f80be5175d67fc37eb85e491650cac6a8da06d3dbb0743ef8d0a9ae90d2d67c11a77ea52545d53c64991b9005b6e3aae54f1cc39672ed59f3d881d65d6b9da133c1201c105972efd039d2210bafbd2f9d964459a4bc72877c51b7ca9ce6fae62ec3bbdd6d09e4fefaeaac5145b141eb06e7c9537e58a7e78526dc7d0511e399ea983d471eb5e19a1ebd5a0a1149d48afa688507952df4afd85f8c296e678a221055e89451e0920f7fd38ac866a54b932a0a608d3e2126dedba84af8fe86f719647e9fe44f4c85641dcb3347c580fa2e1d6e863ca30625f56da0b6125e6c35075451eb93ce3ce6478c474dae7df27737fd2a37fed7c1d9d793cde4728d80a3480d19771876375be29cc9f9d30433be1c999cc6d6b4295b5963f248baae070c609d49a68ef7db094a7c3bb442c9908b7251a2b1d3058bc71c450bacb88bbded6c99943b618fe9d3c7df4834323942a9b13ea821ce062d85904c5078156e3325da50bce2848598eade14f121ee9de8f6b98ef6bf592933103f567cbaf4b5b082b24ccc461118bc081ca925a0f6d0ab84b9eaaf64a956af511d254d6d1c09299ece040905f7c8fd1d6007907ef795d38744a5b0d9476f7e59476addf0b5f4abb0f7da7b5e21eb9842a7df6b4466913b41a08b06e9684ddf5ef1ba3e730f12be4c80d79ea573549dd3badaded7b7a9f5274e44154ddddf3907c08b977b19820eba4a5a0a40bfd4773d91f3c6329ddb88dd923e2b611cf4fc64fed3c98f9402d2a6c5179ace6f0ac50875e361cabd6610dd789138444ebefd72d0608272716a2359dc3e660ba047970991ac1aa83a665bb5245d9fb16eb4a8db99389d3f1386af7f2931fd09979475f0f4489aa99e6628f9cea46790be34f9d7e3aeceafc2b174650850fdabd4af0e6f84c8620cb0bba96b67f1599fec9406060be53b0c0e626e5cc88b0abb74f2c99f3157076e68cbc6593c544862aaa43b8489c1bf6b0bee80c9a608619e4641447d5422172f46774686b7efa3cedc8a837fc7debbe8598874c52c48c85df82e2f796daf04489458e74936e95ca63aa1594dac0a6708462f342747a43ca99fce71488794166fd1cedda1d444ca877ee10b56194a3ebf2114c2924210de0fb0698a6082ba171145150cf0c433adc7617520ca7626a9842929ab1831da8ccc128ba534ff27ae20f063d16b46f67654e372217e9d5f908d35cb1993b23dd4a83796009b68533270434744bc18b608c3bdc0ffcf64f691455795628987185ae688994e34541f630179533cf6b6ab12d0a150761aa490652a987e9906050c3ccb1fc677dde544296d35410c2f8b70bcc8b1927869db81cf1cdcabf190a9e946dce8439f09a98ae39e08f4d54a489cb7bab7795173c3c0dd0be506f9f8d38425b4e78882a028fd8fb2b9051d3eafcbad61a4a78f4caeab1c2041cdf7b55d3fff546f37beb9454c795e9e19a678cd087d74191e27c8a35584dc548d8fc57c5f92ec630723b335848ea5405c56631d58fa365d9fb88c2ab13d262403518dd862e9111bff48db9554fe512e2e40f96c47186aab5b9365c09692c7b2ff2e1bc5514726396abfc36263922e58be98abd1ddaef1ad23fb0f6f31e2c67315fe19d3a38477ce82d965b2c6c14ebb6872eb2acf6ca9a5860c2ea4d691d46b9cbd19352cb6b328486a07c6bf38af80e423cd6394bd9b7fc892011672833ce3d4c02561887a546d27837ca2662b5d72f595c035018a0511e22b72b8682ab65f8d59edab36389c69b5d8e64c35dd9dc78e6261fa3d141258ed9e9e8553f98e152751d5c9ba8712647e46b093a61984fc08172419a5a2aa08aacc487af4a7854d2ed34c812e96c3c56d8b7beaca74db439b1447b5102e6f66f686fb91e16cd82dc52182bbe5a6f2648d09163b3ef9c17f1b4c9867351913b2653cf4e60c5d44706245989da8f0a8392c941af9d7067496809102608fe8b60734b0c90da122c3432b40eaccafed5f5b37948dc9764337eb7016c24d717ae5ecff4d4f8c5c4aea686680a4b5a79b7f254acb0b46530782484cf8041fab719a3549c70767574c7e6aaa87e60b384ce53180540a6448e2c6743890d8eb6a5c38255cf6f86343bb82e2e57f2cd89ff8029e60267f821b7994199c741098be16e9fcdfd08d76a150761c6094776e270833d8d0cb83d2aeb13ecf2146dd46768338b4ecd8124252c2e620fd98b11d50728aed97a475c36e92b07a12792be948e95e3d26d15f4cc7c669d23d93f7cbead515f7f996afe9119415ed3b03d15e59474ba9e3c9a7c1476f3b8f66c099d85689785b712e82316f5afb6e16db12911b2d19b650e547608ea35af216561d61f36c5bcd3af7f64d9c56732f999e6e33c6e63aef13b3cf3ef69c773b4d0def25269296d535dae2948abd7918b95ffcfbce0236dac8b08b91d91aba716668bd5556d1aaf4e50d296af985a52cf35669b3aa29ea192c9fb34c471f65ec7242648c6fe22abafeb2b9bf349276eb55d0a9ec35399d98aa8ecb5613ffe530c6a5b93d4f713f3256e7a74cbf40e15a402df80c2bc287fc7ad1d1f665dba5139f56a865c0dae06048698a886da045ebb6bdddc29755947d090a6cddfe14f23dc400245211d55314160d2d852a659de834af8e24effd2e0396982c03e29fb94d3f10cd8bd57bbbb9e0945d5deacc5b33969aea3f7af0821327b9a976e8e4a82a41635c4137dee27741ccd001e559f6f6165e0b2d8062d352442689e7aa747438412c4a43dab94ac7f839eefe38c81b8277e565143e4a550c122ab0eef1cf3ddb6e41fd95ec763b636ed3aa62a85da14b1278d93d4e0ce8efb5ae1ada9dccc8c07dee130991098521bdba59399f7f0ad5f3349fe60745cf19f84e4f060a1efadd7c0a864177b46ee853a5d51e6da6382228cab564aee9a688f96e4f0e992dbb9be22629204910f4185085461ae92c5fdda4683212b1f8f03d6730dcce43f0932b6ad3866dbaa9e40493889c7857822e8ea1d498e2690bd232e4a383dee59071fe7cbc0db53d23d60ecf1a7adab5116eda840c57440f1e20989202d6b010d0fd58dc57a83ab1f5ee19c79d7d0819995ebaa36d4c952a861c0958911997d84f2c249a0e29f602966adce8f41f9b8bc051bf4c127aa39b26632e81a00b365d6447725311bdcb9db6a5d62aa46c2049fd2d54b670e308c2f62c9c58a6343905f34fb7a12fdadca999ca13e7bbfba72100ec625eec11d9ffdbf898d57ce95fd606aa57e3d259c6889e2af4e4ead2d9c38327b42d68f65453be8f2798df47ae392817ae9ae6200c3659ee9b8622c948943e5aaee24be9d35a333a20a803c18d3a4f18c22018f4a1f4dca3fef010f00150badbf90c04bfcba748329e835eeeb0783cc2f5246b01e853a84e391a9bf0332fd6fac22c64b83987b51040d09110d0b66a24fe213c72281eef8e79021c9b445056bca406ba1a4f805672f724247b7b2d0bc712cac7bf6e7a8d9a3206762633fd663760c4183309e3209a017514f7f23b350d80c009ae501f46e053b2eefde5f2b8a7ee1d3d4128cc1fd9cd8fc42b5504e2176eb802b21ae7a57d6e6928b82982fcf96615bc4d5b3f8cec1e4a6193961ba5493d9e992ffc933aa3e0d2c47b1217e199223d48e69800ed9a4d2fa5d9d4a8f16e86062b0ee2ca9f11fdfb4331effbda733a1764136e192f49a439910d67056cfed89d05558adcdf54e7eb014d510c35250bf6bffefbf7c3f6ac3d4f26fa205b8857f38256378006209644587d4c56a06eebbfe9cfb0d20a214797699a8960db62dcf84595014a8bcd60d626bbfa0d0647d966635f24111f2ce5a9dedadf34f38217879d27c4e9745b068fb0acc30d4b9a78f753aa286a4cb08ee58a451bc47f64b41cd1cd602db92f691befefbd139a1f919d275dad6e4fef7266999f1ec6f0018435b578032eba39a15b0cdc34ee53acbacbf4a7eca103bec5ff72b08068bf2183643fa24ff1aa69d5125a0d1f666d648550193ccb22f6692590ddfac8866f63fc33eb14844ea6b3b4e18bc613c1d6561506f933d1e8f72b7aa43f7c47e34b921459e230ccf7e333215025482e67f1df4db4aedf4566d5783a64c4511367b69d08ee5076878a22c8db871018ea8d581fb5c0f9e6a9e61f2dc9758c06a6647e4f09c1eff6061ab095b76a60a22ec7cb8a5528d218ef3484ac7574a7b3f63915d867e26b155400b50e1cf6a9d03b8a10ec8e2c4768cf1d2c02de656e7114ffc030ced3f94c0dd0b875cb1ad5cd64e2cf318118d50b45254e0a000a2cb09627489840ce0f4f7c9cecb8e19f01ddff7573a4183e4ff4f85991a15dd5c677f940b57667728b53126a4b45b53c25b6bdf6902ff5ab974995709babdeea1a5c484463fe349efe694c02035a2c149eb3fd813e4d71398503d0a4286443891cd0caf5d9450e27c9142b77565594935c590f44eca1a7d0a74d7059e4017d92e3cb53d3a13f6de6d4ab62800ab64afedfe678f500d8ca51c4e88765247fe88160e4c1ebebee15d0dfdcb138f81d290cb77c0270d7a8666de54e0f255454df5877c7b78bc694175a7e6cf5ce997c9776c208b03b6e11df17d1570d17f7614b5c1da400871268e010727ee8c54db25736d2bac7c56eabf0a8a3aa1e1801f00d24b56f2e30559c39d6bdd655c0e2bed036b616bdac6f11feb41d33608bb9d262c069e102e3079b2ba55614ee7ca498311e72897544db3e6dcb2cb3cd6f1ada2b4f71318b2d5b443cc76907774eaff4c7bed9c77fe264058b5becabc79bf185c0b5a3ad7aed92c28326a188328aedc9cf405541cf2ea2941102cfa5b52f261c550753ecc1ce767015e782f74f2ab3b913d7aff321c138368f77239fce68e9205718f9a87cd8590d1ca56659373e18d951744774b69831f0e51f04a1c5a86462b168890f6f5e12fc0248aeb245f26885a504a0962fb95b1448c629c3c3cb36d3d15bd7d56076c867002f9e58e12fe0d2f86b7508215896c839ea071c5507f30737e34d791f4614687dd0aea9c4debdc95a7dd6d436e9baaac51bffad1ada7d683387eabc5fd384c70469c971342599c6c90c90a57b23df95c7730e25220a8f830d9f9f978945859a1267072a8475d4e5e5011ce6144a6eec6d01d2be2cc558bffee47f7feeb87aa4c38aab5938b444e314c2939322fe81aaf0d32ba9d1c43c4b9f85c84e9284a50a169c65e2100064eb587ace01e361ee6c1bad211867dac692932e23e84795bf6cc58dd06fa1c1c31544e5dce729bb25ca3691b9470d5fa26c627e55127a9fdd4028ae2320192c0df9061db198445c0fcadca9862f0c29f3e62898c00479d0e8c8fb1d619c53ce8181d2b14240da714f82c8c50815ce059fc954595036e41d36bca909b6c8555d152c13ef5f4ff9f6fe7ac6632ebdcf19238d11c2359e6ffd7dd2053378e57ba44704eef580aae7cdf553eed5b0c6892b86e522e6a0912c8d9ccfb639e1f6ea7fccd6c9d04a676ce7e17642b61125329665e21aaa704b2679d698b32ae8388f1f7438e6b50b3d1c5dda7958e0be0be4e286a7a37ea3a6863a99bd4056e80a16866c6d6a121f4d936db302d5335033412ada903ad9bc492f3eb61b3384a4a86717df9e517cf593caab9b4ac8b229a80b934783cae88357c4cc7da8f0d819ebd1eb2961acb7b014411d23ee42e853e85f4f3863005a0a8356cacc15a26f90c549cfd307bdc88bf1c5a21778301ebd20054cfed89acc59cf29237e6c382f2e4f43e6eef14dabce06df261e2bcbadab8c60b9bfc684aceece9e1cf2f0b3751564a037aed891c2686547cb01c6982f073cb0b2882860b6daf111a034f5738d3ea1f67a0e7f4097eec1f9c355c6a9cd5646feed86f4ba075969ad71406f56e16fd5f3e05fc05fe18ea724d114aba4a2d7f312fc77b7b0d1616b00a124ded31251f2218eb95fb444241eca65c051205e7c1a04a6096a0cf9b9a8831907d569ec6de4a92610cf9147bfc0838e1b232d1642d16dcfd7de72c0ecd45c45506ec5641b526c40866c465e8bb64656677e8c1c81fbb00e26b8f775065298e6274a8ab8ca63e8c43a90edce5bede53526e7c2d37808a010627635e1b0d397850edcf6108e5ef1d85233be77b3838a4efda50de1662b9ee643416f92be4896bc6636c9eeddc4a87eb2b5e44635331aadd7cf9a49a4218e941dc76151c6d2363083fcd3f9cb5afb32345ad9b307a5625122fdca8b930cb7864362d890ded2df208ffec06085ab9404199ae419475360abec16d28", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe, 0x1, {0x3, 0x4, 0x2}}, 0x0}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x88001}, 0x4000) recvmmsg(r6, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/4093, 0xffd}, {&(0x7f0000002ac0)=""/217, 0xd9}, {&(0x7f0000002bc0)=""/227, 0xe3}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/191, 0xbf}, {&(0x7f0000000000)=""/80, 0x50}], 0x7}, 0x10000}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x20, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x6, 0x4, 0x23, 0xc, 0xfffffffffffffbff, 0x7, 0x3, 0x9b, 0x5}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x20002) 1m17.887001962s ago: executing program 1 (id=134): r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="f67804e83b4e100b", 0x8}, {0x0, 0x8}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nvram(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000100)={0xc, @vbi={0x7, 0x4, 0x5, 0x32525942, [0x401], [0x100, 0x29], 0x1}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x140) ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073634666aa528b74880005400000000d2c0000000b0a01040000000000000000070000040c00104000000000000000030900010073797a30"], 0xb0}}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a01023b03090224002100000000190400020a16d1000905070b00"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0x8, 0x2}]}}}}}}}}, 0x0) 1m17.535156586s ago: executing program 1 (id=135): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x6000200d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffe95, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf1, [{{0x9, 0x2, 0xfffffffffffffd54}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b340000000000000000000009240300000000000009240528d4f8211cfd092403050000000400072405040128"], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES8=0x0, @ANYRES64=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff"], 0x0, 0x0, 0x0) r5 = openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0cc5640, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x33565348}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="28000000040000000000000000000000ffffffd9e4b74a05000000000000005717f056cbf6a619055ad6fe4735ffffffff030000"], 0x28) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e5cd2226b0e8ea4eb5978f6debed9e7785c8701f3aa757a3c7c7654a918dfeb370252f11e19fa94f9c163df507730aa0476983d71f9cf417ef5cb96962ff05a1613409d04f1201c7def9c0c4c14233b7422a9428b4b82a1fe31a4455f0efed5e4e212d3706479b1822065304ca290a5fea707ef5a8495ce6215d3644f1c8685b54f9b0317f2884c6e66a6c0bc0e004f"]) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000300)="603fac48c851800ef69adb4648a0713991e08cb8ca03e773086d2ed8519a20723878af2679ab72440a4858d17d3909cafd6bdf72ee918609e7532bae806dc2def0d1c5dd7b5a3c95b85d7bf21a3093a54626ddd9fb88672359be95a424a60ef02e99a87cfecfc0f5f68002e98ca0cbfe1aab7825a1e84ef78c795bfb75775c14e14cdbf74654166e6f", &(0x7f00000003c0)="eaec438226af8e266484c21c540f471ab48901be3e45cd89cc24edb0a2531d228a494db7fe1a48bed3c6d54c480489b89e3e49aed43204862727"}}, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x19980330, r6}, &(0x7f0000000140)={0x2, 0x6, 0x1, 0x2, 0x7, 0xfffffff0}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x80000000, 0x101000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000280)={r8}) 1m17.072055087s ago: executing program 36 (id=135): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x6000200d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffe95, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xf1, [{{0x9, 0x2, 0xfffffffffffffd54}}]}}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b340000000000000000000009240300000000000009240528d4f8211cfd092403050000000400072405040128"], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRES8=0x0, @ANYRES64=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2cff"], 0x0, 0x0, 0x0) r5 = openat$vimc2(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0cc5640, &(0x7f0000000540)={0xa, 0x0, 0x0, 0x33565348}) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="28000000040000000000000000000000ffffffd9e4b74a05000000000000005717f056cbf6a619055ad6fe4735ffffffff030000"], 0x28) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e0000004e5cd2226b0e8ea4eb5978f6debed9e7785c8701f3aa757a3c7c7654a918dfeb370252f11e19fa94f9c163df507730aa0476983d71f9cf417ef5cb96962ff05a1613409d04f1201c7def9c0c4c14233b7422a9428b4b82a1fe31a4455f0efed5e4e212d3706479b1822065304ca290a5fea707ef5a8495ce6215d3644f1c8685b54f9b0317f2884c6e66a6c0bc0e004f"]) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000300)="603fac48c851800ef69adb4648a0713991e08cb8ca03e773086d2ed8519a20723878af2679ab72440a4858d17d3909cafd6bdf72ee918609e7532bae806dc2def0d1c5dd7b5a3c95b85d7bf21a3093a54626ddd9fb88672359be95a424a60ef02e99a87cfecfc0f5f68002e98ca0cbfe1aab7825a1e84ef78c795bfb75775c14e14cdbf74654166e6f", &(0x7f00000003c0)="eaec438226af8e266484c21c540f471ab48901be3e45cd89cc24edb0a2531d228a494db7fe1a48bed3c6d54c480489b89e3e49aed43204862727"}}, &(0x7f00000002c0)) capset(&(0x7f0000000100)={0x19980330, r6}, &(0x7f0000000140)={0x2, 0x6, 0x1, 0x2, 0x7, 0xfffffff0}) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x80000000, 0x101000) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r7, 0xc0086423, &(0x7f0000000280)={r8}) 1m4.652862778s ago: executing program 8 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4b6e05, 0x0) (fail_nth: 3) 1m4.239646933s ago: executing program 8 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x100, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0xd0881, 0x0) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8971, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) fchmod(0xffffffffffffffff, 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_fuse_handle_req(r5, &(0x7f00000022c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x5, 0x0, 0x0, 0x6, 0x28, 0x2, 0x16, 0x9}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)="27054400240f3c000600", 0xa}, {&(0x7f0000000940)="85625298c2a8c1cdc831d7d987c0734165ba46a8a88bba408abbf312624162b7de33cc9eeb06449cdd32c29fb5eba091347da00208e12562853ef84b1dd2ac1de6952c5d", 0x44}], 0x2}, 0x9cdc2384056b48b8) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'erspan0\x00', 0x3}, 0x18) 1m3.777688735s ago: executing program 8 (id=151): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x646242) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500200012800b0001006272696467650000100002800a0014000180c20000020000f4c03f0eed0444ee638e2a6107f5efc7c7d266470571750a4bb71563b9f170320a45d363316e6cbc51d04fb9ff84fdd88a18b1de1b66fe608641d88be6d227cd8cfa505c88b3e135ea67d8673ea276f478f440eebcb18f44042f301d6b4bac96a284330c90ee5426d806189e6a1da666893bc7a2d62a8092fecc406f0c5eb9"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001c00010045bd7000fcdbdf05ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000280)=[0x1], &(0x7f0000000200), 0x0}) 1m3.379958606s ago: executing program 37 (id=151): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x646242) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000004040000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500200012800b0001006272696467650000100002800a0014000180c20000020000f4c03f0eed0444ee638e2a6107f5efc7c7d266470571750a4bb71563b9f170320a45d363316e6cbc51d04fb9ff84fdd88a18b1de1b66fe608641d88be6d227cd8cfa505c88b3e135ea67d8673ea276f478f440eebcb18f44042f301d6b4bac96a284330c90ee5426d806189e6a1da666893bc7a2d62a8092fecc406f0c5eb9"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001c00010045bd7000fcdbdf05ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x3, 0x4, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r6], &(0x7f0000000280)=[0x1], &(0x7f0000000200), 0x0}) 1m2.956403354s ago: executing program 7 (id=153): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040890}, 0x84) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040890}, 0x84) syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) (async) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x2, 0x2) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000e50700490000240064000000879078ac1414bbac14140c8907efe0000001860800006e49070200d7766f4ae0815b5a753604c0205decaafa9e2af19c801ff72cfed55c"], 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000200)={0x3, "8bfad4366133d17afc0e5378efff4e2acebc714122611319bf5a46304d513872", 0x80, 0x5, 0x2, 0x10, 0x5}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x401, 0xa, 0x1, 0x2, 0x8, 0x1, 0x5, 0x7, 0x1ff, 0x6, 0xffffffff, 0x2, 0x7, 0x3, 0x2, 0x21, {0x1, 0x4}, 0x5, 0x3}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000300)={0x5, {{0xa, 0x4e21, 0x0, @private2, 0x7}}, {{0xa, 0x4e22, 0xfffffff9, @loopback, 0x3}}}, 0x104) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0) 1m2.707502701s ago: executing program 7 (id=155): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000680001002cbd7000fcdbdf250200000000000000080001000200000004000b00080005"], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1, 0x700}) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="120100006f8db4088205e82806f50102030109021b0001000000000904000001fff14c0009050e"], 0x0) 1m0.487781223s ago: executing program 7 (id=157): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x40001) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) read$dsp(r0, &(0x7f0000000000)=""/40, 0x28) 1m0.215761718s ago: executing program 7 (id=158): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4b6e05, 0x0) (fail_nth: 4) 59.641241773s ago: executing program 7 (id=159): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x3, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x92}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x5, 0x5, 0x7], 0xff}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x0, "4917fcb22d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0x0, 0x1, 0x0, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x9, 0x302, 0x3, 0x1, 0xf7}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, "80"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x8, 0x0, {0x7, 0x25, 0x1, 0x0, 0xa, 0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x3, 0xf0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0x92}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x6, 0x3, [0x5, 0x5, 0x7], 0xff}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x0, "4917fcb22d"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x1, 0x0, 0x1, 0x0, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x9, 0x302, 0x3, 0x1, 0xf7}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x0, "80"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x0, 0x7, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x8, 0x0, {0x7, 0x25, 0x1, 0x0, 0xa, 0x7}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$uac1(0x2, 0xf4, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe2, 0x3, 0x1, 0x6, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x13, 0xc7}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x2, 0x7, 0x20, 0x4, 0x3}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x7, 0x3, 0xa], 0xf7}, @selector_unit={0x6, 0x24, 0x5, 0x1, 0x9d, '{'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x3, 0x5, 0x5aaf, 0x75, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x81, 0x1, 0x5, 0x62, "6919", "ee14"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0xd, 0x1, "656c71e9ca"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x0, 0xd9, "8b", "0eee"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2e, 0x81, 0x7, {0x7, 0x25, 0x1, 0x0, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0xdd, "53eea2004a7b5d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x94, 0x2, 0x34, 0x0, "", "ad9b54"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0xa0, 0xef, "6ed37027"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x9, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x9, 0xc2, {0x7, 0x25, 0x1, 0x0, 0x6, 0x1}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0xe, 0x2, 0x1, 0x20, 0x7}, 0xc3, &(0x7f0000000180)={0x5, 0xf, 0xc3, 0x4, [@generic={0xaa, 0x10, 0xb, "b6cb9ea102ca201ef5d87e1d8113757d5bcf8b2ddfad763fbf814bbe240d378b8af3a5861e45ca22baa108f83b925d7382b7f45d91f9c9a34a6cb52f4561324198939b36d7babac0f225054c0a22d3314cfb7c7ab5d808379fb6148aca3e45470285501644e4e28d9e78722c8deed29518dd21f6c2b1679ec38d898fe78efbd3ad9c655245bb0e605bb89369404af705514b5e607594c17daf707f9edd9021c41481998b8204f1"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x8, 0xfffc}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x5, 0x13, 0xfffa}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0xc, &(0x7f0000000300)={0x0, 0x69, 0xd9, {0xd9, 