last executing test programs: 11m34.552302483s ago: executing program 32 (id=62): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mprotect(&(0x7f000009a000/0x1000)=nil, 0x1000, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) 11m27.17169288s ago: executing program 33 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) getpgrp(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0xe, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) process_vm_writev(0x0, &(0x7f0000001080)=[{&(0x7f0000001040)=""/37, 0x25}], 0x1, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/26, 0x1a}, {&(0x7f0000001100)=""/125, 0x7d}, {&(0x7f0000001180)=""/84, 0x54}, {&(0x7f0000001200)=""/249, 0xf9}], 0x4, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {}, {}, 0x84, 0x2, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20, 0x2, 0x2], 0xfd}, {0xffffffffffffffff, [0x2, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1, 0x5], 0x6, 0x3}}}}, {{@ip={@broadcast, @local, 0xff, 0xffffffff, 'caif0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x8}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d0bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a974448000000000000000000000000000000001600", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 11m24.740369009s ago: executing program 34 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 10m57.745494882s ago: executing program 35 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x34000, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 10m17.777105133s ago: executing program 3 (id=179): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) 10m16.787801275s ago: executing program 3 (id=181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) chroot(0x0) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @sdr={0x39555659, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 10m14.129230316s ago: executing program 36 (id=157): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r4 = dup(r3) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000400)={'wg0\x00', {0x2, 0x4e24, @remote}}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01629c0000000000005a"], 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], &(0x7f0000000000)=""/115, 0x86, 0x73, 0x1, 0x9}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp\x00') 10m7.149734731s ago: executing program 37 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 10m2.758973531s ago: executing program 38 (id=177): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 10m1.034833726s ago: executing program 39 (id=181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) chroot(0x0) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x7, @sdr={0x39555659, 0x8}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 9m9.580226664s ago: executing program 1 (id=185): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") socket$inet6(0xa, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, 0x0, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x400}}, 0x30) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080645c50030006800000901907864010102ac1414aa0b01907800000000451000040068000309040081ac1414bb64010101"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x850) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r1, 0x0, 0x0, 0x800) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000180)={0x7fffffff, 0x200, 0x1ff, 0x9, 0x26, 0x20, 0x2}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x4, 0x6c2, &(0x7f0000000800)="$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") 9m7.514804738s ago: executing program 1 (id=222): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) 9m5.729942998s ago: executing program 1 (id=228): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) 9m4.745655887s ago: executing program 1 (id=232): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") socket$inet6(0xa, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, 0x0, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x400}}, 0x30) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080645c50030006800000901907864010102ac1414aa0b01907800000000451000040068000309040081ac1414bb64010101"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x850) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r1, 0x0, 0x0, 0x800) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000180)={0x7fffffff, 0x200, 0x1ff, 0x9, 0x26, 0x20, 0x2}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x4, 0x6c2, &(0x7f0000000800)="$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") 9m2.856296744s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f0000000180)) 8m59.813457463s ago: executing program 40 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, 0x0, &(0x7f0000000180)) 8m39.355831891s ago: executing program 4 (id=266): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) 8m35.372343897s ago: executing program 41 (id=255): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x425cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x3, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x10004, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x10001, 0x81, 0x8a, 0x79, 0x2, 0x9, 0x0, 0x91, 0x8, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0xb6, 0xe19, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd, 0x7, 0x2, 0x899, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x4, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x1, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0xfffffffc, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0x5c, 0x1, 0x1000, 0xfffff801, 0x5], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x1, 0x800008d3, 0x200006, 0x8, 0x400, 0x82, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x1, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3436, 0x3, 0xd6, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5395, 0x3, 0x6, 0x80007fff, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1ff, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x1b3a, 0x81, 0x3, 0x7, 0x3, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc}) write$cgroup_int(r2, &(0x7f0000000100), 0x12) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io+me\a\x00'], 0xc) write$vga_arbiter(r7, 0x0, 0x0) r8 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8m35.301385199s ago: executing program 4 (id=272): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x40) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 8m34.575183461s ago: executing program 4 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf25070000004c000580080001007564700024000280080001000d00000008000200000000000800020000000080080003000700000014000280080001000c00000008000200060000000800010075647000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 8m31.531656097s ago: executing program 4 (id=277): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 8m30.425290345s ago: executing program 4 (id=279): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) 8m26.488602931s ago: executing program 9 (id=281): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") socket$inet6(0xa, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r3, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x400}}, 0x30) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa41080645c50030006800000901907864010102ac1414aa0b01907800000000451000040068000309040081ac1414bb64010101"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x5b4}], 0x1, 0x850) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) accept4(r1, 0x0, 0x0, 0x800) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000180)={0x7fffffff, 0x200, 0x1ff, 0x9, 0x26, 0x20, 0x2}) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x4, 0x6c2, &(0x7f0000000800)="$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") 8m24.971892648s ago: executing program 9 (id=283): r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x33, &(0x7f0000000e80)={{0x12, 0x1, 0x201, 0x25, 0xa, 0x7, 0x40, 0x41e, 0x3f19, 0xd21e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0xd, 0x8, 0xe0, 0x2, [{{0x9, 0x4, 0x21, 0xf8, 0x0, 0xff, 0x23, 0x81, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x10}, [@selector_unit={0x6, 0x24, 0x5, 0x2, 0xf, "a1"}]}]}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) 8m15.677317152s ago: executing program 9 (id=284): socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x1) socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) unshare(0x2a020400) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0xfffffffffffff2a8, 0xfffffffffffffffd, 0x3, 0x7ff, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0) 8m13.093025823s ago: executing program 42 (id=279): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) 8m11.66057753s ago: executing program 9 (id=288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xe) 8m11.039100679s ago: executing program 9 (id=290): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x402c}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r6 = io_uring_setup(0x168f, &(0x7f0000000000)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 7m54.657397659s ago: executing program 43 (id=290): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x402c}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) r6 = io_uring_setup(0x168f, &(0x7f0000000000)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 6m33.560465382s ago: executing program 7 (id=333): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) 6m32.808330347s ago: executing program 7 (id=335): socket$nl_rdma(0x10, 0x3, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) listen(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x7, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0xc, 0x9, 0x0, 0x13, 0x80000002}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) syz_open_pts(0xffffffffffffffff, 0x0) 6m31.332634962s ago: executing program 7 (id=337): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x40) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 6m31.070817144s ago: executing program 7 (id=338): r0 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$pid(0x1, 0x0, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200048c4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fc00df2544000000", @ANYRES32=0x0, @ANYBLOB="04007000"], 0x20}}, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b7030000a0fde4ffc50000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2feba46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d280a94232dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6815760dfc6c09432eefe573f3f3a000000140000800d000000c606"], 0xe0}], 0x1}, 0x40040) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f00000002c0)) 6m15.803970276s ago: executing program 44 (id=338): r0 = socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$pid(0x1, 0x0, 0x4004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200048c4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fc00df2544000000", @ANYRES32=0x0, @ANYBLOB="04007000"], 0x20}}, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b7030000a0fde4ffc50000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2feba46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2d2d280a94232dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6815760dfc6c09432eefe573f3f3a000000140000800d000000c606"], 0xe0}], 0x1}, 0x40040) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f00000002c0)) 5m37.900202553s ago: executing program 8 (id=364): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 5m37.304810452s ago: executing program 8 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r5, &(0x7f0000000480)=[{0x0}, {&(0x7f00000004c0)=""/215, 0xd7}], 0x2) syz_usb_ep_write(r4, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) 5m31.187455647s ago: executing program 8 (id=368): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) 5m30.611424214s ago: executing program 3 (id=342): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x0, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x328}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) 5m29.927331052s ago: executing program 3 (id=369): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 5m29.67174067s ago: executing program 8 (id=370): socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x2) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r6, 0x1) r7 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) fsetxattr$security_capability(r7, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0) 5m27.307194631s ago: executing program 3 (id=371): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000001c0)=ANY=[], 0xa, 0x0) close_range(r0, r0, 0x0) 5m26.482759518s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, 0x0, 0x880) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x44) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m25.091787939s ago: executing program 8 (id=374): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000002c0)=0x108005, 0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r3], 0x24}}, 0x0) r4 = getpgrp(0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0x80) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6889}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x10001, 0xffffffff, 0x81, 0xe0a3, 0xffffffffffffffff, 0x8]}, &(0x7f0000000080)=0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}, {&(0x7f0000000480)={0x3c, 0x3c, 0x1, 0x70bd28, 0x25dfdbff, "", [@generic="e198c506fd622e691fef47611f7233c896780f17adaf85dfa55e1fbd38fec12fe898684aad28dd8e221135"]}, 0x3c}, {&(0x7f00000004c0)={0x9c, 0x25, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="94ea4ed8184cff4575853b96675e4d524cbd46f8037db13e5de51bf4929dfbfc9fcb9628a2ae1172f55af865d23b5d13fff614ebdb6bb877fc38852890b0ab2ffdbb01f40bbad39fce31bc073d021c849b42ed90ae73f59bec26320eba504c946e22250dae33026a444d7a7a02d76a31e4d9606346d6eb0a2aba8b22c63299281ef29d3d7e2a0f07bf96909c"]}, 0x9c}], 0x3}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x80a5}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0x37, 0x4, 0x0, 0x48, @rand_addr=' \x01\x00', @private0, 0x20, 0x700, 0x6, 0x7c8}}) 5m20.103943204s ago: executing program 8 (id=380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m6.838235174s ago: executing program 45 (id=372): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, 0x0, 0x880) sendmsg$IEEE802154_ADD_IFACE(r3, 0x0, 0x44) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m3.974533399s ago: executing program 46 (id=380): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, 0x0, 0x0, 0x1e}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m35.018760494s ago: executing program 0 (id=490): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000100000000000b"], 0x48}, 0x1, 0x0, 0x0, 0xc011}, 0x0) 2m33.604732617s ago: executing program 0 (id=492): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m32.123876164s ago: executing program 0 (id=493): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000130000012cbd7000fbdbdf25fe800000000000000000000000000039e0"], 0xd4}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m29.609818298s ago: executing program 0 (id=495): r0 = socket(0x25, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) 2m28.919584813s ago: executing program 0 (id=497): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x81, 0x8000, 0x2b19c, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @value=r0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x0, 0x401, 0x7]}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 2m16.664835286s ago: executing program 0 (id=502): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000130000012cbd7000fbdbdf25fe800000000000000000000000000039e0"], 0xd4}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m16.40399867s ago: executing program 1 (id=382): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b0000", @ANYRESOCT=r0, @ANYRES32], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000380)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) write(r3, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) close(r3) getrlimit(0xf, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181882, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{0x0}], 0x1, 0x202, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 2m10.878070982s ago: executing program 6 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000", 0x11, 0x20000090, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2f}) 2m10.3785653s ago: executing program 6 (id=504): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x6e1cbde5}) 2m9.905822746s