last executing test programs: 3m6.56672251s ago: executing program 1 (id=746): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002480)={0x84, &(0x7f0000000300)={0x40, 0x9, 0x1a, "7c5d3be32c4c89dad535e7e0c5fac9bb333ef5daf64134eb907b"}, 0x0, &(0x7f0000002100)={0x0, 0x8, 0x1, 0xc}, 0x0, 0x0, &(0x7f00000021c0)={0x40, 0x7, 0x2, 0x4}, 0x0, &(0x7f0000002240)={0x40, 0xb, 0x2, "49df"}, 0x0, &(0x7f00000022c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000002300)={0x40, 0x17, 0x6, @broadcast}, 0x0, &(0x7f0000002380)={0x40, 0x1a, 0x2, 0x958}, 0x0, &(0x7f0000002400)={0x40, 0x1e, 0x1, 0xfc}, &(0x7f0000002440)={0x40, 0x21, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0xffffffff, 0x1}}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x1, 0x200, 0x13b, 0xe6, 0x7fff, 0xffff8000}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r7, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x20008841) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8001, 0xd) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x28, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x4}}}, 0x24}}, 0x4000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) r11 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) r12 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync_file_range(0xffffffffffffffff, 0xc, 0x10, 0x2) listen(r0, 0x0) 2m59.532106774s ago: executing program 1 (id=755): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6fcc, &(0x7f0000000500)={0x0, 0x35cf, 0x200, 0x0, 0x203, 0x0, r0}, &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3001000009060102000000000000000000000000050001000700000005000100070000003c000880100007800c00028008000140ac1414ba0c000780080009404aaa80000c00078008000a4000000009100007800900130073797a320000000064000880100007800c00028008000140ffffffff100007800c00184000000000000001ff1c0007801800148014000240000000000000000000000000000000000c00078006001d40000600000c000780060004404e2400000c00078006001d400fff0000100008800c00078006001d400006000054000880100007800c001480080001406528"], 0x130}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x54, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x5, 0x0) sendto$packet(r4, &(0x7f00000000c0)='z', 0x5c8, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100), 0x0) 2m56.781606454s ago: executing program 1 (id=758): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400000000000c0001800800014080ffffff05000300000000000500050002000007000000000000000047a3e8ea2414972e359d8c36f3eab486eddadf7c05cb9ad01965bdb2"], 0x68}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m56.356315616s ago: executing program 0 (id=760): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, &(0x7f00000000c0)=""/35, 0x23) getdents64(r1, 0xffffffffffffffff, 0x43) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000040)=""/114) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) write$dsp(r0, 0x0, 0xffda) 2m53.228648058s ago: executing program 0 (id=762): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m52.148259287s ago: executing program 2 (id=763): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002f40)=ANY=[@ANYBLOB="34160000932fa74e470efe3c49d547ef5f28eff6000000000000000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1634}, 0x1, 0x0, 0x0, 0x10}, 0x20004048) preadv(r3, 0x0, 0x0, 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000d"], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r7, r7, 0x0) 2m52.119682493s ago: executing program 0 (id=764): syz_open_dev$sg(0x0, 0x7fffffffffffd, 0x101000) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) unshare(0x2000400) fadvise64(0xffffffffffffffff, 0x3, 0x100, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x4}}, 0x10) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000280)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x40000122) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xe, 0x65, 0x4, 0x260}]}) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$inet(0x2, 0x1, 0x0) r5 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7fffffff, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x1fbd7f5572cc9af7, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m50.86508699s ago: executing program 3 (id=765): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000f00)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x260, 0x1c8, 0x1c8, 0x1c8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfc}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'gre0\x00', 'bridge0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pim6reg\x00', 'pim6reg\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x1f, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCMBIC(r4, 0x5417, 0x0) ioctl$TIOCCBRK(r4, 0x5428) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x1}, {0x9, 0x1b}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x8, 0x8, {}, {0x77359400}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "000000001000"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 2m46.425552892s ago: executing program 2 (id=767): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2m46.124114935s ago: executing program 2 (id=768): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6fcc, &(0x7f0000000500)={0x0, 0x35cf, 0x200, 0x0, 0x203, 0x0, r0}, &(0x7f0000000180), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) socket$inet(0x2, 0x0, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x54, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x5, 0x0) sendto$packet(r4, &(0x7f00000000c0)='z', 0x5c8, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100), 0x0) 2m45.804156811s ago: executing program 2 (id=769): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @mcast2, 0x7}, 0x1c) creat(0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x5, 0x3}) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000440)={0x0, 0x5, 0x2}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000840)={{r5}, r6, 0x1c, @inherit={0x58, &(0x7f0000001880)=ANY=[@ANYBLOB="000000000000000002000000000000000900000000000000800000000000000040000000000000000f0000000000000009000000000000000000ff0100000000ff7f00000000000029aa28540000000000000000000000008a621b24cb807af9e072f7ebee4b9dd0f84e83f1f9e953e1a3655877bead29fa49c2e0c6a1bafff672a48dd41d74e2f2490e579ac72b4f08368c884bed069bc7fc1e462fc9f5e0f94ad8c70ae51954eccea6f5b5e20208d3bf5b65911d672b6026a8fce3e2e43918321ed9edd1ac4e"]}, @devid=r7}) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r8, r8}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'rmd160-generic\x00'}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) 2m45.174718371s ago: executing program 4 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60b8192300080000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000000039d26e1b8fa3974919d154aa9d69039a1ee64e2abb7f4a726291ca75e4abeb8d"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000240000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000001000300eeff1485dff7c6293fd55716ab000002000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000500000000002000000000000000"], 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r5, 0x303, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2m43.924329388s ago: executing program 1 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x100048ed, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r8 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000280)=0xffffff4a) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m43.307439869s ago: executing program 1 (id=772): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400000000000c0001800800014080ffffff05000300000000000500050002000007000000"], 0x68}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m42.407129186s ago: executing program 4 (id=773): syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) (async) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x80005520, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0xfff, 0x0, 0xff, 0x40000006}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xd0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0xd0, 0x0, 0x7fff0000}]}) sched_getattr(0x0, &(0x7f0000000140)={0x38}, 0x38, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) r7 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="000502008004010500"], 0x10) ioctl$BTRFS_IOC_INO_LOOKUP(r7, 0xd0009412, &(0x7f0000000d00)={0x0, 0x10}) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000380)) (async) r9 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r13 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c0, 0x0) io_uring_enter(r13, 0x58aa, 0xbaf3, 0x20, &(0x7f0000000240)={[0x3]}, 0x8) ioctl$SNDCTL_TMR_SELECT(r13, 0x40045408) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, {0x0, r12}}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r7, &(0x7f0000000000)={0x4882c0ebda3e8ecf, 0x84, 0x12}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r12}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m40.442201203s ago: executing program 2 (id=774): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040050b661800000000000109"], 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6_sctp(0xa, 0x1, 0x84) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESHEX=r2], 0x20) 2m40.316869682s ago: executing program 4 (id=775): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001900010000000000000000008020000000110005"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x7c}}, 0x4048010) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x10, 0x2d4, {0xffffffffffffffff}, {r4}, 0x1, 0x80000000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_setup(0x49c, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2m39.166236818s ago: executing program 4 (id=776): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000300)="eb27", 0x2}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) recvmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3}}, 0x30) read$FUSE(r1, &(0x7f00000066c0)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)=0x20000001, 0x1) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00^'], 0x20}], 0x1}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040), &(0x7f0000000840)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 2m38.520959975s ago: executing program 0 (id=777): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a1", 0x1000e, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d48", 0x24}], 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0xa0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee4, 0x2, 0x6, 0xc, 0x6}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xfffffffffffffffa, r4, 'id0\x00'}) 2m38.490085979s ago: executing program 3 (id=778): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2m38.420173271s ago: executing program 3 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8f) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000dd0000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000018000480140001800a00010072656469720000000400028008000b40000000000900010073797a30"], 0xc8}}, 0x0) 2m38.310991669s ago: executing program 3 (id=780): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d328970104000072a964a02447a75df8a69ead05deb70300000000000000f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x200]}}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) timer_create(0x4, &(0x7f0000000280)={0x0, 0x34, 0x0, @thr={&(0x7f0000000240)="ce0849e2f4217e111c02088c14c196dc80aaa4d53529dcb54c902a14e4b5aa", 0x0}}, &(0x7f0000000400)=0x0) timer_settime(r2, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, &(0x7f0000000240)) io_uring_setup(0x3618, &(0x7f0000001a00)={0x0, 0x3062, 0x80, 0x1, 0x327}) 2m38.305244408s ago: executing program 0 (id=781): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @multicast, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@x25={0x805, {0x0, 0x8, 0xfb, "a2f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e1ecd9b71d2615886c26b036bef2c5ce88ea55818abc98ace892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x68e880) syz_open_dev$cec(&(0x7f0000000740), 0x0, 0x101080) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') lseek(r4, 0x8, 0x1) 2m38.060543131s ago: executing program 3 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40282, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x100048ed, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xc800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r8 = dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000280)=0xffffff4a) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m36.988416434s ago: executing program 2 (id=783): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m36.987495031s ago: executing program 3 (id=784): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r3, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="36e00cef55d890882f074984a0e788b97380e96b7bba1c9a5bb5d06655", 0x1d}, {&(0x7f0000000540)="ddd32204691c9eb06af4664f260d798861700941f7f99aaacd9ded2d2632d1ede68658df5c4ded39df74787c6c97d0f611bcd4022b40be891aa8eddd23a7c8fc0cfe3331b18d0973fcce91501f585322b4a62b4df44ef962bee3be4b3486fddd8031d9e6860185ee99926fcf41e7a69336f55c9b1b286df1c160651ca71d621b3819a941bc16c6d53b437f7ad2", 0x8d}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="57b67d743697050e7a3deed548d02510dcd29610a94b0442d69e747aacb1f3408f52e279a52ff03edac2510cf602e2b0b79161266808be7ea2f16ccf6cef2aceb358f93cb61020e870aa1e957488f5520565c4dc9d3f09bbadd8a01d2acf2fdd5846ea3656f0564dfa1b29ae9050e92e55cc9eaf9b92e0b0ac5e3f6a4ecede6ed0e940582a9004c18b591bc52776af0af006ba6a8c528b6af4364c2f7efb8ce49024497c6c0eea2b10bc8970ed0cc3e6a6877bf5017d69ed6c22ca2fb09ffa1a0f4447", 0xc3}, {&(0x7f00000003c0)="99facea08a6cdd8c16b444a144aeefffea6651a0e4c29a7b32ea9dddc3cdf5e22730bb20eecbbb1d6c704316", 0x2c}, {&(0x7f0000001700)="f771e80d230a54438f22441405774ab37eaccaa37f9235545c470f4e858101feca0a8bfa10dbe6085c863dc72c5fc0749a2c9a6aedef3615b105197f0445ebf71e346282b3e41d50b88987010ad6a7e946f3000f953e7d705deb0db18b5bdea2c680649b302b5c2db97b2def9076b716f4761a3b7d03ee9160afdb0346bade42d1f95e9ed105de84e6d9d140145d5ae094e1d749797691f210d7a0b7e2c5cf043097fa83f777c237f90060cb33fb67a89a388d06a917a0701a7609c4d7556185e125151786f6e21be0b7a549215d41315c0c0599fd56", 0xd6}], 0x6, &(0x7f0000001880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x68}}], 0x1, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000ecb07eab2fb55b4cae48d5072cf0d26cd35e29128e58029b7a5a24a24f8189d432f164c3f007103000000000000000b798464c620bc520000000000006b1c63a8117a020000000edfae51f9cade5269326a1f492366a037c5af78269744f455f82b56b5b3098b", @ANYRES16, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000008002000000ff07010003000000"], 0x17) 2m33.892783703s ago: executing program 4 (id=785): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x2001085, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303034303030302c757365725f69643d2a197218431947c9ccad01d9f2b6", @ANYRESDEC=0x0, @ANYBLOB="04650700000000000080", @ANYRESDEC=0x0]) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) connect$unix(r5, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) stat(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) r6 = creat(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x81) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x2, 0x16, 0x1, 0xfffffffd, 0x4, {0x5, 0x80, 0x5, 0x0, 0x0, 0x4000000000008, 0x4, 0x800, 0x6, 0x1000, 0x7fffffff, r8, r9, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000a00)={{0x4, 0x6, 0x3, 0xbdd0, '\x00', 0xdd7}, 0x0, [0x4, 0x3, 0xf0, 0xffffffff00000001, 0x800, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x74f6, 0x8, 0x3, 0x6a, 0x0, 0x100000000, 0x7, 0x9, 0xfffffffffffff4c8, 0x9, 0x0, 0x7ff, 0xb36e, 0xdd8f, 0x9, 0x6, 0x7fffffffffffffff, 0x2, 0x400000000000, 0xcbed, 0x9, 0x91, 0x4, 0x100, 0x8000000000000000, 0x6, 0x7, 0x6, 0x9, 0x22, 0x3, 0x6, 0xffffffff, 0x40, 0xee2e, 0x3, 0x5, 0x0, 0x1, 0x6, 0x8, 0xe765, 0x3, 0x1, 0x6, 0x0, 0x3, 0x2, 0x4, 0x400000000000000, 0xfffffffffffffff7, 0x100000000, 0x3, 0x6, 0x10001, 0xb, 0x5, 0x0, 0x3, 0xa358, 0x7fffffff, 0x7, 0x6, 0x100, 0xff, 0xa6, 0x9, 0x2, 0x100, 0x0, 0x90, 0x1, 0x40, 0x7, 0x9, 0x200, 0x9, 0x3a44, 0xd45, 0x2f87, 0x5, 0x3, 0x1, 0xfffffffffffffffe, 0x4, 0xdc, 0x8, 0x3, 0x6, 0x4, 0x10000, 0x6, 0xe21, 0x8, 0x9, 0x70000000, 0x11b, 0xb5ea, 0xff, 0x0, 0x4, 0x401, 0x7f, 0x4, 0x92c, 0x8000000000000001, 0x4, 0xfff, 0x9, 0x4, 0x1, 0xe5f7, 0xb92, 0x3, 0x1, 0x1, 0x2, 0x5d819af, 0xffffffff]}) 2m33.344551175s ago: executing program 0 (id=786): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,allow_other,default_permissions,max_read=0x0000000080000000,max_read=0x8000000000000001,blksize=0x0000000000001a00,max_read=0x0000000000000080,\x00']) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x0) write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0x0, r9, {0x7, 0x9, 0x7fffffff, 0x4092200c, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0xefff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.344206283s ago: executing program 4 (id=787): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x13) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0xff06, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0x5459, 0x1000000000000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) 2m31.459400376s ago: executing program 1 (id=788): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r4, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) 2m3.4764232s ago: executing program 32 (id=783): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m1.785807784s ago: executing program 33 (id=784): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r3, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000340)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="36e00cef55d890882f074984a0e788b97380e96b7bba1c9a5bb5d06655", 0x1d}, {&(0x7f0000000540)="ddd32204691c9eb06af4664f260d798861700941f7f99aaacd9ded2d2632d1ede68658df5c4ded39df74787c6c97d0f611bcd4022b40be891aa8eddd23a7c8fc0cfe3331b18d0973fcce91501f585322b4a62b4df44ef962bee3be4b3486fddd8031d9e6860185ee99926fcf41e7a69336f55c9b1b286df1c160651ca71d621b3819a941bc16c6d53b437f7ad2", 