0x22, "daf0455533374c49f5b03fba13f994f28be836b20d236c6fc11bf443a2ad44218a78c51a6db0c865b44090739ffc3dce06746a245c672e4bbee1020c74ce893808dec9186f8260b371cdac4d56dc43129e908038d4e21fdc98c20baa39cafd7a768cc1cbc67a7e75cb09fe0f9b07010dde1fbb861ab70834e254373f176c9d444ecadd0a4f9b8c80f62a907b122aa8d7ea1c0e9640f2746389bfc4ad8325588dc69b96a7e73f94b5281c2a0f1742e799e28dc2ed1d08a2704f08a0716e81f3a3a83f723e6ba1bbfd1ad4ad3aba9570a6a1a7de875ec0cb"}}, &(0x7f0000000640)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "a009f50d866d7f7c786fa69ff2aa7b06da6e84cc75632caa91849beffcbd543a7cd1653cb9678f026e58b0f3d5e4fa8643863d2c51b74f243a2314db9b524ed73743cf646ec7a842d9a50a2bdfea65230a64c8d2bd66762b2a9b5bf72539b9b779ec4bb4c282edee66dbcd3fc2c3f9044c3f5024f233e9653e254efe547498cc6c4bb5c12f20a4f5b62fb1ab0a787082eaf84b48389b9af856506d24fbe94ec93255a9090519b118f99d6ffd91744e00e261d95374"}}}, &(0x7f0000000980)={0x24, &(0x7f0000000700)={0x20, 0x11, 0xb6, "3ee2c78ceef0dd3e98cde522dc6c1890d9dbefe9c4e5cb6c010c9cb6ba59c5707b948335e6c46612ba070f320e7d338fce6e12193d214f5f8fbb9b164d030fe1f2d68caf0b29bf4e8f41df4f7a75ac64fda0418df03f2b75ae6d4ea5ffbea0c080ead1a4be262912c98aca4a23598b092ff169fdcb02766324d7b8f99b77cfa98d48d288247608c703aa32f00eb95ae5378ac678ad21476ad79c84d43763b50c83c7bd363c83c84248b7ad8e10a80d9bb4485894501e"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000800)={0x20, 0x81, 0x1, "ae"}, &(0x7f0000000840)={0x20, 0x82, 0x2, '\x00>'}, &(0x7f0000000880)={0x20, 0x83, 0x2, "b119"}, &(0x7f00000008c0)={0x20, 0x84, 0x3, "0afebd"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "c0feb6"}}) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000ac0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e7180520") r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) io_setup(0x9, &(0x7f0000000040)=0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xfffffffe, "4206ad063ff47d1dc9cb00004000fd8b00b1000000000067cf00"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xfffffffe, "4206ad063ff47d1dc9cb00004000fd8b00b1000000000067cf00", 0xffffffffffffffff}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, 0xfffffffffffffff9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) (async) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffe02, 0x0, [{0x2, 0x3, 0x4, '\x00', 0xff}, {0x40, 0x9, 0x0, '\x00', 0x7d}, {0xfc, 0x16, 0x6, '\x00', 0x2}, {0xb2, 0x6}, {0x0, 0x88}, {0x0, 0x2f, 0x7, '\x00', 0x3}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x1, 0xf7, '\x00', 0xfe}, {0xc, 0x6}, {0x0, 0x8, 0x0, '\x00', 0x3b}, {0x5, 0x9, 0x2, '\x00', 0xfd}, {0x3, 0x0, 0x2}, {0x3b, 0xfe, 0x6}, {0xc3, 0x9, 0x3, '\x00', 0x49}, {0x0, 0x0, 0x80, '\x00', 0x15}, {0x3, 0x0, 0x4}, {0x0, 0x4, 0x4, '\x00', 0x10}, {0x4, 0x0, 0x6}, {0x0, 0x5, 0x0, '\x00', 0x2}, {0x2, 0x5, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x10}]}}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x0, 0xeffffe02, 0x0, [{0x2, 0x3, 0x4, '\x00', 0xff}, {0x40, 0x9, 0x0, '\x00', 0x7d}, {0xfc, 0x16, 0x6, '\x00', 0x2}, {0xb2, 0x6}, {0x0, 0x88}, {0x0, 0x2f, 0x7, '\x00', 0x3}, {0xfd, 0x0, 0x6}, {}, {0x0, 0x1, 0xf7, '\x00', 0xfe}, {0xc, 0x6}, {0x0, 0x8, 0x0, '\x00', 0x3b}, {0x5, 0x9, 0x2, '\x00', 0xfd}, {0x3, 0x0, 0x2}, {0x3b, 0xfe, 0x6}, {0xc3, 0x9, 0x3, '\x00', 0x49}, {0x0, 0x0, 0x80, '\x00', 0x15}, {0x3, 0x0, 0x4}, {0x0, 0x4, 0x4, '\x00', 0x10}, {0x4, 0x0, 0x6}, {0x0, 0x5, 0x0, '\x00', 0x2}, {0x2, 0x5, 0x0, '\x00', 0x37}, {0xfd, 0x9, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x9}, {0x80, 0xff, 0x10}]}}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) (async) r8 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) write$rfkill(r5, &(0x7f0000000a00)={0x4, 0x9, 0x2, 0x0, 0x1}, 0x8) (async) write$rfkill(r5, &(0x7f0000000a00)={0x4, 0x9, 0x2, 0x0, 0x1}, 0x8) r9 = syz_io_uring_setup(0xd6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x3b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000}) io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000009c0)=0x0) fcntl$setown(r1, 0x8, r12) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x9, 0x0, 0x1}}) 58.490070022s ago: executing program 7 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 32) pipe(&(0x7f0000000040)) (rerun: 32) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000740)) 58.282405203s ago: executing program 38 (id=162): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 32) pipe(&(0x7f0000000040)) (rerun: 32) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000740)) 57.239213887s ago: executing program 9 (id=167): r0 = openat$pidfd(0xffffff9c, &(0x7f00000000c0), 0x3d1940, 0x0) process_madvise(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)="acb08f5cacbda304e04b02cd53675a37e7db1ca490b6b237c1c4f0d736fc61547b720d8cd9fe2b2cb395e76e212f51091e1e3c1b455052f56520c77cc867625f3e22d4601d7890c6eb96c8f93e7fc415d499d966ad997dd27335faeb134309706630d0c687cd1a9076bf353da22c9d1331bc875f74a7a0d383fb90133a5460dc91fd559191", 0x85}, {&(0x7f00000002c0)="876a97c042115c799ac68ecd44b98991f524137f90eeed13ff33bb0f3f72b6a4b03005801824137fbb065916", 0x2c}, {&(0x7f00000004c0)="563938751542b90dc6f2ef8cddfca89c89ac23d2de603915ed1b7805f8295e2b4f2077d50c7d3f5f6d29dfdf1684bf89326f37b93cd3c32dff", 0x39}, {&(0x7f0000000500)="d9ff821751803e3c1750d8410231730b6b6abee95f6885784be603", 0x1b}, {&(0x7f0000000540)="81f260", 0x3}, {&(0x7f0000000580)="ce0e936e0d9a8dccf6ec23fe7787d989feea38d972cace94a1d34494cb5fcf4ae66f", 0x22}, {&(0x7f00000005c0)="fc175945598a897fb7aa9d77ee3ad07fcd622ff332cd678865dbbc9c26b43db9e02b06ffe2727c86c891f44855406b0565ad8c25abe7c4322b6d537a15364e81498f104d07be61b99023242eebf521e5272404bb0c062a4474837a76ab61ab2b80fa9f6fdda59ab32c12ad2225e330da561c20cceec52e49a084e43b808c042fc06a02328819175df0475381", 0x8c}, {&(0x7f0000000680)="56104d9425d6664e89a488846dd93fcd19e4c64fbf080cd4376b99c03b66", 0x1e}, {&(0x7f0000000c40)="db0807b4611d9aa0d741b05d4792902134a6574f2e31cfc0b4ec765ec3a8dd86d3cb4846c9769fe2aa3cdd2656f14c6029a6f96f0bf862464e3fd4a795325c3abddcea291f8cbde3fecdc37972728c6bf3ef0734bf566c75f40d19c7e088d59bcaa3d2af78570d961fa9f44d2a3919bb09a1e7dba4c12a144508e09de7298191213b63eedbfe170d3d7bc9b60d4617a201c7020797b8749e3057990610fda46fb19b982e6b44d9a709e318894eb371ea4d8a8342dde06748bd0449650c745beaaa44107309b60b474caae420581fce431e608d86fdbf8cb617bb155bfab5c9a75c5e7e33ef0f788c05911ad77cf01159aa712a25232bf8dfc50db40cd770ff0f2b4040ea8597da19f1f42bb5607ab6c3e5c91b06e81c2dd9128de5608d4d12a94648251356884763bfee42b09738bd203fe0913a3656539c8a47c5894a29d0ac993f9315e810f18ca5798ef51f6b3ed9791c4a1408fea342a388ff33b12cae602f20ef1ec9db306cf80c5e99051ca026730ca5042283c3775409085cd3a285ffbe44e3eb5d9721603567d6ee3056371c1eed324f12da769fe6c679b3eee6b8e1719569d64b2c83d36e7b3e09f87e89a0870be0f2b8f5c39152a65a07c41f323e4c7d7db6104568cc2479a06f1a492e3c15b144f3e6853dd3d940f23a60c32434f0aa85386dc2f1b7236a352a91493713366cab85f251c909b029bf06cc9ed5397dae2c372c4d706c633f83606e839c800acbaf1d8f204a062b9e17509990550ce005960acc1666cd5df6c965ec927cd313487aae2c6de638aa126fa2aeb68fce6ed30667a084e0f8240fb49fc91743b473e9fe9c21bc485d2565b5f52c52611ae281d1ac32a29f7b8353e546c6414de20786701e4f999be4596f6b2241e3a373f2bc526f7ac2666eb4312f5f4e1f03afa5b8b4efe4c0dd6fa00a0f6c218d90f4f9091651dccfbd756caa40ec257b52acd179c9282cb8a278e187421f92ce1a544459ba584ac68be33a46f48440ddda3cdf345821773b5aaed4041688989cda4f7879a01ff1fd927a4ea3f6ff80776626fbf3b11df0e160220fbd70452735b9e9aecf9b17caccf9d2ecc9b30eb93d8823c301f10a1793962d70aca58fd4c96d47c41b3fb9d49b6896b010be6f7067d4736d6d8b94c958cd7d887352c41bb639d831917c6abda4faebc9c5eaec92c00f393f98f929939964a505d91c8c0fc9266ef4b3d38434fbd53952501b156fe21647e4fd87b9c85f7cb20969b37393d9ea932a2d99c6a797fc5ad39c20025bff03e25483f788c5cd5ef1b57aba79881ecc9dee39cd9cffd64c82e92fff2fd760670a10431d1e50801261fd6bddf118d4dc81cdc09792045d259a854020483c32f48e60ea5ddcdc0d3ee0ed43a3c727c5dc9980c31fb6b8999b8f15abf246decfb8f93caac8b2fa689c7941c856e4e63959d7bb65c9fd4974b5cf9d4ec769c4b1d640f48ec1540c8d5d4b7947d0772dec7cd5a040b7024f7f5fbaa6111cc0d9030683f9090e253e116e42d7a24b1e33959bc51df2a6f956bb10f1e8bd9de30e53ca7044dd176ebc86aeaa1489cbb68b68f98de86bcf25770405c7e589398a0fab49313aa4d063a47e0101d769a1b4a6c5eff74c7a0754d02f2ddaa9d2cea00610acfedca5dbc6348dd0a66d423eceb9eacd71b55beb980da6c682016a198491cbd23f86edd6ef59483371e89e242c81387b498be1f04fc1f0fb96b4e3b1a43366b7e3073ddfe62b9f417e09f163622bdfa6e64ab35ad79e437bf2111ca2f1e62b75825134b2047696093b9a251714d36fc3b10253fca582b8de082381b57c6038e52a50848ef5b6eced9656e06d5937de051b9aaee60b1a987198926dcc115408285c09f9622f3da92e34bebd9ab55cb4527efc99290023d18bbde5cda2cb969abb97b8cf0f97dbb7dd20ae5903c419c73c783fe0f4e13ab5599b73c79785f4138bbd8ed975e7b80d3175748b190e537df30e4c795da4fe0d15b21296d9111c7a385c65d80ed1ad9dacb54dfb96ea5740e8de8f5810996a2e79996b572fd18fc8240d0aae847f31724bcb5b1df6284db83ac7f25a720aea2f8285c203b4940f98805f46139bb9af3da204ff6857457d1efae211a104867e28fa141a2af4be622fc1fb6a413c20a5fc34316ccc962a10b2c863bc1fd0b2dac319f26a9954ee743a79d4f51f724d259519db740172cd513cb9b2ebe8179253db8673d67728a98c2b6c6605f78bc31959785edb3634f4d731a1a81f29af1bc9d93944dfb103788515ad8e28c44c2369c04bcd853bb28905ef7176fd81cc590b90867b6e75c2c776ef0830070034016e9801d3e2433ec47170e92bfd46dcc56718c8d887914bf3115900ec175a9e9cb66d4fec555db40da7b83f554f0bd2658cbe8e9473eadea43d21b02dbba6c7cc2019d88e22370eba3989550c78dad4fc83363a315595a706d496e9746cc3bd1789ec3059ef63b85b59ff90ccd94e686be8dc184bd6ce095d552a1cd788ed6738134ecf685758f8ada92fa0775656da4ac66b7f369b855027f6e3f14e51930e2afa0d3501918fc6d627ef8304b6e56f333d202bcebf26a5a534081fc1f0cacf43329459906439d954883212b61a60cf2a06954b8a7b7d271b1f4cb4f3ddd12d26b1d214d369f6c5d7e848c6afe2246acfdb47c96e4e3ab812c1ea1ac2fb8b778246f927dd5bdccff9a57c0ba2dfee0c4f99e0309341af5593cc99cdf2246076196f954c86952146a8a763d7fc86405bc26e422a34baf7294ba7624ff7255fa3ad1c6adf3ced76aff76c799aef0daf8702827ab44c55b9bd02cec546e4e6eec18d0ab4acafbc6ea3fb83c7a536edc968bc249e9e43efc975d4d5915bf5a5e7201508959265466db8609d3e08ab309886d2668de83bc086298875cd3cab26dbd50bbd1137da5492ae9edf30aae4a9c39df8597c93f7054624d56fa74eca18519e1f71e0242b37166b22c42fea3163f4504d6b2ca973ba58f83b844a2e7df8578074273bc6b75611a838cde7b07012ae8308e9cac57f6dbee53a12611dbccf54718f65f5223d6fc108094e7b9d05aa131dca5dcc6cfd5484855b2511e3119a6bb126a8123e0bc976a32cc46d42ec1cd47b3ff2a8d92c38999acbbd55f200c1d264c482b90fb0706d802f3a19d94d79f1b9ae3ea3e54db2b03e25e775aaa2f042b0f69a834d9790947e2e73b7f0442bc2b328a5d28d33400861b55584b3bc918c661e2a738af3a1a4d61c8c15e7ab01774cacd4962906502512f5824d6bc452f765a7ec3f1b0b72ce406311cbdab585fad75841f7438d6ffc988335c9a517a767db26e589d6825bbda17dd4ff74271980bc87fb8a2bfbf94074c14ce006731ecb2d649c3a9501ccb305a16b25c184d3d2a146e0a671613da7399e1bbf36010421d87e161fcc560f33950c299666d3a23f87afb091c3e26415673d126e3d8dd07956505fb75dd0372ed90e8d38c8fd716996b8bcf39cb989f191c279786120bd4afa2c12077b4323fe7182148305d4252ba2400b4c275deb2880421955dcd4d8f074ffa86581412a81a9e3a2f2188a90fd914ad6cb178f47e5274ac841aa15a4a1db23bef259235487b009192d803afdec4fd46054a845ebcaef7e7fdc0d0c0aa4256917b3d3177d001c7f6e1c3d7974dafae821a18c70c42fd10f2857b0c0a34787e20deda6fffb13f71c4bdaff93e00f23ffc583cdc64cd091760f30f5190f3996c41c8eef7269b1a011ff558c360ba59d93f284755587f53b7b6fa8d0e75fa8de5e581881c5f3eb4519cfc6a4dfc5a11a31faa917d19c330905b478607f24415ef98fd5bcfaf8cf382b6cfc9fa08221c7c27c082a18292f6a5d59bbb5c154f1debdf382abf3cb32295faa29e973ce4152e4f7d887e901083883e43240d52996bb08352e8a971ff431cebeb75b87e7f6bbd2cc1463d5c5b0dccef58503b2f542233a5d14d6e005ea12ecb80b2dc6ea1fe1cecb971f92bdee526d5e0c2d410c61b0d18d6f0518b26cf92a98582986fec453630dfc0186c8bb2603f419be2dbb25d0946b6f381c05435e45c6199bdb8257702db59b21e7085dc94da0ff96901f462e4d7350766e6a22ec1e8cf7dcf6915ce66a5b469540987ba6235f6a1ade2d714c8ad30d8fe824c8594c47495e56e237011f559ba5f1c18c6f7ae275dd4b46a1c8ffbbd12c728f3db1de04289f7affe1c85a83bbd0b53b6c91850b7270be6caf8663fd120af6cb2ed1d5831a408894f637bf6465e4e99a05d0451ee02bed95a7bf6804c32e961c9715621a4b05e214b1456b99f910eead8631433dfb452b013e461a8929e59a039fbf6a07bd82741c8bfadf2ef9ce60d296ad8b65192beb10e54cf4d547da42912f7167f164e1526dafa1bc1eb5cdf04032ae1380742d017772c3fbc98e3e2b08719fc8f60ca34f2a4d70a75f82ff7f012d8d2786702f407d5d7a2e200fbe756eb866e27a2139937d6f1b8ea21b9561395aa16bfa9903e69bb6c5fe1e2f5e1240b4fa15409ce48fb827596e2b5f7e5418f5d881a4f709019e6a1a0f0dfc9ba104b9a9ba54e208be5b6aa18e828897784221b4c00efa41afb495a5e4e9732e3a66dc7e90db97a87c630a4378e8736792ec07aa417e53029f3172548fd8e62ad8d5e01ea00cc2c0f18fafd9ba111b95cbca269cc9da7bca2a2373aad54055f409bee5b19d40dd9cc74dc801c323b3410ec96dfc1826bc7fd766fb49ed62daed9a92fcf657b54e8dfa2c62ca44cc5c30dc4bc9b3559a31390ae928b8d7eaa84cece472016ccbdbfb15f832458f102c6403dce540944df9bf98914d88cdbc3663046a141a4532b43719605f2b46c640a17c64c126c5eea86246f52d40a8fea73447cd328539c4232002aaee1ad3fb1fb626ce66b8ee2effcaa0b489bcc5de647c8397773b9e9a40d28b590e98cfaa2fe3a3fece0649b9eb7328058ab814def9f7029b2f3f40b7eaf0d30b9b00012b7eb3c6b50dffdefbf576d6edb0941785775b8b5b4553f18adcaae4d73292aa2b7ed7ec65445a0115e90e079258ae948b3e8d24097b04a1f27af5c90bebcd2e90110a2f764f6abd0fb19b0877d32cfed52daa0c3c9b437f32674513cd9dbaad5246c3879f63411438e03c22a1ebcace08fbf34d73602bcda09f144dbb2f9451d0fb96f97315b63f681007fc543e4cceb8f5c667a29b504752d06ddc248b2db6c78a96359b179f7f5f5e9f47feac53018da18232abd6281829d0fbd0f596ea5f5dcb98747a7c4605adf12597746eeae361394bbe976d2eaefbd14ef4ee25301c48dde47db1259ec10fca804fe9d43db8de68a5515c65b0816bf27ef09720185b30735a305d3c9a3adabbd18c89d1991e318991f37bb0223f7bdf842efe471ebf7703cc748133c6f8e894de484ef142a0a7c61fdca60efeafe41ea86a7133e6311d23b6d045be3c129b3429a95fb1d0b6a1be4b710bf5df4554b82dff12ba4c14713dbf9613e6dcc2d334077686212d93937d1f9868bd034ed7f9d1cbd17ba5dce99dc7be73102a05486aca37c16604d4a6c40554df24b3f71c04d854c555026f82fa038fd59fb37703d1a7d4d76d799091b4242932916f54ceec58cbaac9f1205ebd7dcdfc5e2bc24a62dae4f8ae6ed407aab87de77be911e0a9061dcabafdfa0fc63d27a4d8017ba8bb6ae04276f2ec52abe24e91cb6bd07547e3e0ae151a03f880e50a12832a9f29cd38741ed8c9170264bb2863e2765e5dfabd7c7aa3a4943ee7af5f5a339f503f458039b7ba0dfd23f38764ebbcd26138ba2037", 0x1000}], 0x9, 0x14, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstatfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000306020d20c50f27124af40102030109c4823052285e6e1b1ec08c6c021b00018103800309046f0701971a4a08090505020004000502"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="3103c00e0000fbdbdf250b00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0xffffffff, 0x1000000}, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0xee, 0x67, 0x8}}]}}]}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600000000000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000200)={r9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={r9, 0x1}, 0x8) 54.072491021s ago: executing program 9 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x41, 0x91, 0xe3, 0x10, 0x17e9, 0xd52, 0x9b89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="0b036812e0ff6b000200475400f6", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 52.590745371s ago: executing program 9 (id=176): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0xa, 'gLB!'}, @global=@item_4={0x3, 0x1, 0x1, "0600"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) syz_usb_ep_read(r1, 0x4, 0xba, &(0x7f0000000300)=""/186) r2 = gettid() r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) (async) rt_tgsigqueueinfo(r3, r2, 0xb, &(0x7f0000000080)={0xfffffffc, 0xfffffffd, 0x3}) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "0cde1c9f", {0x1, 0x8, 0x7, 0xef}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0800004a1537ba04001c5e2b"]) 51.304297212s ago: executing program 9 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10800, 0xd7) 50.293711544s ago: executing program 9 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f0000003000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0xd}, 0x1c) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3b37126e", @ANYRES16=r2, @ANYBLOB="070000000000fbdbdf250200000004000180"], 0x18}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2b, 0xfd, 0x9, 0xd6a, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x700, 0x700, 0x8, 0x4c7d}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000059020000fe00926e35"]) r9 = syz_io_uring_setup(0x625e, &(0x7f00000004c0)={0x0, 0x932c, 0x8, 0x3, 0x245}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}, 0x0, {0x0, r12}}) io_uring_enter(r9, 0x47f6, 0x880e, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2) pselect6(0x40, &(0x7f0000000780)={0x8, 0x8, 0x2, 0x9, 0x80000001, 0x5, 0x9, 0x4}, 0x0, 0x0, &(0x7f0000000840), 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32, @ANYRES16=r5], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000400080005400000000d38001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008330001800a00010072616e67650000000400028008000340000001", @ANYRES16=r14], 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20050840) r15 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r15, 0xc0405602, &(0x7f0000000040)={0x47, 0x2, 0x2, "ffffff0700000000cc000000002000000200a1a9550500", 0x31435750}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') 49.917795244s ago: executing program 9 (id=185): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b93104a4ff4df", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcdad959f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x4, 0x7fffffff, 0x7, 0x8}}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7fff, &(0x7f0000000540)) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="0006040000000000fc02000000000000000000000000000000000001fe8000000000000000000000000000aa"], 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000200000000000000000000071102500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)={0xfe, {{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x1, 0x8, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e24, @remote}}]}, 0x48c) write$P9_RSTATu(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) syz_open_dev$video(&(0x7f0000000000), 0x4e, 0x490000) 49.37122983s ago: executing program 39 (id=185): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'vlan1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b93104a4ff4df", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcdad959f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x4, 0x7fffffff, 0x7, 0x8}}) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x7fff, &(0x7f0000000540)) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="0006040000000000fc02000000000000000000000000000000000001fe8000000000000000000000000000aa"], 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000200000000000000000000071102500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000080)={0xfe, {{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x1, 0x8, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e22, @private=0xa010100}}, {{0x2, 0x4e24, @remote}}]}, 0x48c) write$P9_RSTATu(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) syz_open_dev$video(&(0x7f0000000000), 0x4e, 0x490000) 35.789997997s ago: executing program 0 (id=223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000004c0)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x68c, 0xb57}}]}]}}}]}, 0x44}}, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x400002, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r4, 0x503, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x20000080) 35.229995427s ago: executing program 0 (id=225): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfe, 0x7, 0x12, 0x40, 0x1781, 0x938, 0x9b49, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8b, 0x86, 0x47, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xa}}]}}]}}]}}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES32=r1], 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 32.019824245s ago: executing program 0 (id=230): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000058000000030a010400000000000000000100000008000b408000000014000480080002400000000008000140000000050900010073797a30000000001c0008800c00024000000000000000020c0001"], 0xa0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1c, 0x8, 0xf, &(0x7f0000000200)}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000058000000030a010400000000000000000100000008000b408000000014000480080002400000000008000140000000050900010073797a30000000001c0008800c00024000000000000000020c0001"], 0xa0}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) (async) read$FUSE(r1, &(0x7f0000002240)={0x2020}, 0x2020) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1c, 0x8, 0xf, &(0x7f0000000200)}}, 0x10) (async) 32.004213306s ago: executing program 2 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2b0300000000000014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500160000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = fsopen(&(0x7f0000000040)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 31.811879071s ago: executing program 2 (id=233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x4, 0x0, 0x0, 0x8}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x8}, {0x6}]}) 31.499567814s ago: executing program 2 (id=235): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0xda386e0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, 0x0) ioctl$KDSETMODE(r4, 0x4b3a, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="ab", 0x34000, 0x26000854, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000640)={@random="39c78016ee9f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x2}, 0x8) fsopen(&(0x7f0000000180)='smb3\x00', 