last executing test programs: 17m21.562163791s ago: executing program 32 (id=2788): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000380)={r0, &(0x7f0000000100)='syzkaller1\x00', 0x400, &(0x7f0000000200)={@align=0x8, {0x5, 0x8, 0x5, 0x3}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0x3}) bind$vsock_stream(r1, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @host}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mount$bind(&(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500), 0x140040, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000002600010126bd7000fcffffff1d0000e857000e80540052806f784e8df96ddb651128a7a38ffcf1dd0308c33fa12db8a947f424a892a831217f9a97a3764574383b7ef8d45cf916d331c46b6145941eae9ec3f9ca195b5ed7a145aead9f1e384cf57ef81d5b7862a03e9471a86e2476d33bc20e91543471ee95da090ae7586a57e19864eb86297d053d5e80ba20c4ce7a841a"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0000891f0180c200000ebbbbbbbbbbbb0800450000210067e000032f"], 0x80) mount(0x0, &(0x7f0000000040)='./trace/trace\x00', &(0x7f0000000080)='gfs2meta\x00', 0x900480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) 13m27.455420707s ago: executing program 33 (id=3828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x2002c841) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000", @ANYRES16=r2, @ANYBLOB="350427bd7000fddbdf251400000008000300", @ANYRES32=r4, @ANYBLOB="0600b500590500001200be000ed576db8c2b5044e344daa0b30500000a00060008021100d24600000800a4000200000006001200ff7f000006001401bc400000c900be006f6e78d29b0703af4edb9a6fbdebd2a7d68a3549f3cf8a14a3f2742d431b40b62816aab0b45a5e5d849bcadbf107f4ee407a42ee6f14b43d357f6c61c8a3e981553ffe5a79ebf92725719644"], 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x40) 7m35.833895199s ago: executing program 34 (id=5384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0x500}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000400)={0x0, 0x1000}) (fail_nth: 4) 7m26.618216422s ago: executing program 4 (id=5417): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0xd55, 0x1, 0x6, 0x0, [{0x7, 0x3, 0x0, '\x00', 0x7f}, {0x2, 0x27, 0x81, '\x00', 0x9}, {0x8, 0xff, 0xb9, '\x00', 0x7}, {0x8, 0x7, 0x1, '\x00', 0x8}, {0x5, 0x2e, 0x4}, {0xff, 0x7, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x1a, 0x1, '\x00', 0x2}, {0x0, 0x80, 0x6, '\x00', 0xc}, {0x6, 0xc0, 0x5, '\x00', 0x8}, {0x5, 0x44, 0x4, '\x00', 0x3}, {0x7, 0x8, 0x5, '\x00', 0x81}, {0x74, 0x1, 0x96}, {0x4, 0x1, 0x7, '\x00', 0xeb}, {0x46, 0xc2, 0x4, '\x00', 0x2c}, {0x7, 0x48, 0x0, '\x00', 0x5}, {0xf1, 0x6, 0xb, '\x00', 0x5}, {0xc, 0xff, 0x10, '\x00', 0x5}, {0x17, 0x2d, 0x6, '\x00', 0xa8}, {0xc0, 0x10, 0x3, '\x00', 0x3e}, {0x2, 0x64, 0x6, '\x00', 0xfd}, {0x0, 0x4, 0x3, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0xfc}, {0x10, 0x7, 0x7, '\x00', 0x63}]}}) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_ublk_setup_queues(r2, r4, &(0x7f0000000580)={0x0, 0xd3bd, 0x20000, 0x3, 0xf4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6872, 0x1, 0x6, 0x34b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60a8, 0x20, 0x800001, 0x1bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x4000, 0x4003bfff, 0x2b7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x4, 0x26c}}], 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xfff], 0x200000, 0x1c6017}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x5f) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) close(r9) 7m25.639413884s ago: executing program 4 (id=5419): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x80580, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x1000008, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000480)=0x7ff8) r6 = socket$inet6(0xa, 0x1, 0x100000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x34, r9, 0x1, 0x70bd27, 0x25dfdc03, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x3b}}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) r10 = openat(0xffffffffffffff9c, &(0x7f0000002000)='sys_link/bus/pci/devices/0000:00:05.0/resource0\x00', 0x1, 0x0) write(r10, &(0x7f0000002100)='00', 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r12, 0xcb71}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f0000000040)={r12, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="09000000a27adbfef9df4cda29a9e4e72288b9662abe82a2a459d3d7047e1a3a9faef9836ef0eaf51304000000000000003483f2500a967ea7a350339006a1b43e07aaada884c12c2e44eb414d6668ba8bf8b42dc29896d58b5eb1adf99728c18c6f63dddfb8aaa39f178a947ded985ff5c09f058a1b2adb416ffcb97f1fb422b9ea39995f00"/148], 0x8) close_range(r4, r6, 0x0) 7m24.362834329s ago: executing program 4 (id=5424): socket$inet6(0xa, 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x24, r0, 0xcc9ae2a27fe3ea62, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xeff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x841) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x44008004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) 7m24.093306601s ago: executing program 35 (id=5424): socket$inet6(0xa, 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) r0 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x24, r0, 0xcc9ae2a27fe3ea62, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0xeff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x841) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x44008004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e22, @local}], 0x10) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0xfdef) 6m52.343255092s ago: executing program 36 (id=5505): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="2a001efbb009006e", 0x8}], 0x1, &(0x7f0000000140)}, 0x804) 6m48.652008402s ago: executing program 37 (id=5514): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000100)='0\x00', 0x2) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRESOCT=r0], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = accept4(r1, 0x0, &(0x7f00000000c0), 0x80000) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="1409000010000100e6000000000000000300000a14000000090a010400000000000000000a000004140000001100010000000000000000000100000a07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 6m42.711968951s ago: executing program 38 (id=5523): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1, 0xfc}}}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000280)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 5m23.699426222s ago: executing program 0 (id=5684): syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x5, 0x2eb}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140)) (async) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x5, 0x2eb}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x2, @local, 0x9}}}, 0x88) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r4, 0x204) (async) listen(r4, 0x204) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32, @ANYBLOB="140006"], 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32, @ANYBLOB="140006"], 0x30}}, 0x0) dup(r6) (async) r9 = dup(r6) fanotify_mark(r5, 0x1, 0x30, r9, 0x0) r10 = memfd_create(&(0x7f0000000040)='%\x00', 0x3) fremovexattr(r10, &(0x7f0000000040)=@known='system.posix_acl_access\x00') socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000680)=@IORING_OP_PIPE={0x3e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x0, 0x0, 0x5}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x77, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) 5m22.094505863s ago: executing program 0 (id=5691): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x9, 0x0) 5m21.6091163s ago: executing program 39 (id=5691): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x9, 0x0) 4m37.698572192s ago: executing program 40 (id=5859): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) close(0xffffffffffffffff) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="200f4200000042238f9e40c55370ef5b60736b393a0c0900000000000000e20b02a3d0ac709e74c688d99d7ea564a1f9b66d635eae74e4bd3a462a0caa1c32cb6225ff8c197dabbaa371"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="200a280000004628538b592998958101802850c6dca12a43f03d887c5e1a2b691e28d58efd94f8a0ca50761954d2834b96b7e2b87be8c051799c5268e8013d01fd096d32b5fff7d6b625be5687938ce46474496c29ceef6413cd4b68f9b55d3c805806"], &(0x7f0000000180)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x8, 0x92, 0x2, 0x3, 0xfffc, 0x0, 0x14, 0x3, 0x9, 0xf801, 0x8}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0xfffffffd}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x2}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000300)={0x20, 0x89, 0x2}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120127528e855067728d0000000000102312"], 0x0) (async) r1 = syz_open_dev$dvb_demux(&(0x7f00000003c0), 0x0, 0x400041) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb0}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0x8) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 4m33.351106019s ago: executing program 41 (id=5869): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6\xff\x03\x00\x00\x00\x00\x00\x00vs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\xca\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0xffffffff, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x200, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x204, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x0, 0xe, 0xfffffffa, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x4, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x9, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0xffffffff, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x178, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x148, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x36}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4m27.891615974s ago: executing program 9 (id=5878): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000a00), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4081991}, 0x4044040) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f00000008c0)=ANY=[]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m27.767351301s ago: executing program 42 (id=5878): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000a00), 0x10, 0x0, 0x1, 0x0, 0x0, 0x4081991}, 0x4044040) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, &(0x7f00000008c0)=ANY=[]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4m23.692834978s ago: executing program 43 (id=5885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000004c0)) 3m52.734478761s ago: executing program 5 (id=5890): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000740)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x5}}]}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x400400c0}}], 0x2, 0x0) 3m52.674385126s ago: executing program 5 (id=5891): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000080)={r0}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='batadv_slave_0\x00', 0x3, 0x4, 0x9}) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000340)={&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/145, 0x91}) syz_usb_connect$uac1(0x4, 0xd4, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x1, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x9b, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x6, 0x6, "a910", "b7be"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x9, "c67ece"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0x8, 0xa, "591d945bb0"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x8, 0x6, 0x1, "84e199"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0xfe, 0x3, "e2d272a05236848a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x9, 0xe7, {0x7, 0x25, 0x1, 0xc, 0x0, 0xbb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd6, 0xd2, ' ', "abb8b6"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x7f, 0xd5, "a558bc703177"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x5, {0x7, 0x25, 0x1, 0x8, 0xb, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x3c, 0x4, 0xb, 0x8}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000600)={0x0, 0x7f, 0x704e, 0x0, 0x1, 0xa, 0x0, &(0x7f0000000540)=[{0x15, 0x1ff, 0x9}, {0x12, 0x80, 0x8}, {0x0, 0x101, 0x5}, {0x15, 0x1ff, 0x1}, {0x15, 0x1ff, 0x5}, {0x16, 0x101, 0x1}, {0x2, 0x101, 0x5}, {0x1, 0x1ff, 0xff}, {0x1c, 0x101, 0xe}, {0x6, 0x0, 0x2}]}) r2 = dup2(r0, r1) r3 = landlock_create_ruleset(&(0x7f0000000640)={0x40, 0x0, 0x1, 0x10440, 0x4}, 0x30, 0x0) landlock_restrict_self(r3, 0x2) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000006c0)={0x27, 0x40, [0x0, 0x24, 0x79, 0xfffffffffffffffc], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000700)={0x8000}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000840)={r0, &(0x7f0000000740)='%', 0x0, &(0x7f0000000780)={@_ha_fsid={[0x9, 0x1]}, {0x6, 0xacd, 0x6, 0x5}}, 0x8000, &(0x7f00000007c0), &(0x7f0000000800)=0x2}) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000880)={0x3}) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) landlock_create_ruleset(&(0x7f0000000940)={0x2000, 0x3, 0x2, 0x85, 0x4, 0x1}, 0x30, 0x3) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) fcntl$notify(r5, 0x402, 0x48) write$P9_RREMOVE(r2, &(0x7f00000009c0)={0x7, 0x7b, 0x1}, 0x7) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000a00), 0xc102, 0x0) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, 0x3fa, 0x8, 0x70bd29, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40) openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x4000, 0x0) syz_usb_connect$uac2(0x4, 0x10a, &(0x7f0000000b80)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8f0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x3, 0x1, 0x93, 0x40, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x20, 0xd8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x8, 0x1e, 0x5}, [@selector_unit={0x5}, @input_terminal={0x10, 0x24, 0x2, 0x6, 0x400, 0x1, 0x5, 0x3f, 0x3ff, 0x4, 0x8, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x6, 0x0, "ddb2c137181d56"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x80, 0x7, 0x81}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x32, 0xe, 0x60, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xec, 0x7, {0x8, 0x25, 0x1, 0x1, 0xf, 0x0, 0xfff9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x2, 0x6, 0x10, "e46b55288119770e"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x8, 0x81, 0xa}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x0, 0x2, "4cfeb4141f90"}, @as_header={0x10, 0x24, 0x1, 0x7, 0x5, 0x1, 0x1002, 0xcb, 0x6, 0xa}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0xe, "6b626af43f57a1"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x9, "bcd8", "d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0xf9, 0x2, {0x8, 0x25, 0x1, 0x1, 0xf, 0x2a}}}}}}}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x310, 0xfe, 0x1, 0x0, 0xff, 0x7}, 0x11f, &(0x7f0000000d00)={0x5, 0xf, 0x11f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "a3e7edbf7ab4b4957aa1c8eac536478d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x6, 0xcda}, @generic={0xfc, 0x10, 0x2, "9da5f7f872b036a088b95ab921db03c469bc52c0237475fc0a30a28836e45a14167057a536b30851de108055b3b14a2a97c0e0122de629a1632c43363b682befb58d2182033bdc2e5a1c92ea2aaf6ef38a61953c9933d97fd260889a0e8d995210b6e373560e1b5a301bebfd53f11e7fd7990bae0f8867a08dabae47cca3a129f91e519502c23b9b479faae34df5ec3dc5d9c39c50ab61785af6be9e65a71626c4fb4cfff6ce7b07f3d5e739e9fca53498d345e61ad3f4b25517f727d622d6388bc31ea22d7813880b540a3ba75acdcf261e0ee61287eee83c71497c359258b16d09b93a4cc66f7a18ed390fe0e83dc5484ac553cdaaa58f28"}]}, 0x3, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x455}}, {0x102, &(0x7f0000000e80)=@string={0x102, 0x3, "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"}}, {0xc4, &(0x7f0000000fc0)=@string={0xc4, 0x3, "1cd8a69f6aba95bbc57aa569b53c98106687f61b74aa5c72f100095cf77248ab6c3f91767951a15a853718a991cead2b1cffec879ea4c50cc67fa919e01a2089bf332fc892c47cd75241ccd6b776cbfe5ce757464e5e0b6945c02b718103a5f339aa23cd201af1af788fc6767aea4f55abe6f14a6fa3bebed57de7a8b5d32488b293c5103705f06b334f79a2d32d67978d5aabe9ebc96abceeb7130988cdd77229ab0647164b9638de6f32fecff74801ae010df4dfd76d7599bc4f5aa8a0f87b95ba"}}]}) syz_usb_connect(0x3, 0xa3f, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0x4c, 0xde, 0x4e, 0x8, 0x19d2, 0x1275, 0x164b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2d, 0x4, 0x8, 0x8, 0x100, 0x80, "", [{{0x9, 0x4, 0x3, 0x3, 0x5, 0xb, 0xbd, 0x12, 0x9, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "855d67"}, {0x5, 0x24, 0x0, 0x8971}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xf8f7, 0x6, 0x9}, {0x6, 0x24, 0x1a, 0xfffa, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x8}, @obex={0x5, 0x24, 0x15, 0x7fff}, @acm={0x4, 0x24, 0x2, 0x6}]}], [{{0x9, 0x5, 0x3, 0x1, 0x400, 0x2, 0xf, 0xc}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0xf7, 0x5, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x3, 0x8, 0xfc}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x89, 0x7}}, {{0x9, 0x5, 0x8, 0x2, 0x40, 0x1, 0x5, 0x0, [@generic={0x6e, 0x1, "4d81836dd92d83172518e95128358b0ee9a75366d5a8ddd3640bb7cc6c1121fe8cfd572fc48c291ba449d8a4083cf12407fc48456733d15006bd835ecb67fbfeca0c5b15d3f5edf8b42b161a94f34f4c87125988c19cd3603680d8398a48618022b5bb87471925c977c97b46"}]}}]}}, {{0x9, 0x4, 0x1, 0x80, 0x2, 0x4e, 0x9f, 0xd9, 0x5, [@hid_hid={0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x6a}}, @uac_control={{0xa, 0x24, 0x1, 0xa6, 0x3f}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x401, 0x5, 0xc0, 0x3ff, 0x3, 0xb}, @extension_unit={0x7, 0x24, 0x8, 0x5, 0x1ff, 0x10}, @processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0x8, "a3"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x60b, 0x3, 0x0, 0x7, 0x6, 0x9}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xff}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x402, 0x2, 0x1, 0x7}]}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0x5, 0x5, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x1ff}, @generic={0x19, 0xa, "59f62ada57e58491ef975d5721ca3135165950fecc3103"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2b, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1000}]}}]}}, {{0x9, 0x4, 0xcf, 0x40, 0x6, 0x2, 0x2, 0xff, 0x8, [], [{{0x9, 0x5, 0x2, 0xc, 0x10, 0x93, 0x6, 0x20, [@generic={0xb5, 0xf, "fd064e862f85b6881a51048b9b80113fece866d04a02a80a25856260c6f9297fcaf340c2ccbb37cffb56226733450837445d0a1adeab50ddf7a1666024e298f5f49e9b0eb269542829fbf10ef6522e1fa2089d3da01fb5ed1da146f4594ef3a0a8a538f73c4cc1f8a0bdd24b395b02a285adfb590ab6b1987bf157757c217c75db2c1151eac8240385ef2adb7289a4c37371b5be81829e6ca9868ecdd7ed03b080cc42b0c3899ed650694c31cc8342031cead5"}, @generic={0xbf, 0xd, "751fb97852bb7c2a585fd2c3ae1835df4f6e3decb246fb5130dd0ad188150aa61f04ba963842dc40bf43e6980241f45ea7d36d0ef18db33d4c17053643ab6cf9bdaea6b0566cd58b49388147123d0204bf5018b2c476695bba839b0855215616a47bc45844d7c09855ae1ac76ced42d3de1c7d41cc18b06e8e70f794545755ec4766bf4284f654070de136c71981505e153bed060ee9b3668e91d6985a2f979b01842bc41380814c45dfb5de01db4a7ecfed68dc73dbd490b14a635db3"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x3, 0x0, 0xa6}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x3, 0x80, 0x1f, [@generic={0x3c, 0x21, "26304bf5390367c098706e74703870ebd7114698a56cf4b156fc9d05fdb9713f059a43d3112d8747365acf55470e34ec346229f0aa3f493b647b"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x228, 0x1b, 0x80, 0x2, [@generic={0xf5, 0x7, "e665381055c04b54ee96978c5ecb5e33c6b30414373a9513475eb2ab34223681966bb1fce651974787c003873daa44c916e7a6671c975c6c81335909193f8fa9e297d621a9d1eaa5a7bc0887100913efab0904e91c1db17dadba98ae0d7558b81298e463d6ba26e53fb36a7922ea5c56500c8781b45f23dda5b772eab85bb3e892c8b5f9f0920d1e7230ec60cbe6b592674ded73aaf656bcd559828d30d82bfbe3c80eb589d0ae09e5a30456e314e521efe5e3f6335b02d3da3bcce4548a679bb30f2a9bf339f7e17ec4f3a637449bd1c64931a20a1085f5809d60588f96501c82832f5bc3b322b36be3c93938319f54f0c90f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xd, 