0x8d}, {&(0x7f0000000600)="b4201483a82b025e4dd2f98fb6d28cd6144fe97c53bb0e44677a2c6ae309feeff4922e0acd7f939ba15cdf54ef1d80e478c9394da93084354ca3d7c08bf72dea35a4dfc5d96239e485bedaaa7efdd29c9b8c53c351c6aab7c4b7ec76fc28f8cd34e7dfca354b846c453d20e02a9660e2bb018c547c771f53d171607318e92661a5469ba607a1bceb95ff11c5cc05adfb682f4e74da21e56b04b9682301f43346d230c9a19124214dd1bec5895e76afaa189ff7d717ff59284115930632c83b08d7a4bf6f35b07140deb8710abdfdc061eeb790de494a02c3474b34301b42adcb1363c202cc072b3c933cdc93c75a85e9c34c4c9c9c8d3b6e595d5a1428fb29dc6a1038290d359b2a9b5b00d10b2421133ce360049814d9d824e1343704a92a7075806b4d24653560f4ee6e3b4a925af8bad3e5973d379fdcbe08fc16199f96a67bbcbe8e45d48739e85a2f2be2f757b41dc444e849261c5fc6bcd06bd2204c61de1b485f70997287a1f7e384cb26bd6f1ac9df7b04823406de60ac66531e536d34d6d403c1148237f444d2b22e903c5e4f6adeef72810b5840cf958e687008917b2167b9104fc16757e2a5da9668126a26df201f7a21ac51551b436570e62f232b020a73913499b4de117be974425619dbfaa8298cd361dc3544089718378622d1f7f887d8e3f4d06034795b62ed2f94526b431e4fba410bb00bb8482b985196a6974f78dc5a165516463b7dbbf1f835da9d42e9b617a997f92cac1f2a5f47d5ba68315553927697bce22d69be0186aaa24e67f24faa54cff363bdaf23f12591ed166e01c0ab29603d2324a3347cbacebf25fe7aa40caac27d67d501e9be090bd53247ed144b856a31bf4c863e5ff760b1c8979c1a7fddd902ce62c78eca16b20248d4acfb971dd663beb59c84d303cc376d237e334549cfdacb055da95b7b72032e2fb852ac6590161a79138b3b0da31dcfe5b97fba06861e4359a2038e36465106aa556afe8df28f76fc6efcd1c8eb24b75687ebb1876a263f8593d29ba4fc5f76a0b0ca48bff6db460ad49dc533ee51206bd3a9be4ff88ac9587b4f963302c41b0dd443710812c9769516bfda4269359e6e66773683576aaa4d6d46f7f9cfd99a0c779a285787506a376a1cebc0358d4a467a9f5656bde3f01348ab6bcc990d645033fa7ae6e70bcff7840aa8dae8dd39b30b8efb1982be97384c9f5d5824def74e0bb04036451e7d39e0250bd246ef3536e001ed24aa4c66f7503068d06ce01d15bc0150e0d2c77009ad59e9c2d085e7e011e49a74dbde60d4ce3b1a7a7f88f5fc6952bb7f322a0af7e754010f9837471679df6e0b2c4de6864c34d89debbe662e5653f241a87e02c825c9c1fd50103081aed89f056c523bdc4f8c503efdc1f9ba189c6de87caff8f1b4230ffaf3663e661332d6a1ffc570d57345a557af10b8d97c226b25a6db30a3eee461005ae2e53a87f5efc35d2e0ddc05fceffe6e6b4011009a11eb6169e593c2af9d10d4ca82c3984afc048ccc58024fa1a30d922d85d21e5e9327b6f25c4c7636db001e055183a0ed3b8597f3c418221d5b3f81802cb18f65a55030c9f915f43d979332c220e1052259d73072ca9c64406de18cae208a8a727784e08d7acfb652b71272bb47106466551fd33685202c9e7f7aafe7f4e8a0bd0dfbb1ff0204094af5e939a4866fa175fc7efc9aff0be1a55e0de4ca7e342bc565d93dec9a6dc4ab2c394fb4560249d631cc4476e0c956efdf73ff99e4dd7d45f575682a08d86023901c756be577ee5ee53dc348b4559a0f9f82fd2296f6b8bf9766b71a3f8460ae5249757ef672593629f143e934d2a77d1aa851608c3ba58683e152d42a7bd9d7c5da2325c2c8fdb1227c11a0ef79665d54996f4a6a338ee109f2dfd2d62da015d4915eb398597cdcad8cb17f4ad89b0c69dec53a1225c612f54e4f0e88dbd7fd5fc4751fef9329c5e8fcbada16665beb37666dccce987c2d7ae1279ba934b94f00a36ed7f59b29e1c83467d1a0c37a221f5120d70c7b0adf4c3d2ba32d0a2ad5796857e99aff779cd68fb948384fa367a21ac831f3921fe1ac429c7ad3e031ec78a4fc1a015f3618e90f26a3e3eb9d2c7c99196cca120499b60394b4808e233fb2b0f8e77af6c117b9d153c8ffd6137b9d0fa56b684fcaaadd1867cd3f9baa9b1f37b945390fd627cbc3b49da08bb8394c3e08dbad4cc54b78d26f45b2599b697b6bb882e23b13458bf0348eb079082916c39b1ddfda646b9a9f2b0a92a39d75574800aeb07e65648209b84fa74972456d84a2178d157ce7025468e22339bcfd0cc4c0aa75991bb6d5537c5dea8ed7c6fbcd30b631ef2e3ab14a66a06ed816f8fc0b30ef8f67e2783106ad809df9d65c5d93d0f4a913f9bd087f27c41d16f956223d56715aac694565e431efbb50278615fae8839b2a641cec0658b25d2c8d3afad5dce912f8b579b8dcb4671737209ecd04521da48cd1ad9dc99da0739a3d553eee54617c2f785ab88a3a19d5ad2ca2b96297ecd01ab3cf126bd156cc08210964d7b42cdb09c5c728dab266d9204108a90402387a64d43b0008af4e0b6437e4729bf35edef622f618bc48500f08497bdc7b049d605f8108bbf41a3c66109d98458c2e8194ce384aa85ee7e05f2cb33cf7546a96a4693dfdcb3923f8d308f8c58ee2039889e64ba5d8453e9cb4cbb6d6a55e244de51b1f9f982827a6d8c3669da11ff3f37e2ea150b7c2eb551ad5356a926c569b231e49ec6b11d984ad3e0faaeebc47694d25f0a649baff719cb8236334e778689621bf5f94b5f2baca924d874b8a1ad817c4f04d19a7e16f18b918c4a067a1ab818e26305ae0785e9cd18721413bdc48b8cd6d9ae2049a3d63eebc5ca65fc661dd860ec597e32d6823ff83a50a104b32eb47b78a5eccb309a56f70c4232d08a8befaeb710ac55486470a0dbaaca51e0497b07dbe4b26ab933aa991b37d8c07bd71e28fd9faac71c9de3247fb2bd5627e9321773bda0fbc19137a8b3ba8ebf797d05f7816620f2b277c0ac8d274b19aa3a57b9008c07fd7c4838c42440497beb0e54f32c478488bf0f5503431415de00788f860ab8fcdb6d820e1ec7c603c3cd3cde29a3cefe2cc7df9b84a8db2921a071a8982cbf6236181ce20837c2f91d4d47ec90cf2fbb19c23ab58b62f27f491ee02b2d794b21012dc49a25949557b404bc745ffa1987f4850472eb115d0d15731136407583608601658722de5b51130865bb18a761909c8b8545c44de9afcd0210e46cc74aac9d3e8b84a8698a0f394e75c5064a391b77e113633a96a9900161ba17474a44ebf2d6cbe67a9dabfffc2c290695e1a87e8c71f2d77fed0a1d2ee84ece93c476334c546770bd4015dc3c1339947f08aa6ab6589223583f0125c17d2a09527a0f015750547be1271d777e915087ab6911070cee329ba71b4dff7f59da607464a81c1999af83fcb11ac46fb406709011b9fa9091de8bd7932088fbdd1a1062c429ad7c22caaacf442e21c29bf7057864d051a1c358ac6e5125f32295ebbc96fe538394e51ee612f5b8e4c42770922516fbddab7eba0b03ffa68486ebe7a6996b66483d563257d994481266d7b4f5c507269108d0d54681d1ca1fc7a7dab4c58d430187b657177c078c513656742cda561299c849d7b05d1d122bacbabac4c9d7d4b732697ca4ff74ad23bac97aac7a4cf84c61dc93d4589ea169b477a90fe03401e22262a0de9d4a42f6833cb0afbafd42b919de846fab0df11a9f5ad7b50d24f5659b50bf992faa71d1b04d6cd8b073166459bbc0f5478bf17f57b81c5853801b8bc04098cba6dee40e7b5667f36e041f6f28a78cc403af6e60fc48e62de44db2a5cc31d9774f9221dff268e31191d8f51c6fe3f36737f69f37cc0cf3a016047cdddde9fc1cc0be9a91ee20eaded8ee72ec42944a1239371b96f53ca6f69cee03c73b2d8cc8d2ca037a41b3ca114a586993001cf1b700b4bd69c2d8704d1284796cb915b2dd8e44cad75d1f947b83e5386cd3b26be27a7e86d570168191a6158713c79ce40d54e264d620693f1acee35fd94c36ec67c64c71c296cc0fbb120dbd8e5dc763b6a2a3efc4621a32c1b751c4ae7da7a8751c86ea100894111d76f599efe7a5533cc9250d3a69152fedff46307d56bec3ea3fc94a83336a64a413055f193b15924b82f37bfd9b80cea239fc0ea7fdc32808b8b0fc02e6ba150bc7e4476bc390183a14198baa8435dd65369ea8790e5e5531a640b7e35d2c72358ba0da4c7cb46fd49e556e0dd91c949f19271b89cc0075a3380ebe19fbb8916f4380fa8c85e22836c3440b7b4b0bad470856d8a46919b9646c03530f575bc43cd57405d5c5dac7b0fb2ed68ff5b9edf8a1f2d61b2001b2213ea447ed6d38cc3b69e778dd51e2a88ed823534afce0a8a6b8a1f3329271a7e80d0b66fbc2181fc876252b9d3f7e9ec5fc0e5ee8aa5bb1d4c238aeb65f330de5987cc3b77c4cdf084efa534c64d4bf247ca8d810767cb0eb73898f6229cf55a049eb40b9e523d9f9c5d3fd62d6d353b36edcfcf55cbe06def11b41c0f5cee9fada346d30754490bed64bee210a9e91c542fba77f4fa769d0091aad513a57ffb34815342af55beaea8a3c0443d9bde774ec28126830b9f532a8a20524084da9b7508fc4b5b5e574e82f34a2ebca54dc2c821c1d296053bbff7352f0233402b62bd631a507b431299194cafca4e64280f8f68de345683a6d6605da8065c9b941ffa79a66a29cf969f40d2ed0a3f52c2e82efd946261e58179519ecd3bb619bf4d1b5e3ca5887a3d74584cc693e501f4a7aa20075a8af8c296a20dfc83bba21259f7ab97811b12a98d4594ba557dc12009c3a534410c700b862fd8767370ec0b729a2f37e4826f81e5700faad56ff1dccba82bec17113244e98dd25bd49a9c33b29ffd0af93c15c7928dcae99af9859859caec9f8cf4ab80648009afa6bd8b313be4c3d1ba00350b4e0c5a2fa84f68d84c8d8554fad302549ea20caa95af2ada8174e26ab55d2a56e183807bb4039aa893cbadc7d60468487bee42ddc90aef26d84dd8e2f03d3856f73e3babeb3b35c4cda4561dc293d91a660204d440b033b743739ae713071ea7ff916d0270d1a298dd05505983fcf2188732b18a8acb47acf56919df331eeafb75b16046959ad99c2c815c15f055424faef9c6d60d2481973b68df50fcd0473c90ede26b58e0671e220ce51396ddbaf234ac72f56c5699e434f408240b159833c124a6654b919a75f8f5d064e7b38dfaec708f42d4fd896f5c9b5f9aa839922fcb4ce08b2ecb8489937285ec959ef73214b618b64f8d2a64f1e096271751c29b0554263e75f3087e79057244d921cc44c286a550524545c2ddeb4290f24c11a1f0fbe2e2d802e565106f44b2c0803d9745f3389d8a10f23956361180cf2b4d7336e0ac25ee73f30b7b080750d6eab4d55688e811be90bb30f94ef798cc185187c209c24912db8eab0606f5c16b1ea671d189b1c042f4ac3e0de5019cb5e153419b7b7ce04730180975172aeb753959aaf2aae1637ad6c53c5a8f9bac913468db69fba99025724d9027a34614a780761e9cee96e9c7f47586199bb2503c65735a32069a7d35bf18811231886b85f19711855ff1e11c6551e790573175ec61f1015338372228d5f1311a7da3ba25a1fb28d1d9496346d1ddde813e090708a8478578a8706d3411ae33289715d833875c48caddca99af61fe7b18a93c57c748a2b2b4d2317ac04322116b09d759a22590", 0x1000}, {&(0x7f0000001600)="57b67d743697050e7a3deed548d02510dcd29610a94b0442d69e747aacb1f3408f52e279a52ff03edac2510cf602e2b0b79161266808be7ea2f16ccf6cef2aceb358f93cb61020e870aa1e957488f5520565c4dc9d3f09bbadd8a01d2acf2fdd5846ea3656f0564dfa1b29ae9050e92e55cc9eaf9b92e0b0ac5e3f6a4ecede6ed0e940582a9004c18b591bc52776af0af006ba6a8c528b6af4364c2f7efb8ce49024497c6c0eea2b10bc8970ed0cc3e6a6877bf5017d69ed6c22ca2fb09ffa1a0f4447", 0xc3}, {&(0x7f00000003c0)="99facea08a6cdd8c16b444a144aeefffea6651a0e4c29a7b32ea9dddc3cdf5e22730bb20eecbbb1d6c704316", 0x2c}, {&(0x7f0000001700)="f771e80d230a54438f22441405774ab37eaccaa37f9235545c470f4e858101feca0a8bfa10dbe6085c863dc72c5fc0749a2c9a6aedef3615b105197f0445ebf71e346282b3e41d50b88987010ad6a7e946f3000f953e7d705deb0db18b5bdea2c680649b302b5c2db97b2def9076b716f4761a3b7d03ee9160afdb0346bade42d1f95e9ed105de84e6d9d140145d5ae094e1d749797691f210d7a0b7e2c5cf043097fa83f777c237f90060cb33fb67a89a388d06a917a0701a7609c4d7556185e125151786f6e21be0b7a549215d41315c0c0599fd56", 0xd6}], 0x6, &(0x7f0000001880)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x68}}], 0x1, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000ecb07eab2fb55b4cae48d5072cf0d26cd35e29128e58029b7a5a24a24f8189d432f164c3f007103000000000000000b798464c620bc520000000000006b1c63a8117a020000000edfae51f9cade5269326a1f492366a037c5af78269744f455f82b56b5b3098b", @ANYRES16, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="070000000000000000008002000000ff07010003000000"], 0x17) 1m41.718004508s ago: executing program 34 (id=786): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,default_permissions,allow_other,default_permissions,max_read=0x0000000080000000,max_read=0x8000000000000001,blksize=0x0000000000001a00,max_read=0x0000000000000080,\x00']) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x1f, 0x0) write$FUSE_INIT(r2, &(0x7f0000002280)={0x50, 0x0, r9, {0x7, 0x9, 0x7fffffff, 0x4092200c, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x10}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)={0x29, 0x4, 0x0, {0x1, 0xefff, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r10}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.46414489s ago: executing program 35 (id=788): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r4, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x1, 'queue0\x00', 0x9}) 1m41.211154598s ago: executing program 36 (id=787): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x13) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0xff06, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0x5459, 0x1000000000000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) 1m13.802113864s ago: executing program 7 (id=791): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a1", 0x1000e, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d48", 0x24}], 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0xa0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x0, 0x1}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x54, 0x1, [@m_connmark={0x50, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee4, 0x2, 0x6, 0xc, 0x6}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xfffffffffffffffa, r4, 'id0\x00'}) 1m13.394396187s ago: executing program 7 (id=794): r0 = fsopen(&(0x7f00000003c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x1, 0x800, 0x20, 0x0}], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f00000000c0)}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x22, 0x3, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffff7f, 0x0, 0x0, 0x100004, 0x2, 0x1, 0xe602}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0x6, {0xffffffffffffffff}, {}, 0x8, 0xffff}) sched_setattr(r6, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffffffff}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7f}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) mmap(&(0x7f0000c7f000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB='\x00'/14], 0x50) 1m7.532710243s ago: executing program 7 (id=795): r0 = socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2243c3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0x1c97, 0x6, 0x1, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) 1m6.810512529s ago: executing program 5 (id=789): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 1m6.24331568s ago: executing program 5 (id=796): setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) write$rfkill(r2, &(0x7f00000001c0)={0x5}, 0x8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r3, &(0x7f0000000080)=""/255, 0x162) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4111, 0x100f) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000100)={0x38, 0x5, 0x10000018, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x3}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="12100100000000001400037c8e006970766c616e0f00400000000000a8b7580a066a3daaffad76eb232b89ae7fffab30c925a5ebe605b77b208abafb3ab166623967c54603866b4d6d15d28bb2ab03414efcd5e41e30e127df82e6d01bfde6355d94799a4aed4048cc969b70808eb4ea069b6690fc3c748d23c49f95c75f78e127ffa3023f5d4b912a5e1c36d044482723c259ef02369965ddcbc5fe33de63ea"], 0x34}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x642000, 0x0) syz_open_dev$media(0x0, 0x4, 0x10b482) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/cpu_byteorder', 0x42, 0x80) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ftruncate(r8, 0x100000001) syz_open_pts(0xffffffffffffffff, 0x141601) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12) 55.431485356s ago: executing program 8 (id=797): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x7ffc, 0x2bc}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) (async) r3 = userfaultfd(0x80801) (async) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) syz_io_uring_submit(r4, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x1}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, 0x0) (async) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 54.663802844s ago: executing program 5 (id=798): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400000000000c0001800800014080ffffff05000300000000000500050002000007000000"], 0x68}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.65967574s ago: executing program 8 (id=799): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x2}) socket$netlink(0x10, 0x3, 0xa) r2 = userfaultfd(0x801) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) ftruncate(r2, 0xf) r3 = open(0x0, 0x14117e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x10c8) io_setup(0x1, &(0x7f00000012c0)=0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 53.161787626s ago: executing program 9 (id=793): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, 0xffffffffffffffff, 0x6a856000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x3c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_PRIVACY={0x44}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_KEYS={0x4}]}, 0x3c}}, 0x40080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x17c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8979}, [@IFLA_LINKINFO={0x14c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x13c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3fe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4ffa60f9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5ef12bdb, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5c, 0x3}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x624}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1a}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x294, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfc43, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc62d, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffff51}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x17c}}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x3, 0x5, 0x4, 0x100, 0x80, {0x0, 0x2710}, {0x4, 0x2, 0x1, 0x9, 0xd, 0x4, "2a1f6612"}, 0x5a, 0x4, {}, 0x6}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x80000001, 0xb, 0x4, 0x8, 0x7, {r6, r7/1000+10000}, {0x3, 0x2, 0xc, 0x2, 0x6, 0xb, "01f415e0"}, 0x0, 0x4, {}, 0x3}) syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') 49.165868296s ago: executing program 37 (id=795): r0 = socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2243c3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0x1c97, 0x6, 0x1, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) 39.04579076s ago: executing program 38 (id=798): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000d26a871dba07e83f34c6e27805b682"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb5) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601080000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400000000000c0001800800014080ffffff05000300000000000500050002000007000000"], 0x68}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 38.775891632s ago: executing program 8 (id=802): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x2, 0x20000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = io_uring_setup(0x7f71, &(0x7f0000001200)={0x0, 0xa30c, 0x10, 0x1, 0x21d}) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x707b, 0x400, 0x2, 0x28a, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r2, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r5, 0x154e, 0x0, 0x41, 0x0, 0x0) 37.374500126s ago: executing program 39 (id=793): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, 0xffffffffffffffff, 0x6a856000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x3c, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_PRIVACY={0x44}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_KEYS={0x4}]}, 0x3c}}, 0x40080) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x17c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8979}, [@IFLA_LINKINFO={0x14c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x13c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x3fe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4ffa60f9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5ef12bdb, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5c, 0x3}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x624}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x1a}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x294, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfc43, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc62d, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xffffff51}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x17c}}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x3, 0x5, 0x4, 0x100, 0x80, {0x0, 0x2710}, {0x4, 0x2, 0x1, 0x9, 0xd, 0x4, "2a1f6612"}, 0x5a, 0x4, {}, 0x6}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x80000001, 0xb, 0x4, 0x8, 0x7, {r6, r7/1000+10000}, {0x3, 0x2, 0xc, 0x2, 0x6, 0xb, "01f415e0"}, 0x0, 0x4, {}, 0x3}) syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00') 34.181665332s ago: executing program 8 (id=804): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x1, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x3ec7bff, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x4, 0x2, 0x0, 0x5, 0xfffff801, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x7, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8, 0xa18, 0x8], [0x80000001, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffbff, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x64d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 29.775865876s ago: executing program 8 (id=805): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x12b240, 0x0) open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000004000100010000000500"/36], 0x10040) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) 15.735061703s ago: executing program 8 (id=806): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x42bd1c06b9dd3f96, 0xa, {0x3, 0x0, 0x100000000000000, 0x7ff, 0x0, 0x2, {0x0, 0xd, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x8000, 0x87}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[], 0x5e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) io_setup(0x7, &(0x7f00000004c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001800)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x48}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff}]) syz_usb_connect(0x6, 0x7a, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) 0s ago: executing program 40 (id=806): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e698ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x42bd1c06b9dd3f96, 0xa, {0x3, 0x0, 0x100000000000000, 0x7ff, 0x0, 0x2, {0x0, 0xd, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x8000, 0x87}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[], 0x5e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) io_setup(0x7, &(0x7f00000004c0)=0x0) io_submit(r4, 0x2, &(0x7f0000001800)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x48}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff}]) syz_usb_connect(0x6, 0x7a, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) kernel console output (not intermixed with test programs): ][ T5935] usb 2-1: no configurations [ 263.282079][ T5935] usb 2-1: can't read configurations, error -22 [ 263.289791][ T5935] usb usb2-port1: unable to enumerate USB device [ 263.358462][ T10] usb 5-1: USB disconnect, device number 48 [ 264.136698][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 264.294835][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 264.303564][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.330194][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.362334][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=01ff, bcdDevice= 0.40 [ 264.380797][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.389123][ T10] usb 5-1: Product: syz [ 264.398048][ T8362] loop6: detected capacity change from 0 to 63 [ 264.404408][ T10] usb 5-1: Manufacturer: syz [ 264.409286][ T10] usb 5-1: SerialNumber: syz [ 264.416800][ T5834] buffer_io_error: 42 callbacks suppressed [ 264.416816][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.479654][ T8363] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.488463][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.499863][ T8363] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.510465][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.525077][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.544154][ T8363] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.553287][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.569604][ T8363] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.580464][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 264.595307][ T5834] ldm_validate_partition_table(): Disk read failed. [ 264.607115][ T5834] Dev loop6: unable to read RDB block 0 [ 264.619096][ T5834] loop6: unable to read partition table [ 264.633275][ T8362] ldm_validate_partition_table(): Disk read failed. [ 264.657387][ T8362] Dev loop6: unable to read RDB block 0 [ 264.665831][ T10] usb 5-1: 0:2 : does not exist [ 264.670190][ T8362] loop6: unable to read partition table [ 264.678353][ T8362] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 264.719522][ T10] usb 5-1: USB disconnect, device number 49 [ 264.807191][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.048583][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 265.059648][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.660'. [ 265.156117][ T8371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.285435][ T5894] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 265.530338][ T5894] usb 1-1: USB disconnect, device number 32 [ 265.556168][ T5894] usblp0: removed [ 265.598235][ T8378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 265.604810][ T8378] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.626662][ T8378] vhci_hcd