ago: executing program 6 (id=506): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10201, 0x5, 0xeeee0000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) eventfd2(0x44, 0x1) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0}, 0x28) bind$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) 2m6.972838731s ago: executing program 6 (id=509): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f00000010c0)=ANY=[@ANYBLOB="6b0ee0b3d41b1b", @ANYRES32=r0, @ANYRES64=0x0]) 2m3.641033343s ago: executing program 6 (id=513): syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x22802) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m0.875911709s ago: executing program 47 (id=382): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b0000", @ANYRESOCT=r0, @ANYRES32], 0x28}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000380)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) write(r3, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44) close(r3) getrlimit(0xf, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181882, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{0x0}], 0x1, 0x202, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x97) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 2m0.630841237s ago: executing program 48 (id=502): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d4000000130000012cbd7000fbdbdf25fe800000000000000000000000000039e0"], 0xd4}, 0x1, 0x0, 0x0, 0x20004844}, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m59.841764288s ago: executing program 5 (id=520): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)}) 1m58.095765675s ago: executing program 6 (id=522): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x4, 0x151042) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r4, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x920) io_setup(0x80000001, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r5, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) 1m56.482107437s ago: executing program 5 (id=524): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2c, 0x25dfdc05, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x10, 0xffff}, {0xfff2, 0xd}}}, 0x24}}, 0x4080) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1m52.922614779s ago: executing program 5 (id=526): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0xffffffffffffffb8) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) 1m50.344301871s ago: executing program 5 (id=529): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="01fe0000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0) 1m49.860356078s ago: executing program 5 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/219) fsopen(0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001340)="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", 0x1000) 1m46.03673097s ago: executing program 5 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0xd15, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r7 = gettid() r8 = epoll_create(0x20003fd) r9 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r9, &(0x7f0000000080)={r8, r9, 0x1}) 1m42.23284676s ago: executing program 49 (id=522): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x4, 0x151042) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r4, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x920) io_setup(0x80000001, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r5, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) 1m30.533567418s ago: executing program 50 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400c804, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffec1, @local, 0xffff8003}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r3, &(0x7f0000000000)="826bb66f", 0x18, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0xd15, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r7 = gettid() r8 = epoll_create(0x20003fd) r9 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x2}) kcmp$KCMP_EPOLL_TFD(r7, r7, 0x7, r9, &(0x7f0000000080)={r8, r9, 0x1}) 22.766351199s ago: executing program 2 (id=575): pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 22.495715577s ago: executing program 2 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/219) fsopen(0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000001340)="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", 0x1000) 20.243558302s ago: executing program 2 (id=577): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x3f0, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1, 0xfffffffd}, {0x1}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x40, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x100000, 0x4, 0x21, 0x4, 0x0, 0x7}) 19.653812584s ago: executing program 2 (id=578): socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000100)=0x1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x1da}, 0x0, &(0x7f0000000040)) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) 13.975286175s ago: executing program 2 (id=579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x101c) 10.214075129s ago: executing program 9 (id=517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) sendmsg$kcm(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r9, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 7.382204212s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getrlimit(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x4000000000002d7, 0x4004800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000280)}, 0xffffffff}], 0x1, 0x22, 0x0) 6.711928049s ago: executing program 2 (id=580): socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 840.321933ms ago: executing program 7 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0xffffffffffffffb8) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) 0s ago: executing program 7 (id=581): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 651.602730][ T8494] chnl_net:caif_netlink_parms(): no params data found [ 651.937464][ T1080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.143084][ T8538] Bluetooth: hci5: command 0x0406 tx timeout [ 652.533989][ T8538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 652.578751][ T8538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 652.588039][ T8538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 652.601398][ T8538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 652.611888][ T8538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 653.067787][ T1080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.657894][ T8567] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 653.751116][ T1080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.894776][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 654.710127][ T5786] Bluetooth: hci2: command tx timeout [ 655.721703][ T1080] bridge_slave_1: left allmulticast mode [ 655.761949][ T1080] bridge_slave_1: left promiscuous mode [ 655.779595][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.855563][ T8584] 9pnet_fd: Insufficient options for proto=fd [ 655.967144][ T1080] bridge_slave_0: left allmulticast mode [ 656.009335][ T1080] bridge_slave_0: left promiscuous mode [ 656.052370][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.672746][ T7736] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 656.782624][ T5786] Bluetooth: hci2: command tx timeout [ 656.892579][ T7736] usb 1-1: Using ep0 maxpacket: 32 [ 656.917312][ T7736] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 656.942583][ T7736] usb 1-1: config 0 has no interface number 0 [ 656.948885][ T7736] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 657.000531][ T7736] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 657.046501][ T7736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.062802][ T7736] usb 1-1: Product: syz [ 657.072765][ T7736] usb 1-1: Manufacturer: syz [ 657.077570][ T7736] usb 1-1: SerialNumber: syz [ 657.087766][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.105310][ T7736] usb 1-1: config 0 descriptor?? [ 657.152883][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.188705][ T1080] bond0 (unregistering): Released all slaves [ 657.614059][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.646782][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.699303][ T8494] bridge_slave_0: entered allmulticast mode [ 657.777292][ T8494] bridge_slave_0: entered promiscuous mode [ 658.182553][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.190037][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.210587][ T8494] bridge_slave_1: entered allmulticast mode [ 658.242538][ T8494] bridge_slave_1: entered promiscuous mode [ 658.481718][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.505478][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.536919][ T8506] bridge_slave_0: entered allmulticast mode [ 658.573587][ T8506] bridge_slave_0: entered promiscuous mode [ 658.631050][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.640396][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.651560][ T8506] bridge_slave_1: entered allmulticast mode [ 659.528709][ T5786] Bluetooth: hci2: command tx timeout [ 659.751264][ T7644] usb 1-1: USB disconnect, device number 4 [ 659.785591][ T8506] bridge_slave_1: entered promiscuous mode [ 660.148428][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 660.179396][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 661.237578][ T8494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.316384][ T8494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.617545][ T8538] Bluetooth: hci2: command tx timeout [ 661.672009][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.924621][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.134920][ T1080] hsr_slave_0: left promiscuous mode [ 662.155781][ T1080] hsr_slave_1: left promiscuous mode [ 662.169393][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.199896][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.216269][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.236706][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.289036][ T1080] veth1_macvtap: left promiscuous mode [ 662.299730][ T1080] veth0_macvtap: left promiscuous mode [ 662.320060][ T1080] veth1_vlan: left promiscuous mode [ 662.330457][ T1080] veth0_vlan: left promiscuous mode [ 663.812539][ T7644] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 664.018637][ T7644] usb 1-1: config 0 has no interfaces? [ 664.073135][ T7644] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 664.123103][ T7644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.131315][ T7644] usb 1-1: Product: syz [ 664.190787][ T7644] usb 1-1: Manufacturer: syz [ 664.209894][ T7644] usb 1-1: SerialNumber: syz [ 664.242192][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 664.253873][ T7644] usb 1-1: config 0 descriptor?? [ 664.366711][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 665.291029][ T8494] team0: Port device team_slave_0 added [ 665.394218][ T8494] team0: Port device team_slave_1 added [ 665.409020][ T8506] team0: Port device team_slave_0 added [ 665.527736][ T8506] team0: Port device team_slave_1 added [ 665.981980][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.010919][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.057359][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.145049][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.169410][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.207470][ T8494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.270710][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.294496][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.387103][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.635734][ T8494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.665786][ T8494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.711072][ T8494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.282110][ T1080] team0: Port device netdevsim3 removed [ 667.338895][ T1080] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.392582][ T1080] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.798296][ T1080] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.809317][ T1080] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.861121][ T8506] hsr_slave_0: entered promiscuous mode [ 667.888919][ T8506] hsr_slave_1: entered promiscuous mode [ 667.916673][ T8556] chnl_net:caif_netlink_parms(): no params data found [ 668.022136][ T8494] hsr_slave_0: entered promiscuous mode [ 668.045762][ T8494] hsr_slave_1: entered promiscuous mode [ 668.055585][ T8494] debugfs: 'hsr0' already exists in 'hsr' [ 668.061466][ T8494] Cannot create hsr debugfs directory [ 668.294084][ T1080] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.306407][ T1080] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.532820][ T1080] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.544257][ T1080] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.043519][ T5784] usb 1-1: USB disconnect, device number 5 [ 670.937957][ T1080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.694835][ T1080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.975795][ T8650] 9pnet_fd: Insufficient options for proto=fd [ 672.039164][ T1080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.095337][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.104676][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.147600][ T8556] bridge_slave_0: entered allmulticast mode [ 672.166529][ T8556] bridge_slave_0: entered promiscuous mode [ 672.415028][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.435670][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.453086][ T8556] bridge_slave_1: entered allmulticast mode [ 672.492782][ T8556] bridge_slave_1: entered promiscuous mode [ 672.552536][ T8342] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 672.590444][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.410'. [ 672.603548][ T1080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.616671][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.410'. [ 672.715187][ T8342] usb 1-1: Using ep0 maxpacket: 32 [ 672.749065][ T8342] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 672.767275][ T8342] usb 1-1: config 0 has no interface number 0 [ 672.785462][ T8342] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 672.821660][ T8342] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 672.840980][ T8342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.860449][ T8342] usb 1-1: Product: syz [ 672.870772][ T8342] usb 1-1: Manufacturer: syz [ 672.897025][ T8342] usb 1-1: SerialNumber: syz [ 672.925364][ T8342] usb 1-1: config 0 descriptor?? [ 672.937614][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.119251][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.310582][ T8556] team0: Port device team_slave_0 added [ 673.484656][ T8556] team0: Port device team_slave_1 added [ 673.619147][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.627214][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.656436][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.763627][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.770750][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.804215][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.821437][ T1080] bridge_slave_1: left allmulticast mode [ 673.827988][ T1080] bridge_slave_1: left promiscuous mode [ 673.835722][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.851078][ T1080] bridge_slave_0: left allmulticast mode [ 673.857867][ T1080] bridge_slave_0: left promiscuous mode [ 673.866357][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.886667][ T1080] bridge_slave_1: left allmulticast mode [ 673.895589][ T1080] bridge_slave_1: left promiscuous mode [ 673.906490][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.940651][ T1080] bridge_slave_0: left allmulticast mode [ 673.947013][ T1080] bridge_slave_0: left promiscuous mode [ 673.955461][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.813902][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.847513][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.878175][ T1080] bond0 (unregistering): Released all slaves [ 675.369233][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.498057][ T7736] usb 1-1: USB disconnect, device number 6 [ 675.589541][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.637205][ T1080] bond0 (unregistering): Released all slaves [ 676.278008][ T8494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 