0x1) openat$dir(0xffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x1d0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x209, 0x40000032, r8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x2, 0x1, 0x0, 0x7}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x80) 30.783148964s ago: executing program 2 (id=236): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x1c, r0, 0x101, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000085}, 0x4000884) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x100) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x88, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x22, 0xc2, 0x0, 0x0, 0xfffc, {[@mss={0x2, 0x4, 0x5}, @sack={0x5, 0x22, [0x64bf, 0x7, 0x8, 0x9, 0x9, 0x5, 0x16, 0x8]}, @nop, @md5sig={0x13, 0x12, "363428c850b9188497d34366d6727cc6"}, @mptcp=@syn={0x1e, 0xc, 0xa, 0x1, 0x2, 0x40, 0xfffffff3}, @generic={0x22, 0x10, "57def6609799a311d4bce8d45998"}, @generic={0x4, 0xc, "1ee48df4811b1999cc76"}, @md5sig={0x13, 0x12, "5186a1ead5b5db0e175698d4e2f1510f"}]}}}}}}}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r0, 0x400, 0x70bd2a, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x40}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7f306700e099"}]}, 0x58}, 0x1, 0x0, 0x0, 0x408a1}, 0x810) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000200)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4b6e05, 0x0) 30.727683716s ago: executing program 0 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async) r1 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0xfffffff, 0x1, 0x2, 0x401d2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c000b00050002"], 0x34}}, 0xc000) 30.42604489s ago: executing program 0 (id=238): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002209000000675a8000c511d72f82b2d8f63f87b2042f1e325f61af15552f06a06dffdbf7"], 0x0}, 0x0) 30.13252102s ago: executing program 2 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x5}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x4, @multicast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x110, 0x1f, 0x1, 0x70bd26, 0x25dfcbfc, {0x4}, [@generic="b56f58a958267ed3fcdaeddf29b7dcac1168b37ecd3cc486a84f1e0c86d6e4182c3f2ae902661ca2ee0c4a32b385c73ed00002f968934e764e53d516a836d6d097c1ea71f91160225bbc742aa597b8c4e842b29bf54c88e04bd7311060bf2a8821667acc24cb3f896af02b51f40735fcbaccc083795d309c34d45b3270269d53e260709e3e8282e63b6a3134ebb4838759da31fc44e53ad4206d9c28761e87127f0b934f7e5dccd3fc36f8e34c309a05189bb69adb313b12b438bb89ffc5b3571395e3927c7a18d692f16a5f1b4751d08fc8aa5efdc28a7aef45cf24615231508f9c60dffbc091df572e4bad", @typed={0x8, 0x9b, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x138, 0x0, 0x0, @fd}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000904fcff", 0x58}], 0x1) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)=0x81d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r7, 0x1ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$netlink(0x10, 0x3, 0x8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) listen(r0, 0xe) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) poll(0x0, 0x0, 0x100) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000080), 0x0) socket$inet_udp(0x2, 0x2, 0x0) 29.806316301s ago: executing program 2 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x400000) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000400)={{0x6, 0x4, 0xfffffff7, 0xf}, 0x1, [0x3, 0x7, 0x7f, 0x6, 0x3, 0x7ff, 0x80, 0x5, 0x8, 0x1c, 0x400, 0x6, 0x6, 0x80, 0x7, 0xc4c9, 0x1000, 0x9, 0x2, 0x12, 0x0, 0x3, 0x68, 0x1, 0x2, 0x9, 0x8, 0x9, 0x0, 0xc, 0x3ff, 0x4, 0xc0000000, 0x6, 0x555, 0x1, 0x0, 0x7fff, 0x5, 0x5, 0x7fff, 0xffffffff, 0x8, 0x7ff, 0x8, 0xfb97, 0x200, 0x2, 0x7, 0x5, 0x5, 0x4, 0xadd, 0x1, 0x36, 0x10001, 0x8, 0x0, 0xaed, 0x62, 0xfffffffe, 0x5, 0x9a, 0x9, 0x9, 0x822, 0x8, 0x9, 0x7b94498d, 0x8000, 0x2, 0x7, 0x3, 0x6, 0x1000, 0x6, 0x9, 0x6, 0xf, 0x7fffffff, 0x7, 0x4, 0x2cfa, 0x6, 0x1, 0x7, 0x8, 0x8, 0x2, 0x2, 0x7, 0x6, 0x9526, 0x1, 0x4, 0xffff, 0x7, 0xfffffff7, 0x20, 0xb, 0x800, 0x4, 0x3ff, 0x0, 0x7, 0x9, 0x2, 0x2, 0x6, 0x4e97, 0x7, 0x5, 0x401, 0x6, 0x2c1, 0xd, 0x40, 0x4, 0x21, 0xfffffffc, 0x1, 0x4, 0x10000, 0x94, 0x9, 0x8, 0x9, 0x1ff]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x40080) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x40080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd4, 0x14, 0xfb, 0x40, 0x582, 0x4, 0x6b64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x6, 0x1d0, 0xa, [{{0x9, 0x4, 0x9f, 0x5, 0x0, 0xc2, 0x4c, 0x82, 0x2}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xeb, 0x4e, 0x1}}]}}]}}, 0x0) 29.09734591s ago: executing program 40 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x400000) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x200, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f0000000400)={{0x6, 0x4, 0xfffffff7, 0xf}, 0x1, [0x3, 0x7, 0x7f, 0x6, 0x3, 0x7ff, 0x80, 0x5, 0x8, 0x1c, 0x400, 0x6, 0x6, 0x80, 0x7, 0xc4c9, 0x1000, 0x9, 0x2, 0x12, 0x0, 0x3, 0x68, 0x1, 0x2, 0x9, 0x8, 0x9, 0x0, 0xc, 0x3ff, 0x4, 0xc0000000, 0x6, 0x555, 0x1, 0x0, 0x7fff, 0x5, 0x5, 0x7fff, 0xffffffff, 0x8, 0x7ff, 0x8, 0xfb97, 0x200, 0x2, 0x7, 0x5, 0x5, 0x4, 0xadd, 0x1, 0x36, 0x10001, 0x8, 0x0, 0xaed, 0x62, 0xfffffffe, 0x5, 0x9a, 0x9, 0x9, 0x822, 0x8, 0x9, 0x7b94498d, 0x8000, 0x2, 0x7, 0x3, 0x6, 0x1000, 0x6, 0x9, 0x6, 0xf, 0x7fffffff, 0x7, 0x4, 0x2cfa, 0x6, 0x1, 0x7, 0x8, 0x8, 0x2, 0x2, 0x7, 0x6, 0x9526, 0x1, 0x4, 0xffff, 0x7, 0xfffffff7, 0x20, 0xb, 0x800, 0x4, 0x3ff, 0x0, 0x7, 0x9, 0x2, 0x2, 0x6, 0x4e97, 0x7, 0x5, 0x401, 0x6, 0x2c1, 0xd, 0x40, 0x4, 0x21, 0xfffffffc, 0x1, 0x4, 0x10000, 0x94, 0x9, 0x8, 0x9, 0x1ff]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x40080) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}}, 0x40080) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0xd4, 0x14, 0xfb, 0x40, 0x582, 0x4, 0x6b64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x5, 0x6, 0x1d0, 0xa, [{{0x9, 0x4, 0x9f, 0x5, 0x0, 0xc2, 0x4c, 0x82, 0x2}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0xeb, 0x4e, 0x1}}]}}]}}, 0x0) 28.897776714s ago: executing program 5 (id=243): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200002}) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004000) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0xa, 0x81, 0x50565559, 0x4, 0xb, [{0x200, 0x1}, {0xfffffff7, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x8, 0x9d8}, {0x10, 0x4}, {0x1}, {0xfffff000}], 0xcb, 0x9, 0x8, 0x4, 0x6}}) 28.392622294s ago: executing program 6 (id=244): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffb, 0x200000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000080)={0x1}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffb, 0x200000) (async) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x2) (async) 28.154096056s ago: executing program 5 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000080), 0x1c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffff8, 0x1, &(0x7f0000000400)) (async) timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303, 0x39}, "2f9ba2ce41a730cb", "37a0906df45a6f4f40b151634357ea00", '\x00', "de3f106b925ded4d"}, 0x28) 28.080860051s ago: executing program 6 (id=246): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) r1 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b00010400000009040000026964c2000905040600000000000705569e"], 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x2, {0x5, 0x6, 0x5, 0x4, 0x6, 0x5}}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x400000000007, 0x200000000000001, 0x5, 0x3ae9, 0xc7, 0x2, "0200ffff1d84000000000000f400", 0x8, 0xae, 0x6, 0x8, 0x9, 0x0, 0x40}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000140)={{0x2, 0x1, 0x3, 0x1}, 'syz1\x00', 0x2f}) 27.834235166s ago: executing program 5 (id=247): r0 = socket(0x1, 0x80803, 0xeb) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x40000002}) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) (async, rerun: 32) r4 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380)=r4, 0x12) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) write$P9_RSTATu(r3, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES16=r7], 0x21e) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200291b"], 0x14}}, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='a', 0x1}], 0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000001200)={0x1d, r12}, 0x18) (async) connect$can_j1939(r11, &(0x7f0000000080)={0x1d, r12}, 0x18) (async) sendmsg$can_j1939(r11, &(0x7f0000000380)={&(0x7f00000002c0)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0xfc}, 0x18, &(0x7f0000000340)={&(0x7f0000000300)="2762ffde96c02039aa", 0x9}}, 0x0) writev(r11, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0xffffffff, 0xffffffff, {0x0, 0x0, 0x0, r13}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 27.537905831s ago: executing program 5 (id=248): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=ANY=[@ANYBLOB="240000001400010600000000000000001103"], 0x24}}, 0x0) io_setup(0x8, &(0x7f0000001f80)=0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001fc0), 0x802, 0x0) r2 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = eventfd(0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@ipv6_delrule={0x28, 0x21, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x8, 0x10000}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40860d4}, 0x20004000) io_submit(r0, 0x3, &(0x7f0000000240)=[&(0x7f00000020c0)={0x0, 0x0, 0x0, 0x1, 0x26, r1, &(0x7f0000000040)="2419f7da60133ab466447b03376cedb524", 0x11, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000000080)="8de8b451b4934f8946acc56b7075cb0b94eefc9c451f1cfeedff747b5882f9f4c9d9222b6abda1a8568d515bd4816a18edaf4fb1b53f6a27cd9d9cf9eda9faa15d45a4fb76901a73cc54310cc16c895ba454e3064cd1017d5198afd5deea31b4d1f96addc8b96828cc4555da86fd22d922f6a804c71d151287a56840911183d1d23bade243c322616db0f41bb679600353b8832b4f2e40f2004938df7ef16cc5802de22598463389a7792404c936da39f3affea0c5c9d9eedfbdc7e5d07ad69a8185c449da02e147dbed17b75e93f8c52da026dc00", 0xd5, 0xffff, 0x0, 0x2, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000001c0)="0aee14dae28739ff6df5e62509179abc16669d0474663760a0090bdd", 0x1c, 0x7, 0x0, 0x2, r2}]) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008895}, 0x0) shutdown(r5, 0x1) r8 = syz_open_dev$dri(&(0x7f0000000280), 0xfffffff9, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x7, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000480)=r9) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x3f7, 0x200, 0x70bd27, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r5) 27.270116591s ago: executing program 0 (id=249): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d00000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000006fcffff0000000000000100000000000c00080008000800007a7e"], 0xd0}}, 0x20008004) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x9, 0x1000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x1, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x73}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newneigh={0x70, 0x1c, 0x20, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, r5, 0x4, 0x24, 0x4}, [@NDA_SRC_VNI={0x8}, @NDA_IFINDEX={0x8}, @NDA_SRC_VNI={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x23}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_LINK_NETNSID={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x401}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_VNI={0x8, 0x7, 0x10000}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x70}}, 0x0) 27.061474463s ago: executing program 4 (id=250): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x200003, 0x8, 0x0, 0x16e, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) io_uring_enter(r2, 0x56be, 0x4000, 0x15, 0x0, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="5281", 0x2}], 0x1) 26.737978942s ago: executing program 4 (id=251): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x3, 0x0) getpid() (async) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) socket$inet6(0xa, 0x806, 0x0) (async) r4 = socket$inet6(0xa, 0x806, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r6, &(0x7f0000000240)=ANY=[], 0x61) splice(r5, 0x0, r4, 0x0, 0x408ca, 0x8) (async) splice(r5, 0x0, r4, 0x0, 0x408ca, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x30000000}) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x5, {0x0, 0x2, 0x9, 0x2}}) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) 26.645496835s ago: executing program 4 (id=252): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @private}, "000086ddffff0000"}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x800000, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket(0xa, 0x3, 0x4) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x4000000000042) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = memfd_secret(0x0) fremovexattr(r2, &(0x7f0000000180)=@known='user.incfs.size\x00') getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 26.305404961s ago: executing program 6 (id=253): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120110009fcee14086803006b4830102030109021b00010000000009040000010dc7f400090502000000000000d4eb4cb2df136c821e142e77f29c4f3fb3d5e90858161e8a20d177eda3b2e7ea8617132533a5e16fd0f35615aae146c95b62d966eb4528f8358e2062163e0492cd7791d222354c94b11864f691700998bd451aaf6e02f8cda3ed97715ceb8c98de82656f35dadd0c2acdebf5a71745ef6463"], 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x1c, 0x0, @val=@netfilter={0x1, 0x1}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 26.207754583s ago: executing program 5 (id=254): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c9"], 0x23) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0) 25.909977016s ago: executing program 4 (id=255): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x24, &(0x7f0000000640)={0x0, 0x0, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x4}}) 24.933002644s ago: executing program 6 (id=256): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async, rerun: 64) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@getsadinfo={0x26c, 0x23, 0x100, 0x70bd29, 0x25dfdbfd, 0x0, [@tfcpad={0x8, 0x16, 0x6}, @tmpl={0x184, 0x5, [{{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x3506, 0x2, 0x0, 0x2, 0x8, 0x77, 0x80000000}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@local, 0x3502, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x2b}, 0xa, @in=@loopback, 0x3505, 0x4, 0x0, 0x7, 0x4, 0x36a, 0xf69}, {{@in6=@remote, 0x4d2, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0xfffffc00, 0x3, 0x1, 0x0, 0xc, 0x0, 0x80000001}, {{@in6=@local, 0x4d4, 0xff}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x5, 0x322, 0x6, 0x55}, {{@in=@rand_addr=0x64010100, 0x4d2, 0xff}, 0xa, @in6=@mcast2, 0x3506, 0x4, 0x2, 0xb1, 0x0, 0x2, 0x2}]}, @proto={0x5, 0x19, 0xff}, @algo_comp={0xc3, 0x3, {{'lzs\x00'}, 0x3d8, "309cdb20cf518a39c38b5a1aa497572ac208c4eef33e11d103696713673788c9de7d83aaa6d7438f6a0bc5ba6e1946bad30acb823a8ead10c32a8890ccf5657d8b28aa992ec66f394ebe4e7e8362ea2347b27c68bfb62e086da4e8d72e25ddf17514c7925d616afa4758ae29fff4da2c1a518f74947af19ce79512"}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x850}, 0x4000) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES8=r0], 0xb) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000620affffff7f000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 24.638521201s ago: executing program 6 (id=257): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x47, 0xb2, 0x37, 0x8, 0x19d2, 0x78, 0x61be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x5, 0x80, 0xf3, [{{0x9, 0x4, 0x29, 0x12, 0x0, 0x69, 0xf6, 0x2b, 0x1}}, {{0x9, 0x4, 0x6, 0xf5, 0x0, 0xb0, 0xeb, 0x6e, 0x6}}]}}]}}, &(0x7f0000000240)={0x61, 0x0, 0x2c, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffff7feffff8000]}, 0x0, 0x8) (async) r2 = gettid() tkill(r2, 0x12) (async, rerun: 64) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000)=0x7b, 0x4) (async) syz_usb_ep_write(r0, 0x8, 0x31, &(0x7f0000000040)="6593a9a252563d49760f6ec20302890bb9c30e882851653558af39817cf7ee54875c5f1c8425cf11367848eb0982a0e0cc") 24.478090276s ago: executing program 5 (id=258): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) unshare(0x400) (async) unshare(0x40000400) r1 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) fsync(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 24.056582806s ago: executing program 4 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f00000000c0)="524a8e72ae5b4292fa7cc2e58c50425a515cc7735df0c5f3271b6e31e1807455586f11a26499a3d8b0658a573277209394325645ada4e9ff34183648ebf91dd1345c2f24db8b81355a595e5871520b17bb146221c5b7e58600dd3f5042a691d0ddf63987382752ee87f5e1363ca4554570c2b0fa2ce176f01d61e5", 0x7b}, {&(0x7f0000000240)="3c3b02622186a823a72eb7f2615a785acae855ad52fd5c046911faa745090e918f09e19e246175f10562e91db2e1357757f16a33ce4812f72034c961c40b5d7b76b8ce58fca8134d7ca1b2e364948467fb8dd6c7e7a816da470000a5b57a45832908fc202946ad7a8d20c861638a1d4c2a8782d23661510809d20d77afbfe393ff1f7cce136f752cc2a51d0b94dd8fd53da7d04f52bb51edc103760c151d628e8aaa2483ca8f4e82", 0xa8}, {&(0x7f0000000000)="9168768b962f3d7ea630cd83b2106ed824240890f5205539ad6fcdeb3eeb1d69a22e1b0efce031df74fe4bb4bc524ab33c7767", 0x33}, {&(0x7f0000000180)="bc6e0504e2cba05d68699ef05b7c0c7ad53a3413167f13ef836294a5a761e16c32d5bbc433a4d05301608370cc1023c582b47499db24a4737e361cfc5048bbb271f252df1b593f74ead94a4e338d8262c63e005153837eff47667e12984cb0b4f34f153fd462150245c08a0bcbf55b83ee8e2489811890", 0x77}], 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c5}, 0x5dc4cc378b664f38) socket$alg(0x26, 0x5, 0x0) r3 = memfd_secret(0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xa}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r6, 0xae80, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x101, 0x8a}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000"], 0x7c}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff32, &(0x7f0000000080)={&(0x7f00000004c0)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x88}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x5) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r12, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x5}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 22.774243965s ago: executing program 6 (id=260): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8, 0x2, 0x5, 0xffffffffffffff01}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) (async) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) 22.6243465s ago: executing program 4 (id=261): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xfffffff7}}, './file0\x00'}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x0, 0x1, 0x1}, {0x2}}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x3, 0x1, 0x1}}], 0x20) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x8010, r0, 0x3dcec000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008, 0x100010, r1, 0x8852000) r2 = getegid() setfsgid(r2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x5, 0x8db, 0x3, 0x0, 0x177, 0x5, 0x0, 0xf42, 0x26cc2bc9, 0x6, 0x7e887c23, 0x81, 0x2, 0xffffffffffffff13}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000140)={r3, 0xe40000000000000}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000001140)=0x1) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000001180)=0x73b) bind$inet6(r1, &(0x7f00000011c0)={0xa, 0x4e24, 0x8000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x12, r0, 0xf154e000) syz_open_dev$vim2m(&(0x7f0000001200), 0x8, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000001240), 0x200, 0x100) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4004550d, &(0x7f0000001280)) r5 = openat$incfs(r0, &(0x7f00000012c0)='.log\x00', 0x0, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000001300)='tcp_probe\x00', r0, 0x0, 0x7}, 0x18) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000001380)) syz_open_dev$vim2m(&(0x7f00000013c0), 0x5, 0x2) connect$pptp(r4, &(0x7f0000001400)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000001440)) ioctl$KVM_NMI(r0, 0xae9a) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000001480)={0x0, 0x7, 0x4, [0x9, 0x9, 0xc6f, 0x9]}, &(0x7f00000014c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001500)={r6, 0x8d27}, 0x8) read$proc_mixer(r1, &(0x7f0000001540)=""/226, 0xe2) r7 = syz_open_dev$cec(&(0x7f0000001640), 0x0, 0x201) preadv(r7, &(0x7f0000002a80)=[{&(0x7f0000001680)=""/131, 0x83}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/228, 0xe4}, {&(0x7f0000002840)=""/232, 0xe8}, {&(0x7f0000002940)=""/80, 0x50}, {&(0x7f00000029c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/116, 0x74}], 0x7, 0x2, 0x8001) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002b00)=@generic={&(0x7f0000002ac0)='./file0\x00', r5}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000002b40)={0x4, 0x3}, 0x4) 0s ago: executing program 41 (id=249): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="d00000001b0001000000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000006fcffff0000000000000100000000000c00080008000800007a7e"], 0xd0}}, 0x20008004) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x9, 0x1000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x40, 0x1, 0x5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x73}, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newneigh={0x70, 0x1c, 0x20, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, r5, 0x4, 0x24, 