vhci_hcd.0: Device attached [ 265.663681][ T8380] vhci_hcd: connection closed [ 265.664226][ T13] vhci_hcd: stop threads [ 265.667570][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 265.677773][ T13] vhci_hcd: release socket [ 265.790192][ T8378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.825302][ T13] vhci_hcd: disconnect device [ 265.954995][ T5894] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 266.124293][ T8388] bridge_slave_0: left allmulticast mode [ 266.161261][ T8388] bridge_slave_0: left promiscuous mode [ 266.187706][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.201588][ T8388] bridge_slave_1: left allmulticast mode [ 266.207942][ T8388] bridge_slave_1: left promiscuous mode [ 266.213675][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.244869][ T924] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 266.253473][ T8388] bond0: (slave bond_slave_0): Releasing backup interface [ 266.263907][ T8388] bond0: (slave bond_slave_1): Releasing backup interface [ 266.280573][ T8388] team0: Port device team_slave_0 removed [ 266.292403][ T8388] team0: Port device team_slave_1 removed [ 266.355230][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 266.407042][ T5894] usb 1-1: config 64 has an invalid interface number: 28 but max is 3 [ 266.460302][ T5894] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 266.504848][ T5894] usb 1-1: config 64 has an invalid interface number: 20 but max is 3 [ 266.526108][ T5894] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 266.556827][ T5894] usb 1-1: config 64 has an invalid interface number: 238 but max is 3 [ 266.615169][ T924] usb 5-1: Using ep0 maxpacket: 32 [ 266.626638][ T8399] FAULT_INJECTION: forcing a failure. [ 266.626638][ T8399] name failslab, interval 1, probability 0, space 0, times 0 [ 266.675577][ T8401] batadv_slave_1: entered promiscuous mode [ 266.681507][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 266.701125][ T8399] CPU: 0 UID: 0 PID: 8399 Comm: syz.3.669 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 266.701147][ T8399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.701158][ T8399] Call Trace: [ 266.701163][ T8399] [ 266.701170][ T8399] dump_stack_lvl+0x189/0x250 [ 266.701199][ T8399] ? __pfx____ratelimit+0x10/0x10 [ 266.701223][ T8399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.701247][ T8399] ? __pfx__printk+0x10/0x10 [ 266.701266][ T8399] ? do_raw_spin_lock+0x121/0x290 [ 266.701286][ T8399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 266.701300][ T8399] ? trace_contention_end+0x39/0x120 [ 266.701320][ T8399] should_fail_ex+0x414/0x560 [ 266.701346][ T8399] should_failslab+0xa8/0x100 [ 266.701365][ T8399] __kmalloc_cache_noprof+0x70/0x3d0 [ 266.701381][ T8399] ? __io_queue_proc+0x23a/0x4d0 [ 266.701407][ T8399] __io_queue_proc+0x23a/0x4d0 [ 266.701427][ T8399] ? add_wait_queue+0xba/0x170 [ 266.701449][ T8399] ? __pfx_io_async_queue_proc+0x10/0x10 [ 266.701469][ T8399] v4l2_m2m_poll+0xe2/0x4b0 [ 266.701492][ T8399] v4l2_m2m_fop_poll+0xa3/0xf0 [ 266.701512][ T8399] ? __pfx_v4l2_m2m_fop_poll+0x10/0x10 [ 266.701533][ T8399] v4l2_poll+0x144/0x2c0 [ 266.701548][ T8399] ? __pfx_v4l2_poll+0x10/0x10 [ 266.701565][ T8399] __io_arm_poll_handler+0x372/0xbb0 [ 266.701600][ T8399] io_arm_poll_handler+0x726/0xb70 [ 266.701627][ T8399] ? io_read+0x48/0x60 [ 266.701646][ T8399] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 266.701665][ T8399] ? __pfx_io_async_queue_proc+0x10/0x10 [ 266.701690][ T8399] ? io_issue_sqe+0x3bb/0xfd0 [ 266.701715][ T8399] io_queue_async+0x79/0x2f0 [ 266.701734][ T8399] ? __pfx_io_req_task_submit+0x10/0x10 [ 266.701751][ T8399] io_handle_tw_list+0x34d/0x4c0 [ 266.701774][ T8399] tctx_task_work_run+0x99/0x370 [ 266.701794][ T8399] tctx_task_work+0x3f/0x90 [ 266.701811][ T8399] task_work_run+0x1d1/0x260 [ 266.701835][ T8399] ? __pfx_task_work_run+0x10/0x10 [ 266.701868][ T8399] get_signal+0x11ed/0x1340 [ 266.701892][ T8399] ? ksys_write+0x1cb/0x250 [ 266.701912][ T8399] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 266.701936][ T8399] ? __pfx_vfs_write+0x10/0x10 [ 266.701968][ T8399] arch_do_signal_or_restart+0x9a/0x750 [ 266.701990][ T8399] ? __fget_files+0x3a0/0x420 [ 266.702012][ T8399] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 266.702057][ T8399] ? exit_to_user_mode_loop+0x40/0x110 [ 266.702082][ T8399] exit_to_user_mode_loop+0x75/0x110 [ 266.702104][ T8399] do_syscall_64+0x2bd/0x3b0 [ 266.702118][ T8399] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.702139][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.702156][ T8399] ? clear_bhb_loop+0x60/0xb0 [ 266.702175][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.702191][ T8399] RIP: 0033:0x7febd418e929 [ 266.702207][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.702221][ T8399] RSP: 002b:00007febd4fa0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 266.702239][ T8399] RAX: 0000000000000001 RBX: 00007febd43b5fa0 RCX: 00007febd418e929 [ 266.702251][ T8399] RDX: 00000000dfffeffb RSI: 00000000000026c3 RDI: 0000000000000004 [ 266.702261][ T8399] RBP: 00007febd4fa0090 R08: 0000000000000000 R09: 000000000000001d [ 266.702272][ T8399] R10: 000000000000004c R11: 0000000000000246 R12: 0000000000000002 [ 266.702282][ T8399] R13: 0000000000000000 R14: 00007febd43b5fa0 R15: 00007febd44dfa28 [ 266.702309][ T8399] [ 267.042333][ T5894] usb 1-1: config 64 has an invalid interface number: 166 but max is 3 [ 267.172341][ T5894] usb 1-1: config 64 has no interface number 0 [ 267.184951][ T5894] usb 1-1: config 64 has no interface number 1 [ 267.195896][ T5894] usb 1-1: config 64 has no interface number 2 [ 267.221708][ T5894] usb 1-1: config 64 has no interface number 3 [ 267.231345][ T5894] usb 1-1: config 64 interface 28 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 267.268575][ T924] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 267.278146][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.317651][ T5894] usb 1-1: config 64 interface 28 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 267.334891][ T924] usb 5-1: Product: syz [ 267.471101][ T924] usb 5-1: Manufacturer: syz [ 267.476152][ T5894] usb 1-1: config 64 interface 28 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 267.524046][ T924] usb 5-1: SerialNumber: syz [ 267.564104][ T5894] usb 1-1: config 64 interface 28 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 267.584226][ T924] usb 5-1: config 0 descriptor?? [ 267.600797][ T5894] usb 1-1: config 64 interface 28 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 267.633075][ T924] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 267.642532][ T5894] usb 1-1: config 64 interface 28 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 267.685717][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an endpoint descriptor with address 0x17, changing to 0x7 [ 267.822508][ T5894] usb 1-1: config 64 interface 20 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 267.872212][ T92] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 267.946166][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 267.994814][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 268.036185][ T92] usb 4-1: no configurations [ 268.040992][ T92] usb 4-1: can't read configurations, error -22 [ 268.047955][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 268.072396][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 268.136386][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 268.192609][ T5894] usb 1-1: config 64 interface 20 altsetting 128 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 268.195051][ T92] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 268.236573][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 268.290700][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 268.302781][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 268.314959][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has an endpoint descriptor with address 0x6C, changing to 0xC [ 268.328219][ T5894] usb 1-1: config 64 interface 20 altsetting 128 endpoint 0xC has an invalid bInterval 215, changing to 11 [ 268.343440][ T5894] usb 1-1: config 64 interface 20 altsetting 128 endpoint 0xC has invalid maxpacket 50901, setting to 1024 [ 268.355855][ T5894] usb 1-1: config 64 interface 20 altsetting 128 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 268.370103][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 268.384225][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 268.396215][ T5894] usb 1-1: config 64 interface 238 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 268.406415][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 268.418599][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 268.430865][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has an endpoint descriptor with address 0x48, changing to 0x8 [ 268.453261][ T92] usb 4-1: no configurations [ 268.458841][ T92] usb 4-1: can't read configurations, error -22 [ 268.463098][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 268.477086][ T92] usb usb4-port1: attempt power cycle [ 268.483052][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 268.494854][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 268.505857][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 268.516858][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 268.527987][ T5894] usb 1-1: config 64 interface 238 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 268.538912][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 268.549837][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 268.563092][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 268.574519][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 268.595120][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 268.606975][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 268.618202][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 268.629573][ T5894] usb 1-1: config 64 interface 166 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 268.642062][ T5894] usb 1-1: config 64 interface 28 has no altsetting 0 [ 268.649130][ T5894] usb 1-1: config 64 interface 20 has no altsetting 0 [ 268.656686][ T5894] usb 1-1: config 64 interface 238 has no altsetting 0 [ 268.663645][ T5894] usb 1-1: config 64 interface 166 has no altsetting 0 [ 268.674129][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 268.681604][ T5894] usb 1-1: New USB device found, idVendor=5041, idProduct=2235, bcdDevice=3a.1f [ 268.691384][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.716057][ T5894] usb 1-1: can't set config #64, error -71 [ 268.731312][ T5894] usb 1-1: USB disconnect, device number 33 [ 268.814959][ T92] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 268.836246][ T92] usb 4-1: no configurations [ 268.841676][ T92] usb 4-1: can't read configurations, error -22 [ 268.852111][ T8422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.908658][ T5893] usb 5-1: USB disconnect, device number 50 [ 268.985374][ T92] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 269.017575][ T92] usb 4-1: no configurations [ 269.024097][ T92] usb 4-1: can't read configurations, error -22 [ 269.041548][ T92] usb usb4-port1: unable to enumerate USB device [ 269.335093][ T5893] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 269.358700][ T8429] bond0: (slave netdevsim0): Releasing backup interface [ 269.365884][ T92] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 269.464877][ T5893] usb 5-1: device descriptor read/64, error -71 [ 269.514655][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 269.525961][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 269.542593][ T92] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 269.552268][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.561592][ T8437] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 269.563789][ T92] usb 3-1: Product: syz [ 269.574043][ T92] usb 3-1: Manufacturer: syz [ 269.579780][ T92] usb 3-1: SerialNumber: syz [ 269.580654][ T8437] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 269.587381][ T92] usb 3-1: config 0 descriptor?? [ 269.601403][ T92] ipw 3-1:0.0: IPWireless converter converter detected [ 269.603507][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 269.643141][ T8437] bond0: (slave bridge0): Releasing backup interface [ 269.704871][ T5893] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 269.834999][ T5893] usb 5-1: device descriptor read/64, error -71 [ 269.945039][ T5893] usb usb5-port1: attempt power cycle [ 270.294995][ T5893] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 270.327230][ T5893] usb 5-1: device descriptor read/8, error -71 [ 270.584906][ T5893] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 270.743893][ T5893] usb 5-1: device descriptor read/8, error -71 [ 270.844907][ T5894] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 270.865167][ T5893] usb usb5-port1: unable to enumerate USB device [ 271.016923][ T5893] usb 3-1: USB disconnect, device number 42 [ 271.025027][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 271.025942][ T5893] ipw 3-1:0.0: device disconnected [ 271.040150][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.060130][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 271.065032][ T92] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 271.079103][ T5894] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 271.089970][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.100812][ T5894] usb 1-1: config 0 descriptor?? [ 271.225794][ T92] usb 4-1: Using ep0 maxpacket: 32 [ 271.232844][ T92] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 271.276042][ T92] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 271.285347][ T92] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 271.293714][ T92] usb 4-1: Product: syz [ 271.298215][ T92] usb 4-1: Manufacturer: syz [ 271.302811][ T92] usb 4-1: SerialNumber: syz [ 271.312996][ T92] usb 4-1: config 0 descriptor?? [ 271.318965][ T8457] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 271.537116][ T5894] usb 4-1: USB disconnect, device number 38 [ 271.660835][ T8465] bridge_slave_0: left allmulticast mode [ 271.668252][ T8465] bridge_slave_0: left promiscuous mode [ 271.673963][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.688339][ T8465] bridge_slave_1: left allmulticast mode [ 271.694001][ T8465] bridge_slave_1: left promiscuous mode [ 271.699922][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.716438][ T8465] bond0: (slave bond_slave_0): Releasing backup interface [ 271.727390][ T8465] bond0: (slave bond_slave_1): Releasing backup interface [ 271.748623][ T8465] team0: Port device team_slave_0 removed [ 271.762932][ T8465] team0: Port device team_slave_1 removed [ 271.827756][ T8469] netlink: 'syz.0.685': attribute type 13 has an invalid length. [ 271.839883][ T8469] random: crng reseeded on system resumption [ 272.318467][ T8485] netlink: 56 bytes leftover after parsing attributes in process `syz.1.695'. [ 272.336086][ T924] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 272.474931][ T924] usb 3-1: device descriptor read/64, error -71 [ 272.544998][ T5894] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 272.705930][ T5894] usb 5-1: no configurations [ 272.710679][ T5894] usb 5-1: can't read configurations, error -22 [ 272.717204][ T924] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 272.776449][ T92] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 272.854931][ T924] usb 3-1: device descriptor read/64, error -71 [ 272.869321][ T5894] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 272.946045][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 272.965693][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 272.972388][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.983588][ T92] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 272.985216][ T924] usb usb3-port1: attempt power cycle [ 273.000350][ T92] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 273.002305][ T8491] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.018318][ T8491] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.027120][ T8491] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.035904][ T8491] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.045671][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.057046][ T92] usb 4-1: config 0 descriptor?? [ 273.064338][ T8491] vxlan0: entered promiscuous mode [ 273.069655][ T8491] vxlan0: entered allmulticast mode [ 273.076067][ T5894] usb 5-1: no configurations [ 273.080764][ T5894] usb 5-1: can't read configurations, error -22 [ 273.155752][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.201075][ T5894] usb usb5-port1: attempt power cycle [ 273.394914][ T924] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 273.447691][ T924] usb 3-1: device descriptor read/8, error -71 [ 273.652605][ T5894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 273.664867][ T5937] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 273.732018][ T92] usb 1-1: USB disconnect, device number 34 [ 273.781089][ T8503] netlink: 'syz.3.697': attribute type 13 has an invalid length. [ 273.793516][ T8503] random: crng reseeded on system resumption [ 273.915640][ T924] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 273.959670][ T5894] usb 5-1: no configurations [ 273.964286][ T5894] usb 5-1: can't read configurations, error -22 [ 273.991899][ T924] usb 3-1: device descriptor read/8, error -71 [ 274.077512][ T5937] usb 2-1: config 0 has no interfaces? [ 274.115318][ T924] usb usb3-port1: unable to enumerate USB device [ 274.121715][ T5894] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 274.167895][ T5894] usb 5-1: no configurations [ 274.180913][ T5894] usb 5-1: can't read configurations, error -22 [ 274.195165][ T5894] usb usb5-port1: unable to enumerate USB device [ 274.204994][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 274.214603][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.223731][ T5937] usb 2-1: Product: syz [ 274.228889][ T5937] usb 2-1: Manufacturer: syz [ 274.233537][ T5937] usb 2-1: SerialNumber: syz [ 274.295513][ T5937] usb 2-1: config 0 descriptor?? [ 275.055243][ T5893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 275.215200][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 275.224699][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 275.234407][ T5893] usb 1-1: config 5 has an invalid interface number: 61 but max is 0 [ 275.253854][ T5893] usb 1-1: config 5 has no interface number 0 [ 275.304237][ T5893] usb 1-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 275.335892][ T5893] usb 1-1: config 5 interface 61 has no altsetting 0 [ 275.421523][ T5893] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a [ 275.432441][ T8523] netlink: 'syz.4.705': attribute type 2 has an invalid length. [ 275.446522][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.460382][ T5893] usb 1-1: Product: syz [ 275.484259][ T5893] usb 1-1: Manufacturer: syz [ 275.505525][ T5893] usb 1-1: SerialNumber: syz [ 275.562266][ T8513] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 275.812399][ T5937] usb 4-1: USB disconnect, device number 39 [ 276.741290][ T92] usb 2-1: USB disconnect, device number 44 [ 276.758698][ T8538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.767538][ T8538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.776281][ T8538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.785033][ T8538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.930144][ T8538] vxlan0: entered promiscuous mode [ 276.956728][ T8538] vxlan0: entered allmulticast mode [ 277.027069][ T8538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.718587][ T92] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 277.782945][ T8545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.166434][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 278.336155][ T8554] program syz.3.