last executing test programs: 12.168226465s ago: executing program 1 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0xf2ff, r3, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3ed05f89, 0x3, 0x5, 0x2, 0x4810}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.00672788s ago: executing program 1 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0xc2803) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 11.205792379s ago: executing program 1 (id=37): rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT=r1], 0x7) preadv(r0, &(0x7f0000000340), 0x0, 0x76, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a9299e88f4477764f53a7b8d5bbc434ac0affd6433ed709bb258ba858b9d6a4fdf1fe5edb5cc5e24f39e4fccc9d56a5e26847b42fe8907d99a91bff6c0d7b25eb7f623c5249419d457dd8076d4dc4d9ad8f1157c321c53bea51bff5d490937b9271f69e39e464791341ad6199180dae9e41802382a9708d88325b9640d68b29964a55cb84704267683f179c7c5035d", 0x8f}, {&(0x7f00000000c0)="c48a123ecf8e162d9e2b85abc7e3f9d6e558e300e48dc640b63d71a370226657bc076ea3419078bf4b", 0x29}, {&(0x7f0000000240)="8df8a838f89b6e41b535b10ff0bcc6f85a2ba1fa440ceec5b9d1c94675b54338679db58edaa2c5b41859bbea2d08f5a0a5a6b702743164492633f2c2494a3b7a0dcad33aecba", 0x46}], 0x3, 0xc3d, 0x5) 11.093001276s ago: executing program 1 (id=38): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x89901) socket$kcm(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000180)={{0xf8, 0x2}, {0x5, 0x3}, 0x3, 0x0, 0xf}) write$sequencer(0xffffffffffffffff, 0x0, 0x10) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040)='u', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x7, @local, 0x13}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000000)=0x7fff, 0x4) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa80025, 0x0) 9.880964766s ago: executing program 1 (id=45): unshare(0x20040700) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e26, 0xfffffffc, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}]}, 0x1c}}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) fcntl$setpipe(r3, 0x407, 0x7ff) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$MRT6(r2, 0x29, 0xce, &(0x7f0000000080), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000900000000000a58000000060a0b040000000000000000020000042c0004802800018007000100637400001c0002800800014000000001050003000000000008000240000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) unshare(0x4000200) 9.353517536s ago: executing program 1 (id=48): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.851834284s ago: executing program 32 (id=48): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.572656077s ago: executing program 0 (id=67): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) unshare(0x22020600) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000f, 0x40830, 0xffffffffffffffff, 0xa9a17000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x3, 0x4, 0x0, 'queue0\x00', 0xcc57}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000340)={0x0, 0xfffffffa, 0x0, 0x0, 0xc}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) pwrite64(r4, &(0x7f00000000c0)="97", 0x1, 0x0) copy_file_range(r4, 0x0, r4, &(0x7f0000000080)=0x32, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 4.509768992s ago: executing program 2 (id=68): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000006c0)="e6", 0x1}], 0x1) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = msgget$private(0x0, 0x402) msgsnd(r5, &(0x7f00000013c0)=ANY=[@ANYBLOB="0200"], 0x8, 0x800) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)={{0x108, 0x9, 0xf, 0x15c, 0x1f5, 0x8d97, 0x36c, 0x8}}, 0x20) 4.396130376s ago: executing program 2 (id=69): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="70000000200001002cbd7000fddbdf250a8020440000000c12000000050016003a00000014000200fe80000000000000000000000000200008000a0000000000140001"], 0x70}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x5, r0, 0x80000}) openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r4, @ANYRESOCT=r4], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000140)=""/46, 0x2e}], 0x3}}], 0x1, 0x0, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$sock_netdev_private(r5, 0x8942, &(0x7f00000004c0)="25d7d94283bdf13a") ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000440)={0x8, "965b51fd7b10d676e676a7b35894dfb11a32d6cac41391cbfe7701b535637cff"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000002c0)={0x3, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r7, 0x1100}, {r4, 0x8000}], 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r0, 0x0, 0xffffffffffffffff, 0x59, &(0x7f0000000100)="4024130764f94216d1fd328b4d950fe19de0eedb0a9e90edd43f7331656f719b1912a5999560780f1e8be1dc4279e78f269ec5e60f3b7f29b325dfe285106dc5d11dae558e99bf720bc04e08d0dd14527f2a69ef7c32558fe4", 0x1}) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000240)={0x1, @vbi={0x0, 0x0, 0x0, 0x30314442}}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000180)=0x8) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000002000000feffffff"], 0xc8) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r10, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r11, 0x100000}) 4.301136593s ago: executing program 0 (id=70): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c0, 0x5506, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) syz_usb_connect$cdc_ecm(0x6, 0x5d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x1, 0xd0, 0xb, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x8, 0x24, 0x6, 0x0, 0x0, "48fe20"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x24c, 0x4, 0x10}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0xff, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x8, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0xe0, 0x9}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x6, 0x1, 0x7, 0x40, 0x8}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0xf1, &(0x7f0000002380)=ANY=[@ANYBLOB="f103829f43bfe591d5091fe8736a46ca1fa6f7c29a7c860b370c8455785881af057335f2bba4e20b266909193c7a51a3c23861eaec71c1543328beb66aeeef25d6764e14f91a8a076ee2b3deb2f9e99e8d0aed6faa7d90ab89467ef7c63d96232d1cf79d8d6e11c6f7a81e21d5cb52079477ba59d0b61255788c4cb7801e43f27d8fae3dfd9e42ae66df64cd4e3970d6e13410dec0e7f6d81f48f2ac10253786b413d9b116eb7fd6c38140f928507b7c66b235864d5802fd88bd2f5dced9d2d3dca95e228197f59ba81a91c9041f78ae1f83ef2b5229193e49c3883b1ff972203323b188db6a8c5e2344f0b1372d21225bc28b0436ab4a1e9413e081f25f5f94cbbf0b92146593b8be219d3c466d6dcedeb123b8ac8ad9fcfc7df7f24f025f09c4e2f4d6264b9f3e381db9c6964437758047e2742fb9e5a1103fa4b9f57d6f5f68fc8ef69f509bb88c75fd6a4783978c490cbb65dc66be3c8e11b099"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}]}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="b72d", 0x2}], 0x1, 0x0, 0x0, 0xf000000}, 0x20000000}, {{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002218000000c2"], 0x0}, 0x0) 3.573216774s ago: executing program 2 (id=72): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.363411399s ago: executing program 2 (id=73): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) msync(&(0x7f0000210000/0x2000)=nil, 0x2000, 0x3) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f00007c3000/0x2000)=nil, 0x2000, 0x13) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x19) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r5, 0x0) 3.25224639s ago: executing program 3 (id=74): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x71a380, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000008c572278efe78ea700"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x9) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000002c0)=0x5) write$cgroup_subtree(r1, 0x0, 0x4a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x8) eventfd2(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) preadv(r6, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0x0) close(r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) clock_adjtime(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.134970998s ago: executing program 4 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000003d000701000e000005000000017c00000400fc800c00018006000600800a00000c00028008000d"], 0x9c}}, 0x4010) 2.849547429s ago: executing program 4 (id=76): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x99526a1f3cb6d487, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x430f, 0x48}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ab}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ba9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x181}, 0x20000000) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth1_to_batadv\x00', 0x2000}) (async) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xff, 0x10, 0x77, 0x8, 0x3, 0x3e, 0x8, 0x181, 0x40, 0x12a, 0xf4, 0x8000, 0x38, 0x1, 0x9, 0x8, 0xd35}, [{0x4, 0xe, 0x7, 0xbec, 0x9, 0x8, 0xffff, 0x800}], "9d2ab4f193ec1da5b9ac5dafc2dcef855879d0de68244343e1fe3d5ca0d9eb7799159d734119fd4d8a529c4c351c89a6c66d5779dd983609d8a82b33ed4c387b05b65933869d2445fba0de33698c679129f908b083fa5b06d61c72b86c4ec41ee51e43f8248d7bc0b939b76c006ea1f603ec1c551e973bd1b421b62075487ac2ab9c613ddacb4a28ce584fa69f753e5fb6d3d5b8375b17d00a408830ad421732cd654118a6e10ed4b1e00c10fb14ca7dd19c81c0c69f8f627d720d9a8b0b461862a1f161dfceb2fda78e3c11bc910d", ['\x00']}, 0x247) (async) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000480), 0x4) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'ipvlan0\x00', 0x2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x1}, {0xa, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x1fb}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_RATE={0x6, 0x5, {0x49, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x6, 0xba}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4081}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x27, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x57}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xaa}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)='GPL\x00', 0x9efb, 0xda, &(0x7f00000007c0)=""/218, 0x40f00, 0x10, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x9, 0x800, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000980)=[r1], &(0x7f00000009c0)=[{0x3, 0x3, 0x5, 0x3}, {0x2, 0x5, 0x1, 0xc}, {0x0, 0x5, 0x9, 0x3}, {0x1, 0x4, 0x10}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x2, 0xe, 0x3}, {0x0, 0x5, 0x7, 0x8}, {0x4, 0x5, 0xd, 0xc}, {0x1, 0x2, 0xa, 0x6}], 0x10, 0x4, @void, @value}, 0x94) (async) io_uring_enter(r2, 0x7eb4, 0x928f, 0x16, &(0x7f0000000b40)={[0xfffffff9, 0xeb]}, 0x8) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r5, 0xa01, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f0000000d00)={0x7, &(0x7f0000000cc0)=[{0x9, 0x6, 0x1, 0x8001}, {0x3, 0x4a, 0x10, 0x7}, {0x8, 0x40, 0x29, 0x401}, {0x6, 0x0, 0x4, 0x4}, {0x7f, 0x7, 0x3, 0x5}, {0xf801, 0x3, 0x3, 0x2}, {0x8bea, 0x4, 0x5, 