0x4}, [@NDA_SRC_VNI={0x8}, @NDA_IFINDEX={0x8}, @NDA_SRC_VNI={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x23}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_LINK_NETNSID={0x8}, @NDA_LINK_NETNSID={0x8, 0xa, 0x401}, @NDA_IFINDEX={0x8, 0x8, r6}, @NDA_VNI={0x8, 0x7, 0x10000}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): 7 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 117.909543][ T6832] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 117.909561][ T6832] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080004280 [ 117.909573][ T6832] RDX: 00000000004b6e05 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.909583][ T6832] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.909592][ T6832] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.909601][ T6832] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.909622][ T6832] [ 118.787705][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 118.827203][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 119.232429][ T55] Bluetooth: hci4: command tx timeout [ 119.504246][ T6783] chnl_net:caif_netlink_parms(): no params data found [ 119.541548][ T6682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.562600][ T5890] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 119.651129][ T6682] veth0_vlan: entered promiscuous mode [ 119.734900][ T6682] veth1_vlan: entered promiscuous mode [ 119.759165][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.769755][ T5890] usb 6-1: config 0 has no interfaces? [ 119.775666][ T5890] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 119.777064][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.795532][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.821151][ T5890] usb 6-1: config 0 descriptor?? [ 119.822487][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.842343][ T6783] bridge_slave_0: entered allmulticast mode [ 119.849374][ T6783] bridge_slave_0: entered promiscuous mode [ 119.876825][ T6783] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.891128][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.911093][ T6783] bridge_slave_1: entered allmulticast mode [ 119.920767][ T6783] bridge_slave_1: entered promiscuous mode [ 119.990341][ T6783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.014887][ T6783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.100492][ T1031] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.118338][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.130539][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.142572][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.159324][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.177760][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.187886][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.216276][ T30] kauditd_printk_skb: 453 callbacks suppressed [ 120.216294][ T30] audit: type=1326 audit(1741702400.207:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.161" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7fc00000 [ 120.344846][ T5887] usb 6-1: USB disconnect, device number 14 [ 120.357127][ T1031] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.424521][ T6783] team0: Port device team_slave_0 added [ 120.452690][ T6682] veth0_macvtap: entered promiscuous mode [ 120.470555][ T6783] team0: Port device team_slave_1 added [ 120.480021][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.9.164'. [ 120.523603][ T1031] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.534608][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.9.164'. [ 120.718035][ T1031] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.751256][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.758571][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.784953][ T6783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.799092][ T6682] veth1_macvtap: entered promiscuous mode [ 120.837334][ T6783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.848769][ T6783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.880916][ T6783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.978067][ T6783] hsr_slave_0: entered promiscuous mode [ 120.987092][ T6783] hsr_slave_1: entered promiscuous mode [ 120.993373][ T6783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.000955][ T6783] Cannot create hsr debugfs directory [ 121.045463][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.056824][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.067507][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.078117][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.091349][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.102037][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.112159][ T6747] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 121.118548][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.211225][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.224256][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.234554][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.245262][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.255174][ T6682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.268315][ T6682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.273934][ T6747] usb 10-1: unable to get BOS descriptor or descriptor too short [ 121.279584][ T6682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.293627][ T6747] usb 10-1: not running at top speed; connect to a high speed hub [ 121.307351][ T5845] Bluetooth: hci4: command tx timeout [ 121.321689][ T1031] bridge_slave_1: left allmulticast mode [ 121.331004][ T6747] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 121.339297][ T6747] usb 10-1: can't read configurations, error -61 [ 121.348631][ T1031] bridge_slave_1: left promiscuous mode [ 121.363313][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.403512][ T1031] bridge_slave_0: left allmulticast mode [ 121.409172][ T1031] bridge_slave_0: left promiscuous mode [ 121.422661][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.482195][ T6747] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 121.661234][ T6747] usb 10-1: unable to get BOS descriptor or descriptor too short [ 121.680668][ T6747] usb 10-1: not running at top speed; connect to a high speed hub [ 121.690333][ T6747] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 121.702523][ T6747] usb 10-1: can't read configurations, error -61 [ 121.710182][ T6747] usb usb10-port1: attempt power cycle [ 121.726056][ T6886] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.844170][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.857263][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.867732][ T1031] bond0 (unregistering): Released all slaves [ 121.944514][ T6682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.953512][ T6682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.962982][ T6682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.971728][ T6682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.082902][ T6747] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 122.126179][ T6747] usb 10-1: unable to get BOS descriptor or descriptor too short [ 122.135124][ T6747] usb 10-1: not running at top speed; connect to a high speed hub [ 122.148946][ T6747] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 122.157467][ T6747] usb 10-1: can't read configurations, error -61 [ 122.174938][ T6856] chnl_net:caif_netlink_parms(): no params data found [ 122.262282][ T5845] Bluetooth: hci0: command tx timeout [ 122.295955][ T6747] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 122.395265][ T6747] usb 10-1: unable to get BOS descriptor or descriptor too short [ 122.411357][ T6747] usb 10-1: not running at top speed; connect to a high speed hub [ 122.433812][ T6747] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 122.441514][ T6747] usb 10-1: can't read configurations, error -61 [ 122.448973][ T1031] hsr_slave_0: left promiscuous mode [ 122.460348][ T1031] hsr_slave_1: left promiscuous mode [ 122.470374][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.480013][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.484493][ T6747] usb usb10-port1: unable to enumerate USB device [ 122.494487][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.516860][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.566729][ T1031] veth1_macvtap: left promiscuous mode [ 122.583258][ T1031] veth0_macvtap: left promiscuous mode [ 122.588903][ T1031] veth1_vlan: left promiscuous mode [ 122.594737][ T1031] veth0_vlan: left promiscuous mode [ 122.692863][ T6909] netlink: 'syz.5.171': attribute type 2 has an invalid length. [ 122.701051][ T6910] netlink: 'syz.5.171': attribute type 2 has an invalid length. [ 123.008309][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 123.048417][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 123.392165][ T5845] Bluetooth: hci4: command tx timeout [ 123.528395][ T6909] Tq€: entered promiscuous mode [ 123.648798][ T6856] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.665733][ T6856] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.686635][ T6856] bridge_slave_0: entered allmulticast mode [ 123.711888][ T6856] bridge_slave_0: entered promiscuous mode [ 123.727330][ T6856] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.736773][ T6856] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.748457][ T6856] bridge_slave_1: entered allmulticast mode [ 123.759211][ T6856] bridge_slave_1: entered promiscuous mode [ 123.894471][ T6856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.934142][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.944214][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.007093][ T6856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.052086][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 124.067547][ T6856] team0: Port device team_slave_0 added [ 124.081720][ T6856] team0: Port device team_slave_1 added [ 124.121538][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.131282][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.158526][ T6856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.200179][ T6856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.207891][ T6856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.238260][ T6856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.261429][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.270987][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.280767][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 124.292121][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 124.293931][ T5916] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 124.317649][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.328446][ T5916] usb 6-1: Product: syz [ 124.340117][ T5916] usb 6-1: Manufacturer: syz [ 124.342198][ T5845] Bluetooth: hci0: command tx timeout [ 124.350495][ T5916] usb 6-1: SerialNumber: syz [ 124.363632][ T5916] r8152-cfgselector 6-1: Unknown version 0x0000 [ 124.370107][ T5916] r8152-cfgselector 6-1: config 0 descriptor?? [ 124.381727][ T6856] hsr_slave_0: entered promiscuous mode [ 124.390165][ T6856] hsr_slave_1: entered promiscuous mode [ 124.396497][ T6856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.404456][ T6856] Cannot create hsr debugfs directory [ 124.412355][ T6783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.431734][ T6783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.462045][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 124.477763][ T10] usb 10-1: config 0 has an invalid interface number: 217 but max is 0 [ 124.503017][ T10] usb 10-1: config 0 has no interface number 0 [ 124.509258][ T10] usb 10-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 124.530557][ T10] usb 10-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.548467][ T10] usb 10-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 124.548862][ T6783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.557940][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.557965][ T10] usb 10-1: Product: syz [ 124.557979][ T10] usb 10-1: Manufacturer: syz [ 124.557993][ T10] usb 10-1: SerialNumber: syz [ 124.595031][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 124.604218][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 124.606366][ T10] usb 10-1: config 0 descriptor?? [ 124.632116][ T5916] r8152-cfgselector 6-1: Unknown version 0x0000 [ 124.638694][ T5916] r8152-cfgselector 6-1: bad CDC descriptors [ 124.689200][ T5916] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 124.718054][ T6783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.851868][ T10] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 124.860589][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 124.869962][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 124.892170][ T10] [drm] Initialized udl 0.0.1 for 10-1:0.217 on minor 2 [ 124.899156][ T10] [drm] Initialized udl on minor 2 [ 124.906221][ T10] udl 10-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.914980][ T10] udl 10-1:0.217: [drm] Cannot find any crtc or sizes [ 124.924495][ T5887] udl 10-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 124.932792][ T5887] udl 10-1:0.217: [drm] Cannot find any crtc or sizes [ 124.943485][ T10] usb 10-1: USB disconnect, device number 6 [ 125.335457][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.544471][ T6783] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.732388][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.739527][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.753435][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 125.759140][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.768188][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.932189][ T5887] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 125.941649][ T6783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.963931][ T10] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 125.992367][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.011325][ T10] usb 10-1: Product: syz [ 126.029647][ T10] usb 10-1: Manufacturer: syz [ 126.035072][ T10] usb 10-1: SerialNumber: syz [ 126.058789][ T10] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 126.103938][ T5887] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.133901][ T5886] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 126.144376][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.151184][ T6783] veth0_vlan: entered promiscuous mode [ 126.160706][ T5887] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 126.173834][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.182908][ T5887] usb 6-1: SerialNumber: syz [ 126.205503][ T5887] usb 6-1: 0:2 : does not exist [ 126.206659][ T6856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.248548][ T6856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.278135][ T6856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.295481][ T6856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.327797][ T6783] veth1_vlan: entered promiscuous mode [ 126.334753][ T6942] netlink: 44 bytes leftover after parsing attributes in process `syz.2.179'. [ 126.345573][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.380764][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.393987][ T6783] veth0_macvtap: entered promiscuous mode [ 126.422263][ T5845] Bluetooth: hci0: command tx timeout [ 126.437961][ T6783] veth1_macvtap: entered promiscuous mode [ 126.520827][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.532261][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.543153][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.554499][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.565073][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.576416][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.623651][ T5887] usb 10-1: USB disconnect, device number 7 [ 126.655289][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.657780][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.687185][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.697581][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.732110][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 126.733134][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.755315][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.763758][ T6747] usb 6-1: USB disconnect, device number 16 [ 126.770005][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.797370][ T6783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.814674][ T6783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.841161][ T6783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.851175][ T6956] netlink: 36 bytes leftover after parsing attributes in process `syz.5.181'. [ 126.890631][ T5889] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.899843][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.927430][ T5889] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 126.936843][ T5889] usb 3-1: config 1 has no interface number 1 [ 126.939305][ T6783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.943723][ T5889] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 126.957411][ T6783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.974636][ T5889] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.985466][ T6783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.001999][ T6783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.004526][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.021840][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.039468][ T5889] usb 3-1: Product: syz [ 127.044242][ T5889] usb 3-1: Manufacturer: syz [ 127.057581][ T5889] usb 3-1: SerialNumber: syz [ 127.093819][ T6856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.158721][ T6856] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.191179][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.198348][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.220836][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.228005][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.233299][ T5886] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 127.243592][ T5886] ath9k_htc: Failed to initialize the device [ 127.256541][ T5887] usb 10-1: ath9k_htc: USB layer deinitialized [ 127.286129][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.310850][ T6856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.323636][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.324870][ T6856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.386599][ T5889] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 127.416052][ T5889] usb 3-1: MIDIStreaming interface descriptor not found [ 127.468107][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.475961][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.500051][ T5889] usb 3-1: USB disconnect, device number 9 [ 127.532719][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.628474][ T6856] veth0_vlan: entered promiscuous mode [ 127.753236][ T6856] veth1_vlan: entered promiscuous mode [ 127.945456][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.060130][ T6856] veth0_macvtap: entered promiscuous mode [ 128.276211][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.371045][ T6856] veth1_macvtap: entered promiscuous mode [ 128.504243][ T5845] Bluetooth: hci0: command tx timeout [ 128.569720][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.580562][ T5886] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 128.762693][ T5886] usb 3-1: device descriptor read/64, error -71 [ 128.780857][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.836225][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.870543][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.901229][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.935678][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.957816][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.003731][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.022152][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.050200][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.088563][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.126127][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.162173][ T5886] usb 3-1: device descriptor read/64, error -71 [ 129.281806][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.323950][ T5886] usb usb3-port1: attempt power cycle [ 129.367491][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.442911][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 129.470918][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 129.479692][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 129.487982][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 129.499801][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 129.508392][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.516721][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.551656][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.566272][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.581641][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.594161][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.612136][ T6856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.631526][ T6856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.654866][ T6856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.702620][ T5886] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.718808][ T6856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.735736][ T6856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.736398][ T5886] usb 3-1: device descriptor read/8, error -71 [ 129.748588][ T6856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.775878][ T6856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.027283][ T13] bridge_slave_1: left allmulticast mode [ 130.036662][ T5886] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.046961][ T13] bridge_slave_1: left promiscuous mode [ 130.060769][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.079870][ T13] bridge_slave_0: left allmulticast mode [ 130.087526][ T5886] usb 3-1: device descriptor read/8, error -71 [ 130.100015][ T13] bridge_slave_0: left promiscuous mode [ 130.111623][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.204646][ T5886] usb usb3-port1: unable to enumerate USB device [ 130.535119][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.546732][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.557476][ T13] bond0 (unregistering): Released all slaves [ 130.594526][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.627116][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.810925][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.829171][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.901388][ T6993] netlink: 20 bytes leftover after parsing attributes in process `syz.5.192'. [ 130.904070][ T6989] netlink: 'syz.4.191': attribute type 33 has an invalid length. [ 130.918918][ T6989] netlink: 152 bytes leftover after parsing attributes in process `syz.4.191'. [ 130.973248][ T6980] chnl_net:caif_netlink_parms(): no params data found [ 131.077886][ T13] hsr_slave_0: left promiscuous mode [ 131.090098][ T13] hsr_slave_1: left promiscuous mode [ 131.106746][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.131506][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.161007][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.178958][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.221403][ T13] veth1_macvtap: left promiscuous mode [ 131.239856][ T13] veth0_macvtap: left promiscuous mode [ 131.250033][ T13] veth1_vlan: left promiscuous mode [ 131.272204][ T13] veth0_vlan: left promiscuous mode [ 131.366767][ T5887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 131.475436][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.525464][ T5887] usb 6-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 131.539228][ T5887] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.580264][ T5887] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 131.591558][ T5887] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=0 [ 131.600265][ T5887] usb 6-1: Manufacturer: syz [ 131.622493][ T5845] Bluetooth: hci1: command tx timeout [ 131.644341][ T5891] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 131.653345][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.665317][ T5891] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 131.676275][ T5891] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 131.691377][ T5891] usb 5-1: Manufacturer: syz [ 131.707420][ T5891] usb 5-1: config 0 descriptor?? [ 131.795695][ T5891] rc_core: IR keymap rc-hauppauge not found [ 131.801662][ T5891] Registered IR keymap rc-empty [ 131.823861][ T5891] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 131.842105][ T5887] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 131.850553][ T5891] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 131.874604][ T5887] usb 6-1: USB disconnect, device number 17 [ 131.924262][ T13] team0 (unregistering): Port device team_slave_1 removed [ 132.027447][ T13] team0 (unregistering): Port device team_slave_0 removed [ 132.618278][ T30] audit: type=1326 audit(1741702412.617:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 132.662416][ T30] audit: type=1326 audit(1741702412.627:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 132.692064][ T30] audit: type=1326 audit(1741702412.627:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 132.715101][ T5891] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 132.722821][ T30] audit: type=1326 audit(1741702412.627:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7016 comm="syz.0.199" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 132.909529][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 132.937457][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.958063][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.000434][ T5917] usb 5-1: USB disconnect, device number 2 [ 133.006071][ T5891] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 133.032105][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.067326][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073773][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.082842][ T5891] usb 6-1: config 0 descriptor?? [ 133.186478][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.196843][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.207825][ T6980] bridge_slave_0: entered allmulticast mode [ 133.215262][ T6980] bridge_slave_0: entered promiscuous mode [ 133.234722][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.244960][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.252559][ T6980] bridge_slave_1: entered allmulticast mode [ 133.259536][ T6980] bridge_slave_1: entered promiscuous mode [ 133.464912][ T6980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.491873][ T6980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.496204][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.525031][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.580077][ T6980] team0: Port device team_slave_0 added [ 133.601256][ T6980] team0: Port device team_slave_1 added [ 133.607579][ T7032] mmap: syz.2.202 (7032) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.657190][ T5891] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0003/input/input7 [ 133.723259][ T5845] Bluetooth: hci1: command tx timeout [ 133.770376][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.821395][ T5891] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 133.862504][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.932865][ T6980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.005000][ T6980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.033997][ T6980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.117329][ T6980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.148849][ T7035] netlink: 'syz.2.203': attribute type 10 has an invalid length. [ 134.171368][ T7035] netlink: 55 bytes leftover after parsing attributes in process `syz.2.203'. [ 134.223184][ T6980] hsr_slave_0: entered promiscuous mode [ 134.239722][ T6980] hsr_slave_1: entered promiscuous mode [ 135.463909][ T7045] capability: warning: `syz.5.205' uses deprecated v2 capabilities in a way that may be insecure [ 135.622790][ T6748] usb 6-1: USB disconnect, device number 18 [ 135.782270][ T5845] Bluetooth: hci1: command tx timeout [ 135.834125][ T6980] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 135.905841][ T6980] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 135.995123][ T6980] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 136.044681][ T6980] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 136.177360][ T7071] netlink: 'syz.0.208': attribute type 5 has an invalid length. [ 136.203161][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 136.417046][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.448615][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.468633][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.497541][ T6980] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.504472][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.542991][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.550095][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.590192][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.629723][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.647524][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.654698][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.681121][ T10] usb 6-1: config 0 descriptor?? [ 136.741635][ T6980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.795490][ T6980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.888698][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.040638][ T7093] syz.4.211 uses obsolete (PF_INET,SOCK_PACKET) [ 137.108656][ T6980] veth0_vlan: entered promiscuous mode [ 137.154689][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 137.188314][ T30] audit: type=1326 audit(1741702417.137:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.218972][ T6980] veth1_vlan: entered promiscuous mode [ 137.276689][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 137.322064][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 137.363064][ T30] audit: type=1326 audit(1741702417.137:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=307 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.409045][ T6980] veth0_macvtap: entered promiscuous mode [ 137.431398][ T6980] veth1_macvtap: entered promiscuous mode [ 137.461652][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.497808][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 137.513740][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.550577][ T5917] usb 3-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 137.564644][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.574542][ T30] audit: type=1326 audit(1741702417.137:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.574578][ T30] audit: type=1326 audit(1741702417.137:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.574608][ T30] audit: type=1326 audit(1741702417.137:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.574637][ T30] audit: type=1326 audit(1741702417.157:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.669279][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.675047][ T5917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.686891][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 137.686906][ T30] audit: type=1326 audit(1741702417.657:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.734030][ T5917] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 137.756929][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.758180][ T30] audit: type=1326 audit(1741702417.657:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf741d5a7 code=0x7ffc0000 [ 137.771468][ T5917] usb 3-1: Product: syz [ 137.788611][ T7110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.810190][ T7110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.818441][ T5917] usb 3-1: Manufacturer: syz [ 137.823597][ T5917] usb 3-1: SerialNumber: syz [ 137.854934][ T7110] netlink: 'syz.5.207': attribute type 10 has an invalid length. [ 137.867380][ T5917] usb 3-1: config 0 descriptor?? [ 137.879554][ T5845] Bluetooth: hci1: command tx timeout [ 137.932095][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.932121][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.932138][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.932151][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.932195][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.932209][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.934369][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.948163][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.948186][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.948196][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.948206][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.948223][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.948234][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.948245][ T6980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.948283][ T6980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.949469][ T6980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.954367][ T6980] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.954398][ T6980] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.954423][ T6980] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.954447][ T6980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.976496][ T30] audit: type=1326 audit(1741702417.657:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.976537][ T30] audit: type=1326 audit(1741702417.707:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.976567][ T30] audit: type=1326 audit(1741702417.707:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf741d5a7 code=0x7ffc0000 [ 137.976596][ T30] audit: type=1326 audit(1741702417.707:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.976625][ T30] audit: type=1326 audit(1741702417.717:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.976656][ T30] audit: type=1326 audit(1741702417.717:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf741d5a7 code=0x7ffc0000 [ 137.976688][ T30] audit: type=1326 audit(1741702417.717:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 137.976717][ T30] audit: type=1326 audit(1741702417.727:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.5.207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 138.169967][ T7092] loop7: detected capacity change from 0 to 16384 [ 138.612328][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.620240][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.644073][ T7110] tty tty2: ldisc open failed (-12), clearing slot 1 [ 138.962449][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.970786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.665074][ T5891] usb 6-1: reset high-speed USB device number 19 using dummy_hcd [ 139.694662][ T7152] process 'syz.6.219' launched '/dev/fd/6' with NULL argv: empty string added [ 139.832915][ T5891] usb 6-1: device firmware changed [ 139.848489][ T47] usb 6-1: USB disconnect, device number 19 [ 139.966918][ T7142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.218'. [ 140.032972][ T47] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 140.212155][ T47] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.253551][ T47] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45 [ 140.275320][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 140.287250][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.311754][ T47] usb 6-1: Product: syz [ 140.321830][ T47] usb 6-1: Manufacturer: syz [ 140.346009][ T47] usb 6-1: SerialNumber: syz [ 140.380463][ T47] usb 6-1: config 0 descriptor?? [ 140.443833][ T5891] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 140.477628][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.506823][ T5891] usb 7-1: config 0 descriptor?? [ 140.512702][ T47] rtsx_usb 6-1:0.0: probe with driver rtsx_usb failed with error -22 [ 140.529016][ T5891] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 140.626019][ T5887] usb 6-1: USB disconnect, device number 20 [ 141.132293][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.302304][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 141.396708][ T5887] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 141.572309][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.642228][ T5887] usb 5-1: config 0 has no interface number 0 [ 141.648471][ T5887] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 141.658439][ T5887] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.678826][ T5887] usb 5-1: config 0 interface 41 has no altsetting 0 [ 141.780174][ T5887] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 141.837517][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.878083][ T5887] usb 5-1: Product: syz [ 141.888948][ T5887] usb 5-1: Manufacturer: syz [ 141.912988][ T5887] usb 5-1: SerialNumber: syz [ 141.953813][ T5887] usb 5-1: config 0 descriptor?? [ 141.973493][ T7177] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 141.985196][ T5887] dm9601 5-1:0.41: probe with driver dm9601 failed with error -22 [ 142.011861][ T5887] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22 [ 142.232119][ T6748] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 142.403123][ T6748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.472818][ T6748] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.552697][ T6748] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.590570][ T6748] usb 6-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 142.613942][ T5917] usb 3-1: USB disconnect, device number 14 [ 142.643177][ T6748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.688947][ T6748] usb 6-1: config 0 descriptor?? [ 143.005101][ T5891] gspca_stv06xx: I2C: Read error writing address: -71 [ 143.043044][ T5891] usb 7-1: USB disconnect, device number 2 [ 143.114562][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 143.135111][ T6748] betop 0003:11C0:5506.0005: item fetching failed at offset 7/11 [ 143.153071][ T6748] betop 0003:11C0:5506.0005: parse failed [ 143.165433][ T6748] betop 0003:11C0:5506.0005: probe with driver betop failed with error -22 [ 143.295818][ T5917] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 143.311650][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.338929][ T5917] usb 3-1: Product: syz [ 143.342373][ T5887] usb 6-1: USB disconnect, device number 21 [ 143.352096][ T5917] usb 3-1: Manufacturer: syz [ 143.359106][ T5917] usb 3-1: SerialNumber: syz [ 143.397938][ T5917] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 143.419234][ T6748] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 143.847574][ T47] usb 5-1: USB disconnect, device number 3 [ 144.352229][ T5891] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 144.405226][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.436369][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.444368][ T5887] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 144.485112][ T7234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.505091][ T6748] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 144.512949][ T7234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.530930][ T5891] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.532324][ T6748] ath9k_htc: Failed to initialize the device [ 144.540935][ T5891] usb 7-1: config 0 interface 0 has no altsetting 0 [ 144.571248][ T5891] usb 7-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 144.592970][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.609661][ T6748] usb 3-1: ath9k_htc: USB layer deinitialized [ 144.621822][ T5891] usb 7-1: config 0 descriptor?? [ 144.627070][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 144.634959][ T5887] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 144.648998][ T5887] usb 6-1: config 0 has no interface number 0 [ 144.660697][ T5887] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.676574][ T5887] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 144.699834][ T5887] usb 6-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 144.721367][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 144.748887][ T5887] usb 6-1: Product: syz [ 144.762684][ T5887] usb 6-1: SerialNumber: syz [ 144.781438][ T5887] usb 6-1: config 0 descriptor?? [ 145.003903][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.058494][ T5891] usbhid 7-1:0.0: can't add hid device: -71 [ 145.080314][ T5891] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 145.113521][ T5891] usb 7-1: USB disconnect, device number 3 [ 145.125305][ T5887] snd-usb-audio 6-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 145.165754][ T5887] usb 6-1: USB disconnect, device number 22 [ 145.363091][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.364435][ T7222] syz.4.227: vmalloc error: size 2764800, failed to allocated page array size 5400, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 145.453435][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.4.227 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 145.453462][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.453473][ T7222] Call Trace: [ 145.453479][ T7222] [ 145.453486][ T7222] dump_stack_lvl+0x241/0x360 [ 145.453513][ T7222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.453531][ T7222] ? __pfx__printk+0x10/0x10 [ 145.453552][ T7222] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 145.453573][ T7222] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 145.453596][ T7222] warn_alloc+0x278/0x410 [ 145.453619][ T7222] ? __pfx_warn_alloc+0x10/0x10 [ 145.453641][ T7222] ? vb2_vmalloc_alloc+0xf2/0x340 [ 145.453662][ T7222] ? __get_vm_area_node+0x1c8/0x2d0 [ 145.453683][ T7222] ? __get_vm_area_node+0x25c/0x2d0 [ 145.453712][ T7222] __vmalloc_node_range_noprof+0x62f/0x1380 [ 145.453756][ T7222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 145.453778][ T7222] ? __kasan_kmalloc+0x98/0xb0 [ 145.453801][ T7222] vmalloc_user_noprof+0x74/0x80 [ 145.453817][ T7222] ? vb2_vmalloc_alloc+0xf2/0x340 [ 145.453837][ T7222] vb2_vmalloc_alloc+0xf2/0x340 [ 145.453902][ T7222] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 145.453920][ T7222] __vb2_queue_alloc+0xa0b/0x16f0 [ 145.453955][ T7222] vb2_core_reqbufs+0xd2e/0x17c0 [ 145.453986][ T7222] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 145.454017][ T7222] v4l2_m2m_ioctl_reqbufs+0x14b/0x230 [ 145.454039][ T7222] __video_do_ioctl+0xc23/0xdd0 [ 145.454067][ T7222] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.454081][ T7222] ? tomoyo_path_number_perm+0x65d/0x770 [ 145.454103][ T7222] ? __might_fault+0xaa/0x120 [ 