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.337217][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.422824][ T92] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.824912][ T5937] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 278.910151][ T92] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 278.971564][ T8564] netlink: 'syz.4.718': attribute type 2 has an invalid length. [ 278.985874][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.099629][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 279.107228][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.117372][ T5937] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 279.126098][ T5937] usb 4-1: config 8 has no interface number 0 [ 279.164715][ T92] usb 2-1: config 0 descriptor?? [ 279.333418][ T5937] usb 4-1: config 8 interface 255 has no altsetting 0 [ 279.459908][ T5937] usb 4-1: string descriptor 0 read error: -22 [ 279.469738][ T5937] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 279.486710][ T8569] program syz.2.719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.503154][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.183991][ T8572] netlink: 'syz.1.711': attribute type 13 has an invalid length. [ 280.243685][ T8573] random: crng reseeded on system resumption [ 280.564241][ T5937] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 281.075227][ T5893] ath6kl: Failed to submit usb control message: -71 [ 281.111482][ T5893] ath6kl: unable to send the bmi data to the device: -71 [ 281.167127][ T5893] ath6kl: Unable to send get target info: -71 [ 281.211930][ T5893] ath6kl: Failed to init ath6kl core: -71 [ 281.325289][ T5893] ath6kl_usb 1-1:5.61: probe with driver ath6kl_usb failed with error -71 [ 281.851488][ T5893] usb 1-1: USB disconnect, device number 35 [ 282.745089][ T8577] FAULT_INJECTION: forcing a failure. [ 282.745089][ T8577] name failslab, interval 1, probability 0, space 0, times 0 [ 282.805574][ T8577] CPU: 0 UID: 0 PID: 8577 Comm: syz.2.721 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 282.805591][ T8577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.805598][ T8577] Call Trace: [ 282.805602][ T8577] [ 282.805606][ T8577] dump_stack_lvl+0x189/0x250 [ 282.805626][ T8577] ? __pfx____ratelimit+0x10/0x10 [ 282.805641][ T8577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.805654][ T8577] ? __pfx__printk+0x10/0x10 [ 282.805668][ T8577] ? __pfx___might_resched+0x10/0x10 [ 282.805681][ T8577] ? fs_reclaim_acquire+0x7d/0x100 [ 282.805695][ T8577] should_fail_ex+0x414/0x560 [ 282.805709][ T8577] should_failslab+0xa8/0x100 [ 282.805721][ T8577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 282.805730][ T8577] ? __alloc_skb+0x112/0x2d0 [ 282.805743][ T8577] __alloc_skb+0x112/0x2d0 [ 282.805754][ T8577] netlink_ack+0x146/0xa50 [ 282.805763][ T8577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.805775][ T8577] ? ref_tracker_free+0x63a/0x7d0 [ 282.805786][ T8577] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 282.805799][ T8577] ? __pfx_nl80211_post_doit+0x10/0x10 [ 282.805810][ T8577] ? __pfx_ref_tracker_free+0x10/0x10 [ 282.805827][ T8577] netlink_rcv_skb+0x28c/0x470 [ 282.805838][ T8577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 282.805851][ T8577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.805870][ T8577] ? down_read+0x1ad/0x2e0 [ 282.805881][ T8577] genl_rcv+0x28/0x40 [ 282.805892][ T8577] netlink_unicast+0x75b/0x8d0 [ 282.805907][ T8577] netlink_sendmsg+0x805/0xb30 [ 282.805922][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.805935][ T8577] ? aa_sock_msg_perm+0x94/0x160 [ 282.805947][ T8577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 282.805959][ T8577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.805970][ T8577] __sock_sendmsg+0x21c/0x270 [ 282.805986][ T8577] ____sys_sendmsg+0x505/0x830 [ 282.806000][ T8577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.806015][ T8577] ? import_iovec+0x74/0xa0 [ 282.806026][ T8577] ___sys_sendmsg+0x21f/0x2a0 [ 282.806039][ T8577] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.806069][ T8577] ? __fget_files+0x2a/0x420 [ 282.806078][ T8577] ? __fget_files+0x3a0/0x420 [ 282.806093][ T8577] __x64_sys_sendmsg+0x19b/0x260 [ 282.806106][ T8577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 282.806122][ T8577] ? __pfx_ksys_write+0x10/0x10 [ 282.806129][ T8577] ? rcu_is_watching+0x15/0xb0 [ 282.806145][ T8577] ? do_syscall_64+0xbe/0x3b0 [ 282.806155][ T8577] do_syscall_64+0xfa/0x3b0 [ 282.806163][ T8577] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.806176][ T8577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.806185][ T8577] ? clear_bhb_loop+0x60/0xb0 [ 282.806196][ T8577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.806205][ T8577] RIP: 0033:0x7fdd6978e929 [ 282.806216][ T8577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.806224][ T8577] RSP: 002b:00007fdd6a6b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.806234][ T8577] RAX: ffffffffffffffda RBX: 00007fdd699b5fa0 RCX: 00007fdd6978e929 [ 282.806241][ T8577] RDX: 0000000004004000 RSI: 0000200000000180 RDI: 0000000000000003 [ 282.806247][ T8577] RBP: 00007fdd6a6b9090 R08: 0000000000000000 R09: 0000000000000000 [ 282.806252][ T8577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.806258][ T8577] R13: 0000000000000000 R14: 00007fdd699b5fa0 R15: 00007fdd69adfa28 [ 282.806272][ T8577] [ 283.160347][ T5937] usb 4-1: USB disconnect, device number 40 [ 283.699341][ T5893] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 283.826506][ T8596] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.899407][ T8593] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.908297][ T8593] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.917227][ T8593] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.926057][ T8593] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.033954][ T8593] vxlan0: entered promiscuous mode [ 284.048086][ T8593] vxlan0: entered allmulticast mode [ 284.611955][ T5893] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 284.684621][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.030501][ T5893] usb 1-1: config 0 has no interface number 0 [ 285.058608][ T5893] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 285.125672][ T5893] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 285.157130][ T5893] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 285.275537][ T5893] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 285.284616][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.401039][ T5893] usb 1-1: config 0 descriptor?? [ 285.506199][ T5893] usb 1-1: can't set config #0, error -71 [ 285.554226][ T5893] usb 1-1: USB disconnect, device number 36 [ 286.140981][ T8615] FAULT_INJECTION: forcing a failure. [ 286.140981][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.154378][ T8615] CPU: 1 UID: 0 PID: 8615 Comm: syz.2.729 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 286.154401][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.154411][ T8615] Call Trace: [ 286.154418][ T8615] [ 286.154426][ T8615] dump_stack_lvl+0x189/0x250 [ 286.154455][ T8615] ? __pfx____ratelimit+0x10/0x10 [ 286.154478][ T8615] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.154502][ T8615] ? __pfx__printk+0x10/0x10 [ 286.154520][ T8615] ? __might_fault+0xb0/0x130 [ 286.154548][ T8615] should_fail_ex+0x414/0x560 [ 286.154573][ T8615] _copy_from_user+0x2d/0xb0 [ 286.154591][ T8615] snd_ctl_ioctl+0x184/0x1ad0 [ 286.154612][ T8615] ? stack_trace_save+0x9c/0xe0 [ 286.154633][ T8615] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 286.154661][ T8615] ? kasan_save_track+0x4f/0x80 [ 286.154683][ T8615] ? kasan_save_track+0x3e/0x80 [ 286.154703][ T8615] ? kasan_save_free_info+0x46/0x50 [ 286.154721][ T8615] ? __kasan_slab_free+0x62/0x70 [ 286.154738][ T8615] ? kfree+0x18e/0x440 [ 286.154756][ T8615] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 286.154773][ T8615] ? security_file_ioctl+0xcb/0x2d0 [ 286.154788][ T8615] ? __se_sys_ioctl+0x47/0x170 [ 286.154809][ T8615] ? do_syscall_64+0xfa/0x3b0 [ 286.154823][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.154863][ T8615] ? do_vfs_ioctl+0xf37/0x1990 [ 286.154888][ T8615] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 286.154916][ T8615] ? kasan_quarantine_put+0xdd/0x220 [ 286.154949][ T8615] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 286.154969][ T8615] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 286.154993][ T8615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 286.155028][ T8615] ? __lock_acquire+0xab9/0xd20 [ 286.155075][ T8615] ? __fget_files+0x2a/0x420 [ 286.155096][ T8615] ? __fget_files+0x2a/0x420 [ 286.155113][ T8615] ? __fget_files+0x3a0/0x420 [ 286.155129][ T8615] ? __fget_files+0x2a/0x420 [ 286.155150][ T8615] ? bpf_lsm_file_ioctl+0x9/0x20 [ 286.155172][ T8615] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 286.155192][ T8615] __se_sys_ioctl+0xfc/0x170 [ 286.155217][ T8615] do_syscall_64+0xfa/0x3b0 [ 286.155231][ T8615] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.155254][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.155270][ T8615] ? clear_bhb_loop+0x60/0xb0 [ 286.155290][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.155306][ T8615] RIP: 0033:0x7fdd6978e929 [ 286.155321][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.155336][ T8615] RSP: 002b:00007fdd6a6b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.155353][ T8615] RAX: ffffffffffffffda RBX: 00007fdd699b5fa0 RCX: 00007fdd6978e929 [ 286.155364][ T8615] RDX: 0000000000000000 RSI: 0000000040405515 RDI: 0000000000000003 [ 286.155374][ T8615] RBP: 00007fdd6a6b9090 R08: 0000000000000000 R09: 0000000000000000 [ 286.155385][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.155394][ T8615] R13: 0000000000000000 R14: 00007fdd699b5fa0 R15: 00007fdd69adfa28 [ 286.155421][ T8615] [ 286.748603][ T5894] usb 2-1: USB disconnect, device number 45 [ 286.800509][ T8616] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 287.104871][ T924] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 287.136433][ T5937] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 287.296802][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 287.351368][ T924] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 287.365522][ T8629] netlink: 'syz.2.732': attribute type 2 has an invalid length. [ 287.378645][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.401818][ T924] usb 5-1: config index 0 descriptor too short (expected 19174, got 36) [ 287.457024][ T924] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 287.506408][ T5937] usb 4-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 287.535002][ T924] usb 5-1: can't read configurations, error -22 [ 287.558593][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.668165][ T5937] usb 4-1: config 0 descriptor?? [ 287.702901][ T8613] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 287.747396][ T924] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 287.875624][ T8629] ave_0: entered promiscuous mode [ 288.060653][ T924] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 288.108139][ T924] usb 5-1: config index 0 descriptor too short (expected 19174, got 36) [ 288.160275][ T924] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 288.238557][ T924] usb 5-1: can't read configurations, error -22 [ 288.245848][ T924] usb usb5-port1: attempt power cycle [ 288.267279][ T5937] aquacomputer_d5next 0003:0C70:F012.0006: hidraw0: USB HID v1.05 Device [HID 0c70:f012] on usb-dummy_hcd.3-1/input0 [ 288.989832][ T924] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 289.035430][ T5937] usb 4-1: USB disconnect, device number 41 [ 289.136780][ T8636] fido_id[8636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 289.329534][ T924] usb 5-1: device descriptor read/8, error -71 [ 290.702074][ T8647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.858768][ T8653] input: syz0 as /devices/virtual/input/input15 [ 291.924888][ T924] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 292.145001][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 292.289541][ T924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.625102][ T5894] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 292.635487][ T924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.658745][ T924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.846373][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.859115][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 292.885231][ T924] usb 3-1: Product: syz [ 292.889532][ T924] usb 3-1: Manufacturer: syz [ 292.894162][ T924] usb 3-1: SerialNumber: syz [ 292.910400][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.939386][ T5894] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.035811][ T5894] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 293.254945][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.315527][ T5894] usb 1-1: config 0 descriptor?? [ 293.438670][ T8657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.499783][ T8657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.548693][ T924] usb 3-1: 0:2 : does not exist [ 293.647692][ T924] usb 3-1: USB disconnect, device number 47 [ 293.747470][ T6094] udevd[6094]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.845325][ T5894] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 294.037661][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 294.067486][ T5894] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 294.111767][ T5894] usb 5-1: config 0 has no interface number 0 [ 294.139512][ T8693] netlink: 'syz.0.740': attribute type 13 has an invalid length. [ 294.171135][ T8693] random: crng reseeded on system resumption [ 294.184842][ T5894] usb 5-1: config 0 interface 184 has no altsetting 0 [ 294.214342][ T5894] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 294.245040][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.281017][ T5894] usb 5-1: Product: syz [ 294.295134][ T5894] usb 5-1: Manufacturer: syz [ 294.330179][ T5894] usb 5-1: SerialNumber: syz [ 294.397798][ T5894] usb 5-1: config 0 descriptor?? [ 294.457941][ T5894] smsc75xx v1.0.0 [ 294.661708][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.832954][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.959035][ T924] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 295.417356][ T924] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 295.639322][ T924] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 295.660358][ T924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 295.732677][ T924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 295.906458][ T924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 295.938415][ T924] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 295.948134][ T924] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 295.970324][ T924] usb 3-1: Product: syz [ 295.979368][ T924] usb 3-1: Manufacturer: syz [ 296.012341][ T924] cdc_wdm 3-1:1.0: skipping garbage [ 296.028190][ T924] cdc_wdm 3-1:1.0: skipping garbage [ 296.048542][ T924] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 296.061418][ T924] cdc_wdm 3-1:1.0: Unknown control protocol [ 296.491640][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.529536][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.367673][ T5937] usb 3-1: USB disconnect, device number 48 [ 297.414968][ T924] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 297.680824][ T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.703594][ T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.769053][ T924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.971766][ T924] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.995424][ T924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.029200][ T924] usb 2-1: config 0 descriptor?? [ 298.469511][ T924] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 298.793386][ T924] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 298.940541][ T924] usb 1-1: USB disconnect, device number 37 [ 299.119058][ C1] plantronics 0003:047F:FFFF.0007: hid_field_extract() called with n (132) > 32! (ksoftirqd/1) [ 299.132538][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.165570][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 299.293768][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.514124][ T5894] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -110 [ 299.588870][ T5894] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -110 [ 299.808309][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.948457][ T8713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.009795][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.294996][ T5894] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 304.428740][ T92] usb 5-1: USB disconnect, device number 63 [ 304.496225][ T924] usb 2-1: USB disconnect, device number 46 [ 304.774184][ T8738] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[8738] [ 306.074844][ T924] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 306.154877][ T5894] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 306.364858][ T924] usb 5-1: Using ep0 maxpacket: 32 [ 306.450305][ T924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.461782][ T924] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 306.680868][ T5894] usb 3-1: config 0 has no interfaces? [ 306.714846][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.819622][ T924] usb 5-1: config 0 descriptor?? [ 307.118513][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 307.132354][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.142530][ T5894] usb 3-1: Product: syz [ 307.154923][ T5894] usb 3-1: Manufacturer: syz [ 307.159585][ T5894] usb 3-1: SerialNumber: syz [ 307.185058][ T5894] usb 3-1: config 0 descriptor?? [ 307.225714][ T924] usb 5-1: USB disconnect, device number 64 [ 309.478741][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 309.588506][ T8767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.967609][ T5894] usb 3-1: USB disconnect, device number 49 [ 311.637104][ T5893] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 311.731802][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 312.054461][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 312.357810][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.389990][ T5893] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.421813][ T5893] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 312.561181][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.762700][ T5893] usb 3-1: config 0 descriptor?? [ 313.157016][ T5894] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 313.559821][ T5894] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 313.578370][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.877276][ T5894] usb 1-1: config 0 has no interface number 0 [ 313.895678][ T8784] random: crng reseeded on system resumption [ 313.937314][ T5894] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 313.947346][ T5894] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.999275][ T924] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 314.567446][ T5894] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 314.600246][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.608718][ T5894] usb 1-1: Product: syz [ 314.622572][ T5894] usb 1-1: config 0 descriptor?? [ 314.708771][ T5894] usb 1-1: can't set config #0, error -71 [ 314.774889][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.857382][ T5894] usb 1-1: USB disconnect, device number 38 [ 314.876365][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.063748][ T924] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 315.154012][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.215651][ T924] usb 5-1: config 0 descriptor?? [ 315.441864][ T8780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.475297][ T8780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.813993][ T5894] usb 3-1: USB disconnect, device number 50 [ 315.873523][ T924] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 315.925031][ T924] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 315.955252][ T924] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input16 [ 316.001408][ T924] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 316.292544][ T924] usb 5-1: USB disconnect, device number 65 [ 316.900172][ T8796] netlink: 'syz.2.769': attribute type 13 has an invalid length. [ 317.110993][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.117411][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.401768][ T8796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.185118][ T5937] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 322.501971][ T5937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 322.510833][ T5937] usb 3-1: can't read configurations, error -61 [ 322.674846][ T5937] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 322.901245][ T5937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 323.036963][ T5937] usb 3-1: can't read configurations, error -61 [ 323.053859][ T5937] usb usb3-port1: attempt power cycle [ 323.405087][ T5937] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 323.427908][ T5937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 323.439401][ T5937] usb 3-1: can't read configurations, error -61 [ 323.464817][ T924] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 323.574909][ T5937] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 323.607864][ T5937] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 323.615722][ T924] usb 5-1: Using ep0 maxpacket: 32 [ 323.621032][ T5937] usb 3-1: can't read configurations, error -61 [ 323.629666][ T924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.640398][ T5937] usb usb3-port1: unable to enumerate USB device [ 323.646823][ T924] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 323.661121][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.674104][ T924] usb 5-1: config 0 descriptor?? [ 324.031486][ T8837] loop6: detected capacity change from 0 to 