last executing test programs: 16m41.796035644s ago: executing program 3 (id=51): syz_usb_connect$midi(0x2, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000001099044b474000010203010902210001010080090904000001010300090905b402000239e178cc733b033cbf5fd1a264a12986b31eeae749952ebf7eb38c354d29adeed5ec8dca6e284133"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608204c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16m39.205120762s ago: executing program 3 (id=56): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x0, 0x20, 0x40, {0x8, 0xb, 0x2, 0x1, 0x1, 0x21, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2a, 0xfff}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x100, 0x2, 0x6, 0x2, 0x8002, 0x7, 0x10, 0x2}, @processing_unit={0xd, 0x24, 0x9, 0x2, 0x2, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xd, 0xb, {0xa, 0x25, 0x25, 0x401, 0xe, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x2, 0xff, 0x0, {0xa, 0x25, 0x25, 0x5, 0x7, 0x8}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m34.56169088s ago: executing program 3 (id=60): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x8, "d09e5ef9ff11"}]}}}}}}}}, 0x0) 16m32.742471247s ago: executing program 3 (id=62): socket$inet6(0x10, 0x2, 0x0) io_setup(0x43, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_getscheduler(r0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b0000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0x108, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, &(0x7f0000000540), &(0x7f0000000040)=""/84}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') socket$l2tp(0x2, 0x2, 0x73) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) 16m31.598828995s ago: executing program 3 (id=65): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000000000000020000000800000082080000", @ANYRES32=0x1, @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f00000003c0)="8e2087f75d254afbfee726c0bddb00d9edff866f3213e7e99921d4c035d16107125c3514e0832d87186d8417b56f9780aeb65cfc30490818e805fec5fe87ee555a0f6952f723a40ab5ead7c3893973988fce3104cc423249cc0b9f3c221b53b03c3c3f0c33d886166dba69eba81de4c9a641b4b31dbc9a2b19df63c476d04d4ab8d6071371164eaac1e2606edfa6d514941c2a35c324d4f64fe38e29276034df9fc624cece7cf3411c854d1372f56d9c1dceaff21ed2916f0f514eb96d9e58777dd88b7434dfd2d60eba01bdcec42fc114790f579fb4afbbfba20991833f5b74c9c2ba6511ab7f027de47e194f", &(0x7f0000000500)=""/80, &(0x7f0000000580)="e127f913bab2102d6df629168a925046ab3efbf16a068c6956ad60c3655aa0205345583685ca0eb40c0d3e3c5c9d9e4eea1e37ee618cbe435c1ca5eb9338fd51d58ad44ba89f95295eb7970cb9da76fb87212a9bb7a2b6a81c2f603a58f806f7c36f8e5481cba14cde9599b0f3600e0d5c1e5917c7af90e607ccd6be01c496d71ca1e22d5c7ca5", &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc3277cfe8e6d83318ebfa080", 0x9, r0}, 0x38) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r2, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r5, 0x0, 0x10) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) connect$inet(r4, 0x0, 0x0) 16m25.932071176s ago: executing program 3 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x61) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 16m10.566518746s ago: executing program 32 (id=72): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x61) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 15m11.152564914s ago: executing program 5 (id=84): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x32, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae2db664"}}) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) capset(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x3554000) 14m55.382814091s ago: executing program 33 (id=84): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x8, 0x0, 0xb49, 0x8000009, 0x7, 0x2, 0xc59}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x3, 0x32, "bec50cffc86b2128b9c1c2fedb30b69e81440b0ab677224f6eede372d859507f25e916e94283d1afe5c09c54d0d3ae2db664"}}) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x0) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) capset(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x3554000) 5m14.855367239s ago: executing program 1 (id=1798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m14.7035549s ago: executing program 1 (id=1801): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1}, 0x7, 0x4, &(0x7f0000000040)={0x40, 0x1f, 0x0, 0x2, 0x67}, 0x8, 0x5, 0x5, 0x0, 0x7, 0x4, &(0x7f00000000c0)="62658c7b434668bdac94886b2afcefc15908064a31952de8ef241d7808d7e5b228bc877146c4fdc7a875804f79ba457b615683bfa553e4fc027aab"}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x92, {0x92, 0x8, "e1f6fd6ecf2d0866cde4d09a38676f82d49325130402b9a8f29bc84b9b4e05074f407f9b8c01659cb96736fd0cf93896ca9f937bdb9efc7f930b86471f0f7b23af37c5c5f554100403ad458ba2c414942401e4224004b4a97f88c939e01c0c1928bfbfe970f30bd909ddf158efa1e46b7d4cfb5a0700f6c18ccd74c735489beb60bcd073a57987074a35548bb4f1af90"}}, &(0x7f0000000280)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "ddde8f9d8f1801f098e40ae608516833583c57a5246510c73b9d9c0a710b939e591d285419865e402cadaa69aaa4be17cf0b0b9a298f37d4a89362f8ed3302a800fc343092baf9490e51b611ee6c954b312dcfd7728e7441410aa51aacab5057e86e0faf50dbb37d54418e47200c0dc619b9e99d04fc92fe3a238b3287b4c1af05df8fe951c80b5045ff11021cf10c3abcf8929866b4aceebc8a140b03b3cbedc6b423a5043befc3b79e4ed59237c206bf74805656faf06240982d204e4cbc45725b9473858440d212727637f1fe01d5144aaba0d50f1da348e793bf219e39ab1ade"}}, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x10, 0x0, 0xe, "b59579f0", "f70d03dc"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x7, 0x0, 0x8, 0x8, 0xa}}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x48, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r5, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = getuid() quotactl_fd$Q_SETINFO(r4, 0xffffffff80000602, r9, &(0x7f00000003c0)={0x40, 0x4, 0x0, 0x5}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 5m13.104464979s ago: executing program 0 (id=1806): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$clear(0x5, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x7fff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) pipe2$9p(0x0, 0x84880) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$xdp(0x2c, 0x3, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0xa10000, 0x8, 0x1000, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9d0904, 0x7, '\x00', @string=0x0}}) 5m9.289679981s ago: executing program 0 (id=1810): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5m9.001199866s ago: executing program 1 (id=1811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m8.750530508s ago: executing program 4 (id=1813): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff00000000d7690000000000001000000000000000000000200000000000000000fffffffffffffffffeff"], 0xb8}}, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x589302, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0xfdff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) epoll_create1(0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000111401002900000080dbdf2508004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000040) r2 = syz_io_uring_setup(0x41e8, &(0x7f0000000380)={0x0, 0x9592, 0x800, 0x1, 0x3d9}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r3 = syz_io_uring_setup(0x300b, &(0x7f0000000500)={0x0, 0x88b1, 0x100, 0x2, 0x2aa, 0x0, r2}, &(0x7f0000000580), &(0x7f0000000680), &(0x7f00000006c0)) r4 = io_uring_setup(0x61ca, &(0x7f0000000140)={0x0, 0xea7d, 0x800, 0x3, 0xed, 0x0, r3}) close_range(r4, 0xffffffffffffffff, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r5, 0x0, 0x14, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 5m8.698007396s ago: executing program 1 (id=1814): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m8.080775964s ago: executing program 2 (id=1815): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r1, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97a658d4", 0xab}, {&(0x7f0000000380)="f107a47cf3c1afd6f8904e0d4f43384fc2b2e1f8c1", 0x15}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x108}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(0x0, 0x4, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) 5m7.934582672s ago: executing program 6 (id=1816): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}, 0x80, 0x0}}], 0x1, 0x200000c1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) accept4(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f00000002c0)=0x80, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587"], 0x0) 5m7.225637074s ago: executing program 4 (id=1817): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff00000000d7690000000000001000000000000000000000200000000000000000fffffffffffffffffeff"], 0xb8}}, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x589302, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0xfdff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000111401002900000080dbdf2508004b0028000000"], 0x18}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000040) r3 = syz_io_uring_setup(0x41e8, &(0x7f0000000380)={0x0, 0x9592, 0x800, 0x1, 0x3d9}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r4 = syz_io_uring_setup(0x300b, &(0x7f0000000500)={0x0, 0x88b1, 0x100, 0x2, 0x2aa, 0x0, r3}, &(0x7f0000000580), &(0x7f0000000680), &(0x7f00000006c0)) r5 = io_uring_setup(0x61ca, &(0x7f0000000140)={0x0, 0xea7d, 0x800, 0x3, 0xed, 0x0, r4}) close_range(r5, 0xffffffffffffffff, 0x0) close(0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r6, 0x0, 0x14, 0x0, &(0x7f0000000200)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 5m6.307765384s ago: executing program 2 (id=1818): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00000000000000000700", @ANYRES32=r2], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000274, 0x480c0) 5m6.212247755s ago: executing program 4 (id=1819): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000002c0)={0x281, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000840)={0xd5, 0x0, 0xa16c693ce8ed31a4}) dup3(r1, r3, 0x80000) utimensat(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0xea60}}, 0x0) bind$alg(r0, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r6 = accept(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x4, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 5m6.175824677s ago: executing program 2 (id=1820): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)={0x40, 0x7, 0x74, "9cf792d715460e3f93bf0762b609cf299cdabeedeaeb1752535d9f0c9f65a28bc9578268a4b34b185ee54dd01a4c3e32d08ed1f23b950fb84435e6ea707f2e899d2e59e9069fcc29a6575863378eb6c2cb7456b8ff5551682d03e1ed8e42c3ad31e84f6855a22c682a3b51f5f552c9651ace426d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x1e0, 0x4b, [0x110f0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "e374"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) 5m6.108424562s ago: executing program 1 (id=1821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 5m5.96818486s ago: executing program 4 (id=1822): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)={0x40, 0x7, 0x74, "9cf792d715460e3f93bf0762b609cf299cdabeedeaeb1752535d9f0c9f65a28bc9578268a4b34b185ee54dd01a4c3e32d08ed1f23b950fb84435e6ea707f2e899d2e59e9069fcc29a6575863378eb6c2cb7456b8ff5551682d03e1ed8e42c3ad31e84f6855a22c682a3b51f5f552c9651ace426d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x1e0, 0x4b, [0x110f0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "e374"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) 5m4.976880061s ago: executing program 0 (id=1823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x80064e}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x20000, 0x80ffffff}]}) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 5m4.513492585s ago: executing program 6 (id=1824): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m4.469001888s ago: executing program 0 (id=1825): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = userfaultfd(0x80001) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x9, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5m4.275943645s ago: executing program 6 (id=1826): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000006c0)={0x40, 0x7, 0x74, "9cf792d715460e3f93bf0762b609cf299cdabeedeaeb1752535d9f0c9f65a28bc9578268a4b34b185ee54dd01a4c3e32d08ed1f23b950fb84435e6ea707f2e899d2e59e9069fcc29a6575863378eb6c2cb7456b8ff5551682d03e1ed8e42c3ad31e84f6855a22c682a3b51f5f552c9651ace426d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x8, {0x1e0, 0x4b, [0x110f0]}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "e374"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x1ff}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @random="9aec6134b492"}, &(0x7f0000000c00)={0x40, 0x17, 0x6}, 0x0, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0xb3}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x7}}) 5m2.686696055s ago: executing program 0 (id=1827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000200)={0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) 5m1.929254711s ago: executing program 2 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) getdents64(r1, &(0x7f0000000680)=""/4067, 0xfe3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)="0f1cdb39454b7782165a2d29acbb6ff14201d769be88e74b041469b792c91ff9ca0d216f79462e55219537e680320df3770429e966b17a192f01bc2e0744", 0x3e}, {&(0x7f00000002c0)="30658e33f6fea85c709fc160f18ef7b0d1098fc3ab11dd9cc31dc0bbbe4eaf1c3b2e68c4954d1f931b87b8e48890040f890bce9e8bb1477f6fee1ba5c60fb4b080a038fe6fde7a864dd0284bdb9c3fa5203c18403c1c952e02422c94dee9278fc3d744b6bcf46b48ba8d77a6fd8205dc852775e2027f6d903203107fdd0ca8654e445461b7e6dcc2654166c714b53311398163ffc7924007c60497c2feb8c817872f0e4661cf8f97a658d4", 0xab}, {&(0x7f0000000380)="f107a47cf3c1afd6f8904e0d4f43384fc2b2e1f8c1", 0x15}], 0x3, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x6}, {@broadcast, 0x2}, {@multicast2, 0x8}, {@loopback, 0xffff5536}, {@broadcast, 0xa}, {@local, 0x9af}]}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x1, [{@empty, 0x8000}, {@private=0xa010100, 0x1}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x2}]}, @rr={0x7, 0x23, 0xb5, [@dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xdf}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x108}, 0x4000014) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$hidraw(0x0, 0x4, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) 5m1.277488103s ago: executing program 4 (id=1829): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de90f6007009021200010000000009"], 0x0) 5m0.315010643s ago: executing program 2 (id=1830): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a0000000000000000070000", @ANYRES32=r2], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000274, 0x480c0) 4m59.933888203s ago: executing program 2 (id=1831): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1}, 0x7, 0x4, &(0x7f0000000040)={0x40, 0x1f, 0x0, 0x2, 0x67}, 0x8, 0x5, 0x5, 0x0, 0x7, 0x4, &(0x7f00000000c0)="62658c7b434668bdac94886b2afcefc15908064a31952de8ef241d7808d7e5b228bc877146c4fdc7a875804f79ba457b615683bfa553e4fc027aab"}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x92, {0x92, 0x8, "e1f6fd6ecf2d0866cde4d09a38676f82d49325130402b9a8f29bc84b9b4e05074f407f9b8c01659cb96736fd0cf93896ca9f937bdb9efc7f930b86471f0f7b23af37c5c5f554100403ad458ba2c414942401e4224004b4a97f88c939e01c0c1928bfbfe970f30bd909ddf158efa1e46b7d4cfb5a0700f6c18ccd74c735489beb60bcd073a57987074a35548bb4f1af90"}}, &(0x7f0000000280)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "ddde8f9d8f1801f098e40ae608516833583c57a5246510c73b9d9c0a710b939e591d285419865e402cadaa69aaa4be17cf0b0b9a298f37d4a89362f8ed3302a800fc343092baf9490e51b611ee6c954b312dcfd7728e7441410aa51aacab5057e86e0faf50dbb37d54418e47200c0dc619b9e99d04fc92fe3a238b3287b4c1af05df8fe951c80b5045ff11021cf10c3abcf8929866b4aceebc8a140b03b3cbedc6b423a5043befc3b79e4ed59237c206bf74805656faf06240982d204e4cbc45725b9473858440d212727637f1fe01d5144aaba0d50f1da348e793bf219e39ab1ade"}}, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x10, 