0x8}]}) (async) sendmsg$nl_route(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@ipv6_delrule={0x80, 0x21, 0x200, 0x70bd26, 0x25dfdbfd, {0xa, 0x10, 0x10, 0x9, 0x8f, 0x0, 0x0, 0x7, 0x4}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @local}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000e80)={0x0, 0x4, 0x1000, 0x10000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) (async) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000fc0)=""/163) (async) sendto$packet(r2, &(0x7f0000001080)="785d4ad398353d2ef374d7695aec93af4449b8776821d6ab8dcf081001b7279e5314697bf03659a601f6a11d57a99deb35eae1174383630d21faaff69215a57ae2f6e0bc5c181bedb4e8b8b3ec7d2a86e3a428c5145f46987961afe80f0fb6ed34c279c570db443e1da7739d8d770590537101b5c207b27ac19afa9fcb2e54c244267a3b0085d3b7fa6ceaf9a81cd49fb9382f49a100c5f41a43b7044e04d4325f9b55372c3d797c91f1e5da992f72dfd931714c1248de59cbdf62790d4e9d7b9c090471381cdd6dc7f4", 0xca, 0x80c0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001180)={'vcan0\x00'}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) (async) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x3f8, 0x2, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc805}, 0x4008000) (async) unshare(0x40000) (async) vmsplice(r3, &(0x7f0000002580)=[{&(0x7f00000012c0)="7499a671057089c5b0244c2d86ab5ba1bc7aca7bc998a8e47c85454af38dde71cc4b7735c1935826f167c8fc", 0x2c}, {&(0x7f0000001300)="05", 0x1}, {&(0x7f0000001340)="39ac1bad773f1221db4eeaed18c8cc831a20d0c6a2a4668b", 0x18}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="7948ec78339a958248864e1d373a02dd6cecde8093e6194edd8bcf3e62b4c72e8a61c45e31e2de165e4aec6a16008574ebaaa21977dbcc38b8f8ba3098132719", 0x40}, {&(0x7f00000023c0)="4bf5f5bafdbb20aa30cf9f066a906293e027bf4b22118dc4ce3999232f29cfb0d27dec1704f051f838cbc822802d317d3d1d7aded411af90ec4ed4c938d154330199bbc9a105ab3671ea0a6f01ee133b7b5b3f01f81dfb320273ab27f1d9a4bf7a1f6142ff271f4dd435ecb21fcd0db86f52aa9ed8b7571e8b1bbd19f7a613d90aacfe934dffeefb351a42a671a7d5a99e70333bdb1dcd", 0x97}, {&(0x7f0000002480)="ec15c2279bc88352bfa623dc7a75e21ce86a33e869f1ce9d5adcb9c836a4ca5d70dabc3b346123d6ecca30af87bdb163a29a00b0085aba612ad57d899015c7934eb275c4d5bb5e9ad9f11f87a06bae4c0c731e661fb8642796f50a3ec11986d84a38bb2facf9a7b784615fd520811fd3002eeef8e6578c5f071f47039bbea82040d3bc2b5c00c8888766c852fdcb1eb06f0299e4d2f8", 0x96}, {&(0x7f0000002540)="3f5e1d5f83d1bf2edc92595a3a2bfa16a4a664c3b37649ce93", 0x19}], 0x8, 0x4) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002600), r1) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x64, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfffd}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) (async) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000002740)=""/253) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4f}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) 2.717718193s ago: executing program 4 (id=77): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f0000000300)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=ANY=[@ANYBLOB="400100001a000100000000000000000000000000000000000000ffff00000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000032000000000000000000000a6cffbefdb2745c00000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000052faad8e5fa4c9e60000000000000000000000000000000000020002000000000008001600000000004c00120061656769733132386c2d6165736e690000000000000566fa271da1ef410000004000000000000000000000000000000000000000000000000000000000000000000400"/248], 0x140}}, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000040)={0x9, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffe0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.628587797s ago: executing program 3 (id=78): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd29, 0x25dfdbfc, {0x80, 0x0, 0x80, 0x7, 0xfe, 0x0, 0xc8, 0x2, 0xb00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000900)={0x20, 0xc, 0x4, "afa40edd"}, 0x0, 0x0}) 2.539733621s ago: executing program 4 (id=79): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'macvlan0\x00'}}, 0x1e) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000600)={0xfffffffc, 0xd, 0x2, {0xb, @sdr={0x32315241, 0x3}}, 0x1}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0x9, "57ab06b7"}]}}, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000001140), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0}) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x1, @multicast, 'veth0_macvtap\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) io_setup(0xb3, &(0x7f0000000000)=0x0) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x88002, 0x0) io_submit(r6, 0x1, &(0x7f0000001680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r7, 0x0, 0x0, 0x3}]) connect$pppoe(r5, &(0x7f0000000200)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'erspan0\x00'}}, 0x1e) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x5, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7042b10460d810082190102030109021b00010000000009040000018984aa0009050c7f"], 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x24, &(0x7f0000000140)={0x2, 0x2, 0x80008804, 0x81}) ioctl$vim2m_VIDIOC_EXPBUF(r9, 0xc0405610, &(0x7f0000000000)={0x1, 0x3, 0xd90, 0x2800}) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x10, 0x0, 0xfc98) sendmmsg(r8, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ee54b1d8e4", 0x5}], 0x1}}], 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000020101010000000000000000000000090c0019801bff0200400800c8"], 0x20}, 0x1, 0x0, 0x0, 0x40895}, 0x8000) recvmmsg(r8, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) 2.409845177s ago: executing program 0 (id=80): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="00000400000310000071"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.1889239s ago: executing program 2 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x10000}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x0, 0x7, 0x400006a}, 0x2c) 1.850235018s ago: executing program 2 (id=82): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27050200160014000300002fb96dbcf706e10500070088a800a88800", 0x1c}, {&(0x7f0000000bc0)="cb4e88a8e5104b", 0x7}], 0x2}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0xf, 0x3, 0x9, 0x64300, r2, 0x7fff, '\x00', 0x0, r3, 0x3, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_control_io$uac1(r1, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x3, 0x0, &(0x7f0000000080)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f00000076c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008000, &(0x7f0000007780)={0x2, 0x4e22, @remote}, 0x10) write$char_usb(r4, &(0x7f0000000100)='V', 0x1) 837.723691ms ago: executing program 3 (id=83): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 697.173864ms ago: executing program 3 (id=84): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r1 = open_tree(r0, &(0x7f0000000000)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa80025, 0x0) 691.32808ms ago: executing program 0 (id=85): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000540)={0x9, 0x3fffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 493.085968ms ago: executing program 3 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80045440, &(0x7f0000002740)) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) prctl$PR_SET_SECCOMP(0x37, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000a00)=""/126, 0x7e, 0x7) sendto$packet(r2, &(0x7f0000000380)=' ', 0x1c, 0x4024001, &(0x7f0000000200)={0x11, 0x5, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) readv(r2, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) (async, rerun: 32) r6 = getpgrp(0xffffffffffffffff) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x0, 0x0, 0xffffbffc, 'syz0\x00'}, 0x2, 0x2, 0x7, r6, 0x0, 0xff, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000480)) 425.739656ms ago: executing program 4 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240), &(0x7f0000000280)) (async) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) fcntl$setlease(r5, 0x400, 0x1) (async) fcntl$setlease(r4, 0x400, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) fcntl$setlease(r5, 0x400, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (async) 410.518489ms ago: executing program 0 (id=88): r0 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x8, 0x0, r0, 0x1, &(0x7f0000000200), 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x880e, 0x0, 0x0, 0x0) (fail_nth: 15) 178.887874ms ago: executing program 0 (id=89): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f00000003c0)) mmap(&(0x7f00009df000/0x7000)=nil, 0x7000, 0xd, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vcs(0xffffff9c, &(0x7f0000000200), 0x101282, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="10008100c2", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x6, r3}, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000380)={r4, 0x3, 0x87, 0x9, &(0x7f0000000300)=[{0x3, 0x3, 0x1, 0x1ff}, {0x2, 0x0, 0xc, 0x86f}, {0x5, 0x0, 0x8, 0x9}, {0x1, 0xddbd, 0x3ff, 0x80}, {0x9, 0x97, 0xff, 0x5}, {0xa96a, 0x3, 0x3ff, 0x8}, {0xd62, 0x7, 0x70b, 0x8}, {0x475a, 0x3, 0x87c3, 0x7}, {0x48, 0xfff, 0x3, 0xf}]}) r5 = syz_io_uring_setup(0x520b, &(0x7f0000000000)={0x0, 0x4bf9, 0x0, 0x2, 0x376}, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x15f2, &(0x7f0000000100)={0x0, 0x5e45, 0x2, 0x2, 0xc6, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0)) userfaultfd(0x80000) 73.599207ms ago: executing program 3 (id=90): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0x5c}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0xe1000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0x6609) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x8140aecc, 0x0) r10 = syz_io_uring_setup(0x10d1, &(0x7f0000000480)={0x0, 0xa179, 0x8, 0x0, 0x31d}, &(0x7f0000000040)=0x0, &(0x7f0000000e00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r10, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_SREGS(r9, 0x8138ae83, &(0x7f0000000240)) 61.357598ms ago: executing program 4 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000122fff1905b18cd80000000800080000000000180001801400020076657468305f74045f6261746164760008a19dc04656c446cc73f2a18dfd854459983f34bf40cb01a805fc39915e3a91acad45cea63d2951676fc9aa2cb7a7a2efdd54fee6b0d5be06261edbbb60c0849408f0bc373ee3eec602a40931c87d953f2ed67012667143fabefa97903b091fdc00e03d7dbbb4f09447a3be1f914bcc1eb2434d144d1cb75f80c06b72c73ff78278172d0ac3b205450e8f30d3"], 0x3c}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x10000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 0s ago: executing program 5 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b0001006272696467650000280002800c00230007000000000000000700060037070000080005000000000005002a0001000000"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 56.212799][ T5820] cgroup: Unknown subsys name 'net' [ 56.327807][ T5820] cgroup: Unknown subsys name 'cpuset' [ 