63 [ 324.066527][ T5834] buffer_io_error: 31 callbacks suppressed [ 324.066543][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.108210][ T8837] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.118043][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.129673][ T8837] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.138756][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.150264][ T8841] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.159099][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.167632][ T8841] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.176601][ T5834] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.186753][ T8837] Buffer I/O error on dev loop6, logical block 1, async page read [ 327.820159][ T5937] usb 5-1: USB disconnect, device number 66 [ 328.558186][ T8856] batadv_slave_0: entered promiscuous mode [ 328.598771][ T8855] batadv_slave_0: left promiscuous mode [ 328.966794][ T5937] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 330.155730][ T5937] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 330.714874][ T5937] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.774869][ T5937] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.443959][ T7916] sched: DL replenish lagged too much [ 357.735041][ T5937] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 358.674853][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.260323][ T5937] usb 4-1: can't set config #27, error -71 [ 360.268786][ T8853] delete_channel: no stack [ 360.395348][ T5894] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 360.407328][ T5937] usb 4-1: USB disconnect, device number 42 [ 380.055141][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.061478][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.195946][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.675510][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.691914][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.700085][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.711382][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.930071][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 387.976410][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 387.977698][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.032980][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.046705][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.055858][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.100678][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.113200][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.120725][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.129852][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.185367][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.206626][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.215106][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.236864][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.253603][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 388.874107][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 389.109260][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 389.117829][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 389.127764][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 389.135592][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.829505][ T5838] Bluetooth: hci5: command tx timeout [ 390.236271][ T5838] Bluetooth: hci3: command tx timeout [ 390.325888][ T5838] Bluetooth: hci0: command tx timeout [ 390.384892][ T5838] Bluetooth: hci4: command tx timeout [ 391.185368][ T5838] Bluetooth: hci6: command tx timeout [ 391.909989][ T5838] Bluetooth: hci5: command tx timeout [ 392.304791][ T5838] Bluetooth: hci3: command tx timeout [ 392.384877][ T5838] Bluetooth: hci0: command tx timeout [ 392.464844][ T5838] Bluetooth: hci4: command tx timeout [ 394.023176][ T5838] Bluetooth: hci6: command tx timeout [ 394.029479][ T5830] Bluetooth: hci5: command tx timeout [ 394.384824][ T5838] Bluetooth: hci3: command tx timeout [ 394.464883][ T5838] Bluetooth: hci0: command tx timeout [ 394.544892][ T5838] Bluetooth: hci4: command tx timeout [ 395.263710][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 395.351924][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 395.372665][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 395.790245][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 395.805671][ T8889] chnl_net:caif_netlink_parms(): no params data found [ 396.039153][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.048077][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.058023][ T8891] bridge_slave_0: entered allmulticast mode [ 396.066072][ T8891] bridge_slave_0: entered promiscuous mode [ 396.075369][ T5838] Bluetooth: hci6: command tx timeout [ 396.080786][ T5838] Bluetooth: hci5: command tx timeout [ 396.233847][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.242570][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.250063][ T8891] bridge_slave_1: entered allmulticast mode [ 396.258226][ T8891] bridge_slave_1: entered promiscuous mode [ 396.320319][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.331348][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.339370][ T8884] bridge_slave_0: entered allmulticast mode [ 396.351127][ T8884] bridge_slave_0: entered promiscuous mode [ 396.465258][ T5838] Bluetooth: hci3: command tx timeout [ 396.491202][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.505506][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.513157][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.529174][ T8884] bridge_slave_1: entered allmulticast mode [ 396.543488][ T8884] bridge_slave_1: entered promiscuous mode [ 396.549593][ T5838] Bluetooth: hci0: command tx timeout [ 396.594046][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.605094][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.612360][ T8888] bridge_slave_0: entered allmulticast mode [ 396.623718][ T8888] bridge_slave_0: entered promiscuous mode [ 396.631167][ T5838] Bluetooth: hci4: command tx timeout [ 396.691842][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.822266][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.834654][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.886473][ T8888] bridge_slave_1: entered allmulticast mode [ 396.894330][ T8888] bridge_slave_1: entered promiscuous mode [ 397.058639][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.086613][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.141918][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.315567][ T8891] team0: Port device team_slave_0 added [ 397.431143][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.498128][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.505739][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.513009][ T8892] bridge_slave_0: entered allmulticast mode [ 397.525919][ T8892] bridge_slave_0: entered promiscuous mode [ 397.533648][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.542234][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.550293][ T8889] bridge_slave_0: entered allmulticast mode [ 397.558431][ T8889] bridge_slave_0: entered promiscuous mode [ 397.570783][ T8891] team0: Port device team_slave_1 added [ 397.731688][ T8884] team0: Port device team_slave_0 added [ 397.804135][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.811731][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.823220][ T8892] bridge_slave_1: entered allmulticast mode [ 397.832925][ T8892] bridge_slave_1: entered promiscuous mode [ 397.845151][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.852293][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.867907][ T8889] bridge_slave_1: entered allmulticast mode [ 397.876964][ T8889] bridge_slave_1: entered promiscuous mode [ 397.967001][ T8884] team0: Port device team_slave_1 added [ 398.117230][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.124212][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.151308][ T5838] Bluetooth: hci6: command tx timeout [ 398.160179][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.291671][ T8888] team0: Port device team_slave_0 added [ 398.341237][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.363288][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.374128][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.399180][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.433173][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.445511][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.452552][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.482909][ T8884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.503953][ T8888] team0: Port device team_slave_1 added [ 398.518582][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.638487][ T8884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.652896][ T8884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.683102][ T8884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.749452][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.832688][ T8889] team0: Port device team_slave_0 added [ 398.982268][ T8891] hsr_slave_0: entered promiscuous mode [ 398.996190][ T8891] hsr_slave_1: entered promiscuous mode [ 399.002605][ T8891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.014162][ T8891] Cannot create hsr debugfs directory [ 399.021079][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.033051][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.063371][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.164671][ T8889] team0: Port device team_slave_1 added [ 399.241336][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.253206][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.286371][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.324339][ T8892] team0: Port device team_slave_0 added [ 399.439194][ T8892] team0: Port device team_slave_1 added [ 399.572498][ T8884] hsr_slave_0: entered promiscuous mode [ 399.582523][ T8884] hsr_slave_1: entered promiscuous mode [ 399.592555][ T8884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.604249][ T8884] Cannot create hsr debugfs directory [ 399.649720][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.664153][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.696198][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.807830][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.816388][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.848022][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.861012][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.873386][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.908959][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.954208][ T8888] hsr_slave_0: entered promiscuous mode [ 399.965378][ T8888] hsr_slave_1: entered promiscuous mode [ 399.972120][ T8888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.983687][ T8888] Cannot create hsr debugfs directory [ 399.991116][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.002667][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.038169][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.340202][ T8889] hsr_slave_0: entered promiscuous mode [ 400.350986][ T8889] hsr_slave_1: entered promiscuous mode [ 400.364297][ T8889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.376156][ T8889] Cannot create hsr debugfs directory [ 400.484251][ T8892] hsr_slave_0: entered promiscuous mode [ 400.495552][ T8892] hsr_slave_1: entered promiscuous mode [ 400.502000][ T8892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.513969][ T8892] Cannot create hsr debugfs directory [ 401.394008][ T8891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.495217][ T8891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 401.604340][ T8891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 401.629015][ T8891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 401.941922][ T8888] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 401.960809][ T8888] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 402.009738][ T8888] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 402.056163][ T8888] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 402.188594][ T8884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.339031][ T8884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.429980][ T8884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.484047][ T8884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.512304][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.609810][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.633730][ T8889] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.787744][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.794936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.820189][ T8889] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.852275][ T8889] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.007993][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.015190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.041882][ T8889] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 403.239443][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.281073][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.361550][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.368770][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.401515][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.408704][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.690700][ T8892] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 403.762503][ T8892] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 403.814251][ T8892] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 403.883059][ T8892] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 403.913840][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.964536][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.022899][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.110979][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.134307][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.273320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.280572][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.328106][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.335325][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.371638][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.362873][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.370554][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.410890][ T8891] veth0_vlan: entered promiscuous mode [ 405.461258][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.468451][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.610959][ T8891] veth1_vlan: entered promiscuous mode [ 405.697929][ T8888] veth0_vlan: entered promiscuous mode [ 405.821091][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.872076][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.917956][ T8888] veth1_vlan: entered promiscuous mode [ 405.984382][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.002852][ T8891] veth0_macvtap: entered promiscuous mode [ 406.054029][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.119522][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.208621][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.215803][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.341350][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.348564][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.370440][ T8891] veth1_macvtap: entered promiscuous mode [ 406.542936][ T8888] veth0_macvtap: entered promiscuous mode [ 406.589799][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.604097][ T8884] veth0_vlan: entered promiscuous mode [ 406.657710][ T8884] veth1_vlan: entered promiscuous mode [ 406.710883][ T8884] veth0_macvtap: entered promiscuous mode [ 406.718624][ T8888] veth1_macvtap: entered promiscuous mode [ 406.751558][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.779930][ T8884] veth1_macvtap: entered promiscuous mode [ 406.823052][ T8891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.851163][ T8891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.861534][ T8891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.879458][ T8891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.898042][ T8889] veth0_vlan: entered promiscuous mode [ 406.940569][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.992222][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.036936][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.091367][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.120551][ T8889] veth1_vlan: entered promiscuous mode [ 407.166950][ T8884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.203710][ T8888] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.227902][ T8888] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.239666][ T8888] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.250226][ T8888] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.313936][ T8884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.368562][ T8884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.406863][ T8884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.454199][ T8884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.721324][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.770002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.841375][ T8892] veth0_vlan: entered promiscuous mode [ 407.903771][ T8889] veth0_macvtap: entered promiscuous mode [ 407.937443][ T8892] veth1_vlan: entered promiscuous mode [ 408.016977][ T8889] veth1_macvtap: entered promiscuous mode [ 408.070925][ T4594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.123244][ T4594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.169268][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.282092][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.298218][ T8892] veth0_macvtap: entered promiscuous mode [ 408.329631][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.354295][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.472983][ T8892] veth1_macvtap: entered promiscuous mode [ 408.515613][ T8889] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.529354][ T8889] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.585986][ T8889] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.622452][ T8889] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.662825][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.694627][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.843656][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.871749][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.908843][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.009242][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.657288][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.860581][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.868800][ T8892] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.952285][ T8892] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.359916][ T8892] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.450159][ T8892] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.752735][ T4594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.885813][ T4594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.627443][ T8979] loop6: detected capacity change from 0 to 63 [ 417.572310][ T8979] buffer_io_error: 3 callbacks suppressed [ 417.572329][ T8979] Buffer I/O error on dev loop6, logical block 0, async page read [ 417.989867][ T8979] Buffer I/O error on dev loop6, logical block 1, async page read [ 417.998473][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.034185][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.052015][ T8965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.102368][ T8979] Buffer I/O error on dev loop6, logical block 2, async page read [ 419.334274][ T8965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.407975][ T8979] Buffer I/O error on dev loop6, logical block 3, async page read [ 426.233320][ T8969] Buffer I/O error on dev loop6, logical block 0, async page read [ 426.434191][ T8969] Buffer I/O error on dev loop6, logical block 1, async page read [ 426.816566][ T8969] Buffer I/O error on dev loop6, logical block 2, async page read [ 426.824504][ T8969] Buffer I/O error on dev loop6, logical block 3, async page read [ 427.715879][ T8969] Buffer I/O error on dev loop6, logical block 0, async page read [ 427.723826][ T8969] Buffer I/O error on dev loop6, logical block 1, async page read [ 428.014957][ T8969] Buffer I/O error on dev loop6, logical block 2, async page read [ 428.022906][ T8969] Buffer I/O error on dev loop6, logical block 3, async page read [ 428.238620][ T8969] Buffer I/O error on dev loop6, logical block 0, async page read [ 428.259688][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.468435][ T8969] Buffer I/O error on dev loop6, logical block 