0xb, 0x8, [@generic={0x70, 0x2, "d399911d1b77e68a296e70f1bd311c9c8009c1d99efadada4272943bffb10ff4ae465a1cc6c20ae3ff57d5aa075401d68aaef560a64eeb678e2a29b7b3216cc13d59e5264401f6baf2b850aaae881508ea2f490ef9847d261965b01b99dcc3408fb5f7f2d8c433c3e75c1265a987"}]}}]}}, {{0x9, 0x4, 0x42, 0x7d, 0x7, 0x2, 0x2, 0xff, 0x9, [@generic={0x95, 0x21, "b2cefc72bf4fe82b8874e9ef96bda43e3d018a3b4e5a7556be7ffa58eb715100cc614bdec43fc1a50620db5ee11a8dcbff05639f5bf98f51ed3964dea72f73e20ce2d60effc2dbf11ea35e1201d556b7c65741884afb580e3b3810476c1dd4b71ab9b9dbdbdbcc17a7f39ad3dd12d92a110933980baef66ba66ca1580dc941b1601d8b34be5be814bfb01a7c70b4eb6046fcac"}], [{{0x9, 0x5, 0x0, 0x2, 0x8, 0x7, 0x1, 0x9, [@generic={0x3, 0x28, "d3"}, @generic={0xfc, 0x23, "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"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x0, 0xa5, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xff}, @generic={0x54, 0x8, "154b0e22e927fec6d3ab31ffaefbc4d302454358273124b17f397aa0c9f212fc51e691c510e264c05fc55fec95c8ad52048df3809058cccdf6568851f3de3ef7dab8763095be79758546e4607b5489dc3e27"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7, 0x2, 0x7, [@generic={0x2a, 0xd, "f4e33af62150b72f6bacab9f7b0dea08977e8fd91be6efb1549f54bc29bfea293fc744c5eeb84b58"}, @generic={0x83, 0x0, "2b4b1467c19c6dba12275e95a5fa2ad32a41862344fdc6d02b0b5a2ddc3235becbd3e018693eb19012999dccfba3c78d60ff5ce651dfb389298345a38838d8efa5d68ed87984e61266d2ddcd546652a7194f6e2b1c86918b1c58a8c9fc24c0f876d22b1f4105955538000ba0abc571f34e2c58e744bae2502876b1944044d58e8e"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0xfb, 0xc8, 0x5, [@generic={0xb8, 0x22, "ffdbbfa285d66c51ad254fb04ad8cf4d804470a1eeee0cbb85d1947acf2dee716f41e0a38471ffa7ea2f83e679e6188919f1aa572cbce3bac4205d97f995196305d56bd71ef39f4a59dd17263090f15339196dad02f6fcf2ed1dc5bde5aef8d2d2df7c68f90dbf85ac28911dfa8777e2f6cb19a5fe0a693e3e430a79a6e2625f3b29efc451e3f861edd1044f9fa5f04952d5de2f0fb29b7822cfa68bb0f6b970735fe6857cd499b41e635c870eae2086b954c97e9258"}]}}, {{0x9, 0x5, 0x8, 0x12, 0x4860863c49d51ab8, 0x0, 0x9, 0x7, [@generic={0xe, 0x24, "8e919e5325ab358660070a9f"}, @generic={0x3c, 0x4, "f5c5ab81f8256e0d01eb2e51fbed2ea3367a8c52f09dd091f793c81526cec56ffd6b1880d181b0f9d49321828ab3f91520316c040b0f1b982000"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x8, 0x9, 0x1, [@generic={0x7f, 0x10, "e208b3b118bfde23fb87abe57b2f7840d0e4f8632236f0dbb4bbc68e917b96794f05d7521c61f6b75e1046a4c6c91775774168ff4c7835645b30d54d0f0adaa5fcae597a77f0c6ecea3f50f9909d0efe9d1938f263bde7be5fd7095cd9af8e54a9b1c7e90075bad11799350cb52cb37e9da9d3de0a21a2617c545d451f"}, @generic={0xff, 0xa, "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"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x11, 0x9, 0x4}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001b40)={0xa, 0x6, 0x300, 0x2, 0xa, 0x0, 0x8, 0x8}, 0x1b, &(0x7f0000001b80)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x5, 0x16, 0x4, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x2, 0x29, 0x6, 0x6, 0xff14, 0x80}]}, 0x4, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x3dd4b51312901d20}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x80a}}, {0xa, &(0x7f0000001c80)=@string={0xa, 0x3, "bffbcda4941469e7"}}]}) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000001d80)={0x10, &(0x7f0000001d40)="475e48d5aa7ee5bcb54a63a193337259"}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) 3m50.775425376s ago: executing program 5 (id=5892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3m50.698577844s ago: executing program 5 (id=5893): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0xd55, 0x1, 0x6, 0x0, [{0x7, 0x3, 0x0, '\x00', 0x7f}, {0x2, 0x27, 0x81, '\x00', 0x9}, {0x8, 0xff, 0xb9, '\x00', 0x7}, {0x8, 0x7, 0x1, '\x00', 0x8}, {0x5, 0x2e, 0x4}, {0xff, 0x7, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x1a, 0x1, '\x00', 0x2}, {0x0, 0x80, 0x6, '\x00', 0xc}, {0x6, 0xc0, 0x5, '\x00', 0x8}, {0x5, 0x44, 0x4, '\x00', 0x3}, {0x7, 0x8, 0x5, '\x00', 0x81}, {0x74, 0x1, 0x96}, {0x4, 0x1, 0x7, '\x00', 0xeb}, {0x46, 0xc2, 0x4, '\x00', 0x2c}, {0x7, 0x48, 0x0, '\x00', 0x5}, {0xf1, 0x6, 0xb, '\x00', 0x5}, {0xc, 0xff, 0x10, '\x00', 0x5}, {0x17, 0x2d, 0x6, '\x00', 0xa8}, {0xc0, 0x10, 0x3, '\x00', 0x3e}, {0x2, 0x64, 0x6, '\x00', 0xfd}, {0x0, 0x4, 0x3, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0xfc}, {0x10, 0x7, 0x7, '\x00', 0x63}]}}) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_ublk_setup_queues(r2, r4, &(0x7f0000000580)={0x0, 0xd3bd, 0x20000, 0x3, 0xf4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6872, 0x1, 0x6, 0x34b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60a8, 0x20, 0x800001, 0x1bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x4000, 0x4003bfff, 0x2b7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x4, 0x26c}}], 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x5f) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) 3m49.765911249s ago: executing program 5 (id=5894): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) 3m45.570033141s ago: executing program 5 (id=5895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) pipe(&(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsopen(&(0x7f00000000c0)='fuse\x00', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m45.214224286s ago: executing program 44 (id=5895): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0, 0x0) socket$netlink(0x10, 0x3, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) pipe(&(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) fsopen(&(0x7f00000000c0)='fuse\x00', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3m25.185218084s ago: executing program 3 (id=5879): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x2, 0x10000) close(r2) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {}, 0x7}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r0, 0x7fffffff) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x484c0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000083810101400000000000109022400010000c0bf0ade4150d71c4c9b1f04090400040103000300092106000e012228"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000628"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r7, 0x4fb06000) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r8, 0x107, 0xe, 0x0, &(0x7f0000000100)) r9 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r9, 0x40187542, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, 0x0) 3m21.200466396s ago: executing program 3 (id=5897): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = mq_open(&(0x7f0000000100)='devlink\x00', 0x2, 0x0, &(0x7f0000000180)={0x10001, 0x2, 0x6, 0x6}) clock_gettime(0x0, &(0x7f00000022c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) mq_timedsend(r2, &(0x7f00000012c0)="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", 0x1000, 0xffff, &(0x7f0000000240)={r3, r4+10000000}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4}}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x3fa, 0x20, 0x70bd29, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x400c000) timer_settime(r1, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000002, 0x31, 0xffffffffffffffff, 0x39df6000) 3m19.86250947s ago: executing program 3 (id=5898): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x5}, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 3m19.592959177s ago: executing program 3 (id=5899): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000800)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x0, 0xd55, 0x1, 0x6, 0x0, [{0x7, 0x3, 0x0, '\x00', 0x7f}, {0x2, 0x27, 0x81, '\x00', 0x9}, {0x8, 0xff, 0xb9, '\x00', 0x7}, {0x8, 0x7, 0x1, '\x00', 0x8}, {0x5, 0x2e, 0x4}, {0xff, 0x7, 0x0, '\x00', 0x7}, {0x0, 0x9, 0x10, '\x00', 0x6}, {0x9, 0x1a, 0x1, '\x00', 0x2}, {0x0, 0x80, 0x6, '\x00', 0xc}, {0x6, 0xc0, 0x5, '\x00', 0x8}, {0x5, 0x44, 0x4, '\x00', 0x3}, {0x7, 0x8, 0x5, '\x00', 0x81}, {0x74, 0x1, 0x96}, {0x4, 0x1, 0x7, '\x00', 0xeb}, {0x46, 0xc2, 0x4, '\x00', 0x2c}, {0x7, 0x48, 0x0, '\x00', 0x5}, {0xf1, 0x6, 0xb, '\x00', 0x5}, {0xc, 0xff, 0x10, '\x00', 0x5}, {0x17, 0x2d, 0x6, '\x00', 0xa8}, {0xc0, 0x10, 0x3, '\x00', 0x3e}, {0x2, 0x64, 0x6, '\x00', 0xfd}, {0x0, 0x4, 0x3, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0xfc}, {0x10, 0x7, 0x7, '\x00', 0x63}]}}) shutdown(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) syz_ublk_setup_queues(r2, r4, &(0x7f0000000580)={0x0, 0xd3bd, 0x20000, 0x3, 0xf4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6872, 0x1, 0x6, 0x34b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x60a8, 0x20, 0x800001, 0x1bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x4000, 0x4003bfff, 0x2b7, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x4, 0x26c}}], 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x5f) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) 3m18.460248233s ago: executing program 3 (id=5906): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002700)='mqueue\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m16.322042013s ago: executing program 3 (id=5919): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52200, 0x1c) 3m15.919016849s ago: executing program 45 (id=5919): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x52200, 0x1c) 2m33.797448121s ago: executing program 4 (id=5870): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f001"], 0x0) syz_usb_connect(0x1, 0x2bb, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x67, 0xb3, 0x2a, 0x8, 0x33f7, 0x4, 0x76e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a9, 0x3, 0x4, 0x5, 0x0, 0x6, "", [{{0x9, 0x4, 0xbc, 0x7b, 0x2, 0x3c, 0x55, 0xfb, 0x0, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x25c2, 0x7, 0x0, "bf067c5d5ead"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x2, 0x2, "091e"}]}, @hid_hid={0x9, 0x21, 0x800, 0xcb, 0x1, {0x22, 0x19f}}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x1e, 0xfc, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x1}, @generic={0x7d, 0x33, "232adc1f19d04a81608fee227f818cdc006da62010f0486e87ef286aef9f5a1f198545062b437304f901e6c92ea2ffcbc1a588c70b0005400bc7966dd96fa3918f67752f83bab6616072e36a92af19719eb969ecc91ef1516b019124d7b24c528e7f10da1a1b3ff40eb2165db0c3daf9b366d7e5ed4a702bbce6fb"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x7, 0x7, 0x8, [@generic={0x36, 0xb, "25240c1dc35f47801fe87d7450b09091922bf7415498ca53bd98d0498effedd5caaffbefc86dfd62d082e67ad62fb50fd793d27d"}]}}]}}, {{0x9, 0x4, 0x66, 0xb, 0x3, 0xa1, 0xcc, 0x6e, 0x40, [@generic={0x6c, 0x22, "77e5924ade44a935a2e239901b43cd6cc3872a0ee50a20541c133df2e0b8fa2181513f8ed710bbfc1fa13960b89a7f426d213a58357af008b979a1babf857935cdb4b9cf89224b369deab0ad8ff8b085cc2cc35e0c6a8535f63cbe15b671fe473aa9836d2b1ba1301d3a"}], [{{0x9, 0x5, 0x1, 0x0, 0x48, 0x6, 0x4, 0x9}}, {{0x9, 0x5, 0x81, 0x0, 0x40, 0x1, 0x2, 0x3}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x6c, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xe, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x76}]}}]}}, {{0x9, 0x4, 0xa9, 0x81, 0x1, 0xe, 0x1, 0x0, 0x21, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x39}, [@extension_unit={0x8, 0x24, 0x8, 0x5, 0x3, 0xfa, '\a'}, @feature_unit={0x11, 0x24, 0x6, 0x4, 0x4, 0x5, [0x3, 0x8, 0x2, 0x5, 0x7], 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x1, 0x7, 0x8, 0x9, 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x101, 0x8, "0c968c"}]}, @hid_hid={0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x498}}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x40, 0x3, 0x8, [@generic={0x19, 0x0, "4823c407026f86ff5e2a8c25945eb5068230fb035613c2"}, @generic={0x9e, 0x10, "147a842fdef6c5ffbc8da43a5a5cbc74b600237fd1dbbb4bcb8db0b8a1c3a8c0e8958801cb67a6e60ffc16dcc8df20d0b0ffd7e53fdbb27f10f4e9b902c82a35f4170443c2803ff7bd4fd3c363ce0c53882fab1190041ee945a616d4ac0b92471fbe0ea4dfbac07a963bdbf4c4e8553302cf6fa099cb1589b82864e9ff7fceb858fde37acd4190398721243c6ec2709feb350af26514f86db06a093f"}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x2, 0x4, 0xff, 0xff, 0xff}, 0x8, &(0x7f00000009c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40c}}, {0x92, &(0x7f0000000b80)=@string={0x92, 0x3, "bd235bc63852840a4d179033be7c064d9ab7da73b70563bb52df461008a4da518086d1a5743c4eb1e4505e912da5bfc355d6b3d6ed1fb63bb32c841369ccfa0bf7e93f78a5f60276279917798607b995239a3b7885b911ac3a08cdb2ed2b3fbbb9b96f303d3ddce2d6cf4e4deab400f6c6ff9da2fc749515adb9df323d798a0c24350904fbd37daeab3609773d17ad9b"}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x8, 0xd85}}, 0x2a, @void}}]}, 0x3c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000f40)={0x14, &(0x7f0000000ec0)={0x0, 0x8, 0xd, {0xd, 0x24, "27cb5cf5d21b9d5c1965c0"}}, &(0x7f0000000f00)={0x0, 0x3, 0x32, @string={0x32, 0x3, "2450cb6209ba84446a9d935ac70d8dac67f7ae6729044c13a9a5353085012ec6fcb7c2201a4adb103a738062f487c97d"}}}, &(0x7f0000001180)={0x44, &(0x7f0000000f80)={0x40, 0x6, 0x2e, "ddbd7ed637e17862a212d81b764fa63197ed69d3fe5e6e04c710f12e3c3be4a307550520d90f251b0d7fb0f940bd"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001040)={0x20, 0x81, 0x3, "43e203"}, &(0x7f0000001080)={0x20, 0x82, 0x1, '-'}, &(0x7f00000010c0)={0x20, 0x83, 0x1, 'O'}, &(0x7f0000001100)={0x20, 0x84, 0x2, 'Ma'}, &(0x7f0000001140)={0x20, 0x85, 0x3, "f637b4"}}) 2m31.364128348s ago: executing program 0 (id=5920): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) ppoll(&(0x7f0000000000)=[{r0, 0x82}], 0x1, 0x0, 0x0, 0x0) 2m31.166584275s ago: executing program 0 (id=5998): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_channels={0x2c, 0x0, 0x2e, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1}}) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 2m29.537137865s ago: executing program 4 (id=6000): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f0000000040)="1c", 0x1) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m29.458234915s ago: executing program 0 (id=6001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 2m29.059949935s ago: executing program 4 (id=6003): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 2m28.755754164s ago: executing program 0 (id=6005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0xe90}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 2m23.724747835s ago: executing program 6 (id=6025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c1c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x8, 0x3d, 0x0, 0x0}], 0x1}) 2m20.270569462s ago: executing program 6 (id=6032): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0xef, 0xa, 0x10, "3400000800000000000000000200851e3e00", 0x20493859}) 2m20.270226077s ago: executing program 6 (id=6033): socket(0x2b, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x0, 0xadf, 0x10, 0x0, 0x0, 0xc000, '\x00', 0x6, 0x181, 0x1, 0xffffffffffffffff, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x6, 0xfff, 0x5}}}}) 2m17.514487475s ago: executing program 6 (id=6035): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="751e2b0000006e8f09d97e5bbd402d11fea33f21e22d09904207012b20aaaf681519b30de553532752b759ef273f4755c72e4b761a5d3d", 0x37}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af", 0x4}], 0x3}, 0x40010) 2m17.142628398s ago: executing program 6 (id=6036): openat$ptmx(0xffffffffffffff9c, &(0x7f00000020c0), 0x472380, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000003c0)={0xd, 0x7f, 0x401}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) socket$inet(0x2, 0x3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r5, r5}, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r3, r3) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = fsopen(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x1}, 0x0, 0x0, 0x1, {0x3, 0x1e}, 0x14, 0x3fffffd}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000400)='{\x00', &(0x7f0000000440)='\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m15.129521834s ago: executing program 6 (id=6038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x10) 2m12.915178693s ago: executing program 46 (id=6003): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, &(0x7f00000000c0)=0x7, 0x12) 2m11.514668488s ago: executing program 47 (id=6005): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r1 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0xe90}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 1m58.533448115s ago: executing program 48 (id=6038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}}, 0x10) 57.447110203s ago: executing program 7 (id=6112): syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000002680)=[{0x1, 0x0, 0x0, 0x0}, {0x1b, 0x200, 0x0, 0x0}], 0x2}) 54.130365457s ago: executing program 7 (id=6113): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 53.914466842s ago: executing program 7 (id=6114): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="230100004106cd40cd060f011bd500000001090224"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000040)) 50.643121647s ago: executing program 7 (id=6115): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 50.567772473s ago: executing program 7 (id=6116): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xfffffffc, 0xfffffffe}}, 0x2e) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) 48.24204411s ago: executing program 7 (id=6117): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"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"}) 47.881701419s ago: executing program 49 (id=6117): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"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"}) 6.160352947s ago: executing program 8 (id=6142): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x0, 0x187}, 0x0, &(0x7f0000000900), 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000840)=""/40, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.970212378s ago: executing program 2 (id=6143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x60400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r2, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000f, 0x31, r2, 0x4d8ea000) setsockopt$inet_int(r1, 0x0, 0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r4, 0x5016, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x101, [0x3, 0xfffffffffffffff7, 0x2, 0x6, 0x2, 0x91d]}) 5.867397124s ago: executing program 9 (id=6047): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0xb1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000440)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @pic={0x96, 0x8, 0xe5, 0xb9, 0xd9, 0xa, 0x4, 0x7, 0x81, 0x39, 0x0, 0x7, 0x0, 0x4, 0xff, 0x2}}) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x6, 0xfc, 0x1, 0x9, 0x1, 0x4, 0x9, 0x9, 0x1, 0x3, 0x9, 0x1, 0x9b, 0x9, 0x5, 0x7}}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x50, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[r5, r4], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000000)={0xc}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) 4.551403767s ago: executing program 9 (id=6150): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f00000007c0)='\x86/=9\xfdAQBv=K9e\xc7;M\x13\x9a-\r\xffS)@\xd1\xde[8?\xc7\xc8\x12\xd0;\xeaA\xee0l\xf9`c\xb9E\xcfv\x9a\x9e\x88\xa9F\xaf\xab\x98\xdcK\x1e\xb1\xdb\xd0\xf2):\xf1\xbdW\xad<\x17\xb7\xf1f]\xd4l?\xa5\xc2 nU\xab\xdc\xd0\xd6\xf6\xb9\x00\x00\x00\x00\x982\x17I\x04*n\xe6xM\xe36\xc4\b\x97\xb2$\xa9\x9a\x19\x05\xf6\x84Mz\xa6\x12n\xb3\xd1%\xa1%D\r^tT\x93\x8b\xc7*\xbe\x1b\x1b\x91\x82\x00\x00\x00\x00\x00\x00\xebo\xf5h\xef\xa1\xdd\xf3\x995\xa2Jl\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcdY\x96\xae\xc3Y\xea2\x92s\xe3Bb\x94\x15V\xb8F\x19=\xaf+\xa9<\xfeA\x91t\xd8\xa2\x8f4\xc7\xb9\x9d\xd6\xc6\x05\x00\x99\xb2\x8e;\x02\xed\xfcuW\xe1\x06\xf3 \x8d\xecy\t\x7f@\x1c!