0x0, 0xe, "b59579f0", "f70d03dc"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x7, 0x0, 0x8, 0x8, 0xa}}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x48, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = getuid() quotactl_fd$Q_SETINFO(r5, 0xffffffff80000602, r9, &(0x7f00000003c0)={0x40, 0x4, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) 4m59.742651034s ago: executing program 6 (id=1832): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b1e000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xe1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14}}, 0x70}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xc0000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m59.460775404s ago: executing program 4 (id=1833): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4m58.969606196s ago: executing program 0 (id=1834): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}, 0x80, 0x0}}], 0x1, 0x200000c1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) accept4(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f00000002c0)=0x80, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587"], 0x0) 4m58.369682543s ago: executing program 1 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x61) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r7 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 4m58.095362373s ago: executing program 6 (id=1836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4m57.893145379s ago: executing program 6 (id=1837): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = userfaultfd(0x80001) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x9, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4m42.702079953s ago: executing program 34 (id=1834): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}, 0x80, 0x0}}], 0x1, 0x200000c1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x4}, 0x8) accept4(0xffffffffffffffff, &(0x7f0000000180)=@alg, &(0x7f00000002c0)=0x80, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x4886) rt_tgsigqueueinfo(0x0, 0x0, 0x3e, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff03814006090587"], 0x0) 4m41.751355274s ago: executing program 35 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x61) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r4, 0x541b, 0x20000000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r6, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r7 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 4m41.536771536s ago: executing program 36 (id=1831): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1}, 0x7, 0x4, &(0x7f0000000040)={0x40, 0x1f, 0x0, 0x2, 0x67}, 0x8, 0x5, 0x5, 0x0, 0x7, 0x4, &(0x7f00000000c0)="62658c7b434668bdac94886b2afcefc15908064a31952de8ef241d7808d7e5b228bc877146c4fdc7a875804f79ba457b615683bfa553e4fc027aab"}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x23, 0x92, {0x92, 0x8, "e1f6fd6ecf2d0866cde4d09a38676f82d49325130402b9a8f29bc84b9b4e05074f407f9b8c01659cb96736fd0cf93896ca9f937bdb9efc7f930b86471f0f7b23af37c5c5f554100403ad458ba2c414942401e4224004b4a97f88c939e01c0c1928bfbfe970f30bd909ddf158efa1e46b7d4cfb5a0700f6c18ccd74c735489beb60bcd073a57987074a35548bb4f1af90"}}, &(0x7f0000000280)={0x0, 0x3, 0xe4, @string={0xe4, 0x3, "ddde8f9d8f1801f098e40ae608516833583c57a5246510c73b9d9c0a710b939e591d285419865e402cadaa69aaa4be17cf0b0b9a298f37d4a89362f8ed3302a800fc343092baf9490e51b611ee6c954b312dcfd7728e7441410aa51aacab5057e86e0faf50dbb37d54418e47200c0dc619b9e99d04fc92fe3a238b3287b4c1af05df8fe951c80b5045ff11021cf10c3abcf8929866b4aceebc8a140b03b3cbedc6b423a5043befc3b79e4ed59237c206bf74805656faf06240982d204e4cbc45725b9473858440d212727637f1fe01d5144aaba0d50f1da348e793bf219e39ab1ade"}}, &(0x7f0000000b00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfc, 0x10, 0x0, 0xe, "b59579f0", "f70d03dc"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x7, 0x0, 0x8, 0x8, 0xa}}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x48, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r6, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_IFALIASn={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = getuid() quotactl_fd$Q_SETINFO(r5, 0xffffffff80000602, r9, &(0x7f00000003c0)={0x40, 0x4, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) 4m41.223544457s ago: executing program 37 (id=1837): sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) socket$netlink(0x10, 0x3, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = userfaultfd(0x80001) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x9, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4m40.991720892s ago: executing program 38 (id=1833): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 41.522025565s ago: executing program 8 (id=1953): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xffdffe0000000001, 0x401, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='schedstat\x00') preadv(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000001070101000000000000001b01000009140007800800014000000006080002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}}) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 30.269996073s ago: executing program 8 (id=1954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x20, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x48008) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x10804}, 0x0) 27.767125847s ago: executing program 8 (id=1955): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) listen(0xffffffffffffffff, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r2, 0x5, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) close(r2) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r9, 0x4) write$6lowpan_enable(r0, &(0x7f0000000f40)='0', 0x1) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x70, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x40c4) 25.362333873s ago: executing program 8 (id=1956): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x7a0, 0x0, 0x228, 0x0, 0x5b8, 0x5b8, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6d0, 0x6, &(0x7f0000000380), {[{{@ipv6={@empty, @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff], 'veth1_virt_wifi\x00', 'batadv0\x00', {}, {0x1cd2af259700f990}, 0x33, 0x66, 0x0, 0x60}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x10, 0x5], 0x2, 0xa11b7ddcf662e78e, 0x4, [@loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback, @dev={0xfe, 0x80, '\x00', 0x10}, @loopback, @mcast2, @local, @loopback, @private0, @private1], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010101, @ipv4=@local, 0x80, 0x2c, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x12, "b02b"}}, @common=@hbh={{0x48}, {0x386b, 0x3, 0x0, [0x347, 0x9, 0x81, 0x6, 0x0, 0xd, 0x1, 0x8000, 0xe5, 0xff, 0xff01, 0x5, 0x3, 0x5, 0x8, 0x6], 0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x6c03, @ipv4=@private=0xa010101, 0x4e22}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@remote, 0x21, 0x35, 0x500}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0x0, 0xff, 0xff], 'bridge_slave_0\x00', 'gretap0\x00', {0xff}, {}, 0x8, 0xf, 0x1, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x21, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@mcast2, 0x30, 0x3b, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) close(0x3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) r5 = dup2(r4, r4) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) 16.663532841s ago: executing program 8 (id=1957): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 16.1713294s ago: executing program 8 (id=1958): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000004280)=[{{&(0x7f0000000080)=@nfc, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) unshare(0x60000600) syz_usb_connect(0x0, 0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000498b81403b0905a08109000000010902"], 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0xae4b, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f906, 0x1000000, '\x00', @value64=0x6}}) getuid() setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0e05d4c9eb0003000200070000000900"], 0x14) flock(r1, 0x0) 0s ago: executing program 39 (id=1958): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r2], 0x28}}, 0x0) recvmmsg(r1, &(0x7f0000004280)=[{{&(0x7f0000000080)=@nfc, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) unshare(0x60000600) syz_usb_connect(0x0, 0x34, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000498b81403b0905a08109000000010902"], 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0xae4b, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f906, 0x1000000, '\x00', @value64=0x6}}) getuid() setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0e05d4c9eb0003000200070000000900"], 0x14) flock(r1, 0x0) kernel console output (not intermixed with test programs): o endpoint descriptor for endpoint 84 [ 974.858895][T12329] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 974.858982][T12329] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 974.859067][T12329] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 974.859156][T12329] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 974.923884][T12329] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 975.027503][T12659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.066498][T12659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 975.105132][T12659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.226090][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.226185][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.288144][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.289825][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.497859][T11220] usb 9-1: USB disconnect, device number 12 [ 975.620501][T11220] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 975.682925][T11220] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 975.703853][T11220] keyspan 9-1:0.11: device disconnected [ 976.142978][T12650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.166471][T12656] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 976.362420][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.388217][T12043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.427229][T12656] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 976.481763][T12043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.487301][T12043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.515106][T12043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.516898][T12043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.695198][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.730214][T12656] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 976.924508][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.955649][T12656] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 977.244742][T12656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.211001][T12036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 978.275406][T12036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 978.303441][T12036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 978.320658][T12036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 978.339002][T12036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 978.713762][T12036] Bluetooth: hci0: command tx timeout [ 979.126392][T12043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 979.245538][T12043] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 979.346335][T12043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 979.369064][T12043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 979.384385][T12043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 979.874104][T12043] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 979.904362][T12043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 979.922934][T12043] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 979.959892][T12043] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.025548][T12043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.620023][T12043] Bluetooth: hci2: command tx timeout [ 980.791860][T12043] Bluetooth: hci0: command tx timeout [ 981.511647][T12043] Bluetooth: hci3: command tx timeout [ 981.941750][ T5784] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 982.091637][ T5784] usb 9-1: Using ep0 maxpacket: 16 [ 982.094185][ T5784] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 982.097715][ T5784] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 982.097748][ T5784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.097773][ T5784] usb 9-1: Product: syz [ 982.097785][ T5784] usb 9-1: Manufacturer: syz [ 982.097796][ T5784] usb 9-1: SerialNumber: syz [ 982.170552][ T5784] usb 9-1: config 0 descriptor?? [ 982.231695][T12043] Bluetooth: hci4: command tx timeout [ 982.642367][T12043] Bluetooth: hci2: command tx timeout [ 982.858341][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 982.872250][T12043] Bluetooth: hci0: command tx timeout [ 983.628742][T12043] Bluetooth: hci3: command tx timeout [ 983.939858][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 984.311530][T12034] Bluetooth: hci4: command tx timeout [ 984.711598][T12043] Bluetooth: hci2: command tx timeout [ 984.787967][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 984.806539][ T5785] usb 9-1: USB disconnect, device number 13 [ 984.951825][T12034] Bluetooth: hci0: command tx timeout [ 985.120594][T12043] Bluetooth: hci1: command 0x0406 tx timeout [ 985.654637][ T5715] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 985.671541][T12036] Bluetooth: hci3: command tx timeout [ 985.829669][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 985.847378][ T5715] usb 9-1: Using ep0 maxpacket: 8 [ 985.856430][ T5715] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 985.856460][ T5715] usb 9-1: config 179 has no interface number 0 [ 985.856511][ T5715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 985.856542][ T5715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 985.856579][ T5715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 985.856609][ T5715] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 985.856639][ T5715] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 985.856685][ T5715] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 985.856716][ T5715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.983926][T13234] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 986.401487][T12036] Bluetooth: hci4: command tx timeout [ 986.801582][T12036] Bluetooth: hci2: command tx timeout [ 987.471870][ T3363] bridge_slave_1: left allmulticast mode [ 987.471911][ T3363] bridge_slave_1: left promiscuous mode [ 987.472247][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.535715][ T3363] bridge_slave_0: left allmulticast mode [ 987.535756][ T3363] bridge_slave_0: left promiscuous mode [ 987.536034][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.751554][T12036] Bluetooth: hci3: command tx timeout [ 988.471591][T12036] Bluetooth: hci4: command tx timeout [ 988.532729][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.557976][ T5784] usb 9-1: USB disconnect, device number 14 [ 988.557976][ C1] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 