1, async page read [ 428.485084][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.001388][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.054852][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.138652][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 443.151546][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 443.162749][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 443.175868][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 443.184028][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.054757][ T5830] Bluetooth: hci1: command tx timeout [ 448.085303][ T5830] Bluetooth: hci1: command tx timeout [ 450.334947][ T5830] Bluetooth: hci1: command tx timeout [ 451.706828][ T9029] input: syz0 as /devices/virtual/input/input20 [ 451.815762][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.827016][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.835359][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.845370][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.853084][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.405180][ T5838] Bluetooth: hci1: command tx timeout [ 453.055618][ T9036] netlink: 'syz.8.805': attribute type 13 has an invalid length. [ 454.074870][ T5838] Bluetooth: hci2: command tx timeout [ 455.063163][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.084911][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.093697][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.102450][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.112284][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 456.184877][ T5840] Bluetooth: hci2: command tx timeout [ 458.454222][ T5838] Bluetooth: hci2: command tx timeout [ 458.913399][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.065430][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.112338][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.172791][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.199529][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.444832][ T5838] Bluetooth: hci2: command tx timeout [ 461.450412][ T5838] Bluetooth: hci3: command tx timeout [ 462.308146][ T5830] Bluetooth: hci4: command tx timeout [ 462.573217][ T9036] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.614092][ T9036] gretap1: entered promiscuous mode [ 462.654925][ T9036] gretap1: entered allmulticast mode [ 463.504990][ T5830] Bluetooth: hci3: command tx timeout [ 464.384933][ T5830] Bluetooth: hci4: command tx timeout [ 466.096474][ T5830] Bluetooth: hci3: command tx timeout [ 466.534726][ T5830] Bluetooth: hci4: command tx timeout [ 468.147541][ T5830] Bluetooth: hci3: command tx timeout [ 468.544879][ T5830] Bluetooth: hci4: command tx timeout [ 477.743003][ T4280] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.764107][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 480.247384][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.268435][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.292150][ T9016] bridge_slave_0: entered allmulticast mode [ 480.308189][ T9016] bridge_slave_0: entered promiscuous mode [ 483.213732][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.245130][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.252427][ T9016] bridge_slave_1: entered allmulticast mode [ 483.286666][ T9016] bridge_slave_1: entered promiscuous mode [ 483.541402][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.657906][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.778542][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.793274][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.801586][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.826809][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.835749][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 484.118971][ T9016] team0: Port device team_slave_0 added [ 484.153297][ T9016] team0: Port device team_slave_1 added [ 484.479449][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.494790][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.529707][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.660141][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 484.694871][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.701856][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.742542][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.332556][ T9042] chnl_net:caif_netlink_parms(): no params data found [ 485.371159][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 485.511284][ T9016] hsr_slave_0: entered promiscuous mode [ 485.530080][ T9016] hsr_slave_1: entered promiscuous mode [ 485.543201][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.563720][ T9016] Cannot create hsr debugfs directory [ 485.905088][ T5838] Bluetooth: hci6: command tx timeout [ 486.016817][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.024122][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.042371][ T9032] bridge_slave_0: entered allmulticast mode [ 486.068676][ T9032] bridge_slave_0: entered promiscuous mode [ 486.195702][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.202870][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.218339][ T9032] bridge_slave_1: entered allmulticast mode [ 486.238630][ T9032] bridge_slave_1: entered promiscuous mode [ 486.661630][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.839955][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.851998][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.863627][ T9042] bridge_slave_0: entered allmulticast mode [ 486.889626][ T9042] bridge_slave_0: entered promiscuous mode [ 486.970753][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.278730][ T9042] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.315237][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.322555][ T9042] bridge_slave_1: entered allmulticast mode [ 487.385172][ T9042] bridge_slave_1: entered promiscuous mode [ 487.755355][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.762790][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.825672][ T9040] bridge_slave_0: entered allmulticast mode [ 487.877320][ T9040] bridge_slave_0: entered promiscuous mode [ 487.985495][ T5838] Bluetooth: hci6: command tx timeout [ 488.031908][ T9032] team0: Port device team_slave_0 added [ 488.127059][ T9032] team0: Port device team_slave_1 added [ 488.310000][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.324040][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.332545][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.340967][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.349180][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.402781][ T9042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.467558][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.499692][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.545206][ T9040] bridge_slave_1: entered allmulticast mode [ 488.553104][ T9040] bridge_slave_1: entered promiscuous mode [ 488.729598][ T9042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.196961][ T9065] chnl_net:caif_netlink_parms(): no params data found [ 489.293389][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.315526][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.322787][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.367971][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.388075][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.405368][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.447191][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.582326][ T9042] team0: Port device team_slave_0 added [ 489.603272][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.677000][ T9042] team0: Port device team_slave_1 added [ 490.065014][ T5830] Bluetooth: hci6: command tx timeout [ 490.385329][ T5830] Bluetooth: hci7: command tx timeout [ 490.413438][ T9032] hsr_slave_0: entered promiscuous mode [ 490.426351][ T9032] hsr_slave_1: entered promiscuous mode [ 490.441733][ T9032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.451406][ T9032] Cannot create hsr debugfs directory [ 490.489929][ T9040] team0: Port device team_slave_0 added [ 490.535550][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.542580][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.601633][ T9042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.633784][ T9040] team0: Port device team_slave_1 added [ 490.703058][ T9042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.716727][ T9042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.754915][ T9042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.213003][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.228632][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.266899][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.376219][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.395548][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.402858][ T9065] bridge_slave_0: entered allmulticast mode [ 491.425203][ T9065] bridge_slave_0: entered promiscuous mode [ 491.493101][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.511155][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.540859][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.850995][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.864391][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.884004][ T9065] bridge_slave_1: entered allmulticast mode [ 491.908845][ T9065] bridge_slave_1: entered promiscuous mode [ 492.078982][ T9042] hsr_slave_0: entered promiscuous mode [ 492.114237][ T9042] hsr_slave_1: entered promiscuous mode [ 492.120921][ T9042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.136537][ T9042] Cannot create hsr debugfs directory [ 492.154069][ T5830] Bluetooth: hci6: command tx timeout [ 492.239657][ T9065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.467394][ T5830] Bluetooth: hci7: command tx timeout [ 492.478091][ T9065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.959005][ T9040] hsr_slave_0: entered promiscuous mode [ 492.971332][ T9040] hsr_slave_1: entered promiscuous mode [ 492.983113][ T9040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.995272][ T9040] Cannot create hsr debugfs directory [ 493.290759][ T9065] team0: Port device team_slave_0 added [ 493.346002][ T9065] team0: Port device team_slave_1 added [ 493.542813][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 493.730954][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.754110][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.795660][ T9065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.408263][ T9032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.442768][ T9032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.545493][ T5830] Bluetooth: hci7: command tx timeout [ 494.632835][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.663478][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.742642][ T9065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.919974][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 494.932404][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 494.941934][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 494.950466][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 494.971972][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 495.433784][ T9065] hsr_slave_0: entered promiscuous mode [ 495.440783][ T9065] hsr_slave_1: entered promiscuous mode [ 495.459252][ T9065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.474583][ T9065] Cannot create hsr debugfs directory [ 495.902668][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.915007][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.935051][ T9088] bridge_slave_0: entered allmulticast mode [ 495.942896][ T9088] bridge_slave_0: entered promiscuous mode [ 496.081791][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.102478][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.114012][ T9088] bridge_slave_1: entered allmulticast mode [ 496.133963][ T9088] bridge_slave_1: entered promiscuous mode [ 496.469487][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.582779][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.625217][ T5838] Bluetooth: hci7: command tx timeout [ 496.882978][ T9088] team0: Port device team_slave_0 added [ 496.992674][ T9088] team0: Port device team_slave_1 added [ 497.029932][ T5838] Bluetooth: hci1: command tx timeout [ 497.240175][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.254426][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.299077][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.353863][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.369497][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.405709][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.751314][ T9088] hsr_slave_0: entered promiscuous mode [ 497.786040][ T9088] hsr_slave_1: entered promiscuous mode [ 497.792474][ T9088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.828284][ T9088] Cannot create hsr debugfs directory [ 497.870409][ T9099] chnl_net:caif_netlink_parms(): no params data found [ 498.514293][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.533297][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.542620][ T9099] bridge_slave_0: entered allmulticast mode [ 498.566825][ T9099] bridge_slave_0: entered promiscuous mode [ 498.690182][ T9099] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.712953][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.728285][ T9099] bridge_slave_1: entered allmulticast mode [ 498.746660][ T9099] bridge_slave_1: entered promiscuous mode [ 498.983989][ T9099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.009983][ T9099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.105284][ T5838] Bluetooth: hci1: command tx timeout [ 499.195220][ T9099] team0: Port device team_slave_0 added [ 499.289633][ T9099] team0: Port device team_slave_1 added [ 499.423704][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.436117][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.471033][ T9099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.504690][ T9099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.511673][ T9099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.556335][ T9099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.787427][ T9099] hsr_slave_0: entered promiscuous mode [ 499.803037][ T9099] hsr_slave_1: entered promiscuous mode [ 499.810734][ T9099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.830507][ T9099] Cannot create hsr debugfs directory [ 501.184901][ T5838] Bluetooth: hci1: command tx timeout [ 501.434188][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449380][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.265017][ T5838] Bluetooth: hci1: command tx timeout [ 505.475465][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 505.485908][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 505.493789][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 505.501962][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 505.518881][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 506.164152][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 506.174496][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 506.182996][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 506.194919][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 506.204108][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 506.574592][ T9114] chnl_net:caif_netlink_parms(): no params data found [ 506.990842][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.008900][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.022304][ T9114] bridge_slave_0: entered allmulticast mode [ 507.036872][ T9114] bridge_slave_0: entered promiscuous mode [ 507.061828][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.078369][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.095469][ T9114] bridge_slave_1: entered allmulticast mode [ 507.116161][ T9114] bridge_slave_1: entered promiscuous mode [ 507.368260][ T9114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.419445][ T9114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.592913][ T5838] Bluetooth: hci8: command tx timeout [ 507.706039][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 507.744465][ T9114] team0: Port device team_slave_0 added [ 507.812954][ T9114] team0: Port device team_slave_1 added [ 508.179977][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.202898][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.283176][ T9114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.304899][ T5838] Bluetooth: hci9: command tx timeout [ 508.429507][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.444211][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.454408][ T9118] bridge_slave_0: entered allmulticast mode [ 508.489549][ T9118] bridge_slave_0: entered promiscuous mode [ 508.516799][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.524390][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.564301][ T9114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.596227][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.603419][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.626630][ T9118] bridge_slave_1: entered allmulticast mode [ 508.634582][ T9118] bridge_slave_1: entered promiscuous mode [ 508.838887][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.862398][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.180935][ T9114] hsr_slave_0: entered promiscuous mode [ 509.213580][ T9114] hsr_slave_1: entered promiscuous mode [ 509.223055][ T9114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.246771][ T9114] Cannot create hsr debugfs directory [ 509.269499][ T9118] team0: Port device team_slave_0 added [ 509.349486][ T9118] team0: Port device team_slave_1 added [ 509.665324][ T5838] Bluetooth: hci8: command tx timeout [ 509.676389][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.683379][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.738468][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.932250][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.954767][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.015093][ T9118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.298067][ T9118] hsr_slave_0: entered promiscuous mode [ 510.319015][ T9118] hsr_slave_1: entered promiscuous mode [ 510.340969][ T9118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.353543][ T9118] Cannot create hsr debugfs directory [ 510.385678][ T5838] Bluetooth: hci9: command tx timeout [ 511.744926][ T5838] Bluetooth: hci8: command tx timeout [ 512.465279][ T5838] Bluetooth: hci9: command tx timeout [ 513.774709][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 513.780780][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 513.825419][ T5838] Bluetooth: hci8: command tx timeout [ 514.545109][ T5840] Bluetooth: hci9: command tx timeout [ 543.946236][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 543.956264][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.964595][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.973199][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.984502][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 544.645626][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 545.062702][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.087936][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.115243][ T9141] bridge_slave_0: entered allmulticast mode [ 545.123072][ T9141] bridge_slave_0: entered promiscuous mode [ 545.149505][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.164818][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.172167][ T9141] bridge_slave_1: entered allmulticast mode [ 545.195586][ T9141] bridge_slave_1: entered promiscuous mode [ 545.363382][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.389858][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.576540][ T9141] team0: Port device team_slave_0 added [ 545.603913][ T9141] team0: Port device team_slave_1 added [ 545.874232][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.894505][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.938286][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.972695][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.995052][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.033834][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.067667][ T5830] Bluetooth: hci5: command tx timeout [ 546.291476][ T9141] hsr_slave_0: entered promiscuous mode [ 546.324518][ T9141] hsr_slave_1: entered promiscuous mode [ 546.343365][ T9141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.363025][ T9141] Cannot create hsr debugfs directory [ 548.146195][ T5830] Bluetooth: hci5: command tx timeout [ 548.250773][ T5830] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 548.260831][ T5830] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 548.269526][ T5830] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 