145.454126][ T7222] video_usercopy+0x903/0x11e0 [ 145.454150][ T7222] ? __pfx___video_do_ioctl+0x10/0x10 [ 145.454168][ T7222] ? __pfx_video_usercopy+0x10/0x10 [ 145.454224][ T7222] v4l2_ioctl+0x189/0x1e0 [ 145.454243][ T7222] v4l2_compat_ioctl32+0x1d7/0x260 [ 145.454268][ T7222] __se_compat_sys_ioctl+0x502/0xc10 [ 145.454287][ T7222] ? __pfx_task_mm_cid_work+0x10/0x10 [ 145.454313][ T7222] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 145.454327][ T7222] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 145.454348][ T7222] ? lockdep_hardirqs_on+0x99/0x150 [ 145.454377][ T7222] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.454400][ T7222] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.454427][ T7222] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 145.454448][ T7222] ? lockdep_hardirqs_on+0x99/0x150 [ 145.454470][ T7222] __do_fast_syscall_32+0xb4/0x110 [ 145.454494][ T7222] ? exc_page_fault+0x590/0x8b0 [ 145.454516][ T7222] do_fast_syscall_32+0x34/0x80 [ 145.454536][ T7222] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.454558][ T7222] RIP: 0023:0xf73ed579 [ 145.454573][ T7222] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 145.454585][ T7222] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 145.454602][ T7222] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 145.454613][ T7222] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.454623][ T7222] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.454633][ T7222] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.454642][ T7222] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.454666][ T7222] [ 145.454673][ T7222] Mem-Info: [ 145.802541][ T7222] active_anon:31455 inactive_anon:0 isolated_anon:0 [ 145.802541][ T7222] active_file:11118 inactive_file:38326 isolated_file:0 [ 145.802541][ T7222] unevictable:768 dirty:89 writeback:0 [ 145.802541][ T7222] slab_reclaimable:10742 slab_unreclaimable:101206 [ 145.802541][ T7222] mapped:42825 shmem:24616 pagetables:1070 [ 145.802541][ T7222] sec_pagetables:0 bounce:0 [ 145.802541][ T7222] kernel_misc_reclaimable:0 [ 145.802541][ T7222] free:1296359 free_pcp:2032 free_cma:0 [ 145.918807][ T7222] Node 0 active_anon:126520kB inactive_anon:0kB active_file:44472kB inactive_file:153228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168496kB dirty:356kB writeback:0kB shmem:98028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no [ 145.958969][ T5891] usb 3-1: USB disconnect, device number 15 [ 146.104452][ T7222] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 146.244154][ T7222] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.375336][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 146.375354][ T30] audit: type=1326 audit(1741702426.367:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.2.233" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 146.389107][ T7222] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 146.531635][ T7222] Node 0 DMA32 free:1242044kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:143424kB inactive_anon:0kB active_file:44540kB inactive_file:152900kB unevictable:1536kB writepending:412kB present:3129332kB managed:2549832kB mlocked:0kB bounce:0kB free_pcp:13492kB local_pcp:12768kB free_cma:0kB [ 146.659912][ T7222] lowmem_reserve[]: 0 0 0 0 0 [ 146.732180][ T6748] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 146.873742][ T7222] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 146.914138][ T6748] usb 6-1: unable to get BOS descriptor or descriptor too short [ 146.944083][ T6748] usb 6-1: not running at top speed; connect to a high speed hub [ 146.967462][ T7222] lowmem_reserve[]: 0 0 0 0 0 [ 146.990520][ T6748] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 147.042441][ T7222] Node 1 Normal free:3903708kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2680kB local_pcp:2680kB free_cma:0kB [ 147.085617][ T6748] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.211870][ T6748] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.265842][ T6748] usb 6-1: Product: syz [ 147.292110][ T6748] usb 6-1: Manufacturer: syz [ 147.296850][ T6748] usb 6-1: SerialNumber: syz [ 147.302254][ T7222] lowmem_reserve[]: 0 0 0 0 0 [ 147.311285][ T7222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.328321][ T6748] usb 6-1: bad CDC descriptors [ 147.371208][ T7222] Node 0 DMA32: 125*4kB (UM) 92*8kB (UME) 168*16kB (UME) 84*32kB (UME) 25*64kB (UME) 21*128kB (UME) 4*256kB (M) 6*512kB (ME) 1*1024kB (U) 3*2048kB (M) 303*4096kB (ME) = 1263252kB [ 147.420124][ T7301] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.482161][ T7222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 147.590940][ T7222] Node 1 Normal: 182*4kB (UME) 55*8kB (UME) 44*16kB (UME) 196*32kB (UME) 101*64kB (UME) 20*128kB (UME) 18*256kB (UME) 10*512kB (UME) 2*1024kB (U) 6*2048kB (UME) 943*4096kB (M) = 3903760kB [ 147.681356][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.810942][ T7222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.846579][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.895842][ T7222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.019838][ T7222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.072779][ T7222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.085527][ T7222] 77528 total pagecache pages [ 148.093652][ T7222] 27 pages in swap cache [ 148.108650][ T7222] Free swap = 124532kB [ 148.118972][ T7222] Total swap = 124996kB [ 148.163460][ T7222] 2097051 pages RAM [ 148.177437][ T7222] 0 pages HighMem/MovableOnly [ 148.219189][ T7222] 427871 pages reserved [ 148.255036][ T7222] 0 pages cma reserved [ 148.362980][ T5887] usb 6-1: USB disconnect, device number 23 [ 148.371004][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.624146][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.886712][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.169130][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.362608][ T5887] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 149.407147][ T7328] capability: warning: `syz.5.243' uses 32-bit capabilities (legacy support in use) [ 149.591665][ T5887] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 149.642157][ T5887] usb 5-1: config 5 has no interface number 0 [ 149.662083][ T5887] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 149.677366][ T13] bridge_slave_1: left allmulticast mode [ 149.712292][ T5887] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 149.716065][ T13] bridge_slave_1: left promiscuous mode [ 149.734545][ T7333] usb usb8: usbfs: process 7333 (syz.6.244) did not claim interface 1 before use [ 149.745159][ T5887] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.769117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.777835][ T5887] usb 5-1: config 5 interface 123 has no altsetting 0 [ 149.816765][ T5887] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 149.856444][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.876715][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.886234][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.895288][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.904639][ T5887] usb 5-1: Product: syz [ 149.908837][ T5887] usb 5-1: Manufacturer: syz [ 149.914686][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.922425][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 149.929730][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.952154][ T5887] usb 5-1: SerialNumber: syz [ 149.953240][ T13] bridge_slave_0: left allmulticast mode [ 149.972454][ T13] bridge_slave_0: left promiscuous mode [ 149.978320][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.263345][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.296151][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.317059][ T5886] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 150.377620][ T5887] ni6501 5-1:5.123: driver 'ni6501' failed to auto-configure device. [ 150.423829][ T5887] usb 5-1: USB disconnect, device number 4 [ 150.500372][ T5886] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.523543][ T5886] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 150.582209][ T5886] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 150.592226][ T5886] usb 7-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x56, changing to 0x6 [ 150.623485][ T5886] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 150.642636][ T5886] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 150.677447][ T5886] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 150.694133][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.740595][ T7367] xt_CT: No such helper "snmp" [ 150.750615][ T5886] usb 7-1: Product: syz [ 150.757237][ T5886] usb 7-1: Manufacturer: syz [ 150.767773][ T5886] usb 7-1: SerialNumber: syz [ 150.825579][ T5886] usb 7-1: ucan: probing device on interface #0 [ 150.842072][ T5886] usb 7-1: ucan: invalid endpoint configuration [ 150.848533][ T5886] usb 7-1: ucan: probe failed; try to update the device firmware [ 151.065141][ T5887] usb 7-1: USB disconnect, device number 4 [ 151.427945][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.461297][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.489089][ T13] bond0 (unregistering): Released all slaves [ 151.551141][ T7392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 151.592164][ T7392] bridge0: port 3(veth0_to_bridge) entered disabled state [ 151.621388][ T7392] veth0_to_bridge: entered allmulticast mode [ 151.674776][ T7392] veth0_to_bridge: entered promiscuous mode [ 151.750106][ T7392] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.785784][ T7392] bridge0: port 3(veth0_to_bridge) entered blocking state [ 151.793565][ T7392] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 151.871856][ T55] Bluetooth: Unexpected start frame (len 30) [ 151.880719][ T55] Bluetooth: Frame is too long (len 30, expected len 4) [ 152.022518][ T55] Bluetooth: hci2: command tx timeout [ 152.042426][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 152.132483][ T6748] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 152.204640][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.216784][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 152.226615][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.234955][ T10] usb 7-1: Product: syz [ 152.239282][ T10] usb 7-1: Manufacturer: syz [ 152.244247][ T10] usb 7-1: SerialNumber: syz [ 152.253815][ T10] usb 7-1: config 0 descriptor?? [ 152.275530][ T10] gspca_main: spca500-2.14.0 probing 8086:0630 [ 152.359427][ T6748] usb 6-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 152.385606][ T13] hsr_slave_0: left promiscuous mode [ 152.403269][ T13] hsr_slave_1: left promiscuous mode [ 152.409138][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.422147][ T6748] usb 6-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 152.443944][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.464204][ T6748] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 152.468089][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.492489][ T6748] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 152.508920][ T10] usb 7-1: USB disconnect, device number 5 [ 152.533188][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.539235][ T6748] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 152.554367][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.571088][ T6748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.611790][ T13] veth1_macvtap: left promiscuous mode [ 152.623857][ T5916] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 152.625175][ T13] veth0_macvtap: left promiscuous mode [ 152.642730][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.646365][ T13] veth1_vlan: left promiscuous mode [ 152.656517][ T13] veth0_vlan: left promiscuous mode [ 152.671043][ T5916] usb 5-1: Product: syz [ 152.681229][ T5916] usb 5-1: Manufacturer: syz [ 152.696818][ T5916] usb 5-1: SerialNumber: syz [ 152.708950][ T5916] usb 5-1: config 0 descriptor?? [ 152.748523][ T5916] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 152.823078][ T6748] ath6kl: Failed to submit usb control message: -71 [ 152.841539][ T6748] ath6kl: unable to send the bmi data to the device: -71 [ 152.851726][ T6748] ath6kl: Unable to send get target info: -71 [ 152.912464][ T6748] ath6kl: Failed to init ath6kl core: -71 [ 152.926395][ T6748] ath6kl_usb 6-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 152.946994][ T6748] usb 6-1: USB disconnect, device number 24 [ 153.374418][ T6748] usb 5-1: USB disconnect, device number 5 [ 153.672151][ T5887] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 153.689811][ T13] team0 (unregistering): Port device team_slave_1 removed [ 153.747989][ T13] team0 (unregistering): Port device team_slave_0 removed [ 153.833943][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 153.842289][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 153.872200][ T5887] usb 7-1: config 6 has an invalid interface number: 41 but max is 1 [ 153.880325][ T5887] usb 7-1: config 6 has an invalid interface number: 6 but max is 1 [ 153.901610][ T5887] usb 7-1: config 6 has no interface number 0 [ 153.919595][ T5887] usb 7-1: config 6 has no interface number 1 [ 153.954144][ T5887] usb 7-1: config 6 interface 41 has no altsetting 0 [ 153.962246][ T5887] usb 7-1: config 6 interface 6 has no altsetting 0 [ 153.981132][ T5887] usb 7-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 153.995369][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.008198][ T5887] usb 7-1: Product: syz [ 154.028422][ T5887] usb 7-1: Manufacturer: syz [ 154.033740][ T5887] usb 7-1: SerialNumber: syz [ 154.104492][ T55] Bluetooth: hci2: command tx timeout [ 154.314981][ T5887] smsusb:smsusb_probe: board id=15, interface number 41 [ 154.347358][ T5887] smsusb:smsusb_probe: board id=15, interface number 6 [ 154.361098][ T5887] smsusb:smsusb_probe: Device initialized with return code -19 [ 154.456857][ T5887] usb 7-1: USB disconnect, device number 6 [ 154.828044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 154.840503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.852860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 154.865171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.877518][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 154.889880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.902271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 154.914581][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.926996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 154.939318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.919531][ T55] Bluetooth: hci2: command tx timeout [ 158.994937][ T55] Bluetooth: hci2: command tx timeout [ 159.351966][ C0] sched: DL replenish lagged too much [ 159.832112][ C1] net_ratelimit: 25779 callbacks suppressed [ 159.832132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 159.832704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.838282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.850342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.862285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 159.874669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.886095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.898116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.910044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 159.922382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.842217][ C0] net_ratelimit: 27293 callbacks suppressed [ 164.842239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.842409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.848443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.860390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 164.872746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.884186][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.896249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.908903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 164.921226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.932709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.852050][ C0] net_ratelimit: 27125 callbacks suppressed [ 169.852071][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.852133][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 169.858834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.870228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.882290][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.894199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 169.906567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.917996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.930087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.941985][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 174.862126][ C1] net_ratelimit: 27260 callbacks suppressed [ 174.862146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.862472][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 174.862683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.862721][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.863010][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 174.863036][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.863255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.863591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 174.863801][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.863869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.872228][ C1] net_ratelimit: 27730 callbacks suppressed [ 179.872269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 179.872480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.872786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 179.873008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.873313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 179.873516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.873829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 179.874037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.874346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 179.874564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.882026][ C1] net_ratelimit: 27641 callbacks suppressed [ 184.882047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.882356][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 184.882551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.882615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.882939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 184.883160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.883365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.883476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 184.883679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.883684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.892012][ C1] net_ratelimit: 27179 callbacks suppressed [ 189.892033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.892200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.892353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 189.892432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.892570][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.892744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.892899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 189.893111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.893426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 189.893659][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.902283][ C1] net_ratelimit: 28264 callbacks suppressed [ 194.902305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 194.902533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.902852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 194.903075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.903081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.903390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.903404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 194.903603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.903633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.903944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.967364][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.975016][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.498149][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 199.912130][ C0] net_ratelimit: 28065 callbacks suppressed [ 199.912151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.912239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 199.912385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.912452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.912763][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 199.912772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 199.912985][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.913316][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 199.913545][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.913863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 204.922136][ C1] net_ratelimit: 27520 callbacks suppressed [ 204.922156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.922336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.922483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 204.922658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.922713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.923025][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 