988.558053][ C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 988.632672][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.724110][ T3363] bond0 (unregistering): Released all slaves [ 989.069694][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.069902][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.070152][T13104] bridge_slave_0: entered allmulticast mode [ 989.176990][T13104] bridge_slave_0: entered promiscuous mode [ 989.499963][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.500060][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.500258][T13104] bridge_slave_1: entered allmulticast mode [ 989.567629][T13104] bridge_slave_1: entered promiscuous mode [ 989.662122][T13272] syz.8.1891 (13272): drop_caches: 2 [ 990.061740][ T3363] hsr_slave_0: left promiscuous mode [ 990.102077][ T3363] hsr_slave_1: left promiscuous mode [ 990.102963][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.125455][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.211596][T10012] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 990.361734][T10012] usb 9-1: Using ep0 maxpacket: 16 [ 990.363799][T10012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 14129, setting to 64 [ 990.367671][T10012] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 990.367694][T10012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.367709][T10012] usb 9-1: Product: syz [ 990.367720][T10012] usb 9-1: Manufacturer: syz [ 990.367732][T10012] usb 9-1: SerialNumber: syz [ 990.425443][T10012] usb 9-1: config 0 descriptor?? [ 990.458284][T10012] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 990.458323][T10012] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 990.732410][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 990.783393][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 991.044263][T10012] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 991.062730][T13113] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.063352][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.064017][T13113] bridge_slave_0: entered allmulticast mode [ 991.068078][T13113] bridge_slave_0: entered promiscuous mode [ 991.169248][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.170055][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.170177][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.170445][T13120] bridge_slave_0: entered allmulticast mode [ 991.176569][T13120] bridge_slave_0: entered promiscuous mode [ 991.223031][T13113] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.223177][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.223449][T13113] bridge_slave_1: entered allmulticast mode [ 991.228786][T13113] bridge_slave_1: entered promiscuous mode [ 991.273928][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.274140][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.274258][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.274404][T13120] bridge_slave_1: entered allmulticast mode [ 991.276243][T13120] bridge_slave_1: entered promiscuous mode [ 991.330595][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.330725][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.330869][T13124] bridge_slave_0: entered allmulticast mode [ 991.340303][T13124] bridge_slave_0: entered promiscuous mode [ 991.485934][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.486046][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.486770][T13124] bridge_slave_1: entered allmulticast mode [ 991.489900][T13124] bridge_slave_1: entered promiscuous mode [ 991.490030][T10012] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 991.490058][T10012] em28xx 9-1:0.0: board has no eeprom [ 991.619892][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.647393][T13104] team0: Port device team_slave_0 added [ 991.699973][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.733942][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.764470][T13104] team0: Port device team_slave_1 added [ 991.797182][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.820489][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.921546][T10012] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 991.921578][T10012] em28xx 9-1:0.0: dvb set to bulk mode. [ 991.921897][ T5784] em28xx 9-1:0.0: Binding DVB extension [ 992.102704][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.180246][T13113] team0: Port device team_slave_0 added [ 992.265324][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.265379][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.265401][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.268927][T13113] team0: Port device team_slave_1 added [ 992.324675][T13120] team0: Port device team_slave_0 added [ 992.854917][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.854937][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.854968][T13104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.960449][T13120] team0: Port device team_slave_1 added [ 992.969804][T13124] team0: Port device team_slave_0 added [ 993.058131][T13124] team0: Port device team_slave_1 added [ 993.068845][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.068859][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.068881][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.197072][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.197088][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.197121][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.199838][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.199852][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.199873][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.394961][T13286] em28xx 9-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 993.396422][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.396441][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.396474][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.466321][ T5715] usb 9-1: USB disconnect, device number 15 [ 993.470108][ T5715] em28xx 9-1:0.0: Disconnecting em28xx [ 993.493298][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.493317][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.493350][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.751694][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.751714][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.751746][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.856567][T13104] hsr_slave_0: entered promiscuous mode [ 993.857754][T13104] hsr_slave_1: entered promiscuous mode [ 993.879363][ T5784] em28xx 9-1:0.0: Registering input extension [ 993.883467][ T5715] em28xx 9-1:0.0: Closing input extension [ 993.990905][ T5715] em28xx 9-1:0.0: Freeing device [ 994.307832][T13310] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 994.572189][T13113] hsr_slave_0: entered promiscuous mode [ 994.573599][T13113] hsr_slave_1: entered promiscuous mode [ 994.574366][T13113] debugfs: 'hsr0' already exists in 'hsr' [ 994.574386][T13113] Cannot create hsr debugfs directory [ 994.583161][T13120] hsr_slave_0: entered promiscuous mode [ 994.585412][T13120] hsr_slave_1: entered promiscuous mode [ 994.586407][T13120] debugfs: 'hsr0' already exists in 'hsr' [ 994.586435][T13120] Cannot create hsr debugfs directory [ 995.035270][T13124] hsr_slave_0: entered promiscuous mode [ 995.036329][T13124] hsr_slave_1: entered promiscuous mode [ 995.037123][T13124] debugfs: 'hsr0' already exists in 'hsr' [ 995.037143][T13124] Cannot create hsr debugfs directory [ 995.042313][ T5784] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 995.192223][ T5784] usb 9-1: Using ep0 maxpacket: 32 [ 995.194299][ T5784] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 995.194330][ T5784] usb 9-1: config 0 has no interface number 0 [ 995.194371][ T5784] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 995.194388][ T5784] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 995.194408][ T5784] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 995.194429][ T5784] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 995.194448][ T5784] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 995.194467][ T5784] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 995.194485][ T5784] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 995.194503][ T5784] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 995.194522][ T5784] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 995.194541][ T5784] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 995.196995][ T5784] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 995.197027][ T5784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.197050][ T5784] usb 9-1: Product: syz [ 995.197071][ T5784] usb 9-1: Manufacturer: syz [ 995.197082][ T5784] usb 9-1: SerialNumber: syz [ 995.204657][ T5784] usb 9-1: config 0 descriptor?? [ 995.377075][T13312] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 995.389499][T13312] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 995.407051][ T5784] usb 9-1: will this work? Response EP is not usually 3 [ 995.407071][ T5784] usb 9-1: will this work? Image data EP is not usually 2 [ 995.458602][ T5784] scsi host1: microtekX6 [ 995.807637][ T5784] usb 9-1: USB disconnect, device number 16 [ 997.702440][ T5784] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 997.851599][ T5784] usb 9-1: Using ep0 maxpacket: 32 [ 997.853844][ T5784] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 997.853877][ T5784] usb 9-1: config 0 has no interface number 0 [ 997.853924][ T5784] usb 9-1: config 0 interface 12 has no altsetting 0 [ 997.856654][ T5784] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 997.856695][ T5784] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.856717][ T5784] usb 9-1: Product: syz [ 997.856734][ T5784] usb 9-1: Manufacturer: syz [ 997.856750][ T5784] usb 9-1: SerialNumber: syz [ 997.929803][ T5784] usb 9-1: config 0 descriptor?? [ 998.406773][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.406846][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.985592][ T5784] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 998.985654][ T5784] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 998.985674][ T5784] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 998.985780][ T5784] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 999.006144][ T5784] usb 9-1: USB disconnect, device number 17 [ 999.854372][T13323] syz.8.1898 (13323): drop_caches: 2 [ 1001.028265][ T5260] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1003.882496][T12329] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1004.031619][T12329] usb 9-1: Using ep0 maxpacket: 8 [ 1004.039986][T12329] usb 9-1: config 2 has an invalid interface number: 31 but max is 0 [ 1004.040017][T12329] usb 9-1: config 2 has no interface number 0 [ 1004.040068][T12329] usb 9-1: config 2 interface 31 has no altsetting 0 [ 1004.105775][T12329] usb 9-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1004.105809][T12329] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.105832][T12329] usb 9-1: Product: syz [ 1004.105847][T12329] usb 9-1: Manufacturer: syz [ 1004.105863][T12329] usb 9-1: SerialNumber: syz [ 1004.677473][T12329] ch9200 9-1:2.31: probe with driver ch9200 failed with error -22 [ 1004.705823][T12329] usb 9-1: USB disconnect, device number 18 [ 1005.495083][T13393] ALSA: mixer_oss: invalid OSS volume '`ÛÉŽš (' [ 1005.925656][ T5829] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1006.074648][ T5829] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.074679][ T5829] usb 9-1: config 0 has no interfaces? [ 1006.074717][ T5829] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1006.074736][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.122298][ T5829] usb 9-1: config 0 descriptor?? [ 1006.434224][ T5785] usb 9-1: USB disconnect, device number 19 [ 1006.891746][ T3363] bridge_slave_1: left allmulticast mode [ 1006.891786][ T3363] bridge_slave_1: left promiscuous mode [ 1006.892093][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.995312][ T3363] bridge_slave_0: left allmulticast mode [ 1006.995355][ T3363] bridge_slave_0: left promiscuous mode [ 1006.995569][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.191887][ T3363] bridge_slave_1: left allmulticast mode [ 1007.191916][ T3363] bridge_slave_1: left promiscuous mode [ 1007.192115][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.275652][ T3363] bridge_slave_0: left allmulticast mode [ 1007.275692][ T3363] bridge_slave_0: left promiscuous mode [ 1007.275958][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.397404][T13431] syz.8.1905 (13431): drop_caches: 2 [ 1007.471877][ T3363] bridge_slave_1: left allmulticast mode [ 1007.471906][ T3363] bridge_slave_1: left promiscuous mode [ 1007.472096][ T3363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.553461][ T3363] bridge_slave_0: left allmulticast mode [ 1007.553489][ T3363] bridge_slave_0: left promiscuous mode [ 1007.553682][ T3363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.112367][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.192589][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.256142][ T3363] bond0 (unregistering): Released all slaves [ 1008.443320][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.522421][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.584973][ T3363] bond0 (unregistering): Released all slaves [ 1009.112644][ T3363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.193239][ T3363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.253606][ T3363] bond0 (unregistering): Released all slaves [ 1009.296077][T13435] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1009.296179][T13435] bridge0: port 2(veth0_to_bridge) entered disabled state [ 1009.296635][T13435] veth0_to_bridge: entered allmulticast mode [ 1009.332764][T13435] veth0_to_bridge: entered promiscuous mode [ 1009.333155][T13435] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1009.338502][T13435] bridge0: port 2(veth0_to_bridge) entered blocking state [ 1009.338868][T13435] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 1011.045413][ T3363] hsr_slave_0: left promiscuous mode [ 1011.081619][ T3363] hsr_slave_1: left promiscuous mode [ 1011.082491][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.105467][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.301655][ T3363] hsr_slave_0: left promiscuous mode [ 1011.342345][ T3363] hsr_slave_1: left promiscuous mode [ 1011.345892][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.371552][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.521888][ T3363] hsr_slave_0: left promiscuous mode [ 1011.543243][ T3363] hsr_slave_1: left promiscuous mode [ 1011.554407][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.582579][ T3363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.243724][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 1012.312428][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 1013.202943][T13469] kAFS: unable to lookup cell 'ÿ' [ 1013.242878][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 1013.322505][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 1013.766307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.766502][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.766723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.766928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.767941][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1015.208770][ T3363] team0 (unregistering): Port device team_slave_1 removed [ 1015.472884][ T3363] team0 (unregistering): Port device team_slave_0 removed [ 1017.940156][T13119] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1018.626605][T13119] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.626653][T13119] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1018.631830][T13119] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.631865][T13119] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.631888][T13119] usb 9-1: Product: syz [ 1018.631904][T13119] usb 9-1: Manufacturer: syz [ 1018.631920][T13119] usb 9-1: SerialNumber: syz [ 1018.771465][ C1] net_ratelimit: 11932 callbacks suppressed [ 1018.771485][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.771708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.771968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.772270][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.772475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.772691][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.772929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.773168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.773402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.773644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.943719][T13493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.944402][T13493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.008971][T13119] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1019.031606][T13119] usb 9-1: USB disconnect, device number 20 [ 1019.601527][T13119] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1019.791515][T13119] usb 9-1: Using ep0 maxpacket: 8 [ 1019.794187][T13119] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 1019.794223][T13119] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.794279][T13119] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.794305][T13119] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.794332][T13119] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1019.794360][T13119] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.794390][T13119] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.794432][T13119] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1019.794458][T13119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.355971][T13119] usb 9-1: usb_control_msg returned -71 [ 1020.356027][T13119] usbtmc 9-1:16.0: can't read capabilities [ 1020.357440][T13119] usbtmc 9-1:16.0: Failed to submit iin_urb [ 1020.357542][T13119] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -90 [ 1020.700345][T13119] usb 9-1: USB disconnect, device number 21 [ 1023.401620][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1023.551595][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1023.561274][ T10] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1023.561308][ T10] usb 9-1: config 0 has no interface number 0 [ 1023.581835][ T10] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1023.585833][ T10] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1023.585868][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.585891][ T10] usb 9-1: Product: syz [ 1023.585908][ T10] usb 9-1: Manufacturer: syz [ 1023.585935][ T10] usb 9-1: SerialNumber: syz [ 1023.653709][ T10] usb 9-1: config 0 descriptor?? [ 1023.783351][ C1] net_ratelimit: 14005 callbacks suppressed [ 1023.783374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.783753][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.783993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.784239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.784841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.787084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.787345][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.787583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.787831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.788092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1025.251958][ T10] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1025.252020][ T10] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1025.252040][ T10] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1025.252141][ T10] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1025.333360][ T10] usb 9-1: USB disconnect, device number 22 [ 1027.139514][T13104] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1027.563463][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.596975][T13104] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1027.828559][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1027.851334][T13104] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1028.014300][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.020937][T13104] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1028.156448][T13104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1028.501516][T10012] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1028.661849][T10012] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1028.661881][T10012] usb 9-1: config 0 has no interface number 0 [ 1028.661927][T10012] usb 9-1: config 0 interface 214 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1028.670177][T10012] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1028.670211][T10012] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1028.670234][T10012] usb 9-1: Manufacturer: syz [ 1028.670251][T10012] usb 9-1: SerialNumber: syz [ 1028.719414][T10012] usb 9-1: config 0 descriptor?? [ 1028.792884][ C1] net_ratelimit: 15975 callbacks suppressed [ 1028.792909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.793131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.793375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.793571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.793810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.793984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.794173][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.794384][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.794591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.794778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.969850][ T5786] usb 9-1: USB disconnect, device number 23 [ 1029.557297][T13120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1029.613986][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1029.627321][T13120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1029.770324][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1029.816973][T13120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1029.935318][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.964577][T13120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1030.019378][T13120] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.970605][T13104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.247120][T13104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.781909][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.783175][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.844568][T13113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1031.936784][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.008028][T13113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1032.535218][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.601287][T13113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1032.930779][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.956985][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.987965][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.011329][T13113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1033.108011][T13113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.801695][ C1] net_ratelimit: 12955 callbacks suppressed [ 1033.801714][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.801979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.877119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.877352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.877562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.877771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.877968][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.878166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.878351][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.009806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.712080][ T5829] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1034.866509][ T5829] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.866555][ T5829] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.866607][ T5829] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.866634][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.894358][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.928947][T13625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1034.960105][ T5829] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1035.635264][ T5829] usb 9-1: USB disconnect, device number 24 [ 1035.822646][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.975215][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.977066][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.054246][ T3408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.054379][ T3408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.216689][T13124] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1036.649451][T13124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.904998][T13124] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1037.020346][T13124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1037.144342][T13124] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1037.169774][T12043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1037.281571][T12043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1037.316042][T12043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1037.364047][T12043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1037.442471][T12043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1037.541527][T13124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1037.620601][T13124] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1037.968693][T13124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1038.811482][ C1] net_ratelimit: 11780 callbacks suppressed [ 1038.811510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.811797][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.812060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.812326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.812680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.812949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.813206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.813471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.813740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.814008][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.023013][ T5833] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1039.165268][ T5833] usb 9-1: device descriptor read/64, error -71 [ 1039.406046][T12043] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1039.444267][T12043] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1039.447074][T12043] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1039.482520][T12043] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1039.495904][ T5833] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1039.522373][T12043] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1039.751718][T12036] Bluetooth: hci5: command tx timeout [ 1039.811603][ T5833] usb 9-1: device descriptor read/64, error -71 [ 1039.924354][ T5833] usb usb9-port1: attempt power cycle [ 1040.285402][ T5833] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1040.319517][ T5833] usb 9-1: device descriptor read/8, error -71 [ 1040.560123][T12034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1040.573270][ T5833] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1040.602631][ T5833] usb 9-1: device descriptor read/8, error -71 [ 1040.628520][T12034] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1040.666688][T12034] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1040.679536][T12034] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1040.708050][T12034] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1040.715252][ T5833] usb usb9-port1: unable to enumerate USB device [ 1041.449195][T12036] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1041.488941][T12036] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1041.500701][T12036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1041.579550][T12036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1041.597918][T12036] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1041.884586][T12043] Bluetooth: hci5: command tx timeout [ 1042.160063][T12043] Bluetooth: hci0: command tx timeout [ 1043.431684][T12043] Bluetooth: hci6: command tx timeout [ 1043.821906][ C1] net_ratelimit: 6389 callbacks suppressed [ 1043.821929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.822352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.823836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.824109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.824320][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.825304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.825520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.825721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.825943][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.826188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.844405][T12043] Bluetooth: hci7: command tx timeout [ 1043.913592][T12043] Bluetooth: hci5: command tx timeout [ 1044.232383][T12043] Bluetooth: hci0: command tx timeout [ 1045.512609][T12043] Bluetooth: hci6: command tx timeout [ 1045.574877][T13120] syz-executor (13120) used greatest stack depth: 17008 bytes left [ 1045.911750][T12043] Bluetooth: hci7: command tx timeout [ 1045.991634][T12043] Bluetooth: hci5: command tx timeout [ 1046.312167][T12043] Bluetooth: hci0: command tx timeout [ 1047.600408][T12043] Bluetooth: hci6: command tx timeout [ 1047.701605][ T914] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1047.884611][ T914] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1047.884690][ T914] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1047.884732][ T914] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1047.884759][ T914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.968202][ T914] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1047.969068][ T914] usb 9-1: invalid MIDI out EP 0 [ 1047.991808][T12043] Bluetooth: hci7: command tx timeout [ 1048.393893][T12043] Bluetooth: hci0: command tx timeout [ 1048.832314][ C1] net_ratelimit: 13076 callbacks suppressed [ 1048.832338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.832570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.832824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.836067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.836323][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.836550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.836969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.837223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.837531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1048.837772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.592264][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1933'. [ 1049.592294][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1933'. [ 1050.042221][T12043] Bluetooth: hci6: command tx timeout [ 1050.083462][T12043] Bluetooth: hci7: command tx