677.671185][ T8707] 9pnet_fd: Insufficient options for proto=fd [ 677.762760][ T8494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 677.836829][ T8494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.948116][ T8556] hsr_slave_0: entered promiscuous mode [ 678.005543][ T8556] hsr_slave_1: entered promiscuous mode [ 678.042071][ T8556] debugfs: 'hsr0' already exists in 'hsr' [ 678.080384][ T8556] Cannot create hsr debugfs directory [ 678.181104][ T8494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.277802][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 679.310874][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 679.486388][ T1080] hsr_slave_0: left promiscuous mode [ 679.526564][ T1080] hsr_slave_1: left promiscuous mode [ 679.549246][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.580480][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.603208][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.620208][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.669536][ T1080] hsr_slave_0: left promiscuous mode [ 679.697661][ T1080] hsr_slave_1: left promiscuous mode [ 679.710715][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.719056][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.735447][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.766016][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.821532][ T1080] veth1_macvtap: left promiscuous mode [ 679.840110][ T1080] veth1_vlan: left promiscuous mode [ 679.847480][ T1080] veth0_vlan: left promiscuous mode [ 679.867637][ T1080] veth1_macvtap: left promiscuous mode [ 679.876204][ T1080] veth0_macvtap: left promiscuous mode [ 679.882599][ T1080] veth1_vlan: left promiscuous mode [ 679.888539][ T1080] veth0_vlan: left promiscuous mode [ 681.534795][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 681.599890][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 683.258868][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 683.331781][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 685.430761][ T8506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 685.544176][ T8506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 685.852070][ T8506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.262885][ T8506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.453949][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 687.178708][ T8494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.740211][ T8494] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.751886][ T5784] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 687.934042][ T5784] usb 1-1: Using ep0 maxpacket: 32 [ 687.970772][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.978330][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.056989][ T5784] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 688.082807][ T5784] usb 1-1: config 0 has no interface number 0 [ 688.097829][ T8556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 688.119870][ T5784] usb 1-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 688.200613][ T5784] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 688.237399][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.295466][ T8556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 688.306004][ T5784] usb 1-1: Product: syz [ 688.310353][ T5784] usb 1-1: Manufacturer: syz [ 688.343806][ T5784] usb 1-1: SerialNumber: syz [ 688.408541][ T5784] usb 1-1: config 0 descriptor?? [ 688.486760][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.494390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.599644][ T8556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 688.920289][ T8556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 690.044586][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.277667][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.307925][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 690.396447][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.403967][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.481066][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.488730][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.504300][ T34] usb 7-1: Using ep0 maxpacket: 16 [ 690.527666][ T34] usb 7-1: config 1 has an invalid interface number: 69 but max is 0 [ 690.562610][ T34] usb 7-1: config 1 has no interface number 0 [ 690.583794][ T34] usb 7-1: config 1 interface 69 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 690.628329][ T34] usb 7-1: config 1 interface 69 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 690.713634][ T34] usb 7-1: config 1 interface 69 has no altsetting 0 [ 690.748249][ T34] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a7e, bcdDevice=60.c4 [ 690.803765][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.838386][ T34] usb 7-1: Product: syz [ 690.863552][ T34] usb 7-1: Manufacturer: syz [ 690.868353][ T34] usb 7-1: SerialNumber: syz [ 690.983980][ T8759] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 691.033079][ T8759] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 691.036699][ T5784] usb 1-1: USB disconnect, device number 7 [ 691.057792][ T34] ipaq 7-1:1.69: PocketPC PDA converter detected [ 691.299973][ T8556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.345679][ T34] ipaq 7-1:1.69: probe with driver ipaq failed with error -71 [ 691.432457][ T34] usb 7-1: USB disconnect, device number 4 [ 691.763882][ T8556] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.879605][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.887213][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.968798][ T8494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.020709][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.028323][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.463323][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 692.515052][ T8784] 9pnet_fd: Insufficient options for proto=fd [ 693.603078][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.426'. [ 694.088333][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 694.137546][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.165645][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.194454][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.210060][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.363428][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.546408][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.553388][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.892500][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 696.078005][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 696.128501][ T9] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 697.137429][ T5786] Bluetooth: hci0: command tx timeout [ 697.258088][ T8556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.123238][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.152429][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.152823][ T9] usb 7-1: can't set config #27, error -71 [ 699.173188][ T9] usb 7-1: USB disconnect, device number 5 [ 699.212479][ T5786] Bluetooth: hci0: command tx timeout [ 699.662993][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 701.162915][ T8538] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.180107][ T8538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.191234][ T8538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.240270][ T8538] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.265534][ T8538] Bluetooth: hci0: command tx timeout [ 701.275622][ T8538] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 702.858138][ T57] bridge_slave_1: left allmulticast mode [ 702.891687][ T57] bridge_slave_1: left promiscuous mode [ 702.913371][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.958410][ T57] bridge_slave_0: left allmulticast mode [ 702.976856][ T57] bridge_slave_0: left promiscuous mode [ 702.997147][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.368012][ T8538] Bluetooth: hci0: command tx timeout [ 703.427461][ T8538] Bluetooth: hci3: command tx timeout [ 703.850505][ T8835] 9p: Bad value for 'rfdno' [ 703.934032][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.985621][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.064997][ T57] bond0 (unregistering): Released all slaves [ 704.208417][ T8556] veth0_vlan: entered promiscuous mode [ 705.219058][ T57] hsr_slave_0: left promiscuous mode [ 705.234972][ T57] hsr_slave_1: left promiscuous mode [ 705.674000][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.702663][ T8538] Bluetooth: hci3: command tx timeout [ 705.708853][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.091777][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.435'. [ 706.769349][ T57] team0 (unregistering): Port device team_slave_1 removed [ 706.876285][ T57] team0 (unregistering): Port device team_slave_0 removed [ 707.486503][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.536844][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.552982][ T8793] bridge_slave_0: entered allmulticast mode [ 707.588470][ T8793] bridge_slave_0: entered promiscuous mode [ 707.754822][ T8538] Bluetooth: hci3: command tx timeout [ 707.799365][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.852710][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.860410][ T8793] bridge_slave_1: entered allmulticast mode [ 707.927290][ T8793] bridge_slave_1: entered promiscuous mode [ 707.960144][ T8556] veth1_vlan: entered promiscuous mode [ 708.162390][ T8843] input: syz0 as /devices/virtual/input/input5 [ 708.596816][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.669939][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.366500][ T8793] team0: Port device team_slave_0 added [ 709.679115][ T8793] team0: Port device team_slave_1 added [ 709.823291][ T8538] Bluetooth: hci3: command tx timeout [ 710.220679][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.253085][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.291404][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.308816][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.310671][ T8858] 9p: Bad value for 'rfdno' [ 710.316040][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.347951][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.680299][ T8556] veth0_macvtap: entered promiscuous mode [ 710.718372][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 711.146162][ T8556] veth1_macvtap: entered promiscuous mode [ 711.197502][ T8538] Bluetooth: hci5: command 0x0406 tx timeout [ 711.203525][ T7644] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 711.211032][ T7644] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 711.415342][ T8793] hsr_slave_0: entered promiscuous mode [ 711.426555][ T8793] hsr_slave_1: entered promiscuous mode [ 711.900675][ T8556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.072012][ T57] bridge_slave_1: left allmulticast mode [ 712.092483][ T57] bridge_slave_1: left promiscuous mode [ 712.099141][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.123969][ T57] bridge_slave_0: left allmulticast mode [ 712.129901][ T57] bridge_slave_0: left promiscuous mode [ 712.137987][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.342947][ T8538] Bluetooth: hci1: command 0x0406 tx timeout [ 713.352512][ T7644] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 713.358934][ T7644] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 713.551174][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.624167][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.657791][ T57] bond0 (unregistering): Released all slaves [ 714.072157][ T57] hsr_slave_0: left promiscuous mode [ 714.094491][ T57] hsr_slave_1: left promiscuous mode [ 714.119331][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.131558][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.804346][ T57] team0 (unregistering): Port device team_slave_1 removed [ 714.852052][ T57] team0 (unregistering): Port device team_slave_0 removed [ 715.521449][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.531049][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.543091][ T8824] bridge_slave_0: entered allmulticast mode [ 715.553779][ T8824] bridge_slave_0: entered promiscuous mode [ 715.595326][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.603929][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.611624][ T8824] bridge_slave_1: entered allmulticast mode [ 715.625954][ T8824] bridge_slave_1: entered promiscuous mode [ 715.870713][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.940068][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.149778][ T8824] team0: Port device team_slave_0 added [ 716.179259][ T8824] team0: Port device team_slave_1 added [ 716.376910][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.385919][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.423503][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.449467][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.461754][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.494180][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.739148][ T8793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 716.801856][ T8793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 716.850896][ T8824] hsr_slave_0: entered promiscuous mode [ 716.860577][ T8824] hsr_slave_1: entered promiscuous mode [ 716.870172][ T8824] debugfs: 'hsr0' already exists in 'hsr' [ 716.877652][ T8824] Cannot create hsr debugfs directory [ 716.887064][ T8793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 716.961676][ T8793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 717.502670][ T8538] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.513387][ T7644] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 717.519639][ T7644] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 718.059520][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.677067][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.662161][ T8824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 719.670512][ T8538] Bluetooth: hci3: command 0x0c1a tx timeout [ 719.685959][ T7644] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 719.706799][ T7644] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 721.753472][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 721.774023][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.781466][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.803008][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.810562][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.823816][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 721.846134][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 722.734710][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 722.754983][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 723.763788][ T8538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 723.869192][ T8538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 723.889583][ T8538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 723.904940][ T8538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 723.924304][ T8538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 724.713095][ T8824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 726.865575][ T5786] Bluetooth: hci4: command tx timeout [ 727.288867][ T8824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.513823][ T8824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 727.622589][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 727.848668][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 727.866549][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 727.879603][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 727.919462][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.964176][ T8902] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 728.047569][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 728.473719][ T8912] ======================================================= [ 728.473719][ T8912] WARNING: The mand mount option has been deprecated and [ 728.473719][ T8912] and is ignored by this kernel. Remove the mand [ 728.473719][ T8912] option from the mount to silence this warning. [ 728.473719][ T8912] ======================================================= [ 728.944322][ T8538] Bluetooth: hci4: command tx timeout [ 731.022540][ T8538] Bluetooth: hci4: command tx timeout [ 732.630314][ T8919] 9p: Bad value for 'rfdno' [ 