204.923239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.923562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 204.923789][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 204.924055][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.932140][ C0] net_ratelimit: 28034 callbacks suppressed [ 209.932160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.932263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 209.932479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.932487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.932865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 209.933096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.933426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 209.933650][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.933888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.933960][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 214.942120][ C1] net_ratelimit: 27952 callbacks suppressed [ 214.942141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.942475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 214.942699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.942769][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.943049][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 214.943091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.943288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 214.943328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.943619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 214.943636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.952224][ C1] net_ratelimit: 28177 callbacks suppressed [ 219.952245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 219.952456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.952541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.952799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 219.952864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.953007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.953081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.953313][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 219.953427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.953528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.962157][ C1] net_ratelimit: 27909 callbacks suppressed [ 224.962193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 224.962421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.962737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 224.962965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.963308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.963502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 224.963613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.963817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.963937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 224.964150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.972099][ C0] net_ratelimit: 28059 callbacks suppressed [ 229.972123][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.972307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.972490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.972629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 229.972704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.972850][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.973011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.973168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 229.973378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.973701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 234.982158][ C1] net_ratelimit: 27826 callbacks suppressed [ 234.982179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.982296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.982509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 234.982627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.982723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.982842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.983070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 234.983177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.983289][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.983602][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 238.193206][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 239.992251][ C1] net_ratelimit: 27699 callbacks suppressed [ 239.992272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 239.992495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.992577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.992798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 239.992928][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.993024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.993161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.993335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 239.993480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.993550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.001982][ C1] net_ratelimit: 28566 callbacks suppressed [ 245.002004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 245.002242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.002566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 245.002784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.003127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 245.003244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.003343][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 245.003550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.003682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 245.003760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.873088][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 250.012005][ C1] net_ratelimit: 27324 callbacks suppressed [ 250.012026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 250.012097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.012257][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.012314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.012580][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 250.012654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.012788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 250.013090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 250.013351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 250.013588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.571005][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 255.022051][ C1] net_ratelimit: 28755 callbacks suppressed [ 255.022072][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 255.022332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 255.022539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.022860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 255.023108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.023270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.023412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 255.023595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.023667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 255.023805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.153057][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.169202][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.032079][ C1] net_ratelimit: 28842 callbacks suppressed [ 260.032101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.032478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.032804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 260.033081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 260.033342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.033378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.033670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 260.033692][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.033894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 260.033902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.042176][ C1] net_ratelimit: 28442 callbacks suppressed [ 265.042196][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 265.042248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.042439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.042796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 265.043033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.043327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.043665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 265.043950][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 265.044133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.044207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.052163][ C1] net_ratelimit: 28600 callbacks suppressed [ 270.052184][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 270.052463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 270.052695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.053004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 270.053094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.053214][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.053434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.053475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.053647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.053790][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 275.062257][ C1] net_ratelimit: 29079 callbacks suppressed [ 275.062277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 275.062540][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 275.062750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.063082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 275.063305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.063323][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.063579][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.063641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.063857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.063895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 280.072031][ C1] net_ratelimit: 28060 callbacks suppressed [ 280.072052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.072308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.072596][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 280.072807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 280.072983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.073254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 280.073485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.073755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.074071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 280.074297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.999910][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 285.082051][ C1] net_ratelimit: 28304 callbacks suppressed [ 285.082070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.082382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 285.082557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.082590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.082854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.082864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.083079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.083171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 285.083416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.083449][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 290.092689][ C1] net_ratelimit: 28744 callbacks suppressed [ 290.092710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.093068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 290.093296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.093463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.093582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.093792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.093913][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 290.094004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.094204][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 290.094329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.102041][ C1] net_ratelimit: 27903 callbacks suppressed [ 295.102060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 295.102280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.102604][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 295.102818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.103073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.103091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.103392][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 295.103449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.103649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 295.103693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.112156][ C1] net_ratelimit: 28112 callbacks suppressed [ 300.112176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 300.112216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.112460][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 300.112675][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.112989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 300.113223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.113486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.113798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 300.114096][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.114197][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 305.122001][ C1] net_ratelimit: 28237 callbacks suppressed [ 305.122021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.122333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.122357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 305.122639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 305.122648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.122855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.122858][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.123181][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 305.123194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.123396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.132020][ C1] net_ratelimit: 28864 callbacks suppressed [ 310.132041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.132073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.132359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 310.132620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 310.132830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.133147][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 310.133387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.133646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.133954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 310.133973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.142138][ C1] net_ratelimit: 28758 callbacks suppressed [ 315.142157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 315.142324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.142368][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.142667][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 315.142745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.142887][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.142955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.143142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.143260][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.143462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 317.847755][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.855356][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.152096][ C1] net_ratelimit: 28747 callbacks suppressed [ 320.152115][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.152517][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 320.152783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 320.153012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.153270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.153337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 320.153552][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.153596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.153820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.153831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.162110][ C1] net_ratelimit: 28501 callbacks suppressed [ 325.162132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 325.162350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.162632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.162971][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 325.163235][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 325.163447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.163704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.163763][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 325.164000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.164005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.172051][ C1] net_ratelimit: 28114 callbacks suppressed [ 330.172071][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 330.172090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.172346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 330.172354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.172555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.172719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.172860][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 330.173084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.173360][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.173670][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 335.182054][ C1] net_ratelimit: 27809 callbacks suppressed [ 335.182074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 335.182302][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.182560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.182869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 335.183125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 335.183349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.183629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.183656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 335.183886][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.183974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.192021][ C1] net_ratelimit: 28659 callbacks suppressed [ 340.192041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 340.192347][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.192666][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 340.192727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.192879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.193068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.193141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.193274][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.193492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 340.193614][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.202200][ C0] net_ratelimit: 28446 callbacks suppressed [ 345.202221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.202387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.202701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 345.202908][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.203163][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.203483][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 345.203760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 345.203968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.204061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.204275][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 346.848060][ T31] INFO: task syz.0.249:7373 blocked for more than 143 seconds. [ 346.848087][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 346.848100][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.848110][ T31] task:syz.0.249 state:D stack:25720 pid:7373 tgid:7372 ppid:6856 task_flags:0x400140 flags:0x20004006 [ 346.848177][ T31] Call Trace: [ 346.848185][ T31] [ 346.848199][ T31] __schedule+0x190e/0x4c90 [ 346.848261][ T31] ? __pfx___schedule+0x10/0x10 [ 346.848287][ T31] ? __pfx_lock_release+0x10/0x10 [ 346.848315][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 346.848342][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 346.848374][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.848399][ T31] ? schedule+0x90/0x320 [ 346.848420][ T31] schedule+0x14b/0x320 [ 346.848445][ T31] schedule_preempt_disabled+0x13/0x30 [ 346.848468][ T31] __mutex_lock+0x817/0x1010 [ 346.848495][ T31] ? __mutex_lock+0x602/0x1010 [ 346.848526][ T31] ? gate_exit_net+0x30/0x100 [ 346.848548][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.848587][ T31] ? __pfx_gate_exit_net+0x10/0x10 [ 346.848609][ T31] gate_exit_net+0x30/0x100 [ 346.848628][ T31] ? __pfx_gate_exit_net+0x10/0x10 [ 346.848649][ T31] setup_net+0x829/0x9e0 [ 346.848673][ T31] ? __pfx_down_read_killable+0x10/0x10 [ 346.848697][ T31] ? __pfx_setup_net+0x10/0x10 [ 346.848725][ T31] ? debug_mutex_init+0x38/0x70 [ 346.848753][ T31] copy_net_ns+0x33f/0x570 [ 346.848782][ T31] create_new_namespaces+0x425/0x7b0 [ 346.848819][ T31] unshare_nsproxy_namespaces+0x124/0x180 [ 346.848846][ T31] ksys_unshare+0x57d/0xa70 [ 