timeout [ 1050.340788][ T914] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1050.540423][ T914] usb 9-1: USB disconnect, device number 29 [ 1050.708665][T13706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1053.843178][ C1] net_ratelimit: 8015 callbacks suppressed [ 1053.843203][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.843447][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.843844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.844093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.844391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.844775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.845065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.845355][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.845617][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1053.845875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1057.604030][T13723] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1937'. [ 1057.685918][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1937'. [ 1058.341897][ T826] bridge_slave_1: left allmulticast mode [ 1058.342040][ T826] bridge_slave_1: left promiscuous mode [ 1058.342375][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.446702][ T826] bridge_slave_0: left allmulticast mode [ 1058.446744][ T826] bridge_slave_0: left promiscuous mode [ 1058.447017][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.871641][ C1] net_ratelimit: 14777 callbacks suppressed [ 1058.871666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.871887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.872144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.872338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.872535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.872723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.873023][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.873228][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.873424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.873613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.718590][ T826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.782612][ T826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.828220][ T826] bond0 (unregistering): Released all slaves [ 1059.834547][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.834612][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.864350][ T826] hsr_slave_0: left promiscuous mode [ 1060.898996][ T826] hsr_slave_1: left promiscuous mode [ 1060.939915][ T826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.993143][ T826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.041593][ T914] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1061.239825][ T914] usb 9-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 1061.239867][ T914] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1061.261170][ T914] usb 9-1: string descriptor 0 read error: -22 [ 1061.261427][ T914] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1061.261456][ T914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.712203][ T914] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 1062.103600][ T914] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/0003:0926:3333.0009/input/input36 [ 1062.734252][ T826] team0 (unregistering): Port device team_slave_1 removed [ 1063.080711][ T826] team0 (unregistering): Port device team_slave_0 removed [ 1064.006828][ C1] net_ratelimit: 15525 callbacks suppressed [ 1064.006853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.007225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.007462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.007704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.007953][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.009150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.009429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.009742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.009997][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.010238][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1065.037548][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.037683][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.037943][T13634] bridge_slave_0: entered allmulticast mode [ 1065.066684][T13634] bridge_slave_0: entered promiscuous mode [ 1065.249384][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.249544][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.249811][T13634] bridge_slave_1: entered allmulticast mode [ 1065.286730][T13634] bridge_slave_1: entered promiscuous mode [ 1065.575776][T13756] netlink: 'syz.8.1943': attribute type 5 has an invalid length. [ 1066.037391][ T914] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1066.252771][ T914] usb 9-1: USB disconnect, device number 30 [ 1066.476104][T13763] fido_id[13763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1066.568838][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.800292][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.518143][T13770] netlink: 'syz.8.1944': attribute type 9 has an invalid length. [ 1069.011572][ C1] net_ratelimit: 12169 callbacks suppressed [ 1069.011594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.011815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.012055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.012364][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.012604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.012830][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.013063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.013307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.013547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.013774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1069.895656][T13650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.895948][T13650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.896159][T13650] bridge_slave_0: entered allmulticast mode [ 1069.930492][T13650] bridge_slave_0: entered promiscuous mode [ 1069.979065][T13634] team0: Port device team_slave_0 added [ 1070.010502][T13643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.011696][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.011954][T13643] bridge_slave_0: entered allmulticast mode [ 1070.058302][T13643] bridge_slave_0: entered promiscuous mode [ 1070.129477][T13650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.129613][T13650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.129897][T13650] bridge_slave_1: entered allmulticast mode [ 1070.163929][T13650] bridge_slave_1: entered promiscuous mode [ 1070.372445][T13634] team0: Port device team_slave_1 added [ 1070.521612][T13643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.521732][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.521981][T13643] bridge_slave_1: entered allmulticast mode [ 1070.528482][T13643] bridge_slave_1: entered promiscuous mode [ 1071.216010][T13654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.216185][T13654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.216354][T13654] bridge_slave_0: entered allmulticast mode [ 1071.220108][T13654] bridge_slave_0: entered promiscuous mode [ 1071.528561][T13650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.550594][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.550616][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.550648][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.601792][T13654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.601924][T13654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.602186][T13654] bridge_slave_1: entered allmulticast mode [ 1071.617742][T13654] bridge_slave_1: entered promiscuous mode [ 1071.933789][T13643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.943155][T13650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.944450][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.944469][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.944500][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.336576][T13643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.624490][T13654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.708373][T13650] team0: Port device team_slave_0 added [ 1072.775260][T13654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.778774][T13643] team0: Port device team_slave_0 added [ 1072.829118][T13650] team0: Port device team_slave_1 added [ 1073.132234][T13643] team0: Port device team_slave_1 added [ 1074.004828][T13634] hsr_slave_0: entered promiscuous mode [ 1074.021927][ C1] net_ratelimit: 16196 callbacks suppressed [ 1074.021951][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.022255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.022556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.022821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.028372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.028606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.028792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.028967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.029146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.029319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.054598][T13634] hsr_slave_1: entered promiscuous mode [ 1074.189964][T13654] team0: Port device team_slave_0 added [ 1074.384786][T13650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.384808][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.384830][T13650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.389468][T13654] team0: Port device team_slave_1 added [ 1075.408691][T13643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.408714][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.408746][T13643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.575264][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1946'. [ 1075.692743][T13650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.692765][T13650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.692798][T13650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.773467][T13643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.773488][T13643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.773520][T13643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.498704][T13654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.498724][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.498756][T13654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.020250][T13654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.020270][T13654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.020301][T13654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.079030][ C1] net_ratelimit: 18030 callbacks suppressed [ 1079.079051][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.079332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.079584][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.079887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.080157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.080398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.080632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.080858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.081096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.216111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1081.419926][T13643] hsr_slave_0: entered promiscuous mode [ 1081.436565][T13643] hsr_slave_1: entered promiscuous mode [ 1081.437721][T13643] debugfs: 'hsr0' already exists in 'hsr' [ 1081.437749][T13643] Cannot create hsr debugfs directory [ 1081.461256][T13650] hsr_slave_0: entered promiscuous mode [ 1081.467776][T13650] hsr_slave_1: entered promiscuous mode [ 1081.468888][T13650] debugfs: 'hsr0' already exists in 'hsr' [ 1081.468918][T13650] Cannot create hsr debugfs directory [ 1081.541116][ T5260] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1081.791487][T13119] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1082.094940][T13654] hsr_slave_0: entered promiscuous mode [ 1082.096424][T13654] hsr_slave_1: entered promiscuous mode [ 1082.097591][T13654] debugfs: 'hsr0' already exists in 'hsr' [ 1082.097618][T13654] Cannot create hsr debugfs directory [ 1082.216306][T13119] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1082.216353][T13119] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1082.216379][T13119] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1082.216422][T13119] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1082.216449][T13119] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.289425][T13119] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1082.897010][T13119] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1082.980841][T13119] usb 9-1: USB disconnect, device number 31 [ 1084.084917][ C1] net_ratelimit: 15893 callbacks suppressed [ 1084.084970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.087588][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.089940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.149428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.167745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.170228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.202048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.204218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.207124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.209559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.717397][T13842] netlink: 'syz.8.1950': attribute type 9 has an invalid length. [ 1088.781623][ T5829] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1088.931708][ T5829] usb 9-1: Using ep0 maxpacket: 8 [ 1088.954818][ T5829] usb 9-1: config 0 has no interfaces? [ 1088.954862][ T5829] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1088.954889][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.998280][ T5829] usb 9-1: config 0 descriptor?? [ 1089.091513][ C1] net_ratelimit: 11821 callbacks suppressed [ 1089.091538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.091751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.091928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.092095][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.092278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.092445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.092673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.092892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.093068][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.093240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.101395][ C0] net_ratelimit: 27388 callbacks suppressed [ 1094.101420][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.101618][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.101816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.102067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.102268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.102457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.102656][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.102890][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.103130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.103371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1094.634045][T12603] usb 9-1: USB disconnect, device number 32 [ 1095.051910][ T5260] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1097.400057][T13876] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1953'. [ 1097.665290][T13876] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1099.111478][ C0] net_ratelimit: 24708 