\xb1\x01\x00@Q:G<\xd3\xd7\xa8\xf4\x03m\xb6\xac\xe2\xa6c\x05\xfa\xdb`\x91L$\x8b2\x16\xf0\x8a=\x83\x85\xa0\xed\xcaX\xb4\xb0\xe8\xbf\x95n\xf8\xed>\x82Y\xab\x9b-|\xc7\x00\x00\x00\x00\x00\x00\x00\x00P\xf3\xaa\xa72\xf6\xf0\xe7M)\t\xc8\x82g\xaaR\x0e\x94\xb8b\x19 \f\xf81\xd5\x84\xd4\x17\x1c\x9e\x1a\x99\xf3M\xc0\xc6 \xad&\x03\xa1\xed\xa9\xd7\xe9o;\x1b\xaf\b\xdeU\xed\x04!\x813\xdeR\x92u\xcfi\x907$\xb6P\xf9\x90\xebK0\xce\xb2\xda:\xe3u=\xe8gw\xc6\xf9Y$\x90/3#\xe2\x99\x9d\f\xb0\x1b\x9c\xb8\x89H YE\xb5\xb7\xb4[3J\xf1g#\xab\xfe\'Q\xf6\x83\xa6\xab\xf9\xfb\xd8\x04us\xc7\xf8_\x8f\xd9,\x00\x8d\xcce>^\x98\x8f\xb4\xe6I\x1f\xc1\xfd-\xa6\x93j>\x1f\x0f\x01\x19\xcb\xdc?\xa3r\xa0\xcdv\x12\xb8\x8bB<\x9c\x86\xbe\xdcFN\x19\xa5\f!w\x18x\xad\xdfRQ\x1d\xc1\'\xd4\x16{\xd2\xadDR\xa6Y\xc8\xfe8\xdf\x88\x9c\x8f\x90\xff6{\xc2E;isd\xc9\xfb\xe6\v\xd7\xd6\xff\x115\xbb\x9c\x14\x83V\xe4\x9fd\xd7\x1b\x1a\n\xd8\xc1\xe5\x86\xc6\xfc\xba\xb3\xac\xfb\xb6\xcd\x1a\xbd\xcf\xbaA\xf1\xfe\x82\x88v\xd0\xb1#\x1d\xfed\xb3\xac\xd9\x85\xf6a\xffU&\x15\xb7\xc5\xc4\xe6\xc0\x85\xca,F\xa2\xb3\xa4\xfc\x85\xf0\xca\x8f\xb5\x00', 0x0) 4.395602959s ago: executing program 2 (id=6152): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040040}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={0x0, 0x44}, 0x5}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.374180942s ago: executing program 9 (id=6153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000040) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0xfffffffffffffffc, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) 4.130140762s ago: executing program 8 (id=6154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="ad56b6c58201ae9d6dcd3292ea54c7bee7915d564c332a65f84177e9827ab987ac", 0x21) 3.782211484s ago: executing program 9 (id=6155): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000480)=[{0xa279, 0x5a11, 0x5, &(0x7f0000000240)="8684fa1614"}], 0x1}) 3.771968257s ago: executing program 8 (id=6156): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000f, 0x31, r0, 0x4d8ea000) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000192000/0x1000)=nil, &(0x7f000040b000/0x3000)=nil, 0x1000}) 2.842512321s ago: executing program 1 (id=6157): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000002ec0)={0x2020}, 0x2020) 2.578273602s ago: executing program 2 (id=6158): fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x2, 0x102, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.443492354s ago: executing program 1 (id=6159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x1, 0x5}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.342499576s ago: executing program 8 (id=6160): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="140000000000000000000000020000008100000000000000680000000000000000000000070000004424d6a10000000000000001ac1414bb000003ff7f00000100000008e00000020000000344341151ac1414bbfffffffa0a01010000000001640101020000008cd63ef1dbf586ed3f998c000a01010280000001e000000200000000ac"], 0xc8}}], 0x1, 0x20000011) 1.264753614s ago: executing program 8 (id=6161): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r1 = socket(0xa, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002300)={'sit0\x00', &(0x7f00000021c0)={'syztnl2\x00', 0x0, 0x80, 0x7, 0xffffffff, 0x2, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0xe}]}}}}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0xa, 0xfc, 0x4}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0x5, 0x5, 0x8, 0x3}, 0x6, 0x17d, 0x0, 0x80000000, 0x0, 0x2}}) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x5, 0x3, 0x8, 0x8, 0x9, 0x9, 0x6}, 0x9c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf251000000008000300e48132f8ef1554c79353f451ab8338e86e03f281658978e73641dde9594f45f53ec7c99e00034de2e5c1b071abf0c848e8cb5df32a60ffe970a5c061b4bd074ba6dadeae4da6", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4044050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x9, 0x2, 0x3}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0xc8002, 0x40) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0xa, &(0x7f00000002c0)=[{0x4, 0x1, 0xb, 0x100}, {0xfffc, 0xd2, 0x4, 0x40}, {0x6, 0x8, 0x8, 0x3}, {0x2, 0x4, 0x7, 0x4}, {0x1ff, 0xd, 0xcf, 0x2}, {0x8, 0x1, 0xd, 0xc8ae9880}, {0xb94, 0x1, 0x7, 0x7}, {0x7bdb, 0xe, 0x9, 0x124}, {0x4, 0x76, 0x4, 0x9}, {0x5, 0x4, 0x9c, 0x3}]}) 1.221475515s ago: executing program 2 (id=6162): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 834.507484ms ago: executing program 1 (id=6163): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xd) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x2) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x3225, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 787.507662ms ago: executing program 2 (id=6164): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x6) 548.322433ms ago: executing program 2 (id=6165): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x6, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x9, 0x3, 0x7, 0x6, 0x8, 0x24a, 0x2, 0xfffffff7, 0xfffffffe, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x2, 0x6, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x8000, 0xe, 0x3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x10008, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x3, 0x0, 0x4, 0x9, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 498.806443ms ago: executing program 1 (id=6166): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 318.644198ms ago: executing program 1 (id=6167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtaction={0x44, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x44}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 216.510497ms ago: executing program 9 (id=6168): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31"], 0xcc}}, 0x24000840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 286.419µs ago: executing program 1 (id=6169): r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xa77a}, @in6={0xa, 0x4e23, 0x6bf2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}], 0x38) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'batadv0\x00', {'veth1_to_bridge\x00'}, 0x2}) sendmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x240008d0) 0s ago: executing program 8 (id=6170): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x300, 0x32314742, 0x140, 0xf0, 0x3, @discrete={0x4, 0x3}}) kernel console output (not intermixed with test programs): i0: unexpected cc 0x0c38 length: 249 > 2 [ 1527.793821][ T201] ath9k_htc: Failed to initialize the device [ 1528.379653][ T5833] usb 2-1: USB disconnect, device number 72 [ 1528.547823][ T5833] usb 2-1: ath9k_htc: USB layer deinitialized [ 1528.663528][T16799] binder: 16798:16799 ioctl c0306201 0 returned -14 [ 1529.219572][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.219887][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.220163][T16583] bridge_slave_0: entered allmulticast mode [ 1529.255768][T16583] bridge_slave_0: entered promiscuous mode [ 1529.266268][T16860] FAULT_INJECTION: forcing a failure. [ 1529.266268][T16860] name fail_page_alloc, interval 1, probability 100, space 0, times 0 [ 1529.266305][T16860] CPU: 1 UID: 0 PID: 16860 Comm: syz.1.5875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1529.266332][T16860] Tainted: [L]=SOFTLOCKUP [ 1529.266339][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1529.266351][T16860] Call Trace: [ 1529.266359][T16860] [ 1529.266366][T16860] dump_stack_lvl+0xe8/0x150 [ 1529.266398][T16860] should_fail_ex+0x467/0x600 [ 1529.266424][T16860] prepare_alloc_pages+0x223/0x650 [ 1529.266456][T16860] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 1529.266490][T16860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1529.266532][T16860] ? __pfx_policy_nodemask+0x10/0x10 [ 1529.266550][T16860] ? __lock_acquire+0x6df/0x2e40 [ 1529.266575][T16860] alloc_pages_mpol+0xd4/0x280 [ 1529.266597][T16860] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1529.266620][T16860] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1529.266643][T16860] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1529.266661][T16860] ? lock_acquire+0x115/0x350 [ 1529.266701][T16860] do_pte_missing+0x835/0x28f0 [ 1529.266739][T16860] ? handle_mm_fault+0xeb/0x28d0 [ 1529.266767][T16860] handle_mm_fault+0xf95/0x28d0 [ 1529.266797][T16860] ? mt_find+0x186/0x630 [ 1529.266823][T16860] ? handle_mm_fault+0xeb/0x28d0 [ 1529.266860][T16860] ? __pfx_handle_mm_fault+0x10/0x10 [ 1529.266898][T16860] ? __lock_acquire+0x6df/0x2e40 [ 1529.266920][T16860] ? lock_mm_and_find_vma+0xa7/0x340 [ 1529.266947][T16860] do_user_addr_fault+0x744/0x1340 [ 1529.266977][T16860] exc_page_fault+0x6a/0xc0 [ 1529.266991][T16860] asm_exc_page_fault+0x26/0x30 [ 1529.267007][T16860] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 1529.267027][T16860] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 bf 33 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1529.267039][T16860] RSP: 0018:ffffc90004d1f898 EFLAGS: 00050206 [ 1529.267052][T16860] RAX: ffffffff84cae401 RBX: ffff88805bd8c000 RCX: 0000000000000537 [ 1529.267064][T16860] RDX: 0000000000000000 RSI: ffff88805bd8cac0 RDI: 0000200000001000 [ 1529.267078][T16860] RBP: ffffc90004d1fa18 R08: ffff88805bd8cff6 R09: 1ffff1100b7b19fe [ 1529.267090][T16860] R10: dffffc0000000000 R11: ffffed100b7b19ff R12: dffffc0000000000 [ 1529.267101][T16860] R13: 0000000000000000 R14: ffffc90004d1fb80 R15: 0000000000000ff7 [ 1529.267120][T16860] ? _copy_to_iter+0x3c1/0x1810 [ 1529.267151][T16860] _copy_to_iter+0x49d/0x1810 [ 1529.267187][T16860] ? rt_mutex_slowunlock+0x219/0x460 [ 1529.267213][T16860] ? __pfx__copy_to_iter+0x10/0x10 [ 1529.267238][T16860] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1529.267270][T16860] ? seq_read_iter+0xa48/0xcb0 [ 1529.267303][T16860] seq_read_iter+0xaaf/0xcb0 [ 1529.267346][T16860] seq_read+0x36a/0x490 [ 1529.267382][T16860] ? __pfx_seq_read+0x10/0x10 [ 1529.267409][T16860] ? __debugfs_file_get+0x5d5/0x710 [ 1529.267440][T16860] ? __pfx___debugfs_file_get+0x10/0x10 [ 1529.267478][T16860] full_proxy_read+0x127/0x1f0 [ 1529.267515][T16860] ? __pfx_full_proxy_read+0x10/0x10 [ 1529.267543][T16860] vfs_read+0x219/0xa90 [ 1529.267569][T16860] ? __pfx_vfs_read+0x10/0x10 [ 1529.267589][T16860] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1529.267608][T16860] ? lockdep_hardirqs_on+0x7a/0x110 [ 1529.267623][T16860] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1529.267637][T16860] ? mutex_lock_nested+0x152/0x1d0 [ 1529.267654][T16860] ? fdget_pos+0x252/0x320 [ 1529.267676][T16860] ksys_read+0x156/0x270 [ 1529.267694][T16860] ? __pfx_ksys_read+0x10/0x10 [ 1529.267717][T16860] do_syscall_64+0x17b/0x530 [ 1529.267732][T16860] ? irqentry_exit+0x10f/0x8f0 [ 1529.267745][T16860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.267760][T16860] ? clear_bhb_loop+0x40/0x90 [ 1529.267778][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.267791][T16860] RIP: 0033:0x7fa8546bde99 [ 1529.267805][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.267817][T16860] RSP: 002b:00007fa852916028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1529.267833][T16860] RAX: ffffffffffffffda RBX: 00007fa854945fa0 RCX: 00007fa8546bde99 [ 1529.267843][T16860] RDX: 0000000000001000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1529.267852][T16860] RBP: 00007fa852916090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.267861][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.267869][T16860] R13: 00007fa854946038 R14: 00007fa854945fa0 R15: 00007ffff94a9678 [ 1529.267893][T16860] [ 1529.417924][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.418260][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.418575][T16583] bridge_slave_1: entered allmulticast mode [ 1529.504880][ T5604] Bluetooth: hci3: command tx timeout [ 1529.600171][T16583] bridge_slave_1: entered promiscuous mode [ 1529.836128][T12123] do_umount: task=syz-executor[12123] propagate_mount_busy()!=0 [ 1529.836234][T12123] do_umount: task=syz-executor[12123] propagate_mount_busy()!=0 [ 1529.837747][T12123] overlayfs: failed lookup in lower (newroot/103, name='bus', err=-40): overlapping layers [ 1529.838000][T12123] overlayfs: failed lookup in lower (newroot/103, name='bus', err=-40): overlapping layers [ 1530.245707][ T5833] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1530.368736][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.505625][ T5833] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1530.505655][ T5833] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.505675][ T5833] usb 2-1: config 220 has no interface number 2 [ 1530.505745][ T5833] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1530.505772][ T5833] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1530.505790][ T5833] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1530.505809][ T5833] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1530.514277][ T5833] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1530.514306][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.514324][ T5833] usb 2-1: Product: syz [ 1530.514337][ T5833] usb 2-1: Manufacturer: syz [ 1530.514352][ T5833] usb 2-1: SerialNumber: syz [ 1530.765579][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.782624][ T5604] Bluetooth: hci0: command tx timeout [ 1530.906676][ T5833] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1530.906709][ T5833] uvcvideo 2-1:220.0: No valid video chain found. [ 1530.906769][ T5833] usb 2-1: selecting invalid altsetting 0 [ 1531.119418][ T5833] usb 2-1: selecting invalid altsetting 0 [ 1531.119441][ T5833] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1531.132759][ T5833] usb 2-1: USB disconnect, device number 73 [ 1531.598023][ T6003] bridge_slave_1: left allmulticast mode [ 1531.598059][ T6003] bridge_slave_1: left promiscuous mode [ 1531.598346][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.725749][ T5604] Bluetooth: hci3: command tx timeout [ 1531.795917][ T6003] bridge_slave_0: left allmulticast mode [ 1531.795948][ T6003] bridge_slave_0: left promiscuous mode [ 1531.796213][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.853605][T12137] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1531.859180][T16958] loop7: detected capacity change from 0 to 16384 [ 1531.943041][T12137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1531.990097][T12137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1531.991726][T12137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1531.993408][T12137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1532.209347][T16960] loop7: detected capacity change from 16384 to 0 [ 1532.213651][ C0] blk_print_req_error: 80 callbacks suppressed [ 1532.213671][ C0] I/O error, dev loop7, sector 16120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1532.256185][ C1] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 2 [ 1533.059194][T12137] Bluetooth: hci0: command tx timeout [ 1533.308419][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.372187][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.417477][ T6003] bond0 (unregistering): Released all slaves [ 1533.433606][T14903] do_umount: task=syz-executor[14903] propagate_mount_busy()!=0 [ 1533.433733][T14903] do_umount: task=syz-executor[14903] propagate_mount_busy()!=0 [ 1533.434299][T14903] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 1533.434423][T14903] overlayfs: failed lookup in lower (newroot/26, name='bus', err=-40): overlapping layers [ 1533.501618][T16583] team0: Port device team_slave_0 added [ 1533.668850][T16583] team0: Port device team_slave_1 added [ 1533.942018][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1533.942036][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.942062][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1533.945666][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1533.945682][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1533.945710][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1534.568648][T12137] Bluetooth: hci2: command tx timeout [ 1535.114845][T16583] hsr_slave_0: entered promiscuous mode [ 1535.116220][T16583] hsr_slave_1: entered promiscuous mode [ 1535.117282][T16583] debugfs: 'hsr0' already exists in 'hsr' [ 1535.117307][T16583] Cannot create hsr debugfs directory [ 1535.314605][T12137] Bluetooth: hci0: command tx timeout [ 1536.135717][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1536.232993][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1536.289061][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1536.303017][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1536.303920][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1536.695358][ T6003] hsr_slave_0: left promiscuous mode [ 1536.716757][ T6003] hsr_slave_1: left promiscuous mode [ 1536.718323][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1536.718342][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.760872][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1536.760891][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.770795][ T5604] Bluetooth: hci2: command tx timeout [ 1536.825222][ T6003] veth1_macvtap: left promiscuous mode [ 1536.825299][ T6003] veth0_macvtap: left promiscuous mode [ 1536.825476][ T6003] veth1_vlan: left promiscuous mode [ 1536.825597][ T6003] veth0_vlan: left promiscuous mode [ 1537.455496][ T5604] Bluetooth: hci0: command tx timeout [ 1537.647276][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 1537.711092][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 1538.662688][ T5604] Bluetooth: hci1: command tx timeout [ 1539.010190][ T5604] Bluetooth: hci2: command tx timeout [ 1539.633375][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1539.943854][T16725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.945393][T16725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.945704][T16725] bridge_slave_0: entered allmulticast mode [ 1539.955648][T16725] bridge_slave_0: entered promiscuous mode [ 1540.517916][T16725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.518111][T16725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.518301][T16725] bridge_slave_1: entered allmulticast mode [ 1540.520141][T16725] bridge_slave_1: entered promiscuous mode [ 1540.720332][T16725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.814529][T16725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.874220][ T5604] Bluetooth: hci1: command tx timeout [ 1541.216460][ T5604] Bluetooth: hci2: command tx timeout [ 1541.234477][T16725] team0: Port device team_slave_0 added [ 1541.279493][T16725] team0: Port device team_slave_1 added [ 1541.548124][T16953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.548370][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.548571][T16953] bridge_slave_0: entered allmulticast mode [ 1541.550473][T16953] bridge_slave_0: entered promiscuous mode [ 1541.591627][T16953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.591859][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.592061][T16953] bridge_slave_1: entered allmulticast mode [ 1541.593931][T16953] bridge_slave_1: entered promiscuous mode [ 1541.681994][T16725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.682005][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.682020][T16725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.013831][ T6003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.122205][T16725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.122216][T16725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.122232][T16725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.227332][T16953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.285872][T16953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.633121][ T6003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.826797][T16953] team0: Port device team_slave_0 added [ 1542.881355][T16953] team0: Port device team_slave_1 added [ 1542.899343][T16725] hsr_slave_0: entered promiscuous mode [ 1542.901102][T16725] hsr_slave_1: entered promiscuous mode [ 1542.902514][T16725] debugfs: 'hsr0' already exists in 'hsr' [ 1542.902536][T16725] Cannot create hsr debugfs directory [ 1543.097524][ T5604] Bluetooth: hci1: command tx timeout [ 1543.255946][ T6003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.527426][T16953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.527444][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.527473][T16953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.607312][T16953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.607328][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.607349][T16953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.163532][ T6003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.278737][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1544.460471][T16953] hsr_slave_0: entered promiscuous mode [ 1544.461791][T16953] hsr_slave_1: entered promiscuous mode [ 1544.462780][T16953] debugfs: 'hsr0' already exists in 'hsr' [ 1544.462804][T16953] Cannot create hsr debugfs directory [ 1544.748719][T16583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1544.788680][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.881244][T16583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1544.917832][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.951155][T17106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.951324][T17106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.951483][T17106] bridge_slave_0: entered allmulticast mode [ 1544.953554][T17106] bridge_slave_0: entered promiscuous mode [ 1544.966628][T16583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1545.002801][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1545.037786][T17106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.038047][T17106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.038221][T17106] bridge_slave_1: entered allmulticast mode [ 1545.041610][T17106] bridge_slave_1: entered promiscuous mode [ 1545.155932][T16583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1545.195711][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1545.325048][ T5604] Bluetooth: hci1: command tx timeout [ 1545.527356][T17106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1545.612701][T17106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.317364][T17106] team0: Port device team_slave_0 added [ 1546.386911][T17106] team0: Port device team_slave_1 added [ 1546.566129][T17106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.566140][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.566155][T17106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1546.570434][T17106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1546.570449][T17106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1546.570475][T17106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1546.905598][ T6003] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.644716][ T6003] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.712408][T17106] hsr_slave_0: entered promiscuous mode [ 1547.720534][T17106] hsr_slave_1: entered promiscuous mode [ 1547.721609][T17106] debugfs: 'hsr0' already exists in 'hsr' [ 1547.721634][T17106] Cannot create hsr debugfs directory [ 1548.338536][ T6003] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.025050][ T6003] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.396211][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.631448][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.680077][T27684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.680275][T27684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.772261][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.772447][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1550.900647][ T5255] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1552.669972][ T6003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.759041][ T5255] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1553.801288][ T6003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.886555][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.674085][ T6003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.182428][ T6003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.268700][T16583] veth0_vlan: entered promiscuous mode [ 1556.644907][T16583] veth1_vlan: entered promiscuous mode [ 1557.732314][T16583] veth0_macvtap: entered promiscuous mode [ 1557.745958][T16583] veth1_macvtap: entered promiscuous mode [ 1557.888299][ T6003] bridge_slave_1: left allmulticast mode [ 1557.888334][ T6003] bridge_slave_1: left promiscuous mode [ 1557.888542][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.062435][ T6003] bridge_slave_0: left allmulticast mode [ 1558.062458][ T6003] bridge_slave_0: left promiscuous mode [ 1558.062640][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.401504][ T6003] bridge_slave_1: left allmulticast mode [ 1558.401534][ T6003] bridge_slave_1: left promiscuous mode [ 1558.401736][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.508782][ T6003] bridge_slave_0: left allmulticast mode [ 1558.508807][ T6003] bridge_slave_0: left promiscuous mode [ 1558.508996][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.727533][ T6003] bridge_slave_1: left allmulticast mode [ 1558.727558][ T6003] bridge_slave_1: left promiscuous mode [ 1558.727755][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.831248][ T6003] bridge_slave_0: left allmulticast mode [ 1558.831272][ T6003] bridge_slave_0: left promiscuous mode [ 1558.831455][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.005871][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.090205][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.113428][ T6003] bond0 (unregistering): Released all slaves [ 1560.796600][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.885344][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.950469][ T6003] bond0 (unregistering): Released all slaves [ 1561.736351][ T6003] ªªªªªª (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.802188][ T6003] ªªªªªª (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.844507][ T6003] ªªªªªª (unregistering): Released all slaves [ 1561.920014][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1562.615492][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1562.641511][T29052] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.642991][T29052] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.726867][T29052] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.758914][T29052] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.393581][T29049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.393602][T29049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.526858][T23406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.526880][T23406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.387399][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1566.642599][T16725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1566.742676][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1566.888902][T16725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1566.932984][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1566.945609][T16725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1566.988591][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1567.111059][ T5745] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1567.126323][T16725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1567.172717][T16725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1567.273118][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 1567.275101][ T5745] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1567.275136][ T5745] usb 6-1: config 8 has an invalid interface number: 207 but max is 3 [ 1567.275155][ T5745] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1567.275173][ T5745] usb 6-1: config 8 has an invalid interface number: 66 but max is 3 [ 1567.275192][ T5745] usb 6-1: config 8 has an invalid interface number: 245 but max is 3 [ 1567.275206][ T5745] usb 6-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 1567.275223][ T5745] usb 6-1: config 8 has no interface number 0 [ 1567.275236][ T5745] usb 6-1: config 8 has no interface number 2 [ 1567.275250][ T5745] usb 6-1: config 8 has no interface number 4 [ 1567.275323][ T5745] usb 6-1: config 8 interface 3 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1567.275340][ T5745] usb 6-1: config 8 interface 3 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1567.275359][ T5745] usb 6-1: config 8 interface 3 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1567.275384][ T5745] usb 6-1: config 8 interface 3 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 64 [ 1567.275412][ T5745] usb 6-1: config 8 interface 1 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 1567.275444][ T5745] usb 6-1: config 8 interface 207 altsetting 64 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1567.275470][ T5745] usb 6-1: config 8 interface 207 altsetting 64 endpoint 0x5 has invalid maxpacket 552, setting to 64 [ 1567.275492][ T5745] usb 6-1: config 8 interface 207 altsetting 64 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1567.275524][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has an invalid descriptor for endpoint zero, skipping [ 1567.275543][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has a duplicate endpoint with address 0xA, skipping [ 1567.275564][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has a duplicate endpoint with address 0x2, skipping [ 1567.275586][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 1567.275603][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 1567.275620][ T5745] usb 6-1: config 8 interface 66 altsetting 125 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1567.275643][ T5745] usb 6-1: too many endpoints for config 8 interface 245 altsetting 197: 171, using maximum allowed: 30 [ 1567.275679][ T5745] usb 6-1: config 8 interface 245 altsetting 197 has a duplicate endpoint with address 0x5, skipping [ 1567.275700][ T5745] usb 6-1: config 8 interface 245 altsetting 197 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1567.275726][ T5745] usb 6-1: config 8 interface 3 has no altsetting 0 [ 1567.275744][ T5745] usb 6-1: config 8 interface 1 has no altsetting 0 [ 1567.275761][ T5745] usb 6-1: config 8 interface 207 has no altsetting 0 [ 1567.275778][ T5745] usb 6-1: config 8 interface 66 has no altsetting 0 [ 1567.275795][ T5745] usb 6-1: config 8 interface 245 has no altsetting 0 [ 1567.278513][ T5745] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice=16.4b [ 1567.278539][ T5745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.278557][ T5745] usb 6-1: Product: à Š [ 1567.278570][ T5745] usb 6-1: Manufacturer: á´  [ 1567.278583][ T5745] usb 6-1: SerialNumber: ﮿ê“á’”î© [ 1567.700984][T18229] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1567.940040][ T5745] option 6-1:8.1: GSM modem (1-port) converter detected [ 1567.963209][ T5745] rndis_host 6-1:8.207: skipping garbage [ 1567.963259][ T5745] rndis_host 6-1:8.207: skipping garbage [ 1567.963275][ T5745] rndis_host 6-1:8.207: rndis: master #0/0000000000000000 slave #1/ffff888039d89000 [ 1567.972265][ T5745] option 6-1:8.207: GSM modem (1-port) converter detected [ 1568.017850][ T5745] rndis_host 6-1:8.66: skipping garbage [ 1568.017874][ T5745] rndis_host 6-1:8.66: rndis: master #0/0000000000000000 slave #1/ffff888039d89000 [ 1568.035260][ T5745] option 6-1:8.66: GSM modem (1-port) converter detected [ 1568.049470][ T5745] option 6-1:8.245: GSM modem (1-port) converter detected [ 1568.065837][ T5745] usb 6-1: USB disconnect, device number 61 [ 1568.084619][ T5745] option 6-1:8.1: device disconnected [ 1568.102319][ T5745] option 6-1:8.207: device disconnected [ 1568.111855][ T5745] option 6-1:8.66: device disconnected [ 1568.122969][ T5745] option 6-1:8.245: device disconnected [ 1568.435797][T16953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1568.490338][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1568.685203][T16953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1568.728261][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1568.767626][T16953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1568.771148][T18301] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1568.858143][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1568.985216][T16953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1569.028476][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1569.398453][ T6003] hsr_slave_0: left promiscuous mode [ 1569.441379][ T6003] hsr_slave_1: left promiscuous mode [ 1569.443774][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.443803][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.484481][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.484500][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.617087][T16583] do_umount: task=syz-executor[16583] propagate_mount_busy()!=0 [ 1569.617215][T16583] do_umount: task=syz-executor[16583] propagate_mount_busy()!=0 [ 1569.618285][T16583] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 1569.618420][T16583] overlayfs: failed lookup in lower (newroot/7, name='bus', err=-40): overlapping layers [ 1569.637159][ T6003] hsr_slave_0: left promiscuous mode [ 1569.675932][ T6003] hsr_slave_1: left promiscuous mode [ 1569.684970][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.684991][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.719638][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.719658][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.953851][ T6003] hsr_slave_0: left promiscuous mode [ 1570.051650][ T6003] hsr_slave_1: left promiscuous mode [ 1570.053385][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.053402][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.142364][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.142385][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.260905][ T6003] veth1_macvtap: left promiscuous mode [ 1570.260986][ T6003] veth0_macvtap: left promiscuous mode [ 1570.261200][ T6003] veth1_vlan: left promiscuous mode [ 1570.261322][ T6003] veth0_vlan: left promiscuous mode [ 1570.381650][ T6003] veth1_macvtap: left promiscuous mode [ 1570.381760][ T6003] veth0_macvtap: left promiscuous mode [ 1570.382073][ T6003] veth1_vlan: left promiscuous mode [ 1570.382291][ T6003] veth0_vlan: left promiscuous mode [ 1570.513765][ T6003] veth1_macvtap: left promiscuous mode [ 1570.513871][ T6003] veth0_macvtap: left promiscuous mode [ 1570.514165][ T6003] veth1_vlan: left promiscuous mode [ 1570.514362][ T6003] veth0_vlan: left promiscuous mode [ 1571.600433][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 1571.642862][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 1572.337904][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 1572.380594][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 1573.055184][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 1573.096331][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 1573.779437][T16725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.850948][T17106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1573.998914][T17106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1574.003420][T17106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1574.042437][T17106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1574.252789][T17106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1574.313512][T17106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1574.387423][T17106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1574.423236][T17106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1574.558069][T16725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.627291][T29052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.627463][T29052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.908905][T12137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1575.038624][T12137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1575.171878][T12137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1575.191821][T12137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1575.208613][T12137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1575.629787][T27684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.631585][T27684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.081816][T16953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.528889][T16953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.878653][T11566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.882243][T11566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.921083][T11566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.921179][T11566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.183133][T17106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1577.583878][T17106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1577.808909][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.809075][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1577.812419][T12137] Bluetooth: hci3: command tx timeout [ 1578.054308][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.061969][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.041722][T16725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1579.617434][T18334] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.617865][T18334] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.618162][T18334] bridge_slave_0: entered allmulticast mode [ 1579.636063][T18334] bridge_slave_0: entered promiscuous mode [ 1579.748887][T18334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.749199][T18334] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.749508][T18334] bridge_slave_1: entered allmulticast mode [ 1579.752914][T18334] bridge_slave_1: entered promiscuous mode [ 1580.033740][T12137] Bluetooth: hci3: command tx timeout [ 1580.116013][T18334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.148573][T18334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1580.489426][T18334] team0: Port device team_slave_0 added [ 1580.515489][T18334] team0: Port device team_slave_1 added [ 1580.766454][T16953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.787828][T18334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1580.787843][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.787869][T18334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.798041][T18334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1580.798056][T18334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1580.798084][T18334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.279303][T18334] hsr_slave_0: entered promiscuous mode [ 1581.281620][T18334] hsr_slave_1: entered promiscuous mode [ 1581.855112][ T6003] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.969671][T17106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.074628][T16725] veth0_vlan: entered promiscuous mode [ 1582.279702][T12137] Bluetooth: hci3: command