733.115568][ T8538] Bluetooth: hci4: command tx timeout [ 733.461688][ T34] usb 7-1: USB disconnect, device number 6 [ 734.429131][ T13] bridge_slave_1: left allmulticast mode [ 734.485054][ T13] bridge_slave_1: left promiscuous mode [ 734.491562][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.634004][ T13] bridge_slave_0: left allmulticast mode [ 734.639852][ T13] bridge_slave_0: left promiscuous mode [ 734.663400][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.165265][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.6.453'. [ 735.656388][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.669492][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.676310][ T13] bond0 (unregistering): Released all slaves [ 736.661058][ T13] hsr_slave_0: left promiscuous mode [ 736.708038][ T13] hsr_slave_1: left promiscuous mode [ 736.713589][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.713644][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.715333][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.817958][ T13] veth1_macvtap: left promiscuous mode [ 736.818059][ T13] veth0_macvtap: left promiscuous mode [ 736.818245][ T13] veth1_vlan: left promiscuous mode [ 736.818384][ T13] veth0_vlan: left promiscuous mode [ 736.835987][ T8956] 9pnet_virtio: no channels available for device ./bus [ 738.612794][ T13] team0 (unregistering): Port device team_slave_1 removed [ 738.694853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 740.092010][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.178544][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.322468][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 740.491538][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.839724][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.847307][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.986041][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.993443][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.807089][ T8793] veth0_vlan: entered promiscuous mode [ 742.264827][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.293121][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.333378][ T8881] bridge_slave_0: entered allmulticast mode [ 742.387269][ T8881] bridge_slave_0: entered promiscuous mode [ 742.652387][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.659991][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.732991][ T8881] bridge_slave_1: entered allmulticast mode [ 742.741436][ T8881] bridge_slave_1: entered promiscuous mode [ 742.857609][ T8793] veth1_vlan: entered promiscuous mode [ 743.591014][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.672738][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.124427][ T8881] team0: Port device team_slave_0 added [ 744.195630][ T8881] team0: Port device team_slave_1 added [ 744.803100][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.852461][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.683067][ T9014] netlink: 52 bytes leftover after parsing attributes in process `syz.6.457'. [ 745.839791][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.860089][ T8793] veth0_macvtap: entered promiscuous mode [ 746.348653][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.459'. [ 746.839575][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.855829][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.884384][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.874493][ T8793] veth1_macvtap: entered promiscuous mode [ 750.912120][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.966158][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.071785][ T8881] hsr_slave_0: entered promiscuous mode [ 752.126415][ T8881] hsr_slave_1: entered promiscuous mode [ 752.165460][ T8881] debugfs: 'hsr0' already exists in 'hsr' [ 752.171362][ T8881] Cannot create hsr debugfs directory [ 752.960240][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.358858][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 754.394544][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 754.420741][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 754.438265][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 754.449578][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 756.543320][ T8538] Bluetooth: hci2: command tx timeout [ 757.095030][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.101643][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.274049][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 758.288395][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 758.314131][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 758.327381][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 758.342660][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 758.528678][ T8881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 758.632497][ T5786] Bluetooth: hci2: command tx timeout [ 758.651371][ T8881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 758.986230][ T8881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 759.079054][ T8881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 759.892752][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 760.115607][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 760.167435][ T9] usb 7-1: config 0 has an invalid interface number: 161 but max is 0 [ 760.183179][ T9] usb 7-1: config 0 has no interface number 0 [ 760.189711][ T9] usb 7-1: config 0 interface 161 has no altsetting 0 [ 760.225308][ T9] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 760.237564][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.246552][ T9] usb 7-1: Product: syz [ 760.251007][ T9] usb 7-1: Manufacturer: syz [ 760.262746][ T9] usb 7-1: SerialNumber: syz [ 760.279632][ T9] usb 7-1: config 0 descriptor?? [ 760.357200][ T9] em28xx 7-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 760.471669][ T5786] Bluetooth: hci6: command tx timeout [ 760.491876][ T9] em28xx 7-1:0.161: Video interface 161 found: bulk [ 760.702678][ T5786] Bluetooth: hci2: command tx timeout [ 760.752042][ T9] em28xx 7-1:0.161: unknown em28xx chip ID (0) [ 761.003288][ T9059] chnl_net:caif_netlink_parms(): no params data found [ 761.432493][ T9] em28xx 7-1:0.161: failed to read eeprom (err=-110) [ 761.462563][ T9] em28xx 7-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 761.672406][ T9] em28xx 7-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 761.733325][ T9] em28xx 7-1:0.161: analog set to bulk mode. [ 761.750259][ T7736] em28xx 7-1:0.161: Registering V4L2 extension [ 761.835570][ T9] usb 7-1: USB disconnect, device number 7 [ 761.873631][ T9] em28xx 7-1:0.161: Disconnecting em28xx [ 762.337627][ T9117] FAT-fs (nbd0): unable to read boot sector [ 762.544254][ T5786] Bluetooth: hci6: command tx timeout [ 762.597817][ T7736] em28xx 7-1:0.161: Config register raw data: 0xffffffed [ 762.605475][ T7736] em28xx 7-1:0.161: AC97 chip type couldn't be determined [ 762.615798][ T7736] em28xx 7-1:0.161: No AC97 audio processor [ 762.626529][ T7736] usb 7-1: Decoder not found [ 762.631298][ T7736] em28xx 7-1:0.161: failed to create media graph [ 762.652598][ T7736] em28xx 7-1:0.161: V4L2 device video103 deregistered [ 762.678278][ T7736] em28xx 7-1:0.161: Remote control support is not available for this card. [ 762.736886][ T9] em28xx 7-1:0.161: Closing input extension [ 762.782725][ T5786] Bluetooth: hci2: command tx timeout [ 762.826478][ T9] em28xx 7-1:0.161: Freeing device [ 762.844614][ T53] bridge_slave_1: left allmulticast mode [ 762.850444][ T53] bridge_slave_1: left promiscuous mode [ 762.933545][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.025706][ T53] bridge_slave_0: left allmulticast mode [ 763.031560][ T53] bridge_slave_0: left promiscuous mode [ 763.103371][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.611523][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.626536][ T5786] Bluetooth: hci6: command tx timeout [ 764.662583][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 764.684113][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.713791][ T53] bond0 (unregistering): Released all slaves [ 764.851741][ T34] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 764.907743][ T34] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 764.970174][ T34] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.001849][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.011128][ T9072] chnl_net:caif_netlink_parms(): no params data found [ 765.069539][ T9152] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 765.119308][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.256811][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.276880][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.323140][ T9059] bridge_slave_0: entered allmulticast mode [ 765.345984][ T9059] bridge_slave_0: entered promiscuous mode [ 766.713255][ T5786] Bluetooth: hci6: command tx timeout [ 769.811232][ T53] hsr_slave_0: left promiscuous mode [ 769.873763][ T53] hsr_slave_1: left promiscuous mode [ 769.881210][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.924409][ T34] usb 7-1: USB disconnect, device number 8 [ 769.952938][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.985392][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.034142][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.118032][ T53] veth1_macvtap: left promiscuous mode [ 770.125035][ T53] veth0_macvtap: left promiscuous mode [ 770.130918][ T53] veth1_vlan: left promiscuous mode [ 770.183064][ T53] veth0_vlan: left promiscuous mode [ 771.221504][ T9193] netlink: 'syz.6.476': attribute type 10 has an invalid length. [ 771.276419][ T9194] netlink: 'syz.6.476': attribute type 10 has an invalid length. [ 771.841839][ T53] team0 (unregistering): Port device team_slave_1 removed [ 771.894457][ T53] team0 (unregistering): Port device team_slave_0 removed [ 772.213156][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.220995][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.232826][ T9059] bridge_slave_1: entered allmulticast mode [ 772.271523][ T9059] bridge_slave_1: entered promiscuous mode [ 772.470965][ T9193] team0: Port device dummy0 added [ 772.516344][ T9194] team0: Port device dummy0 removed [ 772.559889][ T9194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 772.845415][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.904278][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.245082][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.272671][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.280413][ T9072] bridge_slave_0: entered allmulticast mode [ 773.315603][ T9072] bridge_slave_0: entered promiscuous mode [ 773.554167][ T9059] team0: Port device team_slave_0 added [ 773.591832][ T9059] team0: Port device team_slave_1 added [ 773.813878][ T8538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.824308][ T8538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.834633][ T8538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.853759][ T8538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.865284][ T8538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.889618][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.898667][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.925829][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.997412][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.010683][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.050324][ T9072] bridge_slave_1: entered allmulticast mode [ 774.106560][ T9072] bridge_slave_1: entered promiscuous mode [ 774.124842][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.132054][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.252378][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.630947][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.719426][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.074571][ T9072] team0: Port device team_slave_0 added [ 775.226937][ T9059] hsr_slave_0: entered promiscuous mode [ 775.237642][ T9059] hsr_slave_1: entered promiscuous mode [ 775.306686][ T9072] team0: Port device team_slave_1 added [ 775.547886][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.557806][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.607270][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.880475][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.905833][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.952592][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.982451][ T8538] Bluetooth: hci0: command tx timeout [ 776.735414][ T9072] hsr_slave_0: entered promiscuous mode [ 776.745721][ T9072] hsr_slave_1: entered promiscuous mode [ 776.755536][ T9072] debugfs: 'hsr0' already exists in 'hsr' [ 776.761430][ T9072] Cannot create hsr debugfs directory [ 778.066938][ T8538] Bluetooth: hci0: command tx timeout [ 778.861890][ T53] bridge_slave_1: left allmulticast mode [ 778.932446][ T53] bridge_slave_1: left promiscuous mode [ 778.939035][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.002495][ T53] bridge_slave_0: left allmulticast mode [ 779.027178][ T53] bridge_slave_0: left promiscuous mode [ 779.060468][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.595485][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.630697][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.676275][ T53] bond0 (unregistering): Released all slaves [ 779.833694][ T9208] chnl_net:caif_netlink_parms(): no params data found [ 780.040209][ T53] hsr_slave_0: left promiscuous mode [ 780.050534][ T53] hsr_slave_1: left promiscuous mode [ 780.064173][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.090362][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.148631][ T8538] Bluetooth: hci0: command tx timeout [ 780.742439][ T9262] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 780.908266][ T9262] usb 7-1: config 0 has an invalid interface number: 252 but max is 0 [ 780.917486][ T9262] usb 7-1: config 0 has no interface number 0 [ 780.946560][ T9262] usb 7-1: config 0 interface 252 has no altsetting 0 [ 780.970839][ T53] team0 (unregistering): Port device team_slave_1 removed [ 780.988851][ T9262] usb 7-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 781.003032][ T9262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.011523][ T9262] usb 7-1: Product: syz [ 781.016074][ T9262] usb 7-1: Manufacturer: syz [ 781.020816][ T9262] usb 7-1: SerialNumber: syz [ 781.030258][ T53] team0 (unregistering): Port device team_slave_0 removed [ 781.031379][ T9262] usb 7-1: config 0 descriptor?? [ 781.084326][ T9262] go7007 7-1:0.252: The Lifeview TV Walker Ultra is not supported. Sorry! [ 781.308178][ T9262] usb 7-1: USB disconnect, device number 9 [ 781.672102][ T9059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 781.737631][ T9059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 781.784802][ T9059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 781.891557][ T9059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 782.223155][ T8538] Bluetooth: hci0: command tx timeout [ 783.364399][ T9208] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.406279][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.421069][ T9208] bridge_slave_0: entered allmulticast mode [ 783.452469][ T9208] bridge_slave_0: entered promiscuous mode [ 783.595802][ T9208] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.604762][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.633903][ T9208] bridge_slave_1: entered allmulticast mode [ 783.647553][ T9208] bridge_slave_1: entered promiscuous mode [ 784.078249][ T9208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.125822][ T9208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.655202][ T9208] team0: Port device team_slave_0 added [ 784.701208][ T9208] team0: Port device team_slave_1 added [ 784.727502][ T9072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.917933][ T9072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 785.084072][ T9072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 785.133466][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.140584][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.170182][ T9208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.197179][ T53] bridge_slave_1: left allmulticast mode [ 785.207496][ T53] bridge_slave_1: left promiscuous mode [ 785.215636][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.246433][ T53] bridge_slave_0: left allmulticast mode [ 785.252626][ T53] bridge_slave_0: left