346.848878][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 346.848902][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.848935][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 346.848964][ T31] __ia32_sys_unshare+0x37/0x40 [ 346.848988][ T31] __do_fast_syscall_32+0xb4/0x110 [ 346.849014][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 346.849039][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 346.849065][ T31] do_fast_syscall_32+0x34/0x80 [ 346.849091][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.849118][ T31] RIP: 0023:0xf73ed579 [ 346.849140][ T31] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 346.849161][ T31] RAX: ffffffffffffffda RBX: 000000006a040000 RCX: 0000000000000000 [ 346.849176][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.849188][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.849200][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 346.849212][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.849240][ T31] [ 346.849255][ T31] [ 346.849255][ T31] Showing all locks held in the system: [ 346.849265][ T31] 1 lock held by kthreadd/2: [ 346.849279][ T31] 2 locks held by kworker/0:0/9: [ 346.849291][ T31] 3 locks held by kworker/0:1/10: [ 346.849302][ T31] #0: ffff88801b081d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.849368][ T31] #1: ffffc900000f7c60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.849424][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 346.849478][ T31] 4 locks held by kworker/u8:0/12: [ 346.849490][ T31] #0: ffff88802483f948 ((wq_completion)wg-kex-wg1#19){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.849551][ T31] #1: ffffc90000117c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.849608][ T31] #2: ffff88805abd9308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0xc90 [ 346.849671][ T31] #3: ffff88805a0f6238 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0xc90 [ 346.849731][ T31] 4 locks held by kworker/u8:1/13: [ 346.849743][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.849799][ T31] #1: ffffc90000127c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.849854][ T31] #2: ffffffff8fec94d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 346.849910][ T31] #3: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2e0 [ 346.849967][ T31] 2 locks held by kworker/1:0/26: [ 346.849980][ T31] 1 lock held by khungtaskd/31: [ 346.849991][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 346.850050][ T31] 4 locks held by kworker/u8:2/36: [ 346.850065][ T31] 3 locks held by kworker/u8:3/53: [ 346.850078][ T31] 3 locks held by kworker/u8:4/69: [ 346.850098][ T31] 5 locks held by kworker/0:2/975: [ 346.850112][ T31] 3 locks held by kworker/u8:6/1157: [ 346.850125][ T31] 4 locks held by kworker/1:2/1864: [ 346.850136][ T31] #0: ffff88807df39d48 ((wq_completion)wg-kex-wg0#20){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.850199][ T31] #1: ffffc900055efc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)(( unsigned long)((worker)))); (typeof((typeof(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.850268][ T31] #2: ffff88805abdd308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x158/0xd40 [ 346.850328][ T31] #3: ffff88805a0f4f38 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x6fd/0xd40 [ 346.850414][ T31] 2 locks held by kworker/u8:8/3524: [ 346.850426][ T31] 3 locks held by kworker/u8:9/3553: [ 346.850437][ T31] #0: ffff8880307a7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.850493][ T31] #1: ffffc9000d0cfc60 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.850550][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 346.850604][ T31] 2 locks held by syslogd/5192: [ 346.850616][ T31] 2 locks held by udevd/5210: [ 346.850629][ T31] 2 locks held by getty/5591: [ 346.850640][ T31] #0: ffff88803568a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 346.850692][ T31] #1: ffffc90002fe62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 346.850749][ T31] 4 locks held by syz-executor/5822: [ 346.850761][ T31] 4 locks held by kworker/1:3/5838: [ 346.850773][ T31] #0: ffff888034e1e548 ((wq_completion)wg-kex-wg0#24){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.850835][ T31] #1: ffffc90004237c60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)(( unsigned long)((worker)))); (typeof((typeof(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.850902][ T31] #2: ffff888067399308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x158/0xd40 [ 346.850961][ T31] #3: ffff888069df8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x7a1/0xd40 [ 346.851023][ T31] 4 locks held by kworker/0:3/5886: [ 346.851034][ T31] 3 locks held by kworker/0:4/5887: [ 346.851047][ T31] 2 locks held by kworker/0:6/5891: [ 346.851059][ T31] 4 locks held by kworker/0:7/5904: [ 346.851070][ T31] 4 locks held by kworker/0:8/5908: [ 346.851082][ T31] 3 locks held by kworker/1:7/5917: [ 346.851094][ T31] 4 locks held by kworker/1:8/6747: [ 346.851105][ T31] #0: ffff88807d075148 ((wq_completion)wg-kex-wg2#22){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.851168][ T31] #1: ffffc9000333fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)(( unsigned long)((worker)))); (typeof((typeof(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.851236][ T31] #2: ffff8880696ad308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x158/0xd40 [ 346.851320][ T31] #3: ffff888069dfe238 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x6fd/0xd40 [ 346.851385][ T31] 4 locks held by kworker/1:9/6748: [ 346.851397][ T31] #0: ffff88807c999d48 ((wq_completion)wg-kex-wg2#20){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 346.851459][ T31] #1: ffffc9000320fc60 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)(( unsigned long)((worker)))); (typeof((typeof(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 346.851527][ T31] #2: ffff888029785308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x158/0xd40 [ 346.851587][ T31] #3: ffff888065d3b2b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x7a1/0xd40 [ 346.851648][ T31] 3 locks held by syz-executor/6783: [ 346.851662][ T31] 1 lock held by syz-executor/7349: [ 346.851673][ T31] #0: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc55/0x1d30 [ 346.851729][ T31] 2 locks held by syz.0.249/7373: [ 346.851740][ T31] #0: ffffffff8fec94d0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 346.851796][ T31] #1: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: gate_exit_net+0x30/0x100 [ 346.851848][ T31] 3 locks held by syz.5.258/7450: [ 346.851860][ T31] 3 locks held by kworker/u8:10/7499: [ 346.851872][ T31] 3 locks held by kworker/u8:11/7501: [ 346.851884][ T31] 6 locks held by syz.6.260/7504: [ 346.851895][ T31] 2 locks held by sed/7505: [ 346.851907][ T31] 4 locks held by kworker/u8:12/7506: [ 346.851918][ T31] #0: ffff888058c0e948 ((wq_completion)wg-kex-wg0 [ 350.212144][ C0] net_ratelimit: 28425 callbacks suppressed [ 350.212166][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.212477][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 350.212759][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 350.212979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.213296][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 350.213510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.213776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.214052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.214111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:da:e8:9b:e8:1d:9f, vlan:0) [ 350.214382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 352.951295][ T31] #23){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 352.951351][ T31] #1: ffffc90004317c60 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 352.951409][ T31] #2: ffff888067399308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x105/0xc90 [ 352.951471][ T31] #3: ffff888069df8338 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x116/0xc90 [ 352.951533][ T31] 3 locks held by kworker/u8:13/7507: [ 352.951547][ T31] 3 locks held by syz-executor/7508: [ 352.951558][ T31] 3 locks held by kworker/u8:14/7509: [ 352.951572][ T31] [ 352.951579][ T31] ============================================= [ 352.951579][ T31] [ 352.951602][ T31] NMI backtrace for cpu 1 [ 352.951618][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 352.951635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.951645][ T31] Call Trace: [ 352.951651][ T31] [ 352.951658][ T31] dump_stack_lvl+0x241/0x360 [ 352.951679][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.951697][ T31] ? __pfx__printk+0x10/0x10 [ 352.951722][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 352.951748][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 352.951766][ T31] ? _printk+0xd5/0x120 [ 352.951780][ T31] ? __pfx__printk+0x10/0x10 [ 352.951795][ T31] ? __wake_up_klogd+0xcc/0x110 [ 352.951816][ T31] ? __pfx__printk+0x10/0x10 [ 352.951832][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 352.951856][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.951878][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 352.951901][ T31] watchdog+0x1058/0x10a0 [ 352.951931][ T31] ? watchdog+0x1ea/0x10a0 [ 352.951960][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.951981][ T31] kthread+0x7a9/0x920 [ 352.952002][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952026][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.952047][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952067][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952092][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952112][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.952132][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 352.952153][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952175][ T31] ret_from_fork+0x4b/0x80 [ 352.952195][ T31] ? __pfx_kthread+0x10/0x10 [ 352.952217][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.952249][ T31] [ 352.967850][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.967891][ C0] NMI backtrace for cpu 0 [ 352.967903][ C0] CPU: 0 UID: 0 PID: 3524 Comm: kworker/u8:8 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 352.967919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 352.967930][ C0] Workqueue: bat_events batadv_tt_purge [ 352.967951][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0xf8/0x120 [ 352.967972][ C0] Code: 48 c7 c7 40 ea b3 8e be 04 00 00 00 e8 21 9f 81 00 83 3d 1a 62 0c 0d 00 74 15 b0 01 65 ff 0d 57 4e 5c 7e 74 0e 5b 41 5e 41 5f cc cc cc cc 31 c0 eb e9 e8 9a b6 82 ff eb eb 48 c7 c7 c0 eb b3 [ 352.967984][ C0] RSP: 0018:ffffc900000063c8 EFLAGS: 00000282 [ 352.967996][ C0] RAX: 1ffffffff1d67c01 RBX: 0000000000000000 RCX: 0000000080000101 [ 352.968006][ C0] RDX: ffff888032401e00 RSI: ffffffff8c810000 RDI: ffff8880b863f920 [ 352.968017][ C0] RBP: ffffc90000006558 R08: ffffffff8aa6942c R09: ffffc90000006690 [ 352.968027][ C0] R10: ffffc90000006680 R11: fffff52000000c9e R12: ffff8880233a9400 [ 352.968037][ C0] R13: 0000000000000000 R14: ffffc90000006660 R15: dffffc0000000000 [ 352.968047][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 352.968059][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.968069][ C0] CR2: 00007f015bd6b0d0 CR3: 000000000e938000 CR4: 00000000003526f0 [ 352.968082][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.968090][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.968099][ C0] Call Trace: [ 352.968104][ C0] [ 352.968110][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 352.968127][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.968147][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 352.968162][ C0] ? nmi_handle+0x2a/0x5a0 [ 352.968188][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 352.968204][ C0] ? nmi_handle+0x14f/0x5a0 [ 352.968222][ C0] ? nmi_handle+0x2a/0x5a0 [ 352.968241][ C0] ? rcu_lockdep_current_cpu_online+0xf8/0x120 [ 352.968259][ C0] ? default_do_nmi+0x63/0x160 [ 352.968274][ C0] ? exc_nmi+0x123/0x1f0 [ 352.968289][ C0] ? end_repeat_nmi+0xf/0x53 [ 352.968309][ C0] ? __find_rr_leaf+0x38c/0x8e0 [ 352.968326][ C0] ? rcu_lockdep_current_cpu_online+0xf8/0x120 [ 352.968344][ C0] ? rcu_lockdep_current_cpu_online+0xf8/0x120 [ 352.968362][ C0] ? rcu_lockdep_current_cpu_online+0xf8/0x120 [ 352.968379][ C0] [ 352.968384][ C0] [ 352.968388][ C0] rcu_read_lock_held+0x1e/0x50 [ 352.968404][ C0] __find_rr_leaf+0x395/0x8e0 [ 352.968425][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 352.968440][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 352.968466][ C0] fib6_table_lookup+0x413/0xbb0 [ 352.968492][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 352.968516][ C0] ip6_pol_route+0x273/0x15d0 [ 352.968535][ C0] ? ip6_pol_route+0x198/0x15d0 [ 352.968554][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 352.968575][ C0] ? NF_HOOK+0x9d/0x7c0 [ 352.968596][ C0] fib6_rule_lookup+0x58c/0x790 [ 352.968614][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.968630][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 352.968648][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 352.968670][ C0] ? __pfx_validate_chain+0x10/0x10 [ 352.968690][ C0] ? __pfx_lock_release+0x10/0x10 [ 352.968711][ C0] ip6_route_input+0x859/0xd90 [ 352.968729][ C0] ? mark_lock+0x9a/0x360 [ 352.968745][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 352.968775][ C0] ? ip6_rcv_finish_core+0x20f/0x410 [ 352.968791][ C0] ip6_rcv_finish+0x140/0x3d0 [ 352.968805][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.968820][ C0] ip_sabotage_in+0x203/0x290 [ 352.968838][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 352.968855][ C0] nf_hook_slow+0xc3/0x220 [ 352.968871][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.968884][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.968898][ C0] NF_HOOK+0x29e/0x450 [ 352.968912][ C0] ? skb_orphan+0xae/0xd0 [ 352.968928][ C0] ? NF_HOOK+0x9a/0x450 [ 352.968941][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.968957][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 352.968975][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 352.968989][ C0] __netif_receive_skb+0x1ea/0x650 [ 352.969007][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.969025][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 352.969048][ C0] ? netif_receive_skb+0x131/0x890 [ 352.969063][ C0] ? netif_receive_skb+0x131/0x890 [ 352.969079][ C0] netif_receive_skb+0x1e8/0x890 [ 352.969095][ C0] ? __pfx_lock_release+0x10/0x10 [ 352.969112][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 352.969131][ C0] ? br_netif_receive_skb+0x130/0x1a0 [ 352.969152][ C0] NF_HOOK+0x9e/0x400 [ 352.969168][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 352.969186][ C0] ? NF_HOOK+0xfc/0x400 [ 352.969203][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 352.969221][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 352.969241][ C0] ? br_pass_frame_up+0x297/0x430 [ 352.969260][ C0] br_handle_frame_finish+0x1905/0x2000 [ 352.969284][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.969302][ C0] ? ip6t_do_table+0x205/0x18a0 [ 352.969323][ C0] ? nf_hook_slow+0x175/0x220 [ 352.969337][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.969355][ C0] br_nf_hook_thresh+0x472/0x590 [ 352.969376][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 352.969395][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.969416][ C0] ? skb_push+0x97/0x100 [ 352.969431][ C0] br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0 [ 352.969450][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.969473][ C0] br_nf_pre_routing_ipv6+0x379/0x770 [ 352.969492][ C0] ? br_nf_pre_routing_ipv6+0x41e/0x770 [ 352.969510][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 352.969530][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 352.969549][ C0] ? br_nf_pre_routing+0x70e/0x1470 [ 352.969566][ C0] ? ip6_mc_input+0x974/0xb70 [ 352.969583][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 352.969602][ C0] br_handle_frame+0x9f3/0x1530 [ 352.969623][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.969642][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 352.969660][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.969689][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 352.969706][ C0] __netif_receive_skb_core+0x13e7/0x4540 [ 352.969723][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 352.969745][ C0] ? ip6_mc_input+0x974/0xb70 [ 352.969761][ C0] ? ip6_mc_input+0x974/0xb70 [ 352.969778][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 352.969797][ C0] ? mark_lock+0x9a/0x360 [ 352.969812][ C0] ? __lock_acquire+0x1397/0x2100 [ 352.969840][ C0] __netif_receive_skb+0x12f/0x650 [ 352.969858][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.969876][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 352.969892][ C0] ? __pfx_lock_release+0x10/0x10 [ 352.969912][ C0] ? __lock_acquire+0x1397/0x2100 [ 352.969937][ C0] process_backlog+0x662/0x15b0 [ 352.969957][ C0] ? process_backlog+0x33b/0x15b0 [ 352.969977][ C0] ? __pfx_process_backlog+0x10/0x10 [ 352.969993][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.970013][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.970033][ C0] __napi_poll+0xcb/0x490 [ 352.970051][ C0] net_rx_action+0x89b/0x1240 [ 352.970077][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 352.970093][ C0] ? __run_timer_base+0x178/0x8e0 [ 352.970112][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 352.970145][ C0] handle_softirqs+0x2d4/0x9b0 [ 352.970161][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 352.970179][ C0] ? do_softirq+0x11b/0x1e0 [ 352.970194][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 352.970213][ C0] do_softirq+0x11b/0x1e0 [ 352.970227][ C0] [ 352.970232][ C0] [ 352.970237][ C0] ? __pfx_do_softirq+0x10/0x10 [ 352.970252][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 352.970270][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.970289][ C0] ? rcu_is_watching+0x15/0xb0 [ 352.970304][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 352.970319][ C0] ? batadv_tt_local_purge+0x2a0/0x340 [ 352.970335][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 352.970351][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 352.970367][ C0] ? batadv_tt_local_purge+0x107/0x340 [ 352.970385][ C0] batadv_tt_local_purge+0x2a0/0x340 [ 352.970406][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 352.970423][ C0] batadv_tt_purge+0x35/0xa40 [ 352.970442][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 352.970458][ C0] process_scheduled_works+0xabe/0x18e0 [ 352.970486][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 352.970507][ C0] ? assign_work+0x364/0x3d0 [ 352.970524][ C0] worker_thread+0x870/0xd30 [ 352.970547][ C0] ? __kthread_parkme+0x169/0x1d0 [ 352.970566][ C0] ? __pfx_worker_thread+0x10/0x10 [ 352.970582][ C0] kthread+0x7a9/0x920 [ 352.970599][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970618][ C0] ? __pfx_worker_thread+0x10/0x10 [ 352.970635][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970699][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970718][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970736][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.970752][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 352.970769][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970787][ C0] ret_from_fork+0x4b/0x80 [ 352.970804][ C0] ? __pfx_kthread+0x10/0x10 [ 352.970822][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.970844][ C0] [ 354.478114][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 354.478135][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 354.478155][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.478167][ T31] Call Trace: [ 354.478174][ T31] [ 354.478182][ T31] dump_stack_lvl+0x241/0x360 [ 354.478210][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.478229][ T31] ? __pfx__printk+0x10/0x10 [ 354.478243][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 354.478275][ T31] ? vscnprintf+0x5d/0x90 [ 354.478297][ T31] panic+0x349/0x880 [ 354.478316][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 354.478338][ T31] ? __pfx_panic+0x10/0x10 [ 354.478352][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 354.478373][ T31] ? __irq_work_queue_local+0x137/0x410 [ 354.478399][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 354.478423][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 354.478442][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 354.478465][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 354.478488][ T31] watchdog+0x1097/0x10a0 [ 354.478511][ T31] ? watchdog+0x1ea/0x10a0 [ 354.478539][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.478562][ T31] kthread+0x7a9/0x920 [ 354.478585][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478610][ T31] ? __pfx_watchdog+0x10/0x10 [ 354.478633][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478654][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478680][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478702][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.478723][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 354.478745][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478775][ T31] ret_from_fork+0x4b/0x80 [ 354.478795][ T31] ? __pfx_kthread+0x10/0x10 [ 354.478818][ T31] ret_from_fork_asm+0x1a/0x30 [ 354.478850][ T31] [ 354.479085][ T31] Kernel Offset: disabled