callbacks suppressed [ 1099.111503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.111696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.111865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.112036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.112429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.112652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.112814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.112974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.113133][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1099.113299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1101.719373][T12036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1101.795057][T12036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1101.808030][T12036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1101.820643][T12036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1101.822376][T12036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.066991][T12036] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1102.129290][T12036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1102.165233][T12036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1102.252430][T12036] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1102.264509][T12036] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1104.071603][T12043] Bluetooth: hci2: command tx timeout [ 1104.121447][ C1] net_ratelimit: 17837 callbacks suppressed [ 1104.121471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.121688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.121907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.122107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.122337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.122510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.122689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.122861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.123039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.123217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1104.475548][T12036] Bluetooth: hci3: command tx timeout [ 1104.516259][T12036] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1104.654807][T12036] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1104.851739][T12034] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1105.804945][T12034] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1105.823549][T12034] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1105.846514][T12034] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1105.873409][T12034] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1105.877199][T12034] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1105.878024][T12034] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1106.139764][T12036] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1106.151564][T12034] Bluetooth: hci2: command tx timeout [ 1106.551586][T12036] Bluetooth: hci3: command tx timeout [ 1108.071600][T12036] Bluetooth: hci8: command tx timeout [ 1108.244897][T12036] Bluetooth: hci2: command tx timeout [ 1108.471846][T12036] Bluetooth: hci4: command tx timeout [ 1108.631511][T12036] Bluetooth: hci3: command tx timeout [ 1109.131375][ C1] net_ratelimit: 23161 callbacks suppressed [ 1109.131399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.131606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.131627][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.131870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.131883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.132115][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.132142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.132398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1109.132413][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1109.132645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.152231][T12036] Bluetooth: hci8: command tx timeout [ 1111.152491][T12043] Bluetooth: hci4: command tx timeout [ 1111.152532][T12043] Bluetooth: hci3: command tx timeout [ 1111.158218][T12036] Bluetooth: hci2: command tx timeout [ 1112.241833][T12034] Bluetooth: hci8: command tx timeout [ 1113.242224][T12034] Bluetooth: hci4: command tx timeout [ 1114.141644][ C0] net_ratelimit: 21370 callbacks suppressed [ 1114.141653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.141668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.141896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.141944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.142165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.142292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.142403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1114.142568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.142819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.143080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1114.311515][T12034] Bluetooth: hci8: command tx timeout [ 1115.271449][T12034] Bluetooth: hci4: command tx timeout [ 1119.151564][ C0] net_ratelimit: 20598 callbacks suppressed [ 1119.151587][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.151782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.151974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.152179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.152365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.152554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.152818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.153058][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.153306][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.153557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1121.285035][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.285110][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.473206][T12603] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1121.886447][T12603] usb 9-1: config 0 has no interfaces? [ 1121.886491][T12603] usb 9-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 1121.886518][T12603] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.927928][T12603] usb 9-1: config 0 descriptor?? [ 1124.161467][ C0] net_ratelimit: 27409 callbacks suppressed [ 1124.161492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.161702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.161810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.161967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.162073][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.162268][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.162368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.162534][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1124.162635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1124.162820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1129.171586][ C0] net_ratelimit: 30695 callbacks suppressed [ 1129.171612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.171895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.172236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.172490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.172735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.172972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.173198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.173445][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.173693][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1129.173936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.181432][ C1] net_ratelimit: 33138 callbacks suppressed [ 1134.181457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.181457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.181695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.181712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.181946][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.182007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.182176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.182259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1134.182416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1134.182498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.191469][ C0] net_ratelimit: 29956 callbacks suppressed [ 1139.191493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.191727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.191953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.192183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1139.193448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.193749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.194263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.194561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.194829][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.195099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1139.957272][T12036] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1140.030981][T12036] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1140.049412][T12036] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1140.071259][T12036] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1140.073098][T12036] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1142.638848][T12034] Bluetooth: hci9: command tx timeout [ 1144.201369][ C1] net_ratelimit: 30397 callbacks suppressed [ 1144.201395][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.201514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.201654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.201757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.201908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.201998][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.202161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.202246][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.202404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1144.202486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1144.781549][T12034] Bluetooth: hci9: command tx timeout [ 1146.895965][T12034] Bluetooth: hci9: command tx timeout [ 1148.951549][T12034] Bluetooth: hci9: command tx timeout [ 1149.211452][ C1] net_ratelimit: 34088 callbacks suppressed [ 1149.211476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.211788][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1149.211825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.212020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.212066][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.212263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1149.212311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.212491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1149.212563][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1149.212727][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.221504][ C0] net_ratelimit: 27157 callbacks suppressed [ 1154.221528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.221539][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1154.221793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.221809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.222060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.222092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.222299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.222363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1154.222600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1154.222636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.231606][ C1] net_ratelimit: 31724 callbacks suppressed [ 1159.231631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.231703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.231885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1159.231942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.232130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.232182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.232359][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.232421][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1159.232588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1159.232679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.536455][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1162.981871][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1162.985659][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1162.987590][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1162.988447][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1164.241543][ C0] net_ratelimit: 22112 callbacks suppressed [ 1164.241567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.241867][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.242083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.242315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.242566][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.242796][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.243033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.243273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.243516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.243746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1164.326274][ T4915] Bluetooth: hci7: command 0x0406 tx timeout [ 1164.326324][T12043] Bluetooth: hci6: command 0x0406 tx timeout [ 1164.391821][T12043] Bluetooth: hci5: command 0x0406 tx timeout [ 1165.077978][T10012] usb 9-1: USB disconnect, device number 33 [ 1165.388842][T12043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1165.391265][T12043] Bluetooth: hci0: command tx timeout [ 1165.526670][T12043] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1165.557008][T12043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1165.725278][T12036] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1165.746669][T12036] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1166.760857][T12043] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1166.816040][T12043] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1166.834744][T12043] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1167.007540][T12043] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1167.008583][T12043] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1167.513815][T12043] Bluetooth: hci0: command tx timeout [ 1167.903111][T12043] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1167.946852][T12043] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1167.951064][T12043] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1168.031870][T12043] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1168.090538][T12043] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1169.251515][ C0] net_ratelimit: 17474 callbacks suppressed [ 1169.251539][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.251538][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1169.251797][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.251849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.252044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.252112][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.252282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.252375][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.252522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1169.252649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1169.598856][T14081] Bluetooth: hci0: command tx timeout [ 1170.151800][T14081] Bluetooth: hci1: command tx timeout [ 1170.330619][T14081] Bluetooth: hci10: command tx timeout [ 1170.872849][T14081] Bluetooth: hci11: command tx timeout [ 1171.671930][T14081] Bluetooth: hci0: command tx timeout [ 1172.240756][T14081] Bluetooth: hci1: command tx timeout [ 1172.391454][T14081] Bluetooth: hci10: command tx timeout [ 1172.951523][T14081] Bluetooth: hci11: command tx timeout [ 1172.983307][ T826] bridge_slave_1: left allmulticast mode [ 1172.983349][ T826] bridge_slave_1: left promiscuous mode [ 1172.983629][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.777655][ T826] bridge_slave_0: left allmulticast mode [ 1173.777696][ T826] bridge_slave_0: left promiscuous mode [ 1173.777982][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.060894][ T826] bridge_slave_1: left allmulticast mode [ 1174.060935][ T826] bridge_slave_1: left promiscuous mode [ 1174.061209][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.145591][ T826] bridge_slave_0: left allmulticast mode [ 1174.145633][ T826] bridge_slave_0: left promiscuous mode [ 1174.145896][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.261463][ C0] net_ratelimit: 29842 callbacks suppressed [ 1174.261488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.261566][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.261745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.261798][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.261986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.262037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.262225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.262266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1174.262505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1174.262536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1174.312038][T14081] Bluetooth: hci1: command tx timeout [ 1174.442473][ T826] bridge_slave_1: left allmulticast mode [ 1174.442533][ T826] bridge_slave_1: left promiscuous mode [ 1174.442817][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.471550][T14081] Bluetooth: hci10: command tx timeout [ 1174.556217][ T826] bridge_slave_0: left allmulticast mode [ 1174.556257][ T826] bridge_slave_0: left promiscuous mode [ 1174.556540][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.034401][T14081] Bluetooth: hci11: command tx timeout [ 1176.391535][T14081] Bluetooth: hci1: command tx timeout [ 1176.551503][T14081] Bluetooth: hci10: command tx timeout [ 1177.272009][T14081] Bluetooth: hci11: command tx timeout [ 1178.835064][ T826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1178.969994][ T826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.097104][ T826] bond0 (unregistering): Released all slaves [ 1179.271516][ C1] net_ratelimit: 33225 callbacks suppressed [ 1179.271541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.271863][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.272163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1179.272479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.272799][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.273109][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.273427][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.273724][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1179.274091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.274399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.275757][ T826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1180.376807][ T826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.489837][ T826] bond0 (unregistering): Released all slaves [ 1182.715776][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.715854][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.281330][ C1] net_ratelimit: 34124 callbacks suppressed [ 1184.281355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.281621][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.281625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.281884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.281901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.282126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.282164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1184.282365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1184.282425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.282601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1187.202065][ T826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1187.314175][ T826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1187.347103][ T826] bond0 (unregistering): Released all slaves [ 1189.291485][ C1] net_ratelimit: 32834 callbacks suppressed [ 1189.291509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1189.291607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.291749][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.291885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.292157][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.292232][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.292387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.292518][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.292626][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.292792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.301471][ C0] net_ratelimit: 31233 callbacks suppressed [ 1194.301499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.301786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.302078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.302268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1194.302317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.302504][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.302556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.302745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.302793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.302993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.311409][ C1] net_ratelimit: 34784 callbacks suppressed [ 1199.311413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.311434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.311679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.311701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.311932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.311958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1199.312183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.312215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.312479][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.312492][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1202.830598][T12043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1202.886615][T12043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1202.889431][T12043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1202.919897][T12043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1202.935427][T12043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1204.330120][ C1] net_ratelimit: 29365 callbacks suppressed [ 1204.330142][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.330458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1204.330694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.330924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.331163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.331795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.332038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1204.332278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.332506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1204.332734][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.201772][T14081] Bluetooth: hci2: command tx timeout [ 1207.271393][T14081] Bluetooth: hci2: command tx timeout [ 1209.337525][ C1] net_ratelimit: 34536 callbacks suppressed [ 1209.337550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1209.337638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.337881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.337885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.338124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.338132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.338367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.338378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.338624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1209.338635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1209.397698][T14081] Bluetooth: hci2: command tx timeout [ 1211.601449][T14081] Bluetooth: hci2: command tx timeout [ 1211.875605][ T826] hsr_slave_0: left promiscuous mode [ 1211.937176][ T826] hsr_slave_1: left promiscuous mode [ 1212.306006][ T826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.893074][ T826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.096267][ T826] hsr_slave_0: left promiscuous mode [ 1213.146884][ T826] hsr_slave_1: left promiscuous mode [ 1213.170258][ T826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.203338][ T826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.452366][ T826] hsr_slave_0: left promiscuous mode [ 1213.620272][ T826] hsr_slave_1: left promiscuous mode [ 1213.764242][ T826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1213.799478][ T826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1214.341432][ C1] net_ratelimit: 35316 callbacks suppressed [ 1214.341457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1214.341686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.341728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1214.341920][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.342015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1214.342227][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.342308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1214.342478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1214.342591][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1214.342712][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1218.508682][ T826] team0 (unregistering): Port device team_slave_1 removed [ 1219.351336][ C0] net_ratelimit: 34314 callbacks suppressed [ 1219.351360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.351551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.351641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.351847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.351915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.352153][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.352258][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.352442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1219.352528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1219.352764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1219.379639][ T826] team0 (unregistering): Port device team_slave_0 removed [ 1224.033042][T12043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1224.254332][T12043] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1224.278805][T12043] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1224.339656][T12043] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1224.345973][T12043] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1224.361569][ C0] net_ratelimit: 30560 callbacks suppressed [ 1224.361589][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.361810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.362028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.362262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.362502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.362782][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.363038][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.363300][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.363707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1224.364029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1225.359979][T14081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1225.479027][T14081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1225.500836][T14081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1225.521069][T14081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1225.525614][T14081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1226.643165][T12043] Bluetooth: hci3: command tx timeout [ 1227.557084][T12034] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1227.634114][T12034] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1227.639416][T12036] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1227.643442][T12034] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1227.681416][T12034] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1227.683747][T12034] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1227.796529][T12036] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1227.800457][T12036] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1227.896201][T12036] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1227.898497][T12036] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1227.936249][ T826] team0 (unregistering): Port device team_slave_1 removed [ 1228.471778][T12036] Bluetooth: hci4: command tx timeout [ 1228.612354][ T826] team0 (unregistering): Port device team_slave_0 removed [ 1228.721491][T12036] Bluetooth: hci3: command tx timeout [ 1229.371490][ C1] net_ratelimit: 22572 callbacks suppressed [ 1229.371516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.371521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1229.371800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.371809][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1229.372073][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1229.372077][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1229.372338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.372347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1229.372600][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.372631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1230.071830][T12036] Bluetooth: hci8: command tx timeout [ 1230.311482][T12036] Bluetooth: hci9: command tx timeout [ 1230.551510][T12036] Bluetooth: hci4: command tx timeout [ 1230.791475][T12036] Bluetooth: hci3: command tx timeout [ 1232.151553][T12036] Bluetooth: hci8: command tx timeout [ 1232.394269][T12036] Bluetooth: hci9: command tx timeout [ 1232.631607][T12036] Bluetooth: hci4: command tx timeout [ 1232.881404][T12036] Bluetooth: hci3: command tx timeout [ 1234.231421][T12036] Bluetooth: hci8: command tx timeout [ 1234.381380][ C1] net_ratelimit: 34923 callbacks suppressed [ 1234.381404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.381571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.381680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.381840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.381955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1234.382095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.382237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.382354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.382501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1234.382623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1234.471807][T12036] Bluetooth: hci9: command tx timeout [ 1234.711447][T12036] Bluetooth: hci4: command tx timeout [ 1236.311435][T12036] Bluetooth: hci8: command tx timeout [ 1236.551770][T12036] Bluetooth: hci9: command tx timeout [ 1238.072585][ T826] team0 (unregistering): Port device team_slave_1 removed [ 1238.351361][ T826] team0 (unregistering): Port device team_slave_0 removed [ 1239.391386][ C0] net_ratelimit: 35232 callbacks suppressed [ 