548.279415][ T5830] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 548.287840][ T5830] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 548.941172][ T9152] chnl_net:caif_netlink_parms(): no params data found [ 549.330955][ T9152] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.355243][ T9152] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.366094][ T9152] bridge_slave_0: entered allmulticast mode [ 549.385078][ T9152] bridge_slave_0: entered promiscuous mode [ 549.411311][ T9152] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.421750][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.448037][ T9152] bridge_slave_1: entered allmulticast mode [ 549.466601][ T9152] bridge_slave_1: entered promiscuous mode [ 549.625771][ T9152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.667741][ T9152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.863325][ T9152] team0: Port device team_slave_0 added [ 549.973962][ T9152] team0: Port device team_slave_1 added [ 550.153892][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.185253][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.225877][ T5830] Bluetooth: hci5: command tx timeout [ 550.248914][ T9152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.277386][ T9152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.284369][ T9152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.325143][ T5830] Bluetooth: hci10: command tx timeout [ 550.353072][ T9152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.592924][ T9152] hsr_slave_0: entered promiscuous mode [ 550.611872][ T9152] hsr_slave_1: entered promiscuous mode [ 550.642956][ T9152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.657219][ T9152] Cannot create hsr debugfs directory [ 552.305247][ T5830] Bluetooth: hci5: command tx timeout [ 552.385217][ T5830] Bluetooth: hci10: command tx timeout [ 554.465228][ T5830] Bluetooth: hci10: command tx timeout [ 555.381694][ T5840] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 555.395593][ T5840] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 555.404223][ T5840] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 555.416314][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 555.431911][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 556.082032][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 556.526207][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.533457][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.548247][ T5840] Bluetooth: hci10: command tx timeout [ 556.554099][ T9163] bridge_slave_0: entered allmulticast mode [ 556.577142][ T9163] bridge_slave_0: entered promiscuous mode [ 556.587170][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.594355][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.624343][ T9163] bridge_slave_1: entered allmulticast mode [ 556.647097][ T9163] bridge_slave_1: entered promiscuous mode [ 556.866599][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.899152][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.111155][ T9163] team0: Port device team_slave_0 added [ 557.238360][ T9163] team0: Port device team_slave_1 added [ 557.425995][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.455073][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.494289][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.514855][ T5840] Bluetooth: hci11: command tx timeout [ 557.544072][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.564892][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.608595][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.898960][ T9163] hsr_slave_0: entered promiscuous mode [ 557.916448][ T9163] hsr_slave_1: entered promiscuous mode [ 557.934909][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.954737][ T9163] Cannot create hsr debugfs directory [ 559.585074][ T5840] Bluetooth: hci11: command tx timeout [ 561.665127][ T5840] Bluetooth: hci11: command tx timeout [ 562.898591][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.908461][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.745149][ T5840] Bluetooth: hci11: command tx timeout [ 566.280148][ T5830] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 566.290361][ T5830] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 566.298515][ T5830] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 566.307238][ T5830] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 566.321721][ T5830] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 566.379357][ T5830] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 566.389562][ T5830] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 566.401450][ T5830] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 566.409842][ T5830] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 566.425540][ T5830] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 567.352901][ T9178] chnl_net:caif_netlink_parms(): no params data found [ 568.385295][ T5830] Bluetooth: hci12: command tx timeout [ 568.465321][ T5830] Bluetooth: hci13: command tx timeout [ 570.465605][ T5830] Bluetooth: hci12: command tx timeout [ 570.545520][ T5830] Bluetooth: hci13: command tx timeout [ 572.545209][ T5830] Bluetooth: hci12: command tx timeout [ 572.625225][ T5830] Bluetooth: hci13: command tx timeout [ 574.625285][ T5840] Bluetooth: hci12: command tx timeout [ 574.705793][ T5840] Bluetooth: hci13: command tx timeout [ 575.184846][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 581.665168][ T9177] chnl_net:caif_netlink_parms(): no params data found [ 581.917724][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.936812][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.944166][ T9178] bridge_slave_0: entered allmulticast mode [ 581.987417][ T9178] bridge_slave_0: entered promiscuous mode [ 582.095152][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.102343][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.133952][ T9178] bridge_slave_1: entered allmulticast mode [ 582.158939][ T9178] bridge_slave_1: entered promiscuous mode [ 582.542000][ T9178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.575685][ T9178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.594839][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.602218][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.630839][ T9177] bridge_slave_0: entered allmulticast mode [ 582.646796][ T9177] bridge_slave_0: entered promiscuous mode [ 582.839872][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.865556][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.873067][ T9177] bridge_slave_1: entered allmulticast mode [ 582.896310][ T9177] bridge_slave_1: entered promiscuous mode [ 582.945400][ T9178] team0: Port device team_slave_0 added [ 583.124112][ T9178] team0: Port device team_slave_1 added [ 583.230135][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.280802][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.458054][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.475882][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.522016][ T9178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.638326][ T9177] team0: Port device team_slave_0 added [ 583.666095][ T9178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.673077][ T9178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.732311][ T9178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.789227][ T9177] team0: Port device team_slave_1 added [ 584.310159][ T9178] hsr_slave_0: entered promiscuous mode [ 584.336811][ T9178] hsr_slave_1: entered promiscuous mode [ 584.343669][ T9178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.365922][ T9178] Cannot create hsr debugfs directory [ 584.376005][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.382978][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.438087][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.554329][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.575208][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.618240][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.970603][ T9177] hsr_slave_0: entered promiscuous mode [ 585.008379][ T9177] hsr_slave_1: entered promiscuous mode [ 585.020342][ T9177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 585.039380][ T9177] Cannot create hsr debugfs directory [ 585.437807][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 585.444966][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 605.169902][ T5830] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 605.180957][ T5830] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 605.189517][ T5830] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 605.200533][ T5830] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 605.211482][ T5830] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 605.853056][ T9218] chnl_net:caif_netlink_parms(): no params data found [ 606.253984][ T9218] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.271788][ T9218] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.295026][ T9218] bridge_slave_0: entered allmulticast mode [ 606.325377][ T9218] bridge_slave_0: entered promiscuous mode [ 606.343491][ T9218] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.358184][ T9218] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.375345][ T9218] bridge_slave_1: entered allmulticast mode [ 606.406114][ T9218] bridge_slave_1: entered promiscuous mode [ 606.580316][ T9218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.614284][ T9218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.868694][ T9218] team0: Port device team_slave_0 added [ 606.909251][ T9218] team0: Port device team_slave_1 added [ 607.108655][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.134923][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.182864][ T9218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.216657][ T9218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.223638][ T9218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.265687][ T5830] Bluetooth: hci14: command tx timeout [ 607.276686][ T9218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.514383][ T9218] hsr_slave_0: entered promiscuous mode [ 607.537904][ T9218] hsr_slave_1: entered promiscuous mode [ 607.552258][ T9218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.570624][ T9218] Cannot create hsr debugfs directory [ 608.822553][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 608.832597][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 608.846829][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 608.855941][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 608.866298][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 609.346361][ T9133] Bluetooth: hci14: command tx timeout [ 609.549765][ T9232] chnl_net:caif_netlink_parms(): no params data found [ 609.949018][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.976297][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.983744][ T9232] bridge_slave_0: entered allmulticast mode [ 610.014909][ T9232] bridge_slave_0: entered promiscuous mode [ 610.044352][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.062919][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.086576][ T9232] bridge_slave_1: entered allmulticast mode [ 610.106586][ T9232] bridge_slave_1: entered promiscuous mode [ 610.295294][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.328382][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.516310][ T9232] team0: Port device team_slave_0 added [ 610.544314][ T9232] team0: Port device team_slave_1 added [ 610.744508][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.754650][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.806937][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.838774][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.854637][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.913766][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.945333][ T9133] Bluetooth: hci15: command tx timeout [ 611.025662][ T9133] Bluetooth: hci6: command 0x0406 tx timeout [ 611.031780][ T9133] Bluetooth: hci7: command 0x0406 tx timeout [ 611.356424][ T9232] hsr_slave_0: entered promiscuous mode [ 611.363469][ T9232] hsr_slave_1: entered promiscuous mode [ 611.394889][ T9232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.422477][ T9232] Cannot create hsr debugfs directory [ 611.428942][ T5830] Bluetooth: hci14: command tx timeout [ 613.025291][ T5830] Bluetooth: hci15: command tx timeout [ 613.505254][ T5830] Bluetooth: hci14: command tx timeout [ 615.105275][ T5830] Bluetooth: hci15: command tx timeout [ 616.425671][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 616.435605][ T5840] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 616.443921][ T5840] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 616.452675][ T5840] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 616.464831][ T5840] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 617.072034][ T9245] chnl_net:caif_netlink_parms(): no params data found [ 617.195684][ T5840] Bluetooth: hci15: command tx timeout [ 617.523202][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.543331][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.567658][ T9245] bridge_slave_0: entered allmulticast mode [ 617.585666][ T9245] bridge_slave_0: entered promiscuous mode [ 617.606273][ T9245] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.613439][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.630549][ T9245] bridge_slave_1: entered allmulticast mode [ 617.654477][ T9245] bridge_slave_1: entered promiscuous mode [ 617.869103][ T9245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.905923][ T9245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.234969][ T9245] team0: Port device team_slave_0 added [ 618.255419][ T9245] team0: Port device team_slave_1 added [ 618.454173][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.484631][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.533886][ T9245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.546727][ T5840] Bluetooth: hci16: command tx timeout [ 618.570378][ T9245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.597477][ T9245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.648188][ T9245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.907174][ T9245] hsr_slave_0: entered promiscuous mode [ 618.925213][ T9245] hsr_slave_1: entered promiscuous mode [ 618.937980][ T9245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.965275][ T9245] Cannot create hsr debugfs directory [ 620.625371][ T5830] Bluetooth: hci16: command tx timeout [ 621.271848][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 622.715455][ T5840] Bluetooth: hci16: command tx timeout [ 623.666158][ T31] INFO: task kworker/u8:7:4280 blocked for more than 143 seconds. [ 623.674027][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 623.696331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.726064][ T31] task:kworker/u8:7 state:D stack:23368 pid:4280 tgid:4280 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 623.755361][ T31] Workqueue: netns cleanup_net [ 623.760200][ T31] Call Trace: [ 623.763487][ T31] [ 623.790476][ T31] __schedule+0x16f5/0x4d00 [ 623.821432][ T31] ? __lock_acquire+0xa90/0xd20 [ 623.834618][ T31] ? schedule+0x165/0x360 [ 623.839013][ T31] ? __pfx___schedule+0x10/0x10 [ 623.843896][ T31] ? schedule+0x91/0x360 [ 623.974964][ T31] schedule+0x165/0x360 [ 623.979206][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.014632][ T31] __mutex_lock+0x724/0xe80 [ 624.019214][ T31] ? __mutex_lock+0x51b/0xe80 [ 624.023921][ T31] ? rcu_barrier+0x4c/0x570 [ 624.070049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.078228][ T31] ? __mutex_unlock_slowpath+0x6ed/0x700 [ 624.083923][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.114160][ T31] rcu_barrier+0x4c/0x570 [ 624.119003][ T31] netdev_run_todo+0x327/0xea0 [ 624.123805][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 624.145283][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 624.150635][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.176284][ T31] ? nsim_destroy+0x3ec/0x670 [ 624.181024][ T31] ? kfree+0x18e/0x440 [ 624.194631][ T31] nsim_destroy+0x40c/0x670 [ 624.214631][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 624.219797][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 624.234951][ T31] nsim_dev_reload_down+0x8a/0xc0 [ 624.240028][ T31] devlink_reload+0x1b6/0x8d0 [ 624.254976][ T31] ? xa_get_mark+0x67/0x7b0 [ 624.259532][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 624.288127][ T31] ? xa_get_mark+0x70f/0x7b0 [ 624.292817][ T31] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 624.323808][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 624.334641][ T31] ? class_remove_file_ns+0x121/0x160 [ 624.340107][ T31] ops_undo_list+0x187/0x990 [ 624.345792][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.352132][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.386458][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 624.391645][ T31] cleanup_net+0x4c5/0x800 [ 624.415084][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 624.420097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.434617][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 624.440402][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 624.454838][ T31] process_scheduled_works+0xae1/0x17b0 [ 624.460524][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 624.484295][ T31] worker_thread+0x8a0/0xda0 [ 624.505483][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.511886][ T31] ? __kthread_parkme+0x7b/0x200 [ 624.534966][ T31] kthread+0x70e/0x8a0 [ 624.539098][ T31] ? __pfx_worker_thread+0x10/0x10 [ 624.544235][ T31] ? __pfx_kthread+0x10/0x10 [ 624.565330][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 624.570591][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.584630][ T31] ? __pfx_kthread+0x10/0x10 [ 624.589294][ T31] ret_from_fork+0x3fc/0x770 [ 624.593915][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 624.624629][ T31] ? __switch_to_asm+0x39/0x70 [ 624.629450][ T31] ? __switch_to_asm+0x33/0x70 [ 624.634230][ T31] ? __pfx_kthread+0x10/0x10 [ 624.655056][ T31] ret_from_fork_asm+0x1a/0x30 [ 624.659905][ T31] [ 624.675295][ T31] INFO: task syz.9.793:9007 blocked for more than 144 seconds. [ 624.689171][ T31] Not tainted 6.16.0-rc3-syzkaller #0 [ 624.705272][ T31] Blocked by coredump. [ 624.749542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.775016][ T31] task:syz.9.793 state:D stack:24872 pid:9007 tgid:9004 ppid:8892 task_flags:0x40044c flags:0x00004006 [ 624.788769][ T5840] Bluetooth: hci16: command tx timeout [ 624.804927][ T31] Call Trace: [ 624.808248][ T31] [ 624.813975][ T31] __schedule+0x16f5/0x4d00 [ 624.835458][ T31] ? schedule+0x165/0x360 [ 624.839858][ T31] ? __pfx___schedule+0x10/0x10 [ 624.854643][ T31] ? schedule+0x91/0x360 [ 624.858947][ T31] schedule+0x165/0x360 [ 624.863123][ T31] schedule_preempt_disabled+0x13/0x30 [ 624.890859][ T31] __mutex_lock+0x724/0xe80 [ 624.897185][ T31] ? __mutex_lock+0x51b/0xe80 [ 624.901913][ T31] ? rcu_barrier+0x4c/0x570 [ 624.925108][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 624.930192][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 624.944947][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 624.950983][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 624.979928][ T31] rcu_barrier+0x4c/0x570 [ 624.984318][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 625.005144][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 625.010317][ T31] netdev_run_todo+0x327/0xea0 [ 625.030661][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 625.044624][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 625.050484][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 625.064624][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.069889][ T31] ? netdev_state_change+0x1ca/0x220 [ 625.100361][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 625.106714][ T31] tun_chr_close+0x13c/0x1c0 [ 625.111338][ T31] __fput+0x44c/0xa70 [ 625.134944][ T31] task_work_run+0x1d1/0x260 [ 625.139600][ T31] ? __pfx_task_work_run+0x10/0x10 [ 625.154633][ T31] ? kmem_cache_free+0x18f/0x400 [ 625.159626][ T31] do_exit+0x6b5/0x22e0 [ 625.163801][ T31] ? do_raw_spin_lock+0x121/0x290 [ 625.184422][ T31] ? __pfx_do_exit+0x10/0x10 [ 625.190157][ T31] do_group_exit+0x21c/0x2d0 [ 625.204631][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.209877][ T31] get_signal+0x1286/0x1340 [ 625.214425][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 625.244625][ T31] ? count_memcg_event_mm+0x21/0x260 [ 625.249974][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 625.272071][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 625.284617][ T31] exit_to_user_mode_loop+0x75/0x110 [ 625.289943][ T31] do_syscall_64+0x2bd/0x3b0 [ 625.294547][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.310262][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.339807][ T31] ? clear_bhb_loop+0x60/0xb0 [ 625.344538][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.355174][ T31] RIP: 0033:0x7fd18a78e929 [ 625.359643][ T31] RSP: 002b:00007fd18b680038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 625.385007][ T31] RAX: 0000000000010106 RBX: 00007fd18a9b6080 RCX: 00007fd18a78e929 [ 625.393038][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 625.414981][ T31] RBP: 00007fd18a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 625.423006][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 625.460277][ T31] R13: 0000000000000001 R14: 00007fd18a9b6080 R15: 00007fd18aadfa28 [ 625.474900][ T31] [ 625.481464][ T31] [ 625.481464][ T31] Showing all locks held in the system: [ 625.494614][ T31] 3 locks held by kworker/u8:1/13: [ 625.499762][ T31] 1 lock held by khungtaskd/31: [ 625.518409][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 625.554642][ T31] 3 locks held by kworker/1:1/48: [ 625.559722][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 625.596715][ T31] #1: ffffc90000b87bc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 625.614612][ T31] #2: ffffffff8f8462a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 625.633129][ T31] 3 locks held by kworker/1:2/924: [ 625.644621][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 625.674469][ T31] #1: ffffc900039d7bc0 ((work_completion)(&(&ovs_net->masks_rebalance)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 625.705898][ T31] #2: ffffffff8f8462a8 (ovs_mutex){+.