56.335601][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.596161][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.797337][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.818468][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.827886][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.836045][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.843629][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.852690][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.860519][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.869135][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.877516][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.884771][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.892262][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.901630][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.902064][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.910007][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.922224][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.933043][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.940932][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.948054][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.955145][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.956835][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.963485][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 59.970484][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.978645][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.984657][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.990868][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.005771][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.006304][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.013439][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.044361][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.052163][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.480524][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 60.555147][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 60.646964][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 60.708364][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.716811][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.724105][ T5851] bridge_slave_0: entered allmulticast mode [ 60.731907][ T5851] bridge_slave_0: entered promiscuous mode [ 60.759622][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 60.774090][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.781385][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.788704][ T5851] bridge_slave_1: entered allmulticast mode [ 60.795584][ T5851] bridge_slave_1: entered promiscuous mode [ 60.816541][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 60.881806][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.889098][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.896792][ T5849] bridge_slave_0: entered allmulticast mode [ 60.903372][ T5849] bridge_slave_0: entered promiscuous mode [ 60.930890][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.942711][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.960101][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.968516][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.976205][ T5849] bridge_slave_1: entered allmulticast mode [ 60.982784][ T5849] bridge_slave_1: entered promiscuous mode [ 60.990455][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.998281][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.006019][ T5852] bridge_slave_0: entered allmulticast mode [ 61.012612][ T5852] bridge_slave_0: entered promiscuous mode [ 61.041290][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.048676][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.055927][ T5852] bridge_slave_1: entered allmulticast mode [ 61.062533][ T5852] bridge_slave_1: entered promiscuous mode [ 61.084764][ T5851] team0: Port device team_slave_0 added [ 61.118347][ T5851] team0: Port device team_slave_1 added [ 61.134937][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.161764][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.180103][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.187520][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.195318][ T5853] bridge_slave_0: entered allmulticast mode [ 61.201840][ T5853] bridge_slave_0: entered promiscuous mode [ 61.211356][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.231603][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.239105][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.265419][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.279604][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.296345][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.303571][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.311093][ T5853] bridge_slave_1: entered allmulticast mode [ 61.318193][ T5853] bridge_slave_1: entered promiscuous mode [ 61.340787][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.347953][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.374425][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.392365][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.399730][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.406952][ T5848] bridge_slave_0: entered allmulticast mode [ 61.413519][ T5848] bridge_slave_0: entered promiscuous mode [ 61.420831][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.428049][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.435319][ T5848] bridge_slave_1: entered allmulticast mode [ 61.441857][ T5848] bridge_slave_1: entered promiscuous mode [ 61.459417][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.471177][ T5849] team0: Port device team_slave_0 added [ 61.480462][ T5849] team0: Port device team_slave_1 added [ 61.512376][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.536103][ T5852] team0: Port device team_slave_0 added [ 61.542421][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.549559][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.575941][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.605512][ T5852] team0: Port device team_slave_1 added [ 61.620916][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.628123][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.654606][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.667697][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.679230][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.732556][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.740019][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.766634][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.779393][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.786563][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.812564][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.826679][ T5853] team0: Port device team_slave_0 added [ 61.842523][ T5851] hsr_slave_0: entered promiscuous mode [ 61.849370][ T5851] hsr_slave_1: entered promiscuous mode [ 61.878466][ T5848] team0: Port device team_slave_0 added [ 61.902752][ T5853] team0: Port device team_slave_1 added [ 61.928782][ T5848] team0: Port device team_slave_1 added [ 61.938387][ T5852] hsr_slave_0: entered promiscuous mode [ 61.945423][ T5852] hsr_slave_1: entered promiscuous mode [ 61.951575][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.959843][ T5852] Cannot create hsr debugfs directory [ 61.982693][ T5849] hsr_slave_0: entered promiscuous mode [ 61.988876][ T5849] hsr_slave_1: entered promiscuous mode [ 61.996062][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.003636][ T5849] Cannot create hsr debugfs directory [ 62.040253][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.047311][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.073309][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.085853][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.092818][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.119849][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.120434][ T5846] Bluetooth: hci3: command tx timeout [ 62.134268][ T5147] Bluetooth: hci1: command tx timeout [ 62.136706][ T5846] Bluetooth: hci4: command tx timeout [ 62.141735][ T5147] Bluetooth: hci0: command tx timeout [ 62.148053][ T5846] Bluetooth: hci2: command tx timeout [ 62.166431][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.173397][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.199913][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.211731][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.219206][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.245890][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.323806][ T5853] hsr_slave_0: entered promiscuous mode [ 62.330842][ T5853] hsr_slave_1: entered promiscuous mode [ 62.337083][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.344750][ T5853] Cannot create hsr debugfs directory [ 62.410934][ T5848] hsr_slave_0: entered promiscuous mode [ 62.420170][ T5848] hsr_slave_1: entered promiscuous mode [ 62.427104][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.434844][ T5848] Cannot create hsr debugfs directory [ 62.683904][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.696429][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.706331][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.726282][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.805641][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.814735][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.836622][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.847598][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.905387][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.916599][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.949809][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.960757][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.026346][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.042104][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.062471][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.093686][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.126369][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.133297][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.161756][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.173952][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.194735][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.206702][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.213951][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.236847][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.243601][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.291276][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.298417][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.342492][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.359427][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.391798][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.398920][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.430663][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.437780][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.451450][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.483373][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.490530][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.512631][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.519781][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.585465][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.643525][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.662871][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.697753][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.709689][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.722311][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.733690][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.750050][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.757221][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.774761][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.781934][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.802893][ T5851] veth0_vlan: entered promiscuous mode [ 63.821198][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.828357][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.838614][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.845868][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.886962][ T5851] veth1_vlan: entered promiscuous mode [ 63.950288][ T5849] veth0_vlan: entered promiscuous mode [ 63.961350][ T5852] veth0_vlan: entered promiscuous mode [ 63.988395][ T5849] veth1_vlan: entered promiscuous mode [ 64.046493][ T5851] veth0_macvtap: entered promiscuous mode [ 64.053388][ T5852] veth1_vlan: entered promiscuous mode [ 64.080071][ T5851] veth1_macvtap: entered promiscuous mode [ 64.110537][ T5849] veth0_macvtap: entered promiscuous mode [ 64.122155][ T5849] veth1_macvtap: entered promiscuous mode [ 64.131495][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.155419][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.171857][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.184828][ T5845] Bluetooth: hci0: command tx timeout [ 64.185193][ T5147] Bluetooth: hci4: command tx timeout [ 64.190259][ T5845] Bluetooth: hci1: command tx timeout [ 64.195687][ T55] Bluetooth: hci3: command tx timeout [ 64.197422][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.201163][ T5846] Bluetooth: hci2: command tx timeout [ 64.216174][ T5852] veth0_macvtap: entered promiscuous mode [ 64.231328][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.243225][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.257706][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.269509][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.279324][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.288508][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.298438][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.318041][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.328568][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.339926][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.365019][ T5852] veth1_macvtap: entered promiscuous mode [ 64.375541][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.385481][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.394505][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.403203][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.470539][ T5848] veth0_vlan: entered promiscuous mode [ 64.483346][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.502546][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513076][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.523789][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.535589][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.556717][ T5853] veth0_vlan: entered promiscuous mode [ 64.572972][ T5848] veth1_vlan: entered promiscuous mode [ 64.586628][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.597829][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.608638][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.619308][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.630204][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.641188][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.649968][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.658840][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.669255][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.703495][ T5853] veth1_vlan: entered promiscuous mode [ 64.749308][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.764209][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.788008][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.796647][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.835319][ T5848] veth0_macvtap: entered promiscuous mode [ 64.872299][ T5848] veth1_macvtap: entered promiscuous mode [ 64.883863][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.895730][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.928474][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.930440][ T5853] veth0_macvtap: entered promiscuous mode [ 64.942406][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.966025][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.980914][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.000134][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.010846][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.020712][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.031389][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.048758][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.073707][ T5853] veth1_macvtap: entered promiscuous mode [ 65.080024][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.086173][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.107587][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.113952][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.121938][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.142092][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.152307][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.167087][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.179661][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.200245][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.222311][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.238011][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.248487][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.259113][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.269328][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.279904][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.290018][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.301323][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.312649][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.339389][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.350954][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.361707][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.372265][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.382190][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.392902][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.403234][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.413806][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425841][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.434396][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.443107][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.451897][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.460624][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.473160][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.483303][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.501807][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.517578][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.528785][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.541365][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.639195][ T5897] xt_hashlimit: invalid interval [ 65.650002][ T5897] process 'syz.0.1' launched '/dev/fd/7' with NULL argv: empty string added [ 65.756544][ T5898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.843304][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.876415][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.015683][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.104523][ T5903] $Hÿ: renamed from bond0 (while UP) [ 66.126722][ T5903] $Hÿ: entered promiscuous mode [ 66.132036][ T5903] bond_slave_0: entered promiscuous mode [ 66.138467][ T5903] bond_slave_1: entered promiscuous mode [ 66.149941][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.187356][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.228708][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.293932][ T5846] Bluetooth: hci0: command tx timeout [ 66.297759][ T5147] Bluetooth: hci1: command tx timeout [ 66.305237][ T5845] Bluetooth: hci2: command tx timeout [ 66.330658][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.347113][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.363435][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.418788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.435044][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.516179][ T5908] netlink: 'syz.4.7': attribute type 4 has an invalid length. [ 66.639329][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.695344][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.719593][ T47] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 66.758583][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.768215][ T5913] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[5913] [ 66.815620][ T47] usb 4-1: config 0 descriptor?? [ 66.958707][ T5916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 67.029966][ T5914] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.123901][ T5919] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 67.714912][ T5147] Bluetooth: hci3: command tx timeout [ 67.747587][ T25] IPVS: starting estimator thread 0... [ 67.756877][ T5931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10'. [ 67.776467][ T5929] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 67.797569][ T5931] Zero length message leads to an empty skb [ 67.804468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 67.894464][ T5932] IPVS: using max 24 ests per chain, 57600 per kthread [ 68.225555][ T5888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.334447][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.344417][ T5147] Bluetooth: hci0: command tx timeout [ 68.354327][ T5846] Bluetooth: hci1: command tx timeout [ 68.359807][ T5147] Bluetooth: hci2: command tx timeout [ 68.404592][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 68.418701][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.456316][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.482592][ T5888] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.501832][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.516037][ T5888] usb 2-1: Product: syz [ 68.520459][ T5888] usb 2-1: Manufacturer: syz [ 68.528924][ T25] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 68.539367][ T5888] usb 2-1: SerialNumber: syz [ 68.544882][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.569928][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.600665][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.611250][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.626058][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.639517][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.649893][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.659209][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.671817][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.680624][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.690194][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.704683][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.713406][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.723477][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.736162][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.744866][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.754069][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.771232][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.781532][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.791194][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.802834][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.812617][ T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.822500][ T25] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.835436][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.848663][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.858175][ T25] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.868005][ T25] usb 5-1: Product: syz [ 68.872557][ T25] usb 5-1: Manufacturer: syz [ 68.878892][ T25] usb 5-1: SerialNumber: syz [ 68.893507][ T25] usb 5-1: config 0 descriptor?? [ 68.909575][ T25] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 68.973421][ T5888] usb 2-1: 0:2 : does not exist [ 69.087045][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 69.095470][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 69.137482][ T47] usb 4-1: USB disconnect, device number 2 [ 69.312985][ T5837] usb 5-1: USB disconnect, device number 2 [ 69.329803][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 69.367860][ T5837] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 69.390694][ T5888] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 69.439786][ T5947] bridge_slave_1: left allmulticast mode [ 69.458842][ T5947] bridge_slave_1: left promiscuous mode [ 69.467447][ T5888] usb 2-1: USB disconnect, device number 2 [ 69.477973][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.518711][ T5947] bridge_slave_0: left allmulticast mode [ 69.545422][ T5947] bridge_slave_0: left promiscuous mode [ 69.574926][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.593284][ T5944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.687695][ T5951] netlink: 'syz.2.17': attribute type 11 has an invalid length. [ 69.759323][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.919671][ T5956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 69.945203][ T5147] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 69.954825][ T5147] Bluetooth: hci4: Injecting HCI hardware error event [ 69.974426][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.984634][ T5887] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 70.050409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.125768][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 70.134721][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 70.141331][ T5890] usb 3-1: config 2 has an invalid interface number: 169 but max is 0 [ 70.142048][ T5887] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 70.159785][ T5887] usb 5-1: config 0 has an invalid interface number: 253 but max is 1 [ 70.172432][ T5960] bridge_slave_0: left allmulticast mode [ 70.187354][ T5960] bridge_slave_0: left promiscuous mode [ 70.193397][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.215417][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.222937][ T5887] usb 5-1: config 0 has no interface number 0 [ 70.237001][ T5887] usb 5-1: config 0 has no interface number 1 [ 70.252259][ T5890] usb 3-1: config 2 has no interface number 0 [ 70.253097][ T5887] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 70.262992][ T5890] usb 3-1: config 2 interface 169 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 70.289718][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.297817][ T5887] usb 5-1: Product: syz [ 70.302236][ T5887] usb 5-1: Manufacturer: syz [ 70.310196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.356731][ T5887] usb 5-1: SerialNumber: syz [ 70.364886][ T5960] bridge_slave_1: left allmulticast mode [ 70.370593][ T5960] bridge_slave_1: left promiscuous mode [ 70.377231][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.407931][ T5960] bond0: (slave bond_slave_0): Releasing backup interface [ 70.433573][ T5960] bond0: (slave bond_slave_1): Releasing backup interface [ 70.444353][ T5890] usb 3-1: config 2 interface 169 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 70.452708][ T5887] usb 5-1: config 0 descriptor?? [ 70.473795][ T5890] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has an invalid bInterval 129, changing to 11 [ 70.512000][ T5890] usb 3-1: config 2 interface 169 altsetting 0 endpoint 0x8B has invalid maxpacket 58232, setting to 1024 [ 70.528288][ T5960] team0: Port device team_slave_0 removed [ 70.561954][ T5890] usb 3-1: config 2 interface 169 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.575289][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 70.599002][ T5960] team0: Port device team_slave_1 removed [ 70.605663][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.613215][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.621490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 70.630698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.639334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.665273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.723226][ T5960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.730982][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.744994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.825886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.839241][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.861156][ T25] usb 1-1: config 0 has no interfaces? [ 70.868757][ T5890] usb 3-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 70.878052][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 70.901570][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.910919][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.921534][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 70.961832][ T5890] cypress_m8 3-1:2.169: DeLorme Earthmate USB converter detected [ 70.975200][ T25] usb 1-1: config 0 descriptor?? [ 71.029779][ T5964] fuse: Unknown parameter 'bd' [ 71.345771][ T25] usb 5-1: USB disconnect, device number 3 [ 71.400084][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.432509][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.488510][ T5890] usb 3-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 71.516595][ T5972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.555127][ T5890] usb 3-1: USB disconnect, device number 2 [ 71.561048][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22'. [ 71.598217][ T5972] vlan0: entered allmulticast mode [ 71.605648][ T5972] veth0_vlan: entered allmulticast mode [ 71.643794][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.674868][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.694054][ T5890] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 71.705496][ T5890] cypress_m8 3-1:2.169: device disconnected [ 72.394363][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.434685][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.555942][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.569346][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 72.578996][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.589447][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.600022][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 72.608634][ T5890] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 72.618296][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.627338][ T25] usb 4-1: config 0 descriptor?? [ 72.633629][ T5890] usb 2-1: Product: syz [ 72.643329][ T5890] usb 2-1: Manufacturer: syz [ 72.648328][ T5890] usb 2-1: SerialNumber: syz [ 72.662877][ T5890] usb 2-1: config 0 descriptor?? [ 72.673816][ T5890] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 72.688882][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 72.699870][ T5890] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 72.713204][ T5890] usb 2-1: media controller created [ 72.736920][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 72.884665][ T5886] usb 1-1: USB disconnect, device number 2 [ 72.974336][ T5890] DVB: Unable to find symbol tda10046_attach() [ 72.999436][ T5890] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 73.024790][ T5890] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 73.054676][ T25] apple 0003:05AC:027A.0001: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 73.238523][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 73.321552][ T5890] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 73.338777][ T5887] usb 4-1: USB disconnect, device number 3 [ 73.369994][ T5977] syz.2.23 (5977) used greatest stack depth: 18688 bytes left [ 73.377113][ T5890] usb 2-1: USB disconnect, device number 3 [ 73.404773][ T5886] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.574705][ T5886] usb 1-1: device descriptor read/64, error -71 [ 73.844432][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.844645][ T5886] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 74.015508][ T5890] usb 5-1: config 0 has an invalid interface number: 136 but max is 0 [ 74.023806][ T5890] usb 5-1: config 0 has no interface number 0 [ 74.025604][ T5886] usb 1-1: device descriptor read/64, error -71 [ 74.032287][ T5890] usb 5-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 74.049737][ T5890] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 74.058904][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.068848][ T5890] usb 5-1: config 0 descriptor?? [ 74.079896][ T5890] keyspan 5-1:0.136: Keyspan 2 port adapter converter detected [ 74.099843][ T5890] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 1 [ 74.120671][ T5890] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 84 [ 74.129543][ T5890] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 2 [ 74.140930][ T5890] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 74.154983][ T5886] usb usb1-port1: attempt power cycle [ 74.156745][ T5890] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 88 [ 74.173317][ T5890] keyspan 5-1:0.136: found no endpoint descriptor for endpoint 6 [ 74.184019][ T5890] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 74.184317][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.224407][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.385736][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.395331][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 74.404319][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.419755][ T9] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 74.420095][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 74.440079][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.448304][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.451239][ T25] usb 4-1: config 0 descriptor?? [ 74.468998][ T9] usb 3-1: Product: syz [ 74.473220][ T9] usb 3-1: Manufacturer: syz [ 74.504369][ T9] usb 3-1: SerialNumber: syz [ 74.524414][ T5886] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 74.532328][ T9] usb 3-1: config 0 descriptor?? [ 74.547839][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 74.575768][ T5886] usb 1-1: device descriptor read/8, error -71 [ 74.710957][ T6018] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 74.746953][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.757942][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.814589][ T5886] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 74.831570][ T5890] usb 5-1: USB disconnect, device number 4 [ 74.845800][ T5886] usb 1-1: device descriptor read/8, error -71 [ 74.847237][ T5890] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 74.880001][ T5890] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 74.931338][ T5890] keyspan 5-1:0.136: device disconnected [ 74.958986][ T5886] usb usb1-port1: unable to enumerate USB device [ 74.967783][ T9] gspca_se401: ExtraFeatures: 110 [ 75.176406][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.187559][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.197149][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.207919][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.245298][ T25] logitech 0003:046D:C29C.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 75.290776][ T9] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 75.359871][ T9] usb 3-1: USB disconnect, device number 3 [ 75.488192][ T5847] udevd[5847]: setting mode of /dev/bus/usb/003/003 to 020664 failed: No such file or directory [ 75.507957][ T5847] udevd[5847]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 75.511206][ T25] logitech 0003:046D:C29C.0002: no inputs found [ 75.724609][ T25] usb 4-1: USB disconnect, device number 4 [ 75.923412][ T6035] trusted_key: syz.2.40 sent an empty control message without MSG_MORE. [ 76.205824][ T6042] FAULT_INJECTION: forcing a failure. [ 76.205824][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.221972][ T6043] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 76.239501][ T6043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.258760][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.258780][ T6042] CPU: 1 UID: 0 PID: 6042 Comm: syz.0.43 Not tainted 6.14.0-rc1-syzkaller #0 [ 76.258800][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 76.258812][ T6042] Call Trace: [ 76.258817][ T6042] [ 76.258824][ T6042] dump_stack_lvl+0x241/0x360 [ 76.258854][ T6042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.258871][ T6042] ? __pfx__printk+0x10/0x10 [ 76.258899][ T6042] ? snprintf+0xda/0x120 [ 76.258918][ T6042] should_fail_ex+0x40a/0x550 [ 76.258939][ T6042] _copy_to_user+0x31/0xb0 [ 76.258957][ T6042] simple_read_from_buffer+0xca/0x150 [ 76.258983][ T6042] proc_fail_nth_read+0x1e9/0x250 [ 76.259016][ T6042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.259041][ T6042] ? rw_verify_area+0x243/0x630 [ 76.259059][ T6042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.259082][ T6042] vfs_read+0x1f8/0xb40 [ 76.259103][ T6042] ? fdget_pos+0x254/0x320 [ 76.259120][ T6042] ? __pfx___mutex_lock+0x10/0x10 [ 76.259140][ T6042] ? __pfx_vfs_read+0x10/0x10 [ 76.259157][ T6042] ? __se_compat_sys_ioctl+0x150/0xc10 [ 76.259180][ T6042] ? __fget_files+0x2a/0x410 [ 76.259198][ T6042] ? __fget_files+0x395/0x410 [ 76.259212][ T6042] ? __fget_files+0x2a/0x410 [ 76.259236][ T6042] ksys_read+0x18f/0x2b0 [ 76.259257][ T6042] ? __pfx_ksys_read+0x10/0x10 [ 76.259278][ T6042] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 76.259298][ T6042] ? lockdep_hardirqs_on+0x99/0x150 [ 76.259319][ T6042] __do_fast_syscall_32+0xb4/0x110 [ 76.259340][ T6042] ? exc_page_fault+0x590/0x8b0 [ 76.259361][ T6042] do_fast_syscall_32+0x34/0x80 [ 76.259381][ T6042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 76.259403][ T6042] RIP: 0023:0xf7f95579 [ 76.259421][ T6042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 76.259434][ T6042] RSP: 002b:00000000f50b6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 76.259451][ T6042] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50b6620 [ 76.259461][ T6042] RDX: 000000000000000f RSI: 00000000f741cff4 RDI: 0000000000000000 [ 76.259471][ T6042] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 76.259479][ T6042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.259488][ T6042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 76.259511][ T6042] [ 76.528530][ T6049] mmap: syz.2.46 (6049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.644291][ T5886] usb 5-1: device descriptor read/64, error -71 [ 76.828139][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.889571][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.042814][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.074257][ T5886] usb 5-1: device descriptor read/64, error -71 [ 77.185777][ T5886] usb usb5-port1: attempt power cycle [ 77.201998][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.512223][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.555020][ T5886] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.644852][ T5886] usb 5-1: device descriptor read/8, error -71 [ 77.884285][ T5886] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.966421][ T5886] usb 5-1: device descriptor read/8, error -71 [ 78.093838][ T5886] usb usb5-port1: unable to enumerate USB device [ 78.120841][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.135624][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.163721][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.198854][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.218798][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.227000][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.236483][ T6049] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 78.524660][ T5886] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.637051][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 78.723916][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 78.739367][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.763253][ T5886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.781190][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.797729][ T5886] usb 1-1: Product: syz [ 78.801931][ T5886] usb 1-1: Manufacturer: syz [ 78.816842][ T5886] usb 1-1: SerialNumber: syz [ 78.954387][ T5837] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 78.967894][ T62] bond0 (unregistering): Released all slaves [ 79.040040][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.51'. [ 79.080412][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 79.155287][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 79.184596][ T5837] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.203926][ T5837] usb 4-1: config 0 has no interface number 0 [ 79.212513][ T5886] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 79.237370][ T5837] usb 4-1: config 0 interface 184 has no altsetting 0 [ 79.251736][ T5837] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.272659][ T5886] usb 1-1: USB disconnect, device number 7 [ 79.282472][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.291138][ T5837] usb 4-1: Product: syz [ 79.295802][ T5837] usb 4-1: Manufacturer: syz [ 79.301806][ T5837] usb 4-1: SerialNumber: syz [ 79.333029][ T5837] usb 4-1: config 0 descriptor?? [ 79.378112][ T5837] smsc75xx v1.0.0 [ 79.444418][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.531186][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.634332][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 79.657820][ T5885] usb 5-1: config 252 has an invalid interface number: 217 but max is 0 [ 79.688610][ T5885] usb 5-1: config 252 has no interface number 0 [ 79.706711][ T5885] usb 5-1: config 252 interface 217 has no altsetting 0 [ 79.730074][ T5885] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=b7.76 [ 79.758097][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.822733][ T6065] chnl_net:caif_netlink_parms(): no params data found [ 79.834969][ T5885] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 79.888733][ T5885] dvb-usb: bulk message failed: -22 (2/0) [ 79.921713][ T5885] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 79.966814][ T5885] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 79.998404][ T5885] usb 5-1: media controller created [ 80.010974][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.049118][ T5885] usb 5-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 80.074368][ T62] hsr_slave_0: left promiscuous mode [ 80.101484][ T5885] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 80.104211][ T62] hsr_slave_1: left promiscuous mode [ 80.180243][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 80.214561][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 80.224406][ T62] veth1_macvtap: left promiscuous mode [ 80.230864][ T62] veth0_macvtap: left promiscuous mode [ 80.254812][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.265235][ T5147] Bluetooth: hci0: command tx timeout [ 80.266060][ T62] veth1_vlan: left promiscuous mode [ 80.284523][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 80.302454][ T62] veth0_vlan: left promiscuous mode [ 80.314489][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 80.332502][ T5885] rc_core: IR keymap rc-dtt200u not found [ 80.339672][ T5885] Registered IR keymap rc-empty [ 80.345568][ T5837] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 80.355324][ T5837] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 80.382605][ T5837] usb 4-1: USB disconnect, device number 5 [ 80.388381][ T5885] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 80.450050][ T5885] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 80.486056][ T5885] dvb-usb: schedule remote query interval to 300 msecs. [ 80.493517][ T5885] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 80.516841][ T5885] usb 5-1: USB disconnect, device number 9 [ 80.678449][ T5885] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 80.964854][ T6121] input: syz0 as /devices/virtual/input/input7 [ 81.104265][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.276589][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 81.302260][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.322567][ T25] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.344465][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 81.354291][ T5837] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 81.361541][ T25] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 81.380641][ T25] usb 4-1: Product: syz [ 81.415487][ T25] usb 4-1: Manufacturer: syz [ 81.423854][ T25] hub 4-1:4.0: USB hub found [ 81.482175][ T6131] tipc: Can't bind to reserved service type 0 [ 81.517562][ T5837] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 81.557698][ T5837] usb 5-1: config 0 interface 0 has no altsetting 0 [ 81.584636][ T5837] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 81.610983][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.628516][ T25] hub 4-1:4.0: 12 ports detected [ 81.629702][ T5837] usb 5-1: config 0 descriptor?? [ 81.638831][ T25] hub 4-1:4.0: insufficient power available to use all downstream ports [ 81.669113][ T6121] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 81.890265][ T25] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 81.891684][ T909] cfg80211: failed to load regulatory.db [ 81.900033][ T25] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 81.914916][ T6121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.927505][ T6121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.957584][ T25] usb 4-1: USB disconnect, device number 6 [ 82.104330][ T5886] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 82.229586][ T6137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 82.241641][ T5837] usb 5-1: string descriptor 0 read error: -71 [ 82.263760][ T5837] usbhid 5-1:0.0: can't add hid device: -71 [ 82.277887][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.293237][ T5837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 82.309721][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.321792][ T5837] usb 5-1: USB disconnect, device number 10 [ 82.328192][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.342772][ T5886] usb 1-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 82.344722][ T5147] Bluetooth: hci0: command tx timeout [ 82.354373][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.386218][ T5886] usb 1-1: config 0 descriptor?? [ 82.437875][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.461577][ T6065] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.483638][ T6065] bridge_slave_0: entered allmulticast mode [ 82.525858][ T6065] bridge_slave_0: entered promiscuous mode [ 82.556269][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.575098][ T6065] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.582335][ T6065] bridge_slave_1: entered allmulticast mode [ 82.608956][ T6065] bridge_slave_1: entered promiscuous mode [ 82.693217][ T6065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.726641][ T6065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.835537][ T6065] team0: Port device team_slave_0 added [ 82.857061][ T5886] betop 0003:11C0:5506.0003: collection stack underflow [ 82.864071][ T5886] betop 0003:11C0:5506.0003: item 0 2 0 12 parsing failed [ 82.867914][ T62] IPVS: stop unused estimator thread 0... [ 82.893648][ T6065] team0: Port device team_slave_1 added [ 82.913037][ T5886] betop 0003:11C0:5506.0003: parse failed [ 82.963910][ T5886] betop 0003:11C0:5506.0003: probe with driver betop failed with error -22 [ 83.055292][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.080499][ T5886] usb 1-1: USB disconnect, device number 8 [ 83.081058][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.107075][ T6167] netlink: 108 bytes leftover after parsing attributes in process `syz.4.75'. [ 83.135808][ T6167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.178187][ T6065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.215680][ T6065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.243555][ T6065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.288541][ T6065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.399935][ T6178] netlink: 84 bytes leftover after parsing attributes in process `syz.4.77'. [ 83.563619][ T6065] hsr_slave_0: entered promiscuous mode [ 83.576025][ T6065] hsr_slave_1: entered promiscuous mode [ 83.593389][ T6065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.603731][ T6065] Cannot create hsr debugfs directory [ 83.794354][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 83.885660][ T6065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.899635][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 83.913779][ T6065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.954458][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.954944][ T6065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.974295][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 83.984759][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 83.987466][ T6065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.012036][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.026530][ T8] usb 4-1: Product: syz [ 84.032252][ T8] usb 4-1: Manufacturer: syz [ 84.041118][ T8] usb 4-1: SerialNumber: syz [ 84.057990][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 84.067108][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 84.074010][ T6190] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 84.075260][ T5837] IPVS: starting estimator thread 0... [ 84.087548][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.111971][ T25] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 84.141427][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.153272][ T5886] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 84.178640][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.178707][ T25] usb 5-1: config 0 descriptor?? [ 84.202334][ T5886] usb 1-1: Product: syz [ 84.217962][ T5886] usb 1-1: Manufacturer: syz [ 84.226407][ T5886] usb 1-1: SerialNumber: syz [ 84.245096][ T6194] IPVS: using max 26 ests per chain, 62400 per kthread [ 84.272589][ T5886] r8152-cfgselector 1-1: Unknown version 0x0000 [ 84.273415][ T6065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.300827][ T5886] r8152-cfgselector 1-1: config 0 descriptor?? [ 84.357465][ T6065] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.397352][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.404534][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.423438][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.425426][ T5147] Bluetooth: hci0: command tx timeout [ 84.430593][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.534824][ T6065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.537784][ T5837] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 84.615424][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.626847][ T25] holtek 0003:1241:5015.0004: item fetching failed at offset 1/5 [ 84.635057][ T6065] veth0_vlan: entered promiscuous mode [ 84.643780][ T25] holtek 0003:1241:5015.0004: parse failed [ 84.655516][ T25] holtek 0003:1241:5015.0004: probe with driver holtek failed with error -22 [ 84.663858][ T6065] veth1_vlan: entered promiscuous mode [ 84.760687][ T5886] r8152-cfgselector 1-1: Unknown version 0x0000 [ 84.769933][ T6065] veth0_macvtap: entered promiscuous mode [ 84.785072][ T5886] r8152-cfgselector 1-1: bad CDC descriptors [ 84.801620][ T47] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 84.811169][ T5886] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 84.838554][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.841447][ T6065] veth1_macvtap: entered promiscuous mode [ 84.862494][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.882169][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.892429][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.900451][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.912428][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.926459][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.930781][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 84.937214][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.937228][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.954575][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 84.956803][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.973446][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 84.988634][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.995333][ T5888] usb 5-1: USB disconnect, device number 11 [ 85.011381][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.027311][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.029168][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.052896][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.061519][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.068245][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.081893][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.093592][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.097422][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.102553][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.119591][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.130541][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.130562][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.130573][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.130585][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.130596][ T6065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.130607][ T6065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.131676][ T6065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.142333][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.228061][ T6065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.241065][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.252472][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.252628][ T6065] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.271285][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.282393][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.302268][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.306260][ T6065] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.323297][ T6065] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.331726][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.360002][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.381328][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.450767][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.495571][ T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.509795][ T47] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.531413][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.562984][ T47] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.571269][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.590589][ T47] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.605611][ T47] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.663673][ T47] usb 3-1: Product: syz [ 85.684886][ T47] usb 3-1: Manufacturer: syz [ 85.688612][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.689508][ T47] usb 3-1: SerialNumber: syz [ 85.727759][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.748099][ T47] usb 3-1: config 0 descriptor?? [ 85.776697][ T47] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 86.196688][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.91'. [ 86.257837][ T6243] netlink: 'syz.5.49': attribute type 6 has an invalid length. [ 86.321902][ T6243] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 86.470322][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.504553][ T5147] Bluetooth: hci0: command tx timeout [ 86.572483][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.643183][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.726137][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.895542][ T35] bridge_slave_1: left allmulticast mode [ 86.903907][ T35] bridge_slave_1: left promiscuous mode [ 86.912869][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.927455][ T35] bridge_slave_0: left allmulticast mode [ 86.935676][ T35] bridge_slave_0: left promiscuous mode [ 86.941477][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.310701][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.326495][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.337845][ T35] bond0 (unregistering): Released all slaves [ 87.610006][ T35] hsr_slave_0: left promiscuous mode [ 87.616876][ T35] hsr_slave_1: left promiscuous mode [ 87.622909][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.632277][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.642732][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.650866][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.678811][ T35] veth1_macvtap: left promiscuous mode [ 87.684650][ T35] veth0_macvtap: left promiscuous mode [ 87.690378][ T35] veth1_vlan: left promiscuous mode [ 87.696237][ T35] veth0_vlan: left allmulticast mode [ 87.701680][ T35] veth0_vlan: left promiscuous mode [ 88.041934][ T5885] usb 3-1: USB disconnect, device number 4 [ 88.072380][ T5885] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 88.169752][ T35] team0 (unregistering): Port device team_slave_1 removed [ 88.203608][ T35] team0 (unregistering): Port device team_slave_0 removed [ 108.106599][ T47] ------------[ cut here ]------------ [ 108.112233][ T47] WARNING: CPU: 1 PID: 47 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 108.121081][ T47] Modules linked in: [ 108.124971][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller #0 [ 108.133799][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.143871][ T47] Workqueue: events l2cap_chan_timeout [ 108.149330][ T47] RIP: 0010:__queue_work+0xcd3/0xf50 [ 108.154613][ T47] Code: ff e8 31 e2 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 23 e2 37 00 eb 13 e8 1c e2 37 00 eb 0c e8 15 e2 37 00 eb 05 e8 0e e2 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 108.174238][ T47] RSP: 0018:ffffc90000b77848 EFLAGS: 00010093 [ 108.180352][ T47] RAX: ffffffff81877952 RBX: ffff88801ac94408 RCX: ffff888020eabc00 [ 108.188321][ T47] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 108.196293][ T47] RBP: 0000000000000020 R08: ffffffff818a6f29 R09: 0000000000000000 [ 108.204283][ T47] R10: ffffc90000b77920 R11: fffff5200016ef25 R12: ffff888030ec5800 [ 108.212262][ T47] R13: ffff888030ec59c0 R14: dffffc0000000000 R15: 0000000000000008 [ 108.220227][ T47] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 108.229147][ T47] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.235732][ T47] CR2: 0000557f8bd16e68 CR3: 000000000e738000 CR4: 00000000003526f0 [ 108.243720][ T47] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.251677][ T47] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.259635][ T47] Call Trace: [ 108.262903][ T47] [ 108.265821][ T47] ? __warn+0x165/0x4d0 [ 108.269970][ T47] ? __queue_work+0xcd3/0xf50 [ 108.274637][ T47] ? report_bug+0x2b3/0x500 [ 108.279123][ T47] ? __queue_work+0xcd3/0xf50 [ 108.283788][ T47] ? handle_bug+0x60/0x90 [ 108.288103][ T47] ? exc_invalid_op+0x1a/0x50 [ 108.292787][ T47] ? asm_exc_invalid_op+0x1a/0x20 [ 108.297798][ T47] ? kthread_data+0x49/0xd0 [ 108.302295][ T47] ? __queue_work+0xcd2/0xf50 [ 108.306989][ T47] ? __queue_work+0xcd3/0xf50 [ 108.311694][ T47] ? __queue_work+0xcd2/0xf50 [ 108.316377][ T47] ? __queue_delayed_work+0xeb/0x300 [ 108.321655][ T47] ? queue_delayed_work_on+0x1b4/0x390 [ 108.327101][ T47] queue_delayed_work_on+0x1ca/0x390 [ 108.332394][ T47] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 108.338193][ T47] ? __pfx___cancel_work+0x10/0x10 [ 108.343294][ T47] ? __mutex_lock+0x397/0x1010 [ 108.348065][ T47] ? hci_conn_drop+0x152/0x280 [ 108.352823][ T47] l2cap_chan_del+0x291/0x5d0 [ 108.357492][ T47] l2cap_chan_close+0x38b/0x9f0 [ 108.362355][ T47] ? __pfx_l2cap_chan_close+0x10/0x10 [ 108.367720][ T47] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.374051][ T47] l2cap_chan_timeout+0x142/0x360 [ 108.379065][ T47] ? process_scheduled_works+0x976/0x1840 [ 108.384779][ T47] process_scheduled_works+0xa66/0x1840 [ 108.390328][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.396297][ T47] ? assign_work+0x364/0x3d0 [ 108.400872][ T47] worker_thread+0x870/0xd30 [ 108.405494][ T47] ? __kthread_parkme+0x169/0x1d0 [ 108.410536][ T47] ? __pfx_worker_thread+0x10/0x10 [ 108.415653][ T47] kthread+0x7a9/0x920 [ 108.419733][ T47] ? __pfx_kthread+0x10/0x10 [ 108.424333][ T47] ? __pfx_worker_thread+0x10/0x10 [ 108.429462][ T47] ? __pfx_kthread+0x10/0x10 [ 108.434058][ T47] ? __pfx_kthread+0x10/0x10 [ 108.438639][ T47] ? __pfx_kthread+0x10/0x10 [ 108.443213][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.448396][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 108.453573][ T47] ? __pfx_kthread+0x10/0x10 [ 108.458171][ T47] ret_from_fork+0x4b/0x80 [ 108.462574][ T47] ? __pfx_kthread+0x10/0x10 [ 108.467147][ T47] ret_from_fork_asm+0x1a/0x30 [ 108.471903][ T47] [ 108.474917][ T47] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.482182][ T47] CPU: 1 UID: 0 PID: 47 Comm: kworker/1:1 Not tainted 6.14.0-rc1-syzkaller #0 [ 108.491007][ T47] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 108.501046][ T47] Workqueue: events l2cap_chan_timeout [ 108.506505][ T47] Call Trace: [ 108.509769][ T47] [ 108.512686][ T47] dump_stack_lvl+0x241/0x360 [ 108.517367][ T47] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.522573][ T47] ? __pfx__printk+0x10/0x10 [ 108.527154][ T47] ? _printk+0xd5/0x120 [ 108.531301][ T47] ? __init_begin+0x41000/0x41000 [ 108.536324][ T47] ? vscnprintf+0x5d/0x90 [ 108.540655][ T47] panic+0x349/0x880 [ 108.544541][ T47] ? __warn+0x174/0x4d0 [ 108.548681][ T47] ? __pfx_panic+0x10/0x10 [ 108.553087][ T47] ? ret_from_fork_asm+0x1a/0x30 [ 108.558025][ T47] __warn+0x344/0x4d0 [ 108.562013][ T47] ? __queue_work+0xcd3/0xf50 [ 108.566676][ T47] report_bug+0x2b3/0x500 [ 108.570990][ T47] ? __queue_work+0xcd3/0xf50 [ 108.575668][ T47] handle_bug+0x60/0x90 [ 108.579828][ T47] exc_invalid_op+0x1a/0x50 [ 108.584327][ T47] asm_exc_invalid_op+0x1a/0x20 [ 108.589209][ T47] RIP: 0010:__queue_work+0xcd3/0xf50 [ 108.594489][ T47] Code: ff e8 31 e2 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 23 e2 37 00 eb 13 e8 1c e2 37 00 eb 0c e8 15 e2 37 00 eb 05 e8 0e e2 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 108.614104][ T47] RSP: 0018:ffffc90000b77848 EFLAGS: 00010093 [ 108.620179][ T47] RAX: ffffffff81877952 RBX: ffff88801ac94408 RCX: ffff888020eabc00 [ 108.628144][ T47] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 108.636116][ T47] RBP: 0000000000000020 R08: ffffffff818a6f29 R09: 0000000000000000 [ 108.644093][ T47] R10: ffffc90000b77920 R11: fffff5200016ef25 R12: ffff888030ec5800 [ 108.652054][ T47] R13: ffff888030ec59c0 R14: dffffc0000000000 R15: 0000000000000008 [ 108.660021][ T47] ? kthread_data+0x49/0xd0 [ 108.664517][ T47] ? __queue_work+0xcd2/0xf50 [ 108.669182][ T47] ? __queue_work+0xcd2/0xf50 [ 108.673843][ T47] ? __queue_delayed_work+0xeb/0x300 [ 108.679117][ T47] ? queue_delayed_work_on+0x1b4/0x390 [ 108.684561][ T47] queue_delayed_work_on+0x1ca/0x390 [ 108.689842][ T47] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 108.695630][ T47] ? __pfx___cancel_work+0x10/0x10 [ 108.700728][ T47] ? __mutex_lock+0x397/0x1010 [ 108.705479][ T47] ? hci_conn_drop+0x152/0x280 [ 108.710243][ T47] l2cap_chan_del+0x291/0x5d0 [ 108.714944][ T47] l2cap_chan_close+0x38b/0x9f0 [ 108.719807][ T47] ? __pfx_l2cap_chan_close+0x10/0x10 [ 108.725167][ T47] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.731484][ T47] l2cap_chan_timeout+0x142/0x360 [ 108.736490][ T47] ? process_scheduled_works+0x976/0x1840 [ 108.742190][ T47] process_scheduled_works+0xa66/0x1840 [ 108.747736][ T47] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.753726][ T47] ? assign_work+0x364/0x3d0 [ 108.758300][ T47] worker_thread+0x870/0xd30 [ 108.762879][ T47] ? __kthread_parkme+0x169/0x1d0 [ 108.767889][ T47] ? __pfx_worker_thread+0x10/0x10 [ 108.772981][ T47] kthread+0x7a9/0x920 [ 108.777030][ T47] ? __pfx_kthread+0x10/0x10 [ 108.781603][ T47] ? __pfx_worker_thread+0x10/0x10 [ 108.786694][ T47] ? __pfx_kthread+0x10/0x10 [ 108.791268][ T47] ? __pfx_kthread+0x10/0x10 [ 108.795843][ T47] ? __pfx_kthread+0x10/0x10 [ 108.800417][ T47] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.805597][ T47] ? lockdep_hardirqs_on+0x99/0x150 [ 108.810779][ T47] ? __pfx_kthread+0x10/0x10 [ 108.815375][ T47] ret_from_fork+0x4b/0x80 [ 108.819818][ T47] ? __pfx_kthread+0x10/0x10 [ 108.824427][ T47] ret_from_fork_asm+0x1a/0x30 [ 108.829185][ T47] [ 108.832464][ T47] Kernel Offset: disabled [ 108.836830][ T47] Rebooting in 86400 seconds..