1239.391410][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.391646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.391922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.392200][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.392469][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.392712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1239.394719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.394928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1239.395130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:3e:08:a6:36:fd:1f, vlan:0) [ 1239.395303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1242.941636][ T38] INFO: task syz-executor:13634 blocked for more than 143 seconds. [ 1242.941671][ T38] Tainted: G L syzkaller #0 [ 1242.941686][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1242.941697][ T38] task:syz-executor state:D stack:18496 pid:13634 tgid:13634 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1242.941785][ T38] Call Trace: [ 1242.941794][ T38] [ 1242.941810][ T38] __schedule+0x1681/0x54c0 [ 1242.942017][ T38] ? unwind_next_frame+0xa6/0x2550 [ 1242.942125][ T38] ? __pfx___schedule+0x10/0x10 [ 1242.942177][ T38] rt_mutex_schedule+0x76/0xf0 [ 1242.942255][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1242.942314][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1242.942349][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1242.942382][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1242.942437][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1242.942503][ T38] ? new_device_store+0x13c/0x710 [ 1242.942605][ T38] mutex_lock_nested+0x168/0x1d0 [ 1242.942634][ T38] ? new_device_store+0x13c/0x710 [ 1242.942674][ T38] new_device_store+0x13c/0x710 [ 1242.942722][ T38] ? __pfx_new_device_store+0x10/0x10 [ 1242.942757][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1242.942867][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1242.942901][ T38] ? sysfs_kf_write+0x166/0x260 [ 1242.942938][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1242.942970][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1242.943010][ T38] vfs_write+0x629/0xba0 [ 1242.943089][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1242.943119][ T38] ? do_sys_openat2+0x14c/0x200 [ 1242.943174][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1242.943252][ T38] ksys_write+0x156/0x270 [ 1242.943282][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1242.943319][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.943371][ T38] do_syscall_64+0x15f/0xf80 [ 1242.943417][ T38] ? trace_irq_disable+0x3b/0x140 [ 1242.943483][ T38] ? clear_bhb_loop+0x40/0x90 [ 1242.943512][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.943542][ T38] RIP: 0033:0x7fa4824ed60e [ 1242.943569][ T38] RSP: 002b:00007ffeef8cd508 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1242.943594][ T38] RAX: ffffffffffffffda RBX: 000055558a6d9500 RCX: 00007fa4824ed60e [ 1242.943612][ T38] RDX: 0000000000000003 RSI: 00007ffeef8cd590 RDI: 0000000000000005 [ 1242.943627][ T38] RBP: 00007fa4825c3610 R08: 0000000000000000 R09: 0000000000000000 [ 1242.943642][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1242.943657][ T38] R13: 00007ffeef8cd590 R14: 00007fa4832d4620 R15: 0000000000000003 [ 1242.943693][ T38] [ 1242.943705][ T38] INFO: task syz-executor:13654 blocked for more than 143 seconds. [ 1242.943733][ T38] Tainted: G L syzkaller #0 [ 1242.943747][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1242.943757][ T38] task:syz-executor state:D stack:18216 pid:13654 tgid:13654 ppid:1 task_flags:0x40[ 1242.943757][ T38] task:syz-executor state:D stack:18216 pid:13654 tgid:13654 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1242.943815][ T38] Call Trace: [ 1242.943824][ T38] [ 1242.943838][ T38] __schedule+0x1681/0x54c0 [ 1242.943908][ T38] ? __pfx___schedule+0x10/0x10 [ 1242.943960][ T38] rt_mutex_schedule+0x76/0xf0 [ 1242.943986][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 1242.944038][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 1242.944071][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 1242.944103][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1242.944147][ T38] ? del_device_store+0xd7/0x370 [ 1242.944187][ T38] ? del_device_store+0xd7/0x370 [ 1242.944229][ T38] ? del_device_store+0xd7/0x370 [ 1242.944260][ T38] mutex_lock_nested+0x168/0x1d0 [ 1242.944296][ T38] del_device_store+0xd7/0x370 [ 1242.944331][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1242.944365][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1242.944402][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1242.944436][ T38] ? sysfs_kf_write+0x166/0x260 [ 1242.944473][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1242.944505][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1242.944668][ T38] vfs_write+0x629/0xba0 [ 1242.944707][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1242.944746][ T38] ? do_sys_openat2+0x14c/0x200 [ 1242.944779][ T38] ? kmem_cache_free+0x187/0x6c0 [ 1242.944825][ T38] ksys_write+0x156/0x270 [ 1242.944856][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1242.944889][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.944916][ T38] do_syscall_64+0x15f/0xf80 [ 1242.944940][ T38] ? clear_bhb_loop+0x40/0x90 [ 1242.944968][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.944993][ T38] RIP: 0033:0x7f6dbe26d60e [ 1242.945013][ T38] RSP: 002b:00007ffdffa85af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1242.945037][ T38] RAX: ffffffffffffffda RBX: 000055555bbe4500 RCX: 00007f6dbe26d60e [ 1242.945054][ T38] RDX: 0000000000000001 RSI: 00007ffdffa85b80 RDI: 0000000000000005 [ 1242.945070][ T38] RBP: 00007f6dbe3435ec R08: 0000000000000000 R09: 0000000000000000 [ 1242.945085][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.945099][ T38] R13: 00007ffdffa85b80 R14: 00007f6dbf054620 R15: 0000000000000003 [ 1242.945134][ T38] [ 1242.945190][ T38] [ 1242.945190][ T38] Showing all locks held in the system: [ 1242.945202][ T38] 2 locks held by rcuc/0/20: [ 1242.945223][ T38] 1 lock held by khungtaskd/38: [ 1242.945236][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1242.945334][ T38] 4 locks held by kworker/u8:7/826: [ 1242.945349][ T38] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1242.945417][ T38] #1: ffffc90005547c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1242.945473][ T38] #2: ffffffff8f347300 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1242.945598][ T38] #3: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1242.945706][ T38] 6 locks held by kworker/u8:8/1030: [ 1242.945733][ T38] 3 locks held by kworker/u8:10/1455: [ 1242.945747][ T38] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1242.945804][ T38] #1: ffffc90006d4fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1242.945859][ T38] #2: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1242.945960][ T38] 3 locks held by kworker/u8:12/2876: [ 1242.945974][ T38] #0: ffff8880313c1138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1242.946030][ T38] #1: ffffc9000ef07c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1242.946089][ T38] #2: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1242.946212][ T38] 2 locks held by dhcpcd/5260: [ 1242.946226][ T38] #0: ffff888026056928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 1242.946326][ T38] #1: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1242.946380][ T38] 2 locks held by getty/5349: [ 1242.946393][ T38] #0: ffff888035c9e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1242.946510][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1242.946610][ T38] 4 locks held by syz-executor/13634: [ 1242.946624][ T38] #0: ffff888033f28480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1242.946685][ T38] #1: ffff888032905478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1242.946753][ T38] #2: ffff88802952cb48 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1242.946823][ T38] #3: ffffffff8ebcec58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1242.946891][ T38] 7 locks held by syz-executor/13650: [ 1242.946906][ T38] #0: ffff888033f28480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1242.946965][ T38] #1: ffff888060800878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1242.947024][ T38] #2: ffff88802952ca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1242.947089][ T38] #3: ffffffff8ebcec58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1242.947152][ T38] #4: ffff88803f11d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1242.947258][ T38] #5: ffff88804ee02310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1242.947321][ T38] #6: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: unregister_nexthop_notifier+0x17/0x40 [ 1242.947446][ T38] 4 locks held by syz-executor/13654: [ 1242.947460][ T38] #0: ffff888033f28480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1242.947539][ T38] #1: ffff88803398a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1243.242913][ T38] #2: ffff88802952ca58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1243.243121][ T38] #3: ffffffff8ebcec58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1243.243363][ T38] 2 locks held by syz-executor/14085: [ 1243.243406][ T38] #0: ffff88803b564f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 1243.243670][ T38] #1: ffff88803b5640b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 1243.243895][ T38] 2 locks held by syz-executor/14094: [ 1243.243932][ T38] #0: ffffffff8f347300 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1243.244157][ T38] #1: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 1243.244359][ T38] 2 locks held by syz-executor/14103: [ 1243.244396][ T38] #0: ffffffff8f347300 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1243.244611][ T38] #1: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 1243.244764][ T38] 2 locks held by syz-executor/14107: [ 1243.244799][ T38] #0: ffffffff8f347300 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1243.244968][ T38] #1: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1243.245235][ T38] 1 lock held by syz-executor/14141: [ 1243.245272][ T38] #0: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1243.245418][ T38] 1 lock held by syz-executor/14154: [ 1243.245453][ T38] #0: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1243.245632][ T38] 1 lock held by syz-executor/14160: [ 1243.245675][ T38] #0: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1243.245816][ T38] 1 lock held by syz-executor/14164: [ 1243.245858][ T38] #0: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1243.246048][ T38] 1 lock held by syz-executor/14166: [ 1243.246083][ T38] #0: ffffffff8f356038 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1243.246241][ T38] [ 1243.246254][ T38] ============================================= [ 1243.246254][ T38] [ 1243.246298][ T38] NMI backtrace for cpu 0 [ 1243.246389][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.246478][ T38] Tainted: [L]=SOFTLOCKUP [ 1243.246503][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.246539][ T38] Call Trace: [ 1243.246571][ T38] [ 1243.246597][ T38] dump_stack_lvl+0xe8/0x150 [ 1243.246686][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1243.246793][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1243.246872][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1243.246958][ T38] sys_info+0x135/0x170 [ 1243.247052][ T38] watchdog+0xfd3/0x1030 [ 1243.247168][ T38] ? watchdog+0x1c9/0x1030 [ 1243.247266][ T38] kthread+0x388/0x470 [ 1243.247355][ T38] ? __pfx_watchdog+0x10/0x10 [ 1243.247421][ T38] ? __pfx_kthread+0x10/0x10 [ 1243.247485][ T38] ret_from_fork+0x514/0xb70 [ 1243.247529][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.247580][ T38] ? __switch_to+0xc79/0x1410 [ 1243.247717][ T38] ? __pfx_kthread+0x10/0x10 [ 1243.247822][ T38] ret_from_fork_asm+0x1a/0x30 [ 1243.247944][ T38] [ 1243.248034][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1243.248105][ C1] NMI backtrace for cpu 1 [ 1243.248122][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.248148][ C1] Tainted: [L]=SOFTLOCKUP [ 1243.248156][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.248168][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1243.248266][ C1] Code: e8 5e 4a 90 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 53 f7 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a a2 eb 05 cc 44 89 f9 80 e1 07 [ 1243.248283][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1243.248300][ C1] RAX: 1ffffffff3362600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1243.248314][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.248326][ C1] RBP: ffffffff99b13870 R08: 0000000000000000 R09: 0000000000000000 [ 1243.248338][ C1] R10: dffffc0000000000 R11: ffffffff85342690 R12: dffffc0000000000 [ 1243.248352][ C1] R13: 0000000000000000 R14: ffffffff99b135e0 R15: 0000000000000000 [ 1243.248365][ C1] FS: 0000000000000000(0000) GS:ffff88812627c000(0000) knlGS:0000000000000000 [ 1243.248381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1243.248393][ C1] CR2: 00007ff9789edab3 CR3: 000000009e700000 CR4: 00000000003526f0 [ 1243.248411][ C1] Call Trace: [ 1243.248418][ C1] [ 1243.248427][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1243.248456][ C1] serial8250_console_write+0x120d/0x1b90 [ 1243.248490][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1243.248514][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1243.248567][ C1] ? console_flush_one_record+0x48f/0xb90 [ 1243.248594][ C1] console_flush_one_record+0x68b/0xb90 [ 1243.248623][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1243.248650][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1243.248676][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1243.248709][ C1] legacy_kthread_func+0x1b6/0x250 [ 1243.248741][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1243.248765][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1243.248816][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1243.248844][ C1] kthread+0x388/0x470 [ 1243.248869][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1243.248891][ C1] ? __pfx_kthread+0x10/0x10 [ 1243.248917][ C1] ret_from_fork+0x514/0xb70 [ 1243.248943][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.248964][ C1] ? __switch_to+0xc79/0x1410 [ 1243.248995][ C1] ? __pfx_kthread+0x10/0x10 [ 1243.249021][ C1] ret_from_fork_asm+0x1a/0x30 [ 1243.249054][ C1] [ 1243.254290][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1243.254360][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1243.254450][ T38] Tainted: [L]=SOFTLOCKUP [ 1243.254473][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1243.254515][ T38] Call Trace: [ 1243.254541][ T38] [ 1243.254572][ T38] vpanic+0x56c/0xa60 [ 1243.254671][ T38] ? __pfx___schedule+0x10/0x10 [ 1243.254794][ T38] ? __pfx_vpanic+0x10/0x10 [ 1243.254928][ T38] panic+0xc5/0xd0 [ 1243.255007][ T38] ? __pfx_panic+0x10/0x10 [ 1243.255087][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1243.255200][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1243.255294][ T38] watchdog+0x102c/0x1030 [ 1243.255390][ T38] ? watchdog+0x1c9/0x1030 [ 1243.255483][ T38] kthread+0x388/0x470 [ 1243.255574][ T38] ? __pfx_watchdog+0x10/0x10 [ 1243.255640][ T38] ? __pfx_kthread+0x10/0x10 [ 1243.255726][ T38] ret_from_fork+0x514/0xb70 [ 1243.255810][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1243.255878][ T38] ? __switch_to+0xc79/0x1410 [ 1243.255990][ T38] ? __pfx_kthread+0x10/0x10 [ 1243.256074][ T38] ret_from_fork_asm+0x1a/0x30 [ 1243.256237][ T38] [ 1243.256864][ T38] Kernel Offset: disabled