+.}-{4:4}, at: ovs_dp_masks_rebalance+0x2f/0xe0 [ 625.716420][ T31] 6 locks held by kworker/u8:7/4280: [ 625.721729][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 625.752877][ T31] #1: ffffc9000e417bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 625.772549][ T31] #2: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 625.793521][ T31] #3: ffff88804a2520e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 625.816085][ T31] #4: ffff88804a253250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 625.845247][ T31] #5: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 625.864622][ T31] 2 locks held by getty/5594: [ 625.869339][ T31] #0: ffff88814c49f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 625.897301][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 625.923735][ T31] 2 locks held by kworker/0:6/5916: [ 625.929903][ T31] 1 lock held by syz.7.795/8973: [ 625.960485][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 625.981055][ T31] 3 locks held by kworker/0:8/8982: [ 625.994630][ T31] 3 locks held by kworker/u8:12/8991: [ 626.001867][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 626.025384][ T31] #1: ffffc90004a2fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 626.059659][ T31] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 626.085116][ T31] 1 lock held by syz.5.798/8994: [ 626.090090][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.115321][ T31] 1 lock held by syz.9.793/9007: [ 626.120300][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.154623][ T31] 1 lock held by syz-executor/9016: [ 626.159951][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.194624][ T31] 7 locks held by syz-executor/9032: [ 626.199951][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.226202][ T31] #1: ffff88806dfc8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.247493][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.278775][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.304320][ T31] #4: ffff88805b38e0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 626.324721][ T31] #5: ffff88805b38f250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 626.344912][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.375370][ T31] 4 locks held by syz-executor/9040: [ 626.380794][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.414639][ T31] #1: ffff88803bba9488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.424478][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.468134][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.484851][ T31] 4 locks held by syz-executor/9042: [ 626.490165][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.524614][ T31] #1: ffff88803f96c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.534447][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.573381][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.595117][ T31] 2 locks held by syz.8.806/9050: [ 626.600435][ T31] #0: ffffffff8f503290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 626.634612][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.657906][ T31] 4 locks held by syz-executor/9065: [ 626.663244][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.685346][ T31] #1: ffff888057462c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.713179][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.734613][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.765086][ T31] 4 locks held by syz-executor/9088: [ 626.770416][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.793134][ T31] #1: ffff8880335cbc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.813897][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.834641][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.856350][ T31] 4 locks held by syz-executor/9099: [ 626.885109][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 626.894082][ T31] #1: ffff888029d11888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 626.915166][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 626.936624][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 626.963924][ T31] 4 locks held by syz-executor/9114: [ 626.987121][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.004860][ T31] #1: ffff8880889eac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.024870][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.057531][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.088347][ T31] 4 locks held by syz-executor/9118: [ 627.093670][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.117272][ T31] #1: ffff88805ec46c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.145178][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.164619][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.202704][ T31] 4 locks held by syz-executor/9141: [ 627.209754][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.235343][ T31] #1: ffff88803c481c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.254881][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.287591][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.304623][ T31] 4 locks held by syz-executor/9152: [ 627.309945][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.337592][ T31] #1: ffff888046244888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.365105][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.397336][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.416002][ T31] 4 locks held by syz-executor/9163: [ 627.421325][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.450122][ T31] #1: ffff88809b620888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.477034][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.494891][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.525078][ T31] 4 locks held by syz-executor/9177: [ 627.530416][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.556915][ T31] #1: ffff8880a2889488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.585586][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.604882][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.633146][ T31] 4 locks held by syz-executor/9178: [ 627.639305][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.667348][ T31] #1: ffff888084676c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.694959][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.714625][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.743260][ T31] 4 locks held by syz-executor/9218: [ 627.749609][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.777019][ T31] #1: ffff888093b32488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.805068][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.824870][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.855063][ T31] 2 locks held by kworker/0:14/9228: [ 627.860412][ T31] 4 locks held by syz-executor/9232: [ 627.874613][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 627.905533][ T31] #1: ffff888088d62888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 627.927420][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 627.944608][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 627.974337][ T31] 2 locks held by kworker/0:15/9240: [ 627.995248][ T31] 4 locks held by syz-executor/9245: [ 628.000575][ T31] #0: ffff888023660428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 628.025122][ T31] #1: ffff888063ef1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 628.044625][ T31] #2: ffff888140b92788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 628.064627][ T31] #3: ffffffff8edaaa28 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 628.104695][ T31] [ 628.107078][ T31] ============================================= [ 628.107078][ T31] [ 628.133707][ T31] NMI backtrace for cpu 1 [ 628.133733][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 628.133775][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.133797][ T31] Call Trace: [ 628.133810][ T31] [ 628.133817][ T31] dump_stack_lvl+0x189/0x250 [ 628.133844][ T31] ? __wake_up_klogd+0xd9/0x110 [ 628.133866][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 628.133889][ T31] ? __pfx__printk+0x10/0x10 [ 628.133918][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 628.133942][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 628.133959][ T31] ? _printk+0xcf/0x120 [ 628.133981][ T31] ? __pfx__printk+0x10/0x10 [ 628.133999][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 628.134023][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 628.134046][ T31] watchdog+0xfee/0x1030 [ 628.134075][ T31] ? watchdog+0x1de/0x1030 [ 628.134102][ T31] kthread+0x70e/0x8a0 [ 628.134123][ T31] ? __pfx_watchdog+0x10/0x10 [ 628.134143][ T31] ? __pfx_kthread+0x10/0x10 [ 628.134162][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.134183][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.134204][ T31] ? __pfx_kthread+0x10/0x10 [ 628.134223][ T31] ret_from_fork+0x3fc/0x770 [ 628.134247][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 628.134274][ T31] ? __switch_to_asm+0x39/0x70 [ 628.134289][ T31] ? __switch_to_asm+0x33/0x70 [ 628.134305][ T31] ? __pfx_kthread+0x10/0x10 [ 628.134323][ T31] ret_from_fork_asm+0x1a/0x30 [ 628.134354][ T31] [ 628.134360][ T31] Sending NMI from CPU 1 to CPUs 0: [ 628.296754][ C0] NMI backtrace for cpu 0 [ 628.296770][ C0] CPU: 0 UID: 0 PID: 5916 Comm: kworker/0:6 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 628.296794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.296805][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 628.296834][ C0] RIP: 0010:unwind_next_frame+0x4d7/0x2390 [ 628.296860][ C0] Code: 00 00 41 c6 07 01 48 c7 c2 a0 3e 88 8b 4c 8b 6c 24 50 48 8d 72 04 4c 8d 62 05 48 89 f0 48 c1 e8 03 48 89 44 24 40 0f b6 04 28 <84> c0 48 89 54 24 08 48 89 34 24 0f 85 4d 18 00 00 4c 89 e0 48 c1 [ 628.296875][ C0] RSP: 0018:ffffc90000006dd8 EFLAGS: 00000a06 [ 628.296887][ C0] RAX: 0000000000000000 RBX: ffffffff900e2bfc RCX: ffffffff900e2c00 [ 628.296899][ C0] RDX: ffffffff90b6439c RSI: ffffffff90b643a0 RDI: ffffffff8be28b60 [ 628.296911][ C0] RBP: dffffc0000000000 R08: 0000000000000009 R09: ffffffff81728af5 [ 628.296922][ C0] R10: ffffc90000006ef8 R11: ffffffff81ace6a0 R12: ffffffff90b643a1 [ 628.296934][ C0] R13: ffffc90000006ef8 R14: ffffc90000006ea8 R15: ffffffff81728af5 [ 628.296946][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 628.296958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.296969][ C0] CR2: 00002000000b9030 CR3: 000000000df38000 CR4: 00000000003526f0 [ 628.296983][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 628.296993][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 628.297003][ C0] Call Trace: [ 628.297009][ C0] [ 628.297019][ C0] ? unwind_next_frame+0xa5/0x2390 [ 628.297041][ C0] ? __napi_poll+0xc4/0x480 [ 628.297057][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.297074][ C0] arch_stack_walk+0x11c/0x150 [ 628.297091][ C0] ? __napi_poll+0xc4/0x480 [ 628.297106][ C0] stack_trace_save+0x9c/0xe0 [ 628.297122][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 628.297137][ C0] ? kasan_save_free_info+0x46/0x50 [ 628.297157][ C0] ? consume_skb+0x9e/0xf0 [ 628.297173][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 628.297194][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 628.297215][ C0] ? __lock_acquire+0xab9/0xd20 [ 628.297236][ C0] kasan_save_track+0x3e/0x80 [ 628.297257][ C0] ? kasan_save_track+0x3e/0x80 [ 628.297277][ C0] ? kasan_save_free_info+0x46/0x50 [ 628.297294][ C0] ? __kasan_slab_free+0x62/0x70 [ 628.297307][ C0] ? kmem_cache_free+0x18f/0x400 [ 628.297321][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 628.297340][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 628.297359][ C0] ? nft_do_chain+0x40c/0x1920 [ 628.297377][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 628.297395][ C0] ? nf_hook_slow+0xc2/0x220 [ 628.297410][ C0] ? NF_HOOK+0x206/0x3a0 [ 628.297425][ C0] ? NF_HOOK+0x30c/0x3a0 [ 628.297439][ C0] ? __netif_receive_skb+0x143/0x380 [ 628.297460][ C0] ? process_backlog+0x60e/0x14f0 [ 628.297475][ C0] ? __napi_poll+0xc4/0x480 [ 628.297506][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 628.297526][ C0] kasan_save_free_info+0x46/0x50 [ 628.297545][ C0] __kasan_slab_free+0x62/0x70 [ 628.297558][ C0] kmem_cache_free+0x18f/0x400 [ 628.297575][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 628.297598][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 628.297618][ C0] ? nf_conntrack_in+0xa24/0x1600 [ 628.297638][ C0] ? nf_ip_checksum+0x13c/0x510 [ 628.297659][ C0] nft_synproxy_do_eval+0x345/0x570 [ 628.297679][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 628.297700][ C0] ? worker_thread+0x8a0/0xda0 [ 628.297720][ C0] ? kthread+0x70e/0x8a0 [ 628.297738][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 628.297766][ C0] nft_do_chain+0x40c/0x1920 [ 628.297786][ C0] ? call_rcu+0x6ff/0x9c0 [ 628.297804][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.297828][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 628.297865][ C0] nft_do_chain_inet+0x25d/0x340 [ 628.297884][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 628.297904][ C0] ? ipt_do_table+0x2a3/0x1640 [ 628.297922][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 628.297947][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 628.297968][ C0] nf_hook_slow+0xc2/0x220 [ 628.297986][ C0] NF_HOOK+0x206/0x3a0 [ 628.298002][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 628.298018][ C0] ? NF_HOOK+0x9a/0x3a0 [ 628.298033][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 628.298047][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 628.298066][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 628.298083][ C0] ? skb_dst+0x4f/0xd0 [ 628.298099][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 628.298116][ C0] NF_HOOK+0x30c/0x3a0 [ 628.298132][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 628.298149][ C0] ? NF_HOOK+0x9a/0x3a0 [ 628.298163][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 628.298178][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 628.298194][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 628.298214][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 628.298229][ C0] __netif_receive_skb+0x143/0x380 [ 628.298253][ C0] ? process_backlog+0x2d5/0x14f0 [ 628.298270][ C0] process_backlog+0x60e/0x14f0 [ 628.298292][ C0] ? __pfx_process_backlog+0x10/0x10 [ 628.298306][ C0] ? invoke_rcu_core+0xb6/0x200 [ 628.298320][ C0] ? __pfx_invoke_rcu_core+0x10/0x10 [ 628.298337][ C0] __napi_poll+0xc4/0x480 [ 628.298349][ C0] ? net_rx_action+0x46d/0xe30 [ 628.298366][ C0] net_rx_action+0x707/0xe30 [ 628.298380][ C0] ? __lock_acquire+0xab9/0xd20 [ 628.298408][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 628.298425][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 628.298449][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 628.298479][ C0] handle_softirqs+0x286/0x870 [ 628.298503][ C0] ? do_softirq+0xec/0x180 [ 628.298526][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 628.298550][ C0] ? kernel_fpu_end+0xc8/0x120 [ 628.298567][ C0] do_softirq+0xec/0x180 [ 628.298587][ C0] [ 628.298592][ C0] [ 628.298598][ C0] ? __pfx_do_softirq+0x10/0x10 [ 628.298619][ C0] ? __pfx_do_softirq+0x10/0x10 [ 628.298643][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 628.298664][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 628.298686][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 628.298705][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.298728][ C0] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 628.298747][ C0] kernel_fpu_end+0xd2/0x120 [ 628.298762][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 628.298777][ C0] ? kernel_fpu_end+0xd2/0x120 [ 628.298799][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 628.298818][ C0] blake2s_compress+0x5f/0xd0 [ 628.298833][ C0] blake2s_update+0x14b/0x450 [ 628.298858][ C0] hmac+0x288/0x330 [ 628.298875][ C0] ? __pfx_hmac+0x10/0x10 [ 628.298905][ C0] ? kdf+0x115/0x270 [ 628.298924][ C0] kdf+0x182/0x270 [ 628.298940][ C0] ? __pfx_kdf+0x10/0x10 [ 628.298962][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 628.298988][ C0] wg_noise_handshake_consume_initiation+0x242/0x900 [ 628.299011][ C0] ? __pfx_wg_noise_handshake_consume_initiation+0x10/0x10 [ 628.299030][ C0] ? kernel_fpu_end+0xd2/0x120 [ 628.299045][ C0] ? __pfx_kernel_fpu_end+0x10/0x10 [ 628.299065][ C0] ? __asan_memset+0x22/0x50 [ 628.299085][ C0] ? blake2s_final+0x14c/0x260 [ 628.299109][ C0] ? compute_mac1+0x152/0x1a0 [ 628.299124][ C0] ? unwind_next_frame+0xa5/0x2390 [ 628.299146][ C0] ? __pfx_compute_mac1+0x10/0x10 [ 628.299173][ C0] ? wg_cookie_validate_packet+0x208/0x320 [ 628.299194][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 628.299221][ C0] wg_packet_handshake_receive_worker+0x5f2/0xfb0 [ 628.299251][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 628.299274][ C0] ? register_lock_class+0x51/0x320 [ 628.299297][ C0] ? __lock_acquire+0xab9/0xd20 [ 628.299321][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 628.299345][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.299365][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 628.299386][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 628.299409][ C0] process_scheduled_works+0xae1/0x17b0 [ 628.299443][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.299473][ C0] worker_thread+0x8a0/0xda0 [ 628.299506][ C0] kthread+0x70e/0x8a0 [ 628.299524][ C0] ? __pfx_worker_thread+0x10/0x10 [ 628.299546][ C0] ? __pfx_kthread+0x10/0x10 [ 628.299563][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 628.299582][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 628.299602][ C0] ? __pfx_kthread+0x10/0x10 [ 628.299619][ C0] ret_from_fork+0x3fc/0x770 [ 628.299641][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.299664][ C0] ? __switch_to_asm+0x39/0x70 [ 628.299679][ C0] ? __switch_to_asm+0x33/0x70 [ 628.299693][ C0] ? __pfx_kthread+0x10/0x10 [ 628.299710][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.299733][ C0] [ 629.320951][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 629.327850][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 629.337935][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 629.348004][ T31] Call Trace: [ 629.351293][ T31] [ 629.354352][ T31] dump_stack_lvl+0x99/0x250 [ 629.358974][ T31] ? __asan_memcpy+0x40/0x70 [ 629.363587][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.368816][ T31] ? __pfx__printk+0x10/0x10 [ 629.373437][ T31] panic+0x2db/0x790 [ 629.377354][ T31] ? __pfx_panic+0x10/0x10 [ 629.381797][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 629.387637][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 629.393028][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 629.399208][ T31] watchdog+0x102d/0x1030 [ 629.403553][ T31] ? watchdog+0x1de/0x1030 [ 629.407990][ T31] kthread+0x70e/0x8a0 [ 629.412076][ T31] ? __pfx_watchdog+0x10/0x10 [ 629.416792][ T31] ? __pfx_kthread+0x10/0x10 [ 629.421394][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 629.426606][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.431901][ T31] ? __pfx_kthread+0x10/0x10 [ 629.436508][ T31] ret_from_fork+0x3fc/0x770 [ 629.441114][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 629.446244][ T31] ? __switch_to_asm+0x39/0x70 [ 629.451027][ T31] ? __switch_to_asm+0x33/0x70 [ 629.455810][ T31] ? __pfx_kthread+0x10/0x10 [ 629.460421][ T31] ret_from_fork_asm+0x1a/0x30 [ 629.465214][ T31] [ 629.468482][ T31] Kernel Offset: disabled [ 629.472809][ T31] Rebooting in 86400 seconds..