tx timeout [ 1582.373843][T16725] veth1_vlan: entered promiscuous mode [ 1582.689907][ T6003] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.804967][T16953] veth0_vlan: entered promiscuous mode [ 1583.041239][T16953] veth1_vlan: entered promiscuous mode [ 1583.418744][ T6003] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.037316][ T6003] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.084322][T16725] veth0_macvtap: entered promiscuous mode [ 1584.148837][T16725] veth1_macvtap: entered promiscuous mode [ 1584.482036][T12137] Bluetooth: hci3: command tx timeout [ 1584.987077][T16953] veth0_macvtap: entered promiscuous mode [ 1585.005514][T17106] veth0_vlan: entered promiscuous mode [ 1585.043596][T16953] veth1_macvtap: entered promiscuous mode [ 1585.138150][T16725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.164498][T17106] veth1_vlan: entered promiscuous mode [ 1585.198102][T16725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.334617][T16953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.336550][T11566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.359818][ T6009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.365106][ T6009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.365156][ T6009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.382797][T16953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.744507][ T6009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.203098][ T6009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.300031][ T6009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.333725][ T6009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.595279][T17106] veth0_macvtap: entered promiscuous mode [ 1588.731497][ T6003] bridge_slave_1: left allmulticast mode [ 1588.731524][ T6003] bridge_slave_1: left promiscuous mode [ 1588.731744][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.840114][ T6003] bridge_slave_0: left allmulticast mode [ 1588.840139][ T6003] bridge_slave_0: left promiscuous mode [ 1588.840321][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.832623][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.897070][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.944078][ T6003] bond0 (unregistering): Released all slaves [ 1589.962678][T17106] veth1_macvtap: entered promiscuous mode [ 1590.134234][T23406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.134254][T23406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.557521][T17106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.750359][ T2672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.750380][ T2672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.805942][T17106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.217298][T11574] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.237753][T11574] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.252345][T11574] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.314028][T11574] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.720048][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1591.793645][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1591.836952][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1591.864391][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1591.903388][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1593.203576][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.203596][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1594.326300][T12137] Bluetooth: hci4: command tx timeout [ 1595.186290][T13172] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1595.423089][T13172] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 1595.423143][T13172] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.423170][T13172] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1595.423209][T13172] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1595.423232][T13172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.427629][T13172] usb 4-1: config 0 descriptor?? [ 1595.475070][T11566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.475090][T11566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.547756][T13172] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1595.693638][T18334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1595.755181][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1595.951711][ T6003] hsr_slave_0: left promiscuous mode [ 1595.987766][ T6003] hsr_slave_1: left promiscuous mode [ 1595.988889][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1595.988907][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.042021][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.042049][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.133437][ T6003] veth1_macvtap: left promiscuous mode [ 1596.133505][ T6003] veth0_macvtap: left promiscuous mode [ 1596.133683][ T6003] veth1_vlan: left promiscuous mode [ 1596.133803][ T6003] veth0_vlan: left promiscuous mode [ 1596.535478][T12137] Bluetooth: hci4: command tx timeout [ 1597.102620][ T6003] team0 (unregistering): Port device team_slave_1 removed [ 1597.142603][ T6003] team0 (unregistering): Port device team_slave_0 removed [ 1597.314645][T18334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1597.360326][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1597.406471][T18334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1597.434131][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1597.465125][T18334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1597.539735][T18334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1597.605445][T11572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.605465][T11572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.927509][T13217] usb 4-1: USB disconnect, device number 117 [ 1598.565484][T17106] Flush: task=syz-executor[17106] dev=loop7 state=2 [ 1598.755802][T12137] Bluetooth: hci4: command tx timeout [ 1598.773388][T17106] Teardown: task=syz-executor[17106] dev=loop7 state=2 [ 1598.961784][T19057] FAULT_INJECTION: forcing a failure. [ 1598.961784][T19057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1598.961822][T19057] CPU: 1 UID: 0 PID: 19057 Comm: syz.7.5886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1598.961850][T19057] Tainted: [L]=SOFTLOCKUP [ 1598.961858][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1598.961871][T19057] Call Trace: [ 1598.961879][T19057] [ 1598.961888][T19057] dump_stack_lvl+0xe8/0x150 [ 1598.961919][T19057] should_fail_ex+0x467/0x600 [ 1598.961950][T19057] _copy_from_user+0x2d/0xb0 [ 1598.961968][T19057] kvm_arch_vcpu_ioctl+0xc9a/0x2360 [ 1598.961995][T19057] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1598.962015][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962040][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962066][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962089][T19057] ? do_raw_spin_lock+0x12b/0x2f0 [ 1598.962124][T19057] ? lock_acquire+0x115/0x350 [ 1598.962158][T19057] ? lock_acquire+0x115/0x350 [ 1598.962194][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962214][T19057] ? is_bpf_text_address+0x26/0x2b0 [ 1598.962239][T19057] ? kernel_text_address+0xa5/0xe0 [ 1598.962267][T19057] ? __kernel_text_address+0xd/0x30 [ 1598.962302][T19057] ? unwind_get_return_address+0x4d/0x90 [ 1598.962332][T19057] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1598.962362][T19057] ? arch_stack_walk+0xfb/0x150 [ 1598.962401][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962424][T19057] ? __lock_acquire+0x6df/0x2e40 [ 1598.962448][T19057] ? kstrtoull+0x137/0x1d0 [ 1598.962473][T19057] ? kstrtouint+0x6e/0xe0 [ 1598.962522][T19057] ? lockdep_hardirqs_on+0x7a/0x110 [ 1598.962542][T19057] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1598.962562][T19057] ? _mutex_lock_killable+0x152/0x1d0 [ 1598.962589][T19057] ? kvm_vcpu_ioctl+0x282/0xfe0 [ 1598.962621][T19057] kvm_vcpu_ioctl+0x7e6/0xfe0 [ 1598.962658][T19057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1598.962687][T19057] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1598.962705][T19057] ? lockdep_hardirqs_on+0x7a/0x110 [ 1598.962735][T19057] ? __fget_files+0x2a/0x420 [ 1598.962759][T19057] ? __fget_files+0x3a8/0x420 [ 1598.962777][T19057] ? __fget_files+0x2a/0x420 [ 1598.962798][T19057] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1598.962828][T19057] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1598.962859][T19057] __se_sys_ioctl+0xff/0x170 [ 1598.962889][T19057] do_syscall_64+0x17b/0x530 [ 1598.962909][T19057] ? irqentry_exit+0x10f/0x8f0 [ 1598.962928][T19057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.962949][T19057] ? clear_bhb_loop+0x40/0x90 [ 1598.962979][T19057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1598.963000][T19057] RIP: 0033:0x7f0fbd23de99 [ 1598.963018][T19057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1598.963036][T19057] RSP: 002b:00007f0fbb496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1598.963058][T19057] RAX: ffffffffffffffda RBX: 00007f0fbd4c5fa0 RCX: 00007f0fbd23de99 [ 1598.963073][T19057] RDX: 00002000000000c0 RSI: 000000004048aecb RDI: 000000000000000c [ 1598.963087][T19057] RBP: 00007f0fbb496090 R08: 0000000000000000 R09: 0000000000000000 [ 1598.963100][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1598.963112][T19057] R13: 00007f0fbd4c6038 R14: 00007f0fbd4c5fa0 R15: 00007ffc30e5d2c8 [ 1598.963144][T19057] [ 1600.105266][T19101] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1600.330869][T18870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.346009][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.346320][T18870] bridge_slave_0: entered allmulticast mode [ 1600.368592][T18870] bridge_slave_0: entered promiscuous mode [ 1600.398835][T18334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.399955][T18870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.400355][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.400709][T18870] bridge_slave_1: entered allmulticast mode [ 1600.433267][T18870] bridge_slave_1: entered promiscuous mode [ 1600.576304][T18870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.614828][T18870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.899942][T18870] team0: Port device team_slave_0 added [ 1600.931697][T16953] do_umount: task=syz-executor[16953] propagate_mount_busy()!=0 [ 1600.931804][T16953] do_umount: task=syz-executor[16953] propagate_mount_busy()!=0 [ 1600.962714][T18870] team0: Port device team_slave_1 added [ 1600.972506][T18334] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.995755][T12137] Bluetooth: hci4: command tx timeout [ 1601.006377][T16953] overlayfs: failed lookup in lower (newroot/3, name='bus', err=-40): overlapping layers [ 1601.006598][T16953] overlayfs: failed lookup in lower (newroot/3, name='bus', err=-40): overlapping layers [ 1602.180741][T29049] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.768879][T18870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.768897][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.768925][T18870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.800631][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1602.800813][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.825181][T18870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.825198][T18870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.825226][T18870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1602.912763][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.913751][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.939443][ T38] audit: type=1326 audit(1785235460.727:44): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19253 comm="syz.7.5917" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x0 [ 1603.427122][T29049] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.641860][T18870] hsr_slave_0: entered promiscuous mode [ 1603.654732][T18870] hsr_slave_1: entered promiscuous mode [ 1603.665983][T18870] debugfs: 'hsr0' already exists in 'hsr' [ 1603.666007][T18870] Cannot create hsr debugfs directory [ 1604.139103][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1604.272680][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.322684][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.356183][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.365004][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1604.412187][T29049] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.761963][T29049] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.049186][ T5604] Bluetooth: hci0: command tx timeout [ 1608.268131][T29049] bridge_slave_1: left allmulticast mode [ 1608.268164][T29049] bridge_slave_1: left promiscuous mode [ 1608.268450][T29049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.418974][T29049] bridge_slave_0: left allmulticast mode [ 1608.419010][T29049] bridge_slave_0: left promiscuous mode [ 1608.419257][T29049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.286452][ T5604] Bluetooth: hci0: command tx timeout [ 1609.616192][T29049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.700230][T29049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.745628][T29049] bond0 (unregistering): Released all slaves [ 1610.468915][ T5856] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1610.695806][ T5856] usb 8-1: Using ep0 maxpacket: 16 [ 1610.845297][ T5856] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.845347][ T5856] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1610.845385][ T5856] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1610.845406][ T5856] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.908680][ T5856] usb 8-1: config 0 descriptor?? [ 1611.019012][ T5856] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1611.188822][T19586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.189541][T19586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1611.495446][ T5604] Bluetooth: hci0: command tx timeout [ 1611.597200][T18334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1611.836429][ T5255] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1613.349872][ T5255] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1613.421593][T10907] usb 8-1: USB disconnect, device number 5 [ 1613.525441][T29049] hsr_slave_0: left promiscuous mode [ 1613.575910][T29049] hsr_slave_1: left promiscuous mode [ 1613.579854][T29049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.579882][T29049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.613302][T29049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.613330][T29049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1613.719620][ T5604] Bluetooth: hci0: command tx timeout [ 1613.828906][T29049] veth1_macvtap: left promiscuous mode [ 1613.829016][T29049] veth0_macvtap: left promiscuous mode [ 1613.829435][T29049] veth1_vlan: left promiscuous mode [ 1613.829665][T29049] veth0_vlan: left promiscuous mode [ 1615.065177][T29049] team0 (unregistering): Port device team_slave_1 removed [ 1615.129312][T29049] team0 (unregistering): Port device team_slave_0 removed [ 1615.573016][T19311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.573461][T19311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.573772][T19311] bridge_slave_0: entered allmulticast mode [ 1615.601896][T19311] bridge_slave_0: entered promiscuous mode [ 1616.333107][T19311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.333445][T19311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.333779][T19311] bridge_slave_1: entered allmulticast mode [ 1616.338880][T19311] bridge_slave_1: entered promiscuous mode [ 1616.620990][T19311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.660371][T19311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.272478][T19311] team0: Port device team_slave_0 added [ 1617.285119][T19311] team0: Port device team_slave_1 added [ 1617.721994][T19311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.722011][T19311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.722038][T19311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.867075][T19311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.867088][T19311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.867104][T19311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.869711][T18334] veth0_vlan: entered promiscuous mode [ 1618.387782][T18334] veth1_vlan: entered promiscuous mode [ 1618.457553][T19311] hsr_slave_0: entered promiscuous mode [ 1618.462249][T19311] hsr_slave_1: entered promiscuous mode [ 1618.466263][T19311] debugfs: 'hsr0' already exists in 'hsr' [ 1618.466290][T19311] Cannot create hsr debugfs directory [ 1618.980044][ T38] audit: type=1326 audit(1785235475.736:45): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.980105][ T38] audit: type=1326 audit(1785235475.736:46): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.980383][ T38] audit: type=1326 audit(1785235475.736:47): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.980664][ T38] audit: type=1326 audit(1785235475.736:48): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.981252][ T38] audit: type=1326 audit(1785235475.736:49): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.981515][ T38] audit: type=1326 audit(1785235475.736:50): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.981753][ T38] audit: type=1326 audit(1785235475.736:51): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.982064][ T38] audit: type=1326 audit(1785235475.736:52): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.982762][ T38] audit: type=1326 audit(1785235475.736:53): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1618.983160][ T38] audit: type=1326 audit(1785235475.736:54): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=19943 comm="syz.7.5956" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0fbd23de99 code=0x7ffc0000 [ 1620.316929][T29049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.483283][T13172] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1620.678507][T13172] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1620.678525][T13172] usb 8-1: config 0 has no interface number 0 [ 1620.678551][T13172] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1620.678564][T13172] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1620.678577][T13172] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1620.678600][T13172] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1620.678612][T13172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.691802][T13172] usb 8-1: config 0 descriptor?? [ 1620.729034][T19980] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1620.774992][T18870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1620.810302][T13172] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input74 [ 1620.917626][T18870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1621.009544][T18870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1621.186247][T18870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1621.356277][ C1] usbtouchscreen 8-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1621.384227][T18870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1621.425843][T13172] usb 8-1: USB disconnect, device number 6 [ 1621.481421][T18870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1621.923500][T29049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.958111][T18870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1622.041169][T18870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1622.586654][T29049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.735501][T18334] veth0_macvtap: entered promiscuous mode [ 1622.768989][T18334] veth1_macvtap: entered promiscuous mode [ 1623.211080][T29049] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.398124][T18334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1624.431557][T18334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1624.868575][T27684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.871247][T27684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.442279][T27684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.467376][T27684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.582188][ T5255] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1628.680496][T29049] bridge_slave_1: left allmulticast mode [ 1628.680531][T29049] bridge_slave_1: left promiscuous mode [ 1628.680818][T29049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.809923][T29049] bridge_slave_0: left allmulticast mode [ 1628.809948][T29049] bridge_slave_0: left promiscuous mode [ 1628.810176][T29049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.802944][T29049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.900852][T29049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.923631][T29049] bond0 (unregistering): Released all slaves [ 1630.386288][T18870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.420288][ T2672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.420308][ T2672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.815476][T11574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.815497][T11574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.825066][T18870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.863195][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.863290][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.878794][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.879042][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.035231][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1632.365930][ T5255] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1633.050868][T29049] hsr_slave_0: left promiscuous mode [ 1633.093625][T29049] hsr_slave_1: left promiscuous mode [ 1633.094727][T29049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.094745][T29049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.137319][T29049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1633.137338][T29049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.264626][T10660] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1633.284356][T29049] veth1_macvtap: left promiscuous mode [ 1633.284465][T29049] veth0_macvtap: left promiscuous mode [ 1633.284647][T29049] veth1_vlan: left promiscuous mode [ 1633.284766][T29049] veth0_vlan: left promiscuous mode [ 1633.424927][T10660] usb 8-1: Using ep0 maxpacket: 32 [ 1633.426930][T10660] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1633.426965][T10660] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1633.454678][T10660] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1633.454707][T10660] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.454726][T10660] usb 8-1: Product: syz [ 1633.454738][T10660] usb 8-1: Manufacturer: syz [ 1633.454752][T10660] usb 8-1: SerialNumber: syz [ 1633.499040][T10660] usb 8-1: config 0 descriptor?? [ 1633.510424][T10660] gs_usb 8-1:0.0: Required endpoints not found [ 1634.622494][T29049] team0 (unregistering): Port device team_slave_1 removed [ 1634.667138][T29049] team0 (unregistering): Port device team_slave_0 removed [ 1635.696055][T19311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1635.771654][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1635.927516][T19311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1635.983704][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1635.988319][T19311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1636.099860][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1636.126441][T19311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1636.153947][T19311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1636.906635][T10907] usb 8-1: USB disconnect, device number 7 [ 1637.868486][T19311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.034246][T20399] dlm: plock device version mismatch: kernel (1.2.0), user (1.50331648.0) [ 1638.136535][T19311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.156242][T11572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.156482][T11572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.334313][ T6009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.334575][ T6009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.529581][T18870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.960937][ T5856] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1639.065530][ T5255] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1639.215984][ T5856] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1639.216002][ T5856] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1639.216015][ T5856] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1639.222138][ T5856] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1639.222169][ T5856] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1639.222188][ T5856] usb 8-1: Product: syz [ 1639.222203][ T5856] usb 8-1: Manufacturer: syz [ 1639.222217][ T5856] usb 8-1: SerialNumber: syz [ 1639.587212][ T5856] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1639.877829][ T5856] usb 8-1: USB disconnect, device number 8 [ 1639.902353][ T5856] usblp0: removed [ 1640.361166][T18870] veth0_vlan: entered promiscuous mode [ 1640.445914][T18870] veth1_vlan: entered promiscuous mode [ 1640.875135][T18870] veth0_macvtap: entered promiscuous mode [ 1640.934688][T18870] veth1_macvtap: entered promiscuous mode [ 1641.168802][T19311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.245815][T18870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.396946][T18870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.488444][T29056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.489356][T29056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.489784][T29056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.489827][T29056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.674541][T20507] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5988'. [ 1642.837952][T19311] veth0_vlan: entered promiscuous mode [ 1643.241996][T19311] veth1_vlan: entered promiscuous mode [ 1644.082141][T29049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.082168][T29049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.750944][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.750963][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.875101][T19311] veth0_macvtap: entered promiscuous mode [ 1644.899626][T19311] veth1_macvtap: entered promiscuous mode [ 1645.122663][T19311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.214282][T19311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.260224][T27684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.260277][T27684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.260313][T27684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.260347][T27684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.654686][T18870] Flush: task=syz-executor[18870] dev=loop4 state=2 [ 1646.099915][T18870] Teardown: task=syz-executor[18870] dev=loop4 state=2 [ 1646.657457][ T5856] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1646.913582][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.913609][ T5856] usb 5-1: config 0 has no interfaces? [ 1646.913635][ T5856] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1646.913658][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.967719][ T5856] usb 5-1: config 0 descriptor?? [ 1647.212030][T20585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.212865][T20585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.290632][T11566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.290653][T11566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.547346][T11574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.547366][T11574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.795636][ T5783] usb 5-1: USB disconnect, device number 21 [ 1650.836081][T20670] syzkaller0: entered promiscuous mode [ 1650.836110][T20670] syzkaller0: entered allmulticast mode [ 1658.284185][T20830] input: syz1 as /devices/virtual/input/input75 [ 1664.783022][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1664.783066][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1665.126127][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1665.126190][T20881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1666.845777][ T8356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1666.861031][ T8356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1666.956715][ T8356] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1667.057136][ T8356] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1667.065141][ T8356] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1667.079064][ T8356] Bluetooth: hci1: command 0x0406 tx timeout [ 1668.202678][T12137] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1668.221397][T12137] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1668.347508][T12137] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1668.348974][T12137] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1668.349636][T12137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1669.829657][ T5604] Bluetooth: hci2: command tx timeout [ 1669.857982][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6046'. [ 1669.857997][T20938] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6046'. [ 1670.763037][ T5604] Bluetooth: hci5: command tx timeout [ 1672.070140][ T5604] Bluetooth: hci2: command tx timeout [ 1673.016150][ T5604] Bluetooth: hci5: command tx timeout [ 1674.250816][ T5604] Bluetooth: hci2: command tx timeout [ 1675.201391][ T5604] Bluetooth: hci5: command tx timeout [ 1676.511240][ T5604] Bluetooth: hci2: command tx timeout [ 1677.459427][ T5604] Bluetooth: hci5: command tx timeout [ 1681.224120][T12137] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1681.232682][T12137] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1681.282332][T12137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1681.283911][T12137] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1681.284582][T12137] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1683.665625][ T5604] Bluetooth: hci6: command tx timeout [ 1685.879492][ T5604] Bluetooth: hci6: command tx timeout [ 1688.132646][ T5604] Bluetooth: hci6: command tx timeout [ 1689.987279][T29056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.331823][T12137] Bluetooth: hci6: command tx timeout [ 1690.965217][T29056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.964279][T29056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.025906][ T5255] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1693.183013][T29056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.269223][T21284] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6059'. [ 1693.668107][T20910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.690323][T20910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.690542][T20910] bridge_slave_0: entered allmulticast mode [ 1693.693758][T20910] bridge_slave_0: entered promiscuous mode [ 1693.767850][T20899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.768180][T20899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1693.768487][T20899] bridge_slave_0: entered allmulticast mode [ 1693.799749][T20899] bridge_slave_0: entered promiscuous mode [ 1693.802335][T20910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.802608][T20910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.802784][T20910] bridge_slave_1: entered allmulticast mode [ 1693.804868][T20910] bridge_slave_1: entered promiscuous mode [ 1693.870797][T20899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.871024][T20899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1693.871263][T20899] bridge_slave_1: entered allmulticast mode [ 1693.895954][T20899] bridge_slave_1: entered promiscuous mode [ 1694.082751][T20944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.083116][T20944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.083413][T20944] bridge_slave_0: entered allmulticast mode [ 1694.114664][T20944] bridge_slave_0: entered promiscuous mode [ 1694.228843][T20910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.229964][T20944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1694.230314][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.230539][T20944] bridge_slave_1: entered allmulticast mode [ 1694.277460][T20944] bridge_slave_1: entered promiscuous mode [ 1694.318495][T20899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.338921][T20910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.387359][T20899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.638431][T20944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.675464][T20910] team0: Port device team_slave_0 added [ 1694.777403][T20944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.793096][T20899] team0: Port device team_slave_0 added [ 1694.796266][T20910] team0: Port device team_slave_1 added [ 1694.832424][T20899] team0: Port device team_slave_1 added [ 1695.135539][T20944] team0: Port device team_slave_0 added [ 1695.195187][T20910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.195199][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.195213][T20910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.199652][T20944] team0: Port device team_slave_1 added [ 1695.577940][T20899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.577962][T20899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.577990][T20899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.585147][T20910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.585162][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.585186][T20910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.906705][T20899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.906722][T20899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.906750][T20899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.134272][ T5255] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1696.205895][T20944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.205912][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.205940][T20944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.264027][T20944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.264044][T20944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.264074][T20944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.480280][T29056] bridge_slave_1: left allmulticast mode [ 1696.480305][T29056] bridge_slave_1: left promiscuous mode [ 1696.480552][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.609180][T29056] bridge_slave_0: left allmulticast mode [ 1696.609218][T29056] bridge_slave_0: left promiscuous mode [ 1696.609510][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.693748][T29058] kworker/u8:35 (29058) used greatest stack depth: 14344 bytes left [ 1697.694683][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1697.817087][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.892256][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.913549][T29056] bond0 (unregistering): Released all slaves [ 1698.135193][T20910] hsr_slave_0: entered promiscuous mode [ 1698.143142][T20910] hsr_slave_1: entered promiscuous mode [ 1698.144243][T20910] debugfs: 'hsr0' already exists in 'hsr' [ 1698.144269][T20910] Cannot create hsr debugfs directory [ 1698.177286][T20899] hsr_slave_0: entered promiscuous mode [ 1698.179792][T20899] hsr_slave_1: entered promiscuous mode [ 1698.181662][T20899] debugfs: 'hsr0' already exists in 'hsr' [ 1698.181686][T20899] Cannot create hsr debugfs directory [ 1698.412492][T20944] hsr_slave_0: entered promiscuous mode [ 1698.416141][T20944] hsr_slave_1: entered promiscuous mode [ 1698.417208][T20944] debugfs: 'hsr0' already exists in 'hsr' [ 1698.417225][T20944] Cannot create hsr debugfs directory [ 1699.843363][ T5255] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1700.524663][T21933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.690215][T29056] hsr_slave_0: left promiscuous mode [ 1700.732852][T29056] hsr_slave_1: left promiscuous mode [ 1700.734710][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1700.734740][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.780787][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.780806][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.885101][T29056] veth1_macvtap: left promiscuous mode [ 1700.885210][T29056] veth0_macvtap: left promiscuous mode [ 1700.885507][T29056] veth1_vlan: left promiscuous mode [ 1700.885731][T29056] veth0_vlan: left promiscuous mode [ 1701.888355][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1701.940957][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1702.819648][ T5255] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1705.523985][T29056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.212126][T29056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.187219][T29056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.253669][T29056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.595718][T29056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1712.342697][T29056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.172427][T29056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.129066][T29056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.407337][ T5255] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1717.239753][T20910] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1717.271954][T20910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1717.295008][T20910] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1717.348519][T20910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1717.408719][T20910] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1717.444064][T20910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1717.455316][T20910] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1717.503250][T20910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1717.556899][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032d96800: rx timeout, send abort [ 1717.865666][T29056] bridge_slave_1: left allmulticast mode [ 1717.865704][T29056] bridge_slave_1: left promiscuous mode [ 1717.866007][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.079973][T29056] bridge_slave_0: left allmulticast mode [ 1718.080016][T29056] bridge_slave_0: left promiscuous mode [ 1718.080301][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.474169][T29056] bridge_slave_1: left allmulticast mode [ 1718.474204][T29056] bridge_slave_1: left promiscuous mode [ 1718.474472][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.645584][T29056] bridge_slave_0: left allmulticast mode [ 1718.645608][T29056] bridge_slave_0: left promiscuous mode [ 1718.645787][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.746395][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1719.831359][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1719.854356][T29056] bond0 (unregistering): Released all slaves [ 1720.558368][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.643867][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.666936][T29056] bond0 (unregistering): Released all slaves [ 1721.185224][ T5255] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1722.236312][ T5255] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1723.106851][T20899] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1723.156451][T20899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1723.159038][ T5255] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1723.277537][T20899] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1723.514734][T20899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1723.582250][T20899] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1723.677658][T20899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1723.724529][T20899] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1723.812676][T20899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1724.984465][T22455] kvm: user requested TSC rate below hardware speed [ 1726.172620][T20944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1726.256828][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.281749][T20944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1726.479339][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.485099][T20944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1726.717345][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.973091][T29056] hsr_slave_0: left promiscuous mode [ 1727.025253][T29056] hsr_slave_1: left promiscuous mode [ 1727.027071][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.027098][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.074121][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.074150][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1727.337536][T29056] hsr_slave_0: left promiscuous mode [ 1727.380104][T29056] hsr_slave_1: left promiscuous mode [ 1727.381866][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1727.381893][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1727.422574][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1727.422602][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.247029][T29056] veth1_macvtap: left promiscuous mode [ 1728.247156][T29056] veth0_macvtap: left promiscuous mode [ 1728.254830][T29056] veth1_vlan: left promiscuous mode [ 1728.255065][T29056] veth0_vlan: left promiscuous mode [ 1728.477060][T29056] veth1_macvtap: left promiscuous mode [ 1728.477168][T29056] veth0_macvtap: left promiscuous mode [ 1728.477474][T29056] veth1_vlan: left promiscuous mode [ 1728.477682][T29056] veth0_vlan: left promiscuous mode [ 1730.509716][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1730.573448][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1731.551151][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1731.596590][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1731.655624][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1731.658919][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1731.663658][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1731.685136][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1731.687390][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1732.182540][T20944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1732.256617][T20944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1732.288052][T20910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.067580][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1733.111225][ T5604] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1733.130392][ T5604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1733.209258][ T5604] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1733.282885][ T5604] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1734.239903][T12137] Bluetooth: hci0: command tx timeout [ 1735.683510][T20944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1736.079892][T12137] Bluetooth: hci3: command tx timeout [ 1736.258175][T20944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.423523][T12137] Bluetooth: hci0: command tx timeout [ 1736.522179][T29049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.522355][T29049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.808974][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.809215][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.197011][ T5255] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1738.278442][T22883] [U] [ 1738.278482][T22883] [U] [ 1738.278509][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.278557][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.282809][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.282874][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.282927][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.282976][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.283155][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 1738.283205][T22883] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaa/file0 [ 1738.283247][T22883] [U] [ 1738.283280][T22883] [U] [ 1738.283399][T22883] [U] [ 1738.283433][T22883] [U] [ 1738.283460][T22883] [U] [ 1738.283488][T22883] [U] [ 1738.283635][T22883] [U] [ 1738.283667][T22883] [U] [ 1738.283700][T22883] [U] [ 1738.283734][T22883] [U] [ 1738.283852][T22883] [U] [ 1738.283878][T22883] [U] [ 1738.283905][T22883] [U] [ 1738.283935][T22883] [U] [ 1738.287643][T12137] Bluetooth: hci3: command tx timeout [ 1738.629482][T12137] Bluetooth: hci0: command tx timeout [ 1738.716081][T22883] [U] [ 1738.716125][T22883] [U] [ 1738.716158][T22883] [U] [ 1738.716192][T22883] [U] [ 1738.716384][T22883] [U] [ 1738.716420][T22883] [U] [ 1738.716454][T22883] [U] [ 1738.716488][T22883] [U] [ 1738.716657][T22883] [U] [ 1738.716692][T22883] [U] [ 1738.716725][T22883] [U] [ 1738.716766][T22883] [U] [ 1738.716906][T22883] [U] [ 1738.716940][T22883] [U] [ 1738.716973][T22883] [U] [ 1738.717007][T22883] [U] [ 1738.717165][T22883] [U] [ 1738.717196][T22883] [U] [ 1738.717229][T22883] [U] [ 1738.717261][T22883] [U] [ 1738.717385][T22883] [U] [ 1738.717415][T22883] [U] [ 1738.717446][T22883] [U] [ 1738.717478][T22883] [U] [ 1738.717681][T22883] [U] [ 1738.717715][T22883] [U] [ 1738.717750][T22883] [U] [ 1738.717784][T22883] [U] [ 1738.717929][T22883] [U] [ 1738.717965][T22883] [U] [ 1738.717997][T22883] [U] [ 1738.718028][T22883] [U] [ 1738.718173][T22883] [U] [ 1738.718207][T22883] [U] [ 1738.718241][T22883] [U] [ 1738.718274][T22883] [U] [ 1738.718406][T22883] [U] [ 1738.718436][T22883] [U] [ 1738.718465][T22883] [U] [ 1738.718494][T22883] [U] [ 1738.718641][T22883] [U] [ 1738.718672][T22883] [U] [ 1738.718702][T22883] [U] [ 1738.718735][T22883] [U] [ 1738.718880][T22883] [U] [ 1738.718911][T22883] [U] [ 1738.718943][T22883] [U] [ 1738.718974][T22883] [U] [ 1738.719122][T22883] [U] [ 1738.719152][T22883] [U] [ 1738.719181][T22883] [U] [ 1738.719210][T22883] [U] [ 1738.719341][T22883] [U] [ 1738.719370][T22883] [U] [ 1738.719399][T22883] [U] [ 1738.719426][T22883] [U] [ 1738.719579][T22883] [U] [ 1738.719611][T22883] [U] [ 1738.719640][T22883] [U] [ 1738.719671][T22883] [U] [ 1738.719806][T22883] [U] [ 1738.719850][T22883] [U] [ 1738.719884][T22883] [U] [ 1738.719917][T22883] [U] [ 1738.720073][T22883] [U] [ 1738.720106][T22883] [U] [ 1738.720139][T22883] [U] [ 1738.720171][T22883] [U] [ 1738.720305][T22883] [U] [ 1738.720337][T22883] [U] [ 1738.720368][T22883] [U] [ 1738.720394][T22883] [U] [ 1738.720542][T22883] [U] [ 1738.720574][T22883] [U] [ 1738.720606][T22883] [U] [ 1738.720636][T22883] [U] [ 1738.720760][T22883] [U] [ 1738.720792][T22883] [U] [ 1738.720823][T22883] [U] [ 1738.720864][T22883] [U] [ 1738.721014][T22883] [U] [ 1738.721047][T22883] [U] [ 1738.721079][T22883] [U] [ 1738.721108][T22883] [U] [ 1738.721239][T22883] [U] [ 1738.721271][T22883] [U] [ 1738.721301][T22883] [U] [ 1738.721330][T22883] [U] [ 1738.721461][T22883] [U] [ 1738.721488][T22883] [U] [ 1738.721515][T22883] [U] [ 1738.721541][T22883] [U] [ 1738.721648][T22883] [U] [ 1738.721674][T22883] [U] [ 1738.721701][T22883] [U] [ 1738.721728][T22883] [U] [ 1738.721862][T22883] [U] [ 1738.721916][T22883] [U] [ 1738.721949][T22883] [U] [ 1738.721978][T22883] [U] [ 1738.722073][T22883] [U] [ 1738.722100][T22883] [U] [ 1738.722126][T22883] [U] [ 1739.168619][T22864] [U] [ 1739.213189][T22627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.213420][T22627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.213610][T22627] bridge_slave_0: entered allmulticast mode [ 1739.234633][T22627] bridge_slave_0: entered promiscuous mode [ 1739.315375][T22627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.315717][T22627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.316013][T22627] bridge_slave_1: entered allmulticast mode [ 1739.318037][T22627] bridge_slave_1: entered promiscuous mode [ 1739.417354][T22872] netdevsim netdevsim7: Direct firmware load for . [ 1739.417354][T22872] failed with error -2 [ 1739.417385][T22872] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1739.417385][T22872] [ 1739.707763][T22627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1739.771764][T22627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.500441][T22651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.500855][T22651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.502001][T22651] bridge_slave_0: entered allmulticast mode [ 1740.506156][T22651] bridge_slave_0: entered promiscuous mode [ 1740.514660][T12137] Bluetooth: hci3: command tx timeout [ 1740.577320][T22627] team0: Port device team_slave_0 added [ 1740.603920][T22651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.604349][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.604658][T22651] bridge_slave_1: entered allmulticast mode [ 1740.619543][T22651] bridge_slave_1: entered promiscuous mode [ 1740.625625][T22627] team0: Port device team_slave_1 added [ 1740.803404][T22651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.852515][T12137] Bluetooth: hci0: command tx timeout [ 1741.389211][T22627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.389222][T22627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.389236][T22627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.394938][T22651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.538874][T22627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.538885][T22627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1741.538901][T22627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.948293][T22651] team0: Port device team_slave_0 added [ 1741.963510][T22651] team0: Port device team_slave_1 added [ 1742.158555][T22627] hsr_slave_0: entered promiscuous mode [ 1742.161178][T22627] hsr_slave_1: entered promiscuous mode [ 1742.461997][T22651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.462008][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.462023][T22651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.468142][T22651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.468157][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.468184][T22651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1742.733570][T12137] Bluetooth: hci3: command tx timeout [ 1742.739428][T20944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1742.915915][T22651] hsr_slave_0: entered promiscuous mode [ 1742.924743][T22651] hsr_slave_1: entered promiscuous mode [ 1742.927204][T22651] debugfs: 'hsr0' already exists in 'hsr' [ 1742.927228][T22651] Cannot create hsr debugfs directory [ 1744.643420][T20944] veth0_vlan: entered promiscuous mode [ 1744.717443][T20944] veth1_vlan: entered promiscuous mode [ 1744.824479][T20944] veth0_macvtap: entered promiscuous mode [ 1744.836323][T20944] veth1_macvtap: entered promiscuous mode [ 1744.942579][T20944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.670701][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1745.722348][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1745.740630][ T5255] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1745.752180][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1745.769894][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1745.798138][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1747.756508][T29056] bridge_slave_1: left allmulticast mode [ 1747.756535][T29056] bridge_slave_1: left promiscuous mode [ 1747.756777][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.896437][T29056] bridge_slave_0: left allmulticast mode [ 1747.896461][T29056] bridge_slave_0: left promiscuous mode [ 1747.896817][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.109357][T29056] bridge_slave_1: left allmulticast mode [ 1748.109401][T29056] bridge_slave_1: left promiscuous mode [ 1748.109650][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.218320][T29056] bridge_slave_0: left allmulticast mode [ 1748.218344][T29056] bridge_slave_0: left promiscuous mode [ 1748.218522][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.381642][T12137] Bluetooth: hci2: command tx timeout [ 1748.815068][T17106] do_umount: task=syz-executor[17106] propagate_mount_busy()!=0 [ 1748.815169][T17106] do_umount: task=syz-executor[17106] propagate_mount_busy()!=0 [ 1749.446782][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1749.616801][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1749.703740][T29056] bond0 (unregistering): Released all slaves [ 1750.108183][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1750.193663][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1750.259798][T29056] bond0 (unregistering): Released all slaves [ 1750.647924][T12137] Bluetooth: hci2: command tx timeout [ 1751.838232][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1751.910999][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1751.920543][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1751.942585][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1751.955379][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1752.672474][T29056] hsr_slave_0: left promiscuous mode [ 1752.716245][T29056] hsr_slave_1: left promiscuous mode [ 1752.717929][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.763048][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1752.822135][T12137] Bluetooth: hci2: command tx timeout [ 1752.971858][T29056] hsr_slave_0: left promiscuous mode [ 1753.014598][T29056] hsr_slave_1: left promiscuous mode [ 1753.015754][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.038322][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.475403][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1753.533479][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1753.955501][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1753.977125][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1754.206893][T12137] Bluetooth: hci1: command tx timeout [ 1755.046777][T12137] Bluetooth: hci2: command tx timeout [ 1756.452122][T12137] Bluetooth: hci1: command tx timeout [ 1757.187632][T23336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.187999][T23336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.188251][T23336] bridge_slave_0: entered allmulticast mode [ 1757.219519][T23336] bridge_slave_0: entered promiscuous mode [ 1757.233629][T23336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.233964][T23336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.234259][T23336] bridge_slave_1: entered allmulticast mode [ 1757.264485][T23336] bridge_slave_1: entered promiscuous mode [ 1757.733365][ T5255] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1757.754175][T23336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1757.754598][T23422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.754845][T23422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.755062][T23422] bridge_slave_0: entered allmulticast mode [ 1757.757812][T23422] bridge_slave_0: entered promiscuous mode [ 1757.763543][T23422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.763903][T23422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.764177][T23422] bridge_slave_1: entered allmulticast mode [ 1757.767718][T23422] bridge_slave_1: entered promiscuous mode [ 1757.777527][T23336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.496475][T23422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1758.506233][T23336] team0: Port device team_slave_0 added [ 1758.613671][T23422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1758.632886][T23336] team0: Port device team_slave_1 added [ 1758.643426][T12137] Bluetooth: hci1: command tx timeout [ 1758.804613][T23422] team0: Port device team_slave_0 added [ 1758.820141][T23336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.820152][T23336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.820207][T23336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.829330][T23422] team0: Port device team_slave_1 added [ 1758.831637][T23336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.831653][T23336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1758.831697][T23336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1759.171923][T22627] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1759.210146][T22627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1759.216123][T23422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1759.216140][T23422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.216166][T23422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1759.805830][T29056] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.900543][T22627] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1759.934087][T22627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1759.987786][T23422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1759.987798][T23422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1759.987814][T23422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.122751][T22627] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1760.149766][T22627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1760.472293][T22627] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1760.503170][T22627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1760.531980][T23336] hsr_slave_0: entered promiscuous mode [ 1760.533256][T23336] hsr_slave_1: entered promiscuous mode [ 1760.534249][T23336] debugfs: 'hsr0' already exists in 'hsr' [ 1760.534272][T23336] Cannot create hsr debugfs directory [ 1760.858949][T12137] Bluetooth: hci1: command tx timeout [ 1760.917469][T29056] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.444765][T29056] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.540763][T23422] hsr_slave_0: entered promiscuous mode [ 1761.542003][T23422] hsr_slave_1: entered promiscuous mode [ 1761.544054][T23422] debugfs: 'hsr0' already exists in 'hsr' [ 1761.544079][T23422] Cannot create hsr debugfs directory [ 1762.084027][T29056] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.120265][T22651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1762.149248][T22651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.186089][T22651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1762.210632][T22651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.251116][T22651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1762.308051][T22651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.348200][T22651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1762.392838][T22651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1763.385214][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1763.866088][ T5255] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1764.627741][T22627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.732202][T22627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.043523][T22651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.099525][ T2672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.099627][ T2672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.154303][T29049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.154566][T29049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.250644][T22651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.295329][ T2672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.295492][ T2672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.371123][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.371247][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.888449][T29056] bridge_slave_1: left allmulticast mode [ 1765.888483][T29056] bridge_slave_1: left promiscuous mode [ 1765.888788][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.119768][T29056] bridge_slave_0: left allmulticast mode [ 1766.119791][T29056] bridge_slave_0: left promiscuous mode [ 1766.119969][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.373865][T29056] bridge_slave_1: left allmulticast mode [ 1766.373906][T29056] bridge_slave_1: left promiscuous mode [ 1766.374118][T29056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.482014][T29056] bridge_slave_0: left allmulticast mode [ 1766.482051][T29056] bridge_slave_0: left promiscuous mode [ 1766.482244][T29056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.581836][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1767.646295][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.691083][T29056] bond0 (unregistering): Released all slaves [ 1768.458134][T29056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.543669][T29056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.566928][T29056] bond0 (unregistering): Released all slaves [ 1771.621037][T29056] hsr_slave_0: left promiscuous mode [ 1771.663705][T29056] hsr_slave_1: left promiscuous mode [ 1771.664976][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.664995][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.708488][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.708508][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.856144][T29056] hsr_slave_0: left promiscuous mode [ 1771.877366][T29056] hsr_slave_1: left promiscuous mode [ 1771.878526][T29056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.878546][T29056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.920950][T29056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.008316][T29056] veth1_macvtap: left promiscuous mode [ 1772.008389][T29056] veth0_macvtap: left promiscuous mode [ 1772.008569][T29056] veth1_vlan: left promiscuous mode [ 1772.008697][T29056] veth0_vlan: left promiscuous mode [ 1772.134171][T29056] veth1_macvtap: left promiscuous mode [ 1772.134235][T29056] veth0_macvtap: left promiscuous mode [ 1772.134417][T29056] veth1_vlan: left promiscuous mode [ 1772.134534][T29056] veth0_vlan: left promiscuous mode [ 1772.958193][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1773.000290][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1773.716044][T29056] team0 (unregistering): Port device team_slave_1 removed [ 1773.769616][T29056] team0 (unregistering): Port device team_slave_0 removed [ 1774.518528][T22627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.782064][T22651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.782506][T22627] veth0_vlan: entered promiscuous mode [ 1776.127001][T22627] veth1_vlan: entered promiscuous mode [ 1776.520459][ T5255] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1776.989351][T22651] veth0_vlan: entered promiscuous mode [ 1777.105950][T22651] veth1_vlan: entered promiscuous mode [ 1777.155380][T23336] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1777.215535][T23336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1777.348824][T23336] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1777.473517][T23336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1777.474519][T22627] veth0_macvtap: entered promiscuous mode [ 1777.495421][T23336] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1777.595707][T23336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1777.808506][T23336] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1777.918087][T23336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1777.942511][T22627] veth1_macvtap: entered promiscuous mode [ 1778.331339][T23422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1778.369011][T23422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1778.386911][T22627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.387154][T23422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1778.435170][T23422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1778.436408][T22651] veth0_macvtap: entered promiscuous mode [ 1778.487085][T23422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1778.529296][T23422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1778.535177][T23422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1778.603149][T23422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1778.609797][T22627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.633437][T22651] veth1_macvtap: entered promiscuous mode [ 1778.672139][ T6010] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.685147][ T6010] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.691383][ T6010] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.727153][ T6010] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.840341][T22651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1779.096315][T22651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.433156][T29049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.448687][T29049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.565994][T29049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.979088][T27684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.197304][T29056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.197324][T29056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.797324][T23406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.797342][T23406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.905235][T23336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.796135][T23406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.796154][T23406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1781.912750][T23336] 8021q: adding VLAN 0 to HW filter on device team0 [ 1781.980221][T23422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.019512][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.019533][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.052903][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.053321][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.122044][T23406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.122235][T23406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.201512][T23422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.239639][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.239893][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.299195][T29056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.299362][T29056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1782.744748][ T201] IPVS: starting estimator thread 0... [ 1782.846488][T24271] IPVS: using max 16 ests per chain, 38400 per kthread [ 1784.637514][T23336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1785.037281][ T201] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1785.227425][ T201] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1785.227455][ T201] usb 3-1: config 0 has no interface number 0 [ 1785.229841][ T201] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1785.229870][ T201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.229889][ T201] usb 3-1: Product: syz [ 1785.229902][ T201] usb 3-1: Manufacturer: syz [ 1785.229916][ T201] usb 3-1: SerialNumber: syz [ 1785.294616][ T201] usb 3-1: config 0 descriptor?? [ 1785.361980][ T201] usb 3-1: selecting invalid altsetting 1 [ 1785.390668][ T201] dvb_ttusb_budget: ttusb_init_controller: error [ 1785.390692][ T201] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1785.460283][T23422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1785.566752][ T201] DVB: Unable to find symbol stv0299_attach() [ 1785.799589][ T201] DVB: Unable to find symbol tda8083_attach() [ 1785.799605][ T201] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1785.889285][ T201] usb 3-1: USB disconnect, device number 102 [ 1786.375589][T23422] veth0_vlan: entered promiscuous mode [ 1786.546256][T23336] veth0_vlan: entered promiscuous mode [ 1786.587279][T23422] veth1_vlan: entered promiscuous mode [ 1786.652299][T23336] veth1_vlan: entered promiscuous mode [ 1786.899234][T23422] veth0_macvtap: entered promiscuous mode [ 1786.983103][T23422] veth1_macvtap: entered promiscuous mode [ 1787.021834][ T5703] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1787.045204][T23336] veth0_macvtap: entered promiscuous mode [ 1787.085008][T23336] veth1_macvtap: entered promiscuous mode [ 1787.182779][ T5703] usb 9-1: Using ep0 maxpacket: 16 [ 1787.184695][ T5703] usb 9-1: config 0 has an invalid interface number: 154 but max is 0 [ 1787.184723][ T5703] usb 9-1: config 0 has no interface number 0 [ 1787.184755][ T5703] usb 9-1: config 0 interface 154 has no altsetting 0 [ 1787.196433][ T5703] usb 9-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c8.70 [ 1787.196464][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.196484][ T5703] usb 9-1: Product: syz [ 1787.196497][ T5703] usb 9-1: Manufacturer: syz [ 1787.196512][ T5703] usb 9-1: SerialNumber: syz [ 1787.199995][T23422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.276603][ T5703] usb 9-1: config 0 descriptor?? [ 1787.468761][T23422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1787.671804][T24388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.700276][T24388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.808303][T23336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.001324][ T6010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.003993][ T6010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.006077][ T6010] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.012023][T23336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.012976][T23406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.257313][T27684] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.354157][ T6010] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.359404][ T6010] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.360215][ T6010] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.390136][ T5703] ldusb 9-1:0.154: Interrupt in endpoint not found [ 1788.496721][ T5703] usb 9-1: USB disconnect, device number 24 [ 1790.863434][T11574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.863454][T11574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1791.921411][ T6009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1791.921430][ T6009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.552015][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.552037][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.983521][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.983541][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.943754][T24525] tipc: Started in network mode [ 1793.943783][T24525] tipc: Node identity ac1414aa, cluster identity 4711 [ 1794.357618][T24525] tipc: Enabled bearer , priority 10 [ 1795.296613][T13172] tipc: Node number set to 2886997162 [ 1796.080289][T10660] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1796.354219][T10660] usb 10-1: Using ep0 maxpacket: 32 [ 1796.356414][T10660] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1796.356438][T10660] usb 10-1: config 0 has no interface number 0 [ 1796.356481][T10660] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1796.358810][T10660] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1796.358838][T10660] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.358858][T10660] usb 10-1: Product: syz [ 1796.358873][T10660] usb 10-1: Manufacturer: syz [ 1796.358888][T10660] usb 10-1: SerialNumber: syz [ 1796.364359][T10660] usb 10-1: config 0 descriptor?? [ 1796.451671][T10660] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1796.451706][T10660] em28xx 10-1:0.132: Video interface 132 found: [ 1796.859533][T10660] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1798.539721][T10660] em28xx 10-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1798.539871][T10660] em28xx 10-1:0.132: board has no eeprom [ 1798.616713][T10660] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1798.616741][T10660] em28xx 10-1:0.132: analog set to bulk mode. [ 1798.618113][ T5703] em28xx 10-1:0.132: Registering V4L2 extension [ 1798.665959][T10660] usb 10-1: USB disconnect, device number 22 [ 1798.667506][T10660] em28xx 10-1:0.132: Disconnecting em28xx [ 1799.085727][ T5703] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1799.085751][ T5703] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1799.085764][ T5703] em28xx 10-1:0.132: No AC97 audio processor [ 1799.423395][ T5703] usb 10-1: Decoder not found [ 1799.423418][ T5703] em28xx 10-1:0.132: failed to create media graph [ 1799.423539][ T5703] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1799.561001][ T5703] INFO: trying to register non-static key. [ 1799.561015][ T5703] The code is fine but needs lockdep annotation, or maybe [ 1799.561022][ T5703] you didn't initialize this object before use? [ 1799.561027][ T5703] turning off the locking correctness validator. [ 1799.561045][ T5703] CPU: 1 UID: 0 PID: 5703 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1799.561069][ T5703] Tainted: [L]=SOFTLOCKUP [ 1799.561076][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1799.561089][ T5703] Workqueue: events request_module_async [ 1799.561114][ T5703] Call Trace: [ 1799.561121][ T5703] [ 1799.561129][ T5703] dump_stack_lvl+0xe8/0x150 [ 1799.561154][ T5703] assign_lock_key+0x133/0x150 [ 1799.561173][ T5703] register_lock_class+0xcc/0x2e0 [ 1799.561200][ T5703] __lock_acquire+0xaf/0x2e40 [ 1799.561216][ T5703] ? ret_from_fork_asm+0x1a/0x30 [ 1799.561239][ T5703] ? stack_trace_save+0xa9/0x100 [ 1799.561266][ T5703] ? __pfx_stack_trace_save+0x10/0x10 [ 1799.561297][ T5703] lock_acquire+0x115/0x350 [ 1799.561322][ T5703] ? __wake_up_common_lock+0x2f/0x1f0 [ 1799.561350][ T5703] rt_spin_lock+0x83/0x400 [ 1799.561370][ T5703] ? __wake_up_common_lock+0x2f/0x1f0 [ 1799.561394][ T5703] ? __pfx_rt_spin_lock+0x10/0x10 [ 1799.561417][ T5703] __wake_up_common_lock+0x2f/0x1f0 [ 1799.561445][ T5703] __vb2_queue_cancel+0x2de/0xdc0 [ 1799.561473][ T5703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1799.561492][ T5703] ? lockdep_hardirqs_on+0x7a/0x110 [ 1799.561510][ T5703] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1799.561541][ T5703] vb2_core_queue_release+0x2f/0x150 [ 1799.561572][ T5703] vb2_video_unregister_device+0x15b/0x200 [ 1799.561605][ T5703] em28xx_v4l2_init+0x1c60/0x3140 [ 1799.561631][ T5703] em28xx_init_extension+0x120/0x1d0 [ 1799.561662][ T5703] ? process_one_work+0x7fd/0x1480 [ 1799.561682][ T5703] process_one_work+0xaaf/0x1480 [ 1799.561708][ T5703] ? __pfx_process_one_work+0x10/0x10 [ 1799.561727][ T5703] ? do_raw_spin_lock+0x12b/0x2f0 [ 1799.561756][ T5703] ? assign_work+0x3cf/0x5d0 [ 1799.561775][ T5703] worker_thread+0xb05/0x10d0 [ 1799.561800][ T5703] ? __kthread_parkme+0x71/0x1f0 [ 1799.561826][ T5703] kthread+0x388/0x470 [ 1799.561851][ T5703] ? __pfx_worker_thread+0x10/0x10 [ 1799.561871][ T5703] ? __pfx_kthread+0x10/0x10 [ 1799.561895][ T5703] ret_from_fork+0x514/0xb70 [ 1799.561930][ T5703] ? __pfx_ret_from_fork+0x10/0x10 [ 1799.561954][ T5703] ? __switch_to+0xc89/0x1420 [ 1799.561975][ T5703] ? __pfx_kthread+0x10/0x10 [ 1799.561998][ T5703] ret_from_fork_asm+0x1a/0x30 [ 1799.562027][ T5703] [ 1799.562085][ T5703] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1799.562103][ T5703] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1799.562126][ T5703] CPU: 1 UID: 0 PID: 5703 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1799.562149][ T5703] Tainted: [L]=SOFTLOCKUP [ 1799.562157][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1799.562170][ T5703] Workqueue: events request_module_async [ 1799.562187][ T5703] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1799.562216][ T5703] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 1799.562231][ T5703] RSP: 0018:ffffc90005f7f908 EFLAGS: 00010246 [ 1799.562248][ T5703] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1799.562260][ T5703] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 1799.562274][ T5703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1799.562285][ T5703] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88802a3bdb14 [ 1799.562300][ T5703] R13: ffff88802a3bdc28 R14: 0000000000000000 R15: 0000000000000000 [ 1799.562313][ T5703] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 1799.562328][ T5703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1799.562340][ T5703] CR2: 00007f36bb814000 CR3: 000000003f500000 CR4: 00000000003526f0 [ 1799.562357][ T5703] Call Trace: [ 1799.562363][ T5703] [ 1799.562372][ T5703] __vb2_queue_cancel+0x2de/0xdc0 [ 1799.562397][ T5703] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1799.562415][ T5703] ? lockdep_hardirqs_on+0x7a/0x110 [ 1799.562434][ T5703] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 1799.562461][ T5703] vb2_core_queue_release+0x2f/0x150 [ 1799.562489][ T5703] vb2_video_unregister_device+0x15b/0x200 [ 1799.562521][ T5703] em28xx_v4l2_init+0x1c60/0x3140 [ 1799.562544][ T5703] em28xx_init_extension+0x120/0x1d0 [ 1799.562568][ T5703] ? process_one_work+0x7fd/0x1480 [ 1799.562586][ T5703] process_one_work+0xaaf/0x1480 [ 1799.562609][ T5703] ? __pfx_process_one_work+0x10/0x10 [ 1799.562626][ T5703] ? do_raw_spin_lock+0x12b/0x2f0 [ 1799.562653][ T5703] ? assign_work+0x3cf/0x5d0 [ 1799.562673][ T5703] worker_thread+0xb05/0x10d0 [ 1799.562694][ T5703] ? __kthread_parkme+0x71/0x1f0 [ 1799.562717][ T5703] kthread+0x388/0x470 [ 1799.562738][ T5703] ? __pfx_worker_thread+0x10/0x10 [ 1799.562757][ T5703] ? __pfx_kthread+0x10/0x10 [ 1799.562779][ T5703] ret_from_fork+0x514/0xb70 [ 1799.562803][ T5703] ? __pfx_ret_from_fork+0x10/0x10 [ 1799.562825][ T5703] ? __switch_to+0xc89/0x1420 [ 1799.562844][ T5703] ? __pfx_kthread+0x10/0x10 [ 1799.562864][ T5703] ret_from_fork_asm+0x1a/0x30 [ 1799.562892][ T5703] [ 1799.562912][ T5703] Modules linked in: [ 1799.562958][ T5703] ---[ end trace 0000000000000000 ]--- [ 1799.563025][ T5703] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 1799.563056][ T5703] Code: 0f 84 d4 00 00 00 44 8b 7c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 ed 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 1c ce 93 00 48 ba 00 00 00 00 00 fc [ 1799.563069][ T5703] RSP: 0018:ffffc90005f7f908 EFLAGS: 00010246 [ 1799.563086][ T5703] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1799.563099][ T5703] RDX: dffffc0000000000 RSI: ffffffff8bcbd060 RDI: 00000000ffffffff [ 1799.563113][ T5703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1799.563126][ T5703] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: ffff88802a3bdb14 [ 1799.563141][ T5703] R13: ffff88802a3bdc28 R14: 0000000000000000 R15: 0000000000000000 [ 1799.563154][ T5703] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 1799.563170][ T5703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1799.563184][ T5703] CR2: 00007f36bb814000 CR3: 000000003f500000 CR4: 00000000003526f0 [ 1799.563203][ T5703] Kernel panic - not syncing: Fatal exception [ 1799.563733][ T5703] Kernel Offset: disabled