promiscuous mode [ 785.259431][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.082011][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.138222][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.154273][ T53] bond0 (unregistering): Released all slaves [ 786.191828][ T9072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 786.278314][ T9208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.293286][ T9208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.352492][ T9208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.571715][ T53] hsr_slave_0: left promiscuous mode [ 786.600471][ T53] hsr_slave_1: left promiscuous mode [ 786.616781][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.630656][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.168349][ T53] team0 (unregistering): Port device team_slave_1 removed [ 787.200839][ T53] team0 (unregistering): Port device team_slave_0 removed [ 787.866362][ T9208] hsr_slave_0: entered promiscuous mode [ 787.877021][ T9208] hsr_slave_1: entered promiscuous mode [ 787.897152][ T9208] debugfs: 'hsr0' already exists in 'hsr' [ 787.907102][ T9208] Cannot create hsr debugfs directory [ 787.971372][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.349560][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.532866][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.540232][ T6018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.804654][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.812105][ T6018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.345476][ T9262] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 789.522509][ T9262] usb 7-1: Using ep0 maxpacket: 8 [ 789.545669][ T9262] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 789.574830][ T9262] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 789.609631][ T9262] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 789.641469][ T9262] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 789.672384][ T9262] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 789.692335][ T9262] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.702968][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.722837][ T9262] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 789.733391][ T9262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.870927][ T9072] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.973936][ T9262] usb 7-1: usb_control_msg returned -32 [ 789.979814][ T9262] usbtmc 7-1:16.0: can't read capabilities [ 790.026277][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.033835][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.100549][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.108487][ T3503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.324793][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 790.368728][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 790.387895][ T9369] usbtmc 7-1:16.0: Unable to send data, error -71 [ 790.559063][ T9208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 790.634940][ T9208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 790.698348][ T9208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 790.769062][ T9208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 791.321163][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.121119][ T5832] usb 7-1: USB disconnect, device number 10 [ 792.318629][ T9208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.366398][ T9059] veth0_vlan: entered promiscuous mode [ 792.560177][ T9072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.592019][ T9208] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.650036][ T9059] veth1_vlan: entered promiscuous mode [ 792.700458][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.708339][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.779296][ T9393] mmap: syz.0.497 (9393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 792.821570][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.829418][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.079719][ T9059] veth0_macvtap: entered promiscuous mode [ 794.168553][ T9072] veth0_vlan: entered promiscuous mode [ 794.215903][ T9059] veth1_macvtap: entered promiscuous mode [ 794.320356][ T9072] veth1_vlan: entered promiscuous mode [ 794.456720][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.607637][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.749553][ T3503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.803863][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.838067][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.903127][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.145613][ T9072] veth0_macvtap: entered promiscuous mode [ 795.201632][ T9072] veth1_macvtap: entered promiscuous mode [ 795.460757][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.589515][ T9072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.749057][ T3503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.779256][ T3503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.949758][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.973940][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.187661][ T9208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.563243][ T9208] veth0_vlan: entered promiscuous mode [ 798.729615][ T9208] veth1_vlan: entered promiscuous mode [ 799.207463][ T9208] veth0_macvtap: entered promiscuous mode [ 799.339833][ T9208] veth1_macvtap: entered promiscuous mode [ 799.542081][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.611384][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.762798][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.810642][ T3503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.836821][ T3503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.912546][ T3503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.791343][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.842790][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.110907][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.147402][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.965252][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.043174][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.292479][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.428088][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.408652][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.464006][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.633450][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.673930][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.664344][ T5784] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 808.866028][ T5784] usb 6-1: Using ep0 maxpacket: 32 [ 808.997025][ T5784] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 809.120425][ T5784] usb 6-1: config 0 has no interface number 0 [ 809.131728][ T5784] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.376280][ T5784] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 809.386384][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.542607][ T5784] usb 6-1: Product: syz [ 809.565875][ T5784] usb 6-1: Manufacturer: syz [ 809.588556][ T5784] usb 6-1: SerialNumber: syz [ 809.619493][ T5784] usb 6-1: config 0 descriptor?? [ 809.656725][ T5784] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 809.671611][ T5784] em28xx 6-1:0.132: Video interface 132 found: [ 810.186437][ T5784] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 810.434594][ T5784] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 810.492687][ T5784] em28xx 6-1:0.132: board has no eeprom [ 810.622672][ T5784] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 810.630719][ T5784] em28xx 6-1:0.132: analog set to bulk mode. [ 810.703005][ T24] em28xx 6-1:0.132: Registering V4L2 extension [ 810.807312][ T5784] usb 6-1: USB disconnect, device number 4 [ 810.863105][ T5784] em28xx 6-1:0.132: Disconnecting em28xx [ 811.877474][ T7644] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 812.099742][ T7644] usb 7-1: Using ep0 maxpacket: 32 [ 812.131167][ T24] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 812.158312][ T7644] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 812.168113][ T24] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 812.183136][ T7644] usb 7-1: config 0 has no interface number 0 [ 812.193096][ T24] em28xx 6-1:0.132: No AC97 audio processor [ 812.215067][ T24] usb 6-1: Decoder not found [ 812.219856][ T24] em28xx 6-1:0.132: failed to create media graph [ 812.248282][ T7644] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 812.276622][ T24] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 812.288730][ T7644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.316870][ T24] em28xx 6-1:0.132: Remote control support is not available for this card. [ 812.332645][ T7644] usb 7-1: Product: syz [ 812.337769][ T7644] usb 7-1: Manufacturer: syz [ 812.357169][ T7644] usb 7-1: SerialNumber: syz [ 812.370523][ T5784] em28xx 6-1:0.132: Closing input extension [ 812.410614][ T7644] usb 7-1: config 0 descriptor?? [ 812.465016][ T5784] em28xx 6-1:0.132: Freeing device [ 812.480216][ T7644] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 813.474812][ T7644] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 813.516303][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 813.615482][ T7644] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 813.630231][ T5784] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 813.745204][ T7644] usb 7-1: USB disconnect, device number 11 [ 813.788464][ T7644] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 813.839560][ T5784] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 813.923385][ T5784] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 813.958152][ T7644] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 813.976634][ T5784] usb 6-1: config 220 has no interface number 2 [ 814.019718][ T5784] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 814.063561][ T7644] quatech2 7-1:0.51: device disconnected [ 814.092944][ T5784] usb 6-1: config 220 interface 0 has no altsetting 0 [ 814.133118][ T5784] usb 6-1: config 220 interface 76 has no altsetting 0 [ 814.140696][ T5784] usb 6-1: config 220 interface 1 has no altsetting 0 [ 814.227421][ T5784] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 814.264043][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.296022][ T5784] usb 6-1: Product: syz [ 814.320828][ T5784] usb 6-1: Manufacturer: syz [ 814.373015][ T5784] usb 6-1: SerialNumber: syz [ 814.706318][ T9615] loop2: detected capacity change from 0 to 2048 [ 814.983505][ T9615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 815.214990][ T5784] usb 6-1: selecting invalid altsetting 0 [ 815.221375][ T5784] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 815.355689][ T5784] uvcvideo 6-1:220.0: No valid video chain found. [ 815.547386][ T5784] usb 6-1: selecting invalid altsetting 0 [ 815.618490][ T5784] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 815.753415][ T5784] usb 6-1: USB disconnect, device number 5 [ 817.982968][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 818.445542][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.463767][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.583458][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 818.643941][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 818.695870][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 818.720099][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 818.733621][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.112466][ T5832] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 819.325641][ T5832] usb 6-1: Using ep0 maxpacket: 32 [ 819.357785][ T5832] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 819.374244][ T5832] usb 6-1: config 0 has no interface number 0 [ 819.430616][ T5832] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 819.557531][ T5832] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 819.578832][ T8538] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 819.594768][ T8538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 819.622105][ T8538] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 819.639958][ T8538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 819.654306][ T8538] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 819.670857][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.692534][ T5832] usb 6-1: Product: syz [ 819.696962][ T5832] usb 6-1: Manufacturer: syz [ 819.701843][ T5832] usb 6-1: SerialNumber: syz [ 819.712001][ T5832] usb 6-1: config 0 descriptor?? [ 819.806792][ T5832] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 819.856548][ T5832] em28xx 6-1:0.132: Video interface 132 found: [ 820.252660][ T5832] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 820.541890][ T5832] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 820.602367][ T5832] em28xx 6-1:0.132: board has no eeprom [ 820.682361][ T5832] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 820.690319][ T5832] em28xx 6-1:0.132: analog set to bulk mode. [ 820.730467][ T9] em28xx 6-1:0.132: Registering V4L2 extension [ 820.783963][ T5832] usb 6-1: USB disconnect, device number 6 [ 820.817625][ T5832] em28xx 6-1:0.132: Disconnecting em28xx [ 820.863579][ T5786] Bluetooth: hci3: command tx timeout [ 821.752440][ T5786] Bluetooth: hci4: command tx timeout [ 821.810920][ T9] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 821.899757][ T9] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 821.957645][ T9] em28xx 6-1:0.132: No AC97 audio processor [ 822.081144][ T9668] loop6: detected capacity change from 0 to 7 [ 822.121799][ T9] usb 6-1: Decoder not found [ 822.142728][ T9] em28xx 6-1:0.132: failed to create media graph [ 822.187547][ T9668] Dev loop6: unable to read RDB block 7 [ 822.197672][ T9] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 822.244948][ T9] em28xx 6-1:0.132: Remote control support is not available for this card. [ 822.274868][ T9668] loop6: unable to read partition table [ 822.315851][ T5832] em28xx 6-1:0.132: Closing input extension [ 822.424383][ T5832] em28xx 6-1:0.132: Freeing device [ 822.444240][ T9668] loop6: partition table beyond EOD, truncated [ 822.460928][ T9668] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 822.922909][ T5832] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 822.953068][ T5786] Bluetooth: hci3: command tx timeout [ 823.037093][ T9640] chnl_net:caif_netlink_parms(): no params data found [ 823.143346][ T5832] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 823.185874][ T5832] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 823.245511][ T5832] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 823.288881][ T5832] usb 6-1: config 220 has no interface number 2 [ 823.441494][ T5832] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 823.498512][ T5832] usb 6-1: config 220 interface 0 has no altsetting 0 [ 823.563051][ T5832] usb 6-1: config 220 interface 76 has no altsetting 0 [ 823.604837][ T5832] usb 6-1: config 220 interface 1 has no altsetting 0 [ 823.651584][ T5832] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 823.664006][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 823.686062][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.735051][ T5832] usb 6-1: Product: syz [ 823.739355][ T5832] usb 6-1: Manufacturer: syz [ 823.779782][ T5832] usb 6-1: SerialNumber: syz [ 823.823278][ T5786] Bluetooth: hci4: command tx timeout [ 824.253477][ T5832] usb 6-1: selecting invalid altsetting 0 [ 824.279216][ T5832] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 824.301021][ T5832] uvcvideo 6-1:220.0: No valid video chain found. [ 824.439616][ T5832] usb 6-1: selecting invalid altsetting 0 [ 824.499778][ T9682] Illegal XDP return value 158 on prog (id 18) dev N/A, expect packet loss! [ 824.512849][ T5832] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 824.603627][ T5832] usb 6-1: USB disconnect, device number 7 [ 825.022523][ T5786] Bluetooth: hci3: command tx timeout [ 825.899203][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.912422][ T5786] Bluetooth: hci4: command tx timeout [ 825.922679][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.930244][ T9640] bridge_slave_0: entered allmulticast mode [ 825.954749][ T9640] bridge_slave_0: entered promiscuous mode [ 825.984811][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.023013][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.030665][ T9640] bridge_slave_1: entered allmulticast mode [ 826.103588][ T9640] bridge_slave_1: entered promiscuous mode [ 826.517186][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.537707][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.577586][ T9648] bridge_slave_0: entered allmulticast mode [ 826.646368][ T9648] bridge_slave_0: entered promiscuous mode [ 826.709935][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.728775][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.769398][ T9648] bridge_slave_1: entered allmulticast mode [ 826.790061][ T9648] bridge_slave_1: entered promiscuous mode [ 826.868488][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.937711][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.102517][ T5786] Bluetooth: hci3: command tx timeout [ 827.986681][ T5786] Bluetooth: hci4: command tx timeout [ 828.567837][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.612705][ T7736] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 828.725558][ T9640] team0: Port device team_slave_0 added [ 828.756000][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.842463][ T7736] usb 6-1: Using ep0 maxpacket: 8 [ 828.881416][ T7736] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 828.893653][ T7736] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 828.954362][ T9640] team0: Port device team_slave_1 added [ 828.970441][ T7736] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 829.014617][ T7736] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 829.062419][ T5830] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 829.071175][ T7736] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 829.125364][ T7736] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 829.191304][ T7736] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 829.237520][ T7736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.288984][ T5830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 829.378315][ T5830] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 829.418488][ T5830] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 829.457478][ T5830] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 829.491755][ T5830] usb 3-1: config 129 has no interface number 0 [ 829.509464][ T5830] usb 3-1: config 129 has no interface number 1 [ 829.533188][ T5830] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 829.557386][ T5830] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 829.617007][ T7736] usb 6-1: usb_control_msg returned -32 [ 829.631329][ T9648] team0: Port device team_slave_0 added [ 829.643527][ T7736] usbtmc 6-1:16.0: can't read capabilities [ 829.653336][ T5830] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 829.716936][ T5830] usb 3-1: config 129 interface 135 has no altsetting 0 [ 829.725565][ T5830] usb 3-1: config 129 interface 5 has no altsetting 0 [ 829.749111][ T9648] team0: Port device team_slave_1 added [ 829.751134][ T5830] usb 3-1: string descriptor 0 read error: -22 [ 829.777171][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 829.787484][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.865307][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.893080][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.895540][ T5830] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 829.963556][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 829.973186][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 829.977511][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.997886][ T9714] usbtmc 6-1:16.0: Unable to send data, error -71 [ 830.052576][ T5830] usb 3-1: MIDIStreaming interface descriptor not found [ 830.111217][ T4467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.669349][ T5830] usb 3-1: USB disconnect, device number 3 [ 830.706854][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.776173][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.831245][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.010971][ T4467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.143874][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.203001][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.336781][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.480092][ T5830] usb 6-1: USB disconnect, device number 8 [ 831.709907][ T4467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.745948][ T7736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 831.841742][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.872574][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.902487][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.989004][ T7736] usb 3-1: Using ep0 maxpacket: 32 [ 832.033976][ T7736] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 832.050373][ T4467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.066361][ T7736] usb 3-1: config 0 has no interface number 0 [ 832.115671][ T7736] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 832.189415][ T7736] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 832.205316][ T7736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.248294][ T7736] usb 3-1: Product: syz [ 832.262575][ T7736] usb 3-1: Manufacturer: syz [ 832.274069][ T7736] usb 3-1: SerialNumber: syz [ 832.305790][ T7736] usb 3-1: config 0 descriptor?? [ 832.383880][ T7736] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 832.417849][ T7736] em28xx 3-1:0.132: Video interface 132 found: [ 832.778877][ T9640] hsr_slave_0: entered promiscuous mode [ 832.857024][ T9640] hsr_slave_1: entered promiscuous mode [ 832.866396][ T9640] debugfs: 'hsr0' already exists in 'hsr' [ 832.873254][ T9640] Cannot create hsr debugfs directory [ 832.884663][ T7736] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 833.107086][ T7736] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 833.107892][ T9648] hsr_slave_0: entered promiscuous mode [ 833.166273][ T7736] em28xx 3-1:0.132: board has no eeprom [ 833.241118][ T9648] hsr_slave_1: entered promiscuous mode [ 833.283430][ T7736] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 833.286526][ T9648] debugfs: 'hsr0' already exists in 'hsr' [ 833.305873][ T7736] em28xx 3-1:0.132: analog set to bulk mode. [ 833.311402][ T9648] Cannot create hsr debugfs directory [ 833.320610][ T5830] em28xx 3-1:0.132: Registering V4L2 extension [ 833.443656][ T7736] usb 3-1: USB disconnect, device number 4 [ 833.471734][ T7736] em28xx 3-1:0.132: Disconnecting em28xx [ 834.501381][ T5830] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 834.520506][ T5830] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 834.542066][ T5830] em28xx 3-1:0.132: No AC97 audio processor [ 834.574685][ T5830] usb 3-1: Decoder not found [ 834.605113][ T5830] em28xx 3-1:0.132: failed to create media graph [ 834.622483][ T5830] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 834.645675][ T5830] em28xx 3-1:0.132: Remote control support is not available for this card. [ 834.722056][ T7736] em28xx 3-1:0.132: Closing input extension [ 834.763249][ T7736] em28xx 3-1:0.132: Freeing device [ 836.443177][ T4467] bridge_slave_1: left allmulticast mode [ 836.448948][ T4467] bridge_slave_1: left promiscuous mode [ 836.475904][ T4467] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.545312][ T4467] bridge_slave_0: left allmulticast mode [ 836.551085][ T4467] bridge_slave_0: left promiscuous mode [ 836.585826][ T4467] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.911477][ T8538] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 836.926280][ T8538] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 836.938000][ T8538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 836.976165][ T8538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 836.993473][ T8538] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.201707][ T4467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.281203][ T4467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.307881][ T4467] bond0 (unregistering): Released all slaves [ 839.111005][ T8538] Bluetooth: hci2: command tx timeout [ 840.099059][ T4467] hsr_slave_0: left promiscuous mode [ 840.131489][ T4467] hsr_slave_1: left promiscuous mode [ 840.168310][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.183665][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.214980][ T4467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.228648][ T4467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.290300][ T4467] veth1_macvtap: left promiscuous mode [ 840.297039][ T4467] veth0_macvtap: left promiscuous mode [ 840.321813][ T4467] veth1_vlan: left promiscuous mode [ 840.343345][ T4467] veth0_vlan: left promiscuous mode [ 840.396392][ T7736] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 840.562993][ T7736] usb 3-1: Using ep0 maxpacket: 32 [ 840.594326][ T7736] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 840.611472][ T7736] usb 3-1: config 0 has no interface number 0 [ 840.631627][ T7736] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.668086][ T7736] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 840.691782][ T7736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.718207][ T7736] usb 3-1: Product: syz [ 840.740429][ T7736] usb 3-1: Manufacturer: syz [ 840.767428][ T7736] usb 3-1: SerialNumber: syz [ 840.817769][ T7736] usb 3-1: config 0 descriptor?? [ 840.860883][ T7736] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 840.892082][ T7736] em28xx 3-1:0.132: Video interface 132 found: [ 841.182863][ T8538] Bluetooth: hci2: command tx timeout [ 841.313220][ T7736] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 841.397329][ T4467] team0 (unregistering): Port device team_slave_1 removed [ 841.539276][ T7736] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 841.556484][ T4467] team0 (unregistering): Port device team_slave_0 removed [ 841.584170][ T7736] em28xx 3-1:0.132: board has no eeprom [ 841.653577][ T7736] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 841.671067][ T7736] em28xx 3-1:0.132: analog set to bulk mode. [ 841.682759][ T5830] em28xx 3-1:0.132: Registering V4L2 extension [ 841.706676][ T7736] usb 3-1: USB disconnect, device number 5 [ 841.723881][ T7736] em28xx 3-1:0.132: Disconnecting em28xx [ 842.169539][ T5830] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 842.192458][ T5830] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 842.199704][ T5830] em28xx 3-1:0.132: No AC97 audio processor [ 842.274648][ T5830] usb 3-1: Decoder not found [ 842.279452][ T5830] em28xx 3-1:0.132: failed to create media graph [ 842.311034][ T5830] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 842.367336][ T5830] em28xx 3-1:0.132: Remote control support is not available for this card. [ 843.226642][ T7736] em28xx 3-1:0.132: Closing input extension [ 843.241062][ T7736] em28xx 3-1:0.132: Freeing device [ 843.264547][ T8538] Bluetooth: hci2: command tx timeout [ 845.343996][ T8538] Bluetooth: hci2: command tx timeout [ 845.978614][ T9648] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 846.236923][ T9648] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 846.326350][ T9648] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 846.699676][ T142] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.844568][ T9648] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 847.660271][ T9757] chnl_net:caif_netlink_parms(): no params data found [ 856.745374][ T142] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.924206][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.946634][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 856.963543][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.012806][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.044016][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.277763][ T142] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.380907][ T142] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.421405][ T9640] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 857.545301][ T9640] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 857.982867][ T9640] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 858.145419][ T9640] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 859.102513][ T5786] Bluetooth: hci1: command tx timeout [ 860.057524][ T7736] IPVS: starting estimator thread 0... [ 860.140798][ T142] bridge_slave_1: left allmulticast mode [ 860.152837][ T9822] IPVS: using max 336 ests per chain, 16800 per kthread [ 860.174350][ T142] bridge_slave_1: left promiscuous mode [ 860.189912][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.213707][ T142] bridge_slave_0: left allmulticast mode [ 860.220924][ T142] bridge_slave_0: left promiscuous mode [ 860.231005][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.187435][ T5786] Bluetooth: hci1: command tx timeout [ 861.249519][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.317604][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.373982][ T142] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 861.430217][ T142] bond0 (unregistering): Released all slaves [ 861.477103][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.517598][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.556817][ T9757] bridge_slave_0: entered allmulticast mode [ 861.582920][ T9757] bridge_slave_0: entered promiscuous mode [ 861.718252][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.732958][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.743368][ T9757] bridge_slave_1: entered allmulticast mode [ 861.767596][ T9757] bridge_slave_1: entered promiscuous mode [ 862.333155][ T9757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.362686][ T9757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.589378][ T142] hsr_slave_0: left promiscuous mode [ 862.605266][ T142] hsr_slave_1: left promiscuous mode [ 862.620547][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.633108][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.668141][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.681732][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.725981][ T142] veth1_macvtap: left promiscuous mode [ 862.737312][ T142] veth0_macvtap: left promiscuous mode [ 862.747206][ T142] veth1_vlan: left promiscuous mode [ 862.754955][ T142] veth0_vlan: left promiscuous mode [ 863.264747][ T5786] Bluetooth: hci1: command tx timeout [ 863.943396][ T142] team0 (unregistering): Port device team_slave_1 removed [ 864.011736][ T142] team0 (unregistering): Port device team_slave_0 removed [ 864.664899][ T9757] team0: Port device team_slave_0 added [ 864.759699][ T9757] team0: Port device team_slave_1 added [ 864.969622][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.981834][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.015415][ T9757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.098491][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.107482][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.136265][ T9757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.200248][ T9648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.217284][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 865.342951][ T5786] Bluetooth: hci1: command tx timeout [ 865.433933][ T142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.539836][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.685374][ T142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.877806][ T9757] hsr_slave_0: entered promiscuous mode [ 865.905888][ T9757] hsr_slave_1: entered promiscuous mode [ 865.950874][ T142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.026729][ T9648] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.137283][ T142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.309355][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.316733][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.350163][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.596305][ T4467] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.603690][ T4467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.627010][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.634741][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.887403][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.895422][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.907227][ T9800] bridge_slave_0: entered allmulticast mode [ 866.921464][ T9800] bridge_slave_0: entered promiscuous mode [ 866.977596][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.989870][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.004661][ T9800] bridge_slave_1: entered allmulticast mode [ 867.043481][ T9800] bridge_slave_1: entered promiscuous mode [ 867.070659][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.078181][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.601604][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.748184][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.201427][ T9800] team0: Port device team_slave_0 added [ 868.280306][ T9640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.309723][ T9800] team0: Port device team_slave_1 added [ 868.500285][ T142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.658669][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.666098][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.698465][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.719602][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.727432][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.760050][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.811251][ T142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.334392][ T142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.448455][ T9648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.608320][ T142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.930097][ T9800] hsr_slave_0: entered promiscuous mode [ 871.969397][ T9800] hsr_slave_1: entered promiscuous mode [ 871.983372][ T9800] debugfs: 'hsr0' already exists in 'hsr' [ 871.989258][ T9800] Cannot create hsr debugfs directory [ 873.693255][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.713194][ T142] bridge_slave_1: left allmulticast mode [ 873.719027][ T142] bridge_slave_1: left promiscuous mode [ 873.774629][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.813684][ T142] bridge_slave_0: left allmulticast mode [ 873.819522][ T142] bridge_slave_0: left promiscuous mode [ 873.869142][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.920491][ T142] bridge_slave_1: left allmulticast mode [ 873.942630][ T142] bridge_slave_1: left promiscuous mode [ 873.949108][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.996908][ T142] bridge_slave_0: left allmulticast mode [ 874.027137][ T142] bridge_slave_0: left promiscuous mode [ 874.044177][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.918508][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.957439][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.979446][ T142] bond0 (unregistering): Released all slaves [ 875.301945][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.334684][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.360590][ T142] bond0 (unregistering): Released all slaves [ 875.420790][ T9757] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 875.736355][ T9757] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 875.959585][ T9757] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 876.220651][ T9757] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 877.551408][ T9648] veth0_vlan: entered promiscuous mode [ 877.918490][ T142] hsr_slave_0: left promiscuous mode [ 878.003116][ T142] hsr_slave_1: left promiscuous mode [ 878.042994][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.050555][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.134874][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.216574][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.332457][ T142] hsr_slave_0: left promiscuous mode [ 878.372512][ T142] hsr_slave_1: left promiscuous mode [ 878.437105][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.472714][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.513897][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.521463][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.743148][ T142] veth1_macvtap: left promiscuous mode [ 878.748869][ T142] veth0_macvtap: left promiscuous mode [ 878.816910][ T142] veth1_vlan: left promiscuous mode [ 878.846820][ T142] veth0_vlan: left promiscuous mode [ 878.932563][ T142] veth1_macvtap: left promiscuous mode [ 878.938268][ T142] veth0_macvtap: left promiscuous mode [ 878.992618][ T142] veth1_vlan: left promiscuous mode [ 878.998408][ T142] veth0_vlan: left promiscuous mode [ 879.437389][ T8538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 879.451862][ T8538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 879.467909][ T8538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 879.485117][ T8538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 879.496350][ T8538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 879.929972][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.936945][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.048106][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 880.057949][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 880.076238][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 880.090179][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 880.106801][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 881.586566][ T5788] Bluetooth: hci0: command tx timeout [ 881.770493][ T142] team0 (unregistering): Port device team_slave_1 removed [ 881.820765][ T142] team0 (unregistering): Port device team_slave_0 removed [ 881.913439][ T5788] Bluetooth: hci6: command 0x0406 tx timeout [ 882.222548][ T5786] Bluetooth: hci5: command tx timeout [ 882.691955][ T142] team0 (unregistering): Port device team_slave_1 removed [ 882.727324][ T142] team0 (unregistering): Port device team_slave_0 removed [ 883.685179][ T5786] Bluetooth: hci0: command tx timeout [ 884.022393][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 884.073140][ T9800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 884.164586][ T9800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 884.204258][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 884.231996][ T5832] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 884.258484][ T5832] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 884.278548][ T5832] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 884.299174][ T9800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 884.312609][ T5832] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 884.316392][ T5786] Bluetooth: hci5: command tx timeout [ 884.359600][ T5832] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 884.387914][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.416497][ T5832] usb 3-1: Product: syz [ 884.429492][ T5832] usb 3-1: Manufacturer: syz [ 884.436836][ T9800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 884.445570][ T5832] usb 3-1: SerialNumber: syz [ 884.745348][ T5832] usb 3-1: USB disconnect, device number 6 [ 884.973340][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.536427][ T9757] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.623853][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 885.743434][ T5786] Bluetooth: hci0: command tx timeout [ 885.858782][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.866372][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.990335][ T9860] chnl_net:caif_netlink_parms(): no params data found [ 886.078412][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.085952][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.386529][ T5786] Bluetooth: hci5: command tx timeout [ 886.759876][ T142] bridge_slave_1: left allmulticast mode [ 886.766196][ T142] bridge_slave_1: left promiscuous mode [ 886.773260][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.906369][ T142] bridge_slave_0: left allmulticast mode [ 886.916817][ T142] bridge_slave_0: left promiscuous mode [ 886.931664][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.640544][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.685891][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.725128][ T142] bond0 (unregistering): Released all slaves [ 887.822909][ T5786] Bluetooth: hci0: command tx timeout [ 887.926146][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.943169][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.968326][ T9858] bridge_slave_0: entered allmulticast mode [ 887.983652][ T9858] bridge_slave_0: entered promiscuous mode [ 888.035310][ T142] hsr_slave_0: left promiscuous mode [ 888.217367][ T142] hsr_slave_1: left promiscuous mode [ 888.219664][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.221706][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.274754][ T142] veth0_vlan: left promiscuous mode [ 888.511363][ T5786] Bluetooth: hci5: command tx timeout [ 889.148859][ T142] team0 (unregistering): Port device team_slave_1 removed [ 889.167682][ T142] team0 (unregistering): Port device team_slave_0 removed [ 889.440456][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.441571][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.441963][ T9858] bridge_slave_1: entered allmulticast mode [ 889.465061][ T9858] bridge_slave_1: entered promiscuous mode [ 889.915700][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.972868][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.973100][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.973508][ T9860] bridge_slave_0: entered allmulticast mode [ 889.976085][ T9860] bridge_slave_0: entered promiscuous mode [ 889.986177][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.986398][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.986741][ T9860] bridge_slave_1: entered allmulticast mode [ 889.988999][ T9860] bridge_slave_1: entered promiscuous mode [ 890.028101][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.058475][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.318320][ T9860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.328449][ T9858] team0: Port device team_slave_0 added [ 890.339759][ T9858] team0: Port device team_slave_1 added [ 890.368500][ T9860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.588928][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.656730][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.656781][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.656871][ T9858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.665659][ T9858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.665729][ T9858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.665862][ T9858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.680572][ T9860] team0: Port device team_slave_0 added [ 890.840870][ T9860] team0: Port device team_slave_1 added [ 890.854292][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.854607][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.173292][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.173343][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.173432][ T9860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.179076][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.179405][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.343676][ T9858] hsr_slave_0: entered promiscuous mode [ 891.347771][ T9858] hsr_slave_1: entered promiscuous mode [ 891.350456][ T9858] debugfs: 'hsr0' already exists in 'hsr' [ 891.350533][ T9858] Cannot create hsr debugfs directory [ 891.353717][ T9860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.353784][ T9860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.353917][ T9860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.923994][ T9860] hsr_slave_0: entered promiscuous mode [ 891.953129][ T9860] hsr_slave_1: entered promiscuous mode [ 891.960885][ T9860] debugfs: 'hsr0' already exists in 'hsr' [ 891.982513][ T9860] Cannot create hsr debugfs directory [ 893.162657][ T142] bridge_slave_1: left allmulticast mode [ 893.168494][ T142] bridge_slave_1: left promiscuous mode [ 893.185287][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.206430][ T142] bridge_slave_0: left allmulticast mode [ 893.212596][ T142] bridge_slave_0: left promiscuous mode [ 893.218805][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.829418][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.848190][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.889411][ T142] bond0 (unregistering): Released all slaves [ 894.291533][ T142] hsr_slave_0: left promiscuous mode [ 894.305056][ T142] hsr_slave_1: left promiscuous mode [ 894.315525][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.324823][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.941289][ T142] team0 (unregistering): Port device team_slave_1 removed [ 894.966328][ T142] team0 (unregistering): Port device team_slave_0 removed [ 895.488981][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.668697][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.138247][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 897.160799][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 897.170192][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 897.183649][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.189422][ T9860] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 897.203459][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 897.331064][ T9860] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 897.462781][ T9860] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 897.569818][ T9860] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 897.768051][ T9800] veth0_vlan: entered promiscuous mode [ 898.069458][ T9858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 898.130174][ T9858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 898.296259][ T9858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 898.396869][ T9800] veth1_vlan: entered promiscuous mode [ 898.456431][ T9858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 899.272742][ T5786] Bluetooth: hci3: command tx timeout [ 899.718823][ T9800] veth0_macvtap: entered promiscuous mode [ 900.472411][ T9800] veth1_macvtap: entered promiscuous mode [ 900.577711][ T9921] chnl_net:caif_netlink_parms(): no params data found [ 901.176329][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.342792][ T5786] Bluetooth: hci3: command tx timeout [ 901.490816][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.540164][ T13] bridge_slave_1: left allmulticast mode [ 901.566361][ T13] bridge_slave_1: left promiscuous mode [ 901.586114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.600431][ T13] bridge_slave_0: left allmulticast mode [ 901.622872][ T13] bridge_slave_0: left promiscuous mode [ 901.629472][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.350319][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.370334][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.398828][ T13] bond0 (unregistering): Released all slaves [ 902.571582][ T9860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.607852][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.608112][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.608306][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.608497][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.754016][ T9860] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.817226][ T1080] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.817567][ T1080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.916400][ T13] hsr_slave_0: left promiscuous mode [ 902.922861][ T13] hsr_slave_1: left promiscuous mode [ 902.929200][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.194701][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.424714][ T5786] Bluetooth: hci3: command tx timeout [ 904.111589][ T13] team0 (unregistering): Port device team_slave_1 removed [ 904.146558][ T13] team0 (unregistering): Port device team_slave_0 removed [ 904.761887][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.873750][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.900359][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.918847][ T9921] bridge_slave_0: entered allmulticast mode [ 904.943696][ T9921] bridge_slave_0: entered promiscuous mode [ 904.979760][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.016173][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.056986][ T9921] bridge_slave_1: entered allmulticast mode [ 905.096288][ T9921] bridge_slave_1: entered promiscuous mode [ 905.139077][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.146657][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.505819][ T5786] Bluetooth: hci3: command tx timeout [ 905.601508][ T9921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.707509][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.759227][ T9921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.028641][ T9921] team0: Port device team_slave_0 added [ 906.103085][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.110741][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.217173][ T9921] team0: Port device team_slave_1 added [ 906.507277][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.515177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.802811][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.809931][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.837762][ T9921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.978114][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.032925][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.112533][ T9921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.950433][ T9921] hsr_slave_0: entered promiscuous mode [ 908.018699][ T9921] hsr_slave_1: entered promiscuous mode [ 909.759291][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.784985][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.804145][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.846352][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.866589][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.971930][ T9860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.031098][ T9858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.906142][ T5786] Bluetooth: hci2: command tx timeout [ 912.016521][ T9921] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 912.047657][ T9921] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 912.209800][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.273156][ T9921] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 912.363406][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.429720][ T9921] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 912.531823][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.588747][T10027] chnl_net:caif_netlink_parms(): no params data found [ 912.705016][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.431666][ T9860] veth0_vlan: entered promiscuous mode [ 913.675584][ T12] bridge_slave_1: left allmulticast mode [ 913.681408][ T12] bridge_slave_1: left promiscuous mode [ 913.716458][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.749406][ T12] bridge_slave_0: left allmulticast mode [ 913.755786][ T12] bridge_slave_0: left promiscuous mode [ 913.763307][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.987279][ T5786] Bluetooth: hci2: command tx timeout [ 914.543650][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.576334][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.608110][ T12] bond0 (unregistering): Released all slaves [ 914.860494][ T9860] veth1_vlan: entered promiscuous mode [ 915.007504][ T12] hsr_slave_0: left promiscuous mode [ 915.015901][ T12] hsr_slave_1: left promiscuous mode [ 915.053945][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.061511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.081039][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.097019][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.136590][ T12] veth1_macvtap: left promiscuous mode [ 915.142680][ T12] veth0_macvtap: left promiscuous mode [ 915.160155][ T12] veth1_vlan: left promiscuous mode [ 915.170444][ T12] veth0_vlan: left promiscuous mode [ 915.975047][ T7644] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 916.063701][ T5786] Bluetooth: hci2: command tx timeout [ 916.164084][ T7644] usb 3-1: Using ep0 maxpacket: 8 [ 916.176518][ T7644] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 916.201593][ T7644] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 916.216724][ T7644] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 916.221744][ T12] team0 (unregistering): Port device team_slave_1 removed [ 916.230207][ T7644] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 916.247632][ T7644] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 916.260225][ T7644] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.278820][ T7644] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 916.289088][ T7644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.300964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 916.537176][ T7644] usb 3-1: usb_control_msg returned -32 [ 916.555989][ T7644] usbtmc 3-1:16.0: can't read capabilities [ 916.838375][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.874169][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.881829][T10027] bridge_slave_0: entered allmulticast mode [ 916.927782][T10027] bridge_slave_0: entered promiscuous mode [ 916.967572][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.994229][ T7644] usb 3-1: USB disconnect, device number 7 [ 917.006346][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.044750][T10027] bridge_slave_1: entered allmulticast mode [ 917.069499][T10027] bridge_slave_1: entered promiscuous mode [ 917.281955][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.323992][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.532988][T10027] team0: Port device team_slave_0 added [ 917.597586][T10027] team0: Port device team_slave_1 added [ 917.629314][ T9858] veth0_vlan: entered promiscuous mode [ 917.789979][ T9860] veth0_macvtap: entered promiscuous mode [ 917.865185][ T9860] veth1_macvtap: entered promiscuous mode [ 917.961846][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.961919][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.962043][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.004601][ T9858] veth1_vlan: entered promiscuous mode [ 918.013908][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.013978][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.014113][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.069346][ T9921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.143103][ T5786] Bluetooth: hci2: command tx timeout [ 918.250551][ T9860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.561650][T10027] hsr_slave_0: entered promiscuous mode [ 918.580235][T10027] hsr_slave_1: entered promiscuous mode [ 918.595058][T10027] debugfs: 'hsr0' already exists in 'hsr' [ 918.600963][T10027] Cannot create hsr debugfs directory [ 918.680314][ T9860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.009949][ T9921] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.666770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.674245][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.818590][ T1080] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.860634][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.868213][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.910317][ T9858] veth0_macvtap: entered promiscuous mode [ 919.970893][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.999407][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.130039][ T9858] veth1_macvtap: entered promiscuous mode [ 920.244807][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.980912][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.220536][ T9858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.525031][ T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.553518][ T80] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.683232][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.776567][ T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.690037][T10027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 922.823367][T10027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 922.928034][T10027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 923.080016][T10027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 923.478100][ T9921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.283676][T10027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.478567][T10027] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.588959][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.596519][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.716988][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.724593][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.817837][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.875218][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.191278][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.232470][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.256734][ T9921] veth0_vlan: entered promiscuous mode [ 927.454560][ T9921] veth1_vlan: entered promiscuous mode [ 928.150885][ T9921] veth0_macvtap: entered promiscuous mode [ 928.278371][ T9921] veth1_macvtap: entered promiscuous mode [ 928.446161][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.653293][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.870167][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.245401][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.273445][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.336447][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.356401][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.376626][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.417825][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.920928][ T8389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.992961][ T8389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.131380][T10027] veth0_vlan: entered promiscuous mode [ 930.345585][T10027] veth1_vlan: entered promiscuous mode [ 930.927873][T10027] veth0_macvtap: entered promiscuous mode [ 931.047368][T10027] veth1_macvtap: entered promiscuous mode [ 931.444759][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.704084][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.931656][ T8389] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.002633][ T8389] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.011791][ T8389] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.785519][ T8389] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.449831][ T8389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.517334][ T8389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.704605][ T8389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.742443][ T8389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.401862][ T8389] ===================================================== [ 938.413566][ T8389] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 938.420686][ T8389] __inet6_bind+0x4ac/0x1830 [ 938.429376][ T8389] inet6_bind+0x11e/0x1a0 [ 938.435004][ T8389] kernel_bind+0xd6/0x130 [ 938.439603][ T8389] rds_tcp_conn_path_connect+0x952/0xff0 [ 938.445697][ T8389] rds_connect_worker+0x353/0x4d0 [ 938.450979][ T8389] process_scheduled_works+0xb21/0x1e30 [ 938.457205][ T8389] worker_thread+0xede/0x1580 [ 938.462051][ T8389] kthread+0x53f/0x600 [ 938.469910][ T8389] ret_from_fork+0x20f/0x910 [ 938.474937][ T8389] ret_from_fork_asm+0x1a/0x30 [ 938.479914][ T8389] [ 938.482704][ T8389] Uninit was stored to memory at: [ 938.487952][ T8389] kernel_bind+0x92/0x130 [ 938.494205][ T8389] rds_tcp_conn_path_connect+0x952/0xff0 [ 938.500025][ T8389] rds_connect_worker+0x353/0x4d0 [ 938.505359][ T8389] process_scheduled_works+0xb21/0x1e30 [ 938.511053][ T8389] worker_thread+0xede/0x1580 [ 938.519484][ T8389] kthread+0x53f/0x600 [ 938.525109][ T8389] ret_from_fork+0x20f/0x910 [ 938.529863][ T8389] ret_from_fork_asm+0x1a/0x30 [ 938.535021][ T8389] [ 938.537417][ T8389] Uninit was stored to memory at: [ 938.545054][ T8389] rds_tcp_conn_path_connect+0xae5/0xff0 [ 938.550850][ T8389] rds_connect_worker+0x353/0x4d0 [ 938.556543][ T8389] process_scheduled_works+0xb21/0x1e30 [ 938.562393][ T8389] worker_thread+0xede/0x1580 [ 938.567211][ T8389] kthread+0x53f/0x600 [ 938.571435][ T8389] ret_from_fork+0x20f/0x910 [ 938.576368][ T8389] ret_from_fork_asm+0x1a/0x30 [ 938.581298][ T8389] [ 938.583826][ T8389] Uninit was created at: [ 938.588375][ T8389] kmem_cache_alloc_noprof+0x37b/0x1270 [ 938.594228][ T8389] rds_tcp_conn_alloc+0x7b/0xbb0 [ 938.599310][ T8389] __rds_conn_create+0x267f/0x34e0 [ 938.604961][ T8389] rds_conn_create+0x5d/0x80 [ 938.609694][ T8389] rds_tcp_accept_one+0x784/0x17d0 [ 938.615090][ T8389] rds_tcp_accept_worker+0x38/0x100 [ 938.622907][ T8389] process_scheduled_works+0xb21/0x1e30 [ 938.628633][ T8389] worker_thread+0xede/0x1580 [ 938.634778][ T8389] kthread+0x53f/0x600 [ 938.639032][ T8389] ret_from_fork+0x20f/0x910 [ 938.643962][ T8389] ret_from_fork_asm+0x1a/0x30 [ 938.648895][ T8389] [ 938.651325][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 938.661198][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.671565][ T8389] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 938.678241][ T8389] ===================================================== [ 938.685371][ T8389] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 939.432627][ T8389] Kernel panic - not syncing: kmsan.panic set ... [ 939.439212][ T8389] CPU: 0 UID: 0 PID: 8389 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(full) [ 939.450507][ T8389] Tainted: [B]=BAD_PAGE [ 939.454756][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 939.464931][ T8389] Workqueue: krds_cp_wq#1/0 rds_connect_worker [ 939.471305][ T8389] Call Trace: [ 939.474668][ T8389] [ 939.477683][ T8389] __dump_stack+0x26/0x30 [ 939.482202][ T8389] dump_stack_lvl+0x50/0x1c0 [ 939.486938][ T8389] ? dump_stack+0x12/0x25 [ 939.491419][ T8389] dump_stack+0x1e/0x25 [ 939.495762][ T8389] vpanic+0x7b4/0x1430 [ 939.500026][ T8389] panic+0x15d/0x160 [ 939.504126][ T8389] kmsan_report+0x31a/0x320 [ 939.508991][ T8389] ? __msan_warning+0x1b/0x30 [ 939.513836][ T8389] ? __inet6_bind+0x4ac/0x1830 [ 939.518756][ T8389] ? inet6_bind+0x11e/0x1a0 [ 939.523414][ T8389] ? kernel_bind+0xd6/0x130 [ 939.528068][ T8389] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 939.534028][ T8389] ? rds_connect_worker+0x353/0x4d0 [ 939.539436][ T8389] ? process_scheduled_works+0xb21/0x1e30 [ 939.545317][ T8389] ? worker_thread+0xede/0x1580 [ 939.550317][ T8389] ? kthread+0x53f/0x600 [ 939.554716][ T8389] ? ret_from_fork+0x20f/0x910 [ 939.559638][ T8389] ? ret_from_fork_asm+0x1a/0x30 [ 939.564764][ T8389] ? stack_depot_save+0x12/0x20 [ 939.569878][ T8389] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 939.575842][ T8389] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 939.581789][ T8389] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 939.588266][ T8389] ? __msan_memcpy+0x105/0x1c0 [ 939.593163][ T8389] ? kernel_bind+0x92/0x130 [ 939.597797][ T8389] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 939.603733][ T8389] ? rds_connect_worker+0x353/0x4d0 [ 939.609097][ T8389] ? process_scheduled_works+0xb21/0x1e30 [ 939.615040][ T8389] ? worker_thread+0xede/0x1580 [ 939.620018][ T8389] ? kthread+0x53f/0x600 [ 939.624398][ T8389] ? ret_from_fork+0x20f/0x910 [ 939.629315][ T8389] ? ret_from_fork_asm+0x1a/0x30 [ 939.634413][ T8389] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 939.640572][ T8389] ? stack_depot_save_flags+0x610/0x790 [ 939.646293][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 939.651569][ T8389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 939.657549][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 939.662837][ T8389] __msan_warning+0x1b/0x30 [ 939.667480][ T8389] __inet6_bind+0x4ac/0x1830 [ 939.672223][ T8389] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 939.678236][ T8389] inet6_bind+0x11e/0x1a0 [ 939.682708][ T8389] ? __pfx_inet6_bind+0x10/0x10 [ 939.687691][ T8389] kernel_bind+0xd6/0x130 [ 939.692163][ T8389] ? kmsan_get_metadata+0xf1/0x160 [ 939.697535][ T8389] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 939.703513][ T8389] rds_tcp_conn_path_connect+0x952/0xff0 [ 939.709288][ T8389] ? try_to_wake_up+0x107e/0x21e0 [ 939.714575][ T8389] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 939.721079][ T8389] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 939.727377][ T8389] rds_connect_worker+0x353/0x4d0 [ 939.732571][ T8389] ? __pfx_rds_connect_worker+0x10/0x10 [ 939.738279][ T8389] process_scheduled_works+0xb21/0x1e30 [ 939.744028][ T8389] worker_thread+0xede/0x1580 [ 939.748893][ T8389] kthread+0x53f/0x600 [ 939.753122][ T8389] ? __pfx_worker_thread+0x10/0x10 [ 939.758436][ T8389] ? __pfx_kthread+0x10/0x10 [ 939.763211][ T8389] ret_from_fork+0x20f/0x910 [ 939.767947][ T8389] ? __switch_to+0x51c/0x750 [ 939.772771][ T8389] ? __pfx_kthread+0x10/0x10 [ 939.777515][ T8389] ret_from_fork_asm+0x1a/0x30 [ 939.782470][ T8389] [ 939.785925][ T8389] Kernel Offset: disabled [ 939.790291][ T8389] Rebooting in 86400 seconds..