last executing test programs: 13m4.642471743s ago: executing program 32 (id=2): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x30, 0x80}}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x202c, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xfffffffffffffffe, 0x3}, 0x0}) ioctl$FS_IOC_RESVSP(r3, 0x40086602, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x121180) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000001140)=""/136) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet_sctp(r7, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x34000}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x30}], 0x1, 0x0) 13m0.050514594s ago: executing program 33 (id=25): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r5, 0x40, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xa}}}, 0x24}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r9, r10, 0x25, 0x1, @void}, 0x10) 12m47.539224472s ago: executing program 34 (id=36): socket(0xa, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) madvise(&(0x7f00008aa000/0x1000)=nil, 0x1000, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452a, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f00000002c0)=@fd={0x8, 0x0, 0x4, 0x4, 0x6, {}, {0x3, 0x0, 0x9, 0x6, 0xa, 0x82, "ba01e9df"}, 0x57, 0x4, {}, 0x8001}) 12m45.931124124s ago: executing program 35 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) r4 = socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x80047456, &(0x7f0000000040)={0x6, 0xb, 0x6, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x5}) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r6, 0x4068aea3, &(0x7f0000000000)={0xdc, 0x0, 0x7fffffff}) 9m56.144798749s ago: executing program 36 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x5}, {0xfff1, 0xffff}, {0x4}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x3}, {0xfff2, 0xffff}, {0x4, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) socket$inet(0x2, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r6, &(0x7f00000000c0)=""/144, 0x90, 0x5e) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) socket$inet6(0xa, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r8, &(0x7f00000005c0)=""/4109, 0x100d, 0x17) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, 0x0) 8m51.69034526s ago: executing program 37 (id=247): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x10c, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfc, {0x5}, [@generic="bc530c572d3cc350a5d374ea84b94bad6c636b47114d93e966188a2dd5db750e45a6a20990d0284c8ac3f633845436244419de2c66b545227cb7ec249c991951afbad885f1c69b8766f5ee69b6a40f8dd82792f33e1910a2ba51fcfcec0b5cfe960417b2472613813c1470703f4dc000417b8b6fc2dd05f275555c0bf84da1773b6eb0bdc57b376225a3b13659d49cdde8a8c189079fbbc156378c9b78421931e8906ee003f345de8a3878813dab7b57e2be4afd7d1558d384e44d3754a884a85228fb37abf8204b94b88a7620ccdddcea205cf355f66e85ffab4913ff94f62418f8fa9a9313f3656c05978c3ded1a05b775e42d4a9e"]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 8m29.121324434s ago: executing program 38 (id=273): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) close(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="6800d491a585247e2affd18a4657202600001000", @ANYRES32=0x0, @ANYBLOB="1000000000000000480012800c0001006d6163766c616e00380002800a000400aaaaaaaaaabb0000280005800a0004002ae0d5b3974e00000a000400aaaaaa"], 0x68}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x6, 0xb}, {0x10, 0xffe0}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x9, 0x1000, 0x2, 0x1, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0x3, 0x9, 0xd576]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x240040e0}, 0x21a06664297a28aa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r7 = openat(r6, &(0x7f00000002c0)='./bus\x00', 0x40000, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4021e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x459, 0x10, r9, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) 8m26.655270619s ago: executing program 39 (id=276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x48, 0x0, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) r3 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0xd070, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) 8m8.304841258s ago: executing program 40 (id=283): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4c7b6d2c7c00cba7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 6m30.74882478s ago: executing program 41 (id=342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a01010000000000000000000000000000000000200000000000202032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61746500000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000c00"], 0x144}}, 0x20000000) 6m17.658552414s ago: executing program 42 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0xffffffffffffffff, 0x1, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000010) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20000010, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000d9728140b72040155ab7010203010902"], 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) 5m56.323163038s ago: executing program 2 (id=376): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1], 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000540)=[0x0]}) 5m47.603002139s ago: executing program 2 (id=379): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 5m46.775924039s ago: executing program 2 (id=380): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 5m46.343542144s ago: executing program 2 (id=381): openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x60c43, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/170, 0x0) 5m45.860778764s ago: executing program 2 (id=382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="c4c35d79b6060000002dc4c1f56cf4b805000000b90e8000000f01d90f79080f00920b0000009a24bc0000e900c4e1f9e78307000000c4e19a5d9f4f820000c4e2fd334a2c66ba4300b8f964c21bef", 0x4f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 5m45.277309085s ago: executing program 2 (id=383): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x9}, {0xa, 0x4e22, 0xfffffffd, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe]}}, 0x5c) r4 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) pread64(r4, &(0x7f0000000100)=""/64, 0x40, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 5m29.898469747s ago: executing program 43 (id=383): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x9}, {0xa, 0x4e22, 0xfffffffd, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe]}}, 0x5c) r4 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) pread64(r4, &(0x7f0000000100)=""/64, 0x40, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 4m11.543035045s ago: executing program 9 (id=465): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m9.394084302s ago: executing program 9 (id=468): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x3, 0x38a}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40857ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xffffffffffffffff, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m24.729848661s ago: executing program 9 (id=468): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee", 0x15}], 0x1) r1 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x3, 0x38a}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r1, 0x40857ba, 0x0, 0xe, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0xffffffffffffffff, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x20000010001, 0x0, 0xd, 0x3, 0x100, 0x10000, 0x2, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m21.853352908s ago: executing program 9 (id=562): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7fffffff}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r4, 0x0, 0x0, 0x1000000}}}, 0x78) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000026c0)="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", 0x2000, &(0x7f00000011c0)={&(0x7f0000000140)={0x50, 0x0, 0x6, {0x7, 0x2d, 0xf5d, 0x100, 0x2, 0x3ff, 0x2, 0x5, 0x0, 0x0, 0x80, 0x10000}}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x2, {0x5}}, &(0x7f0000000200)={0x18, 0x24, 0x5, {0x3}}, &(0x7f0000000240)={0x18, 0x0, 0x348, {0x7}}, &(0x7f0000000340)={0x18, 0x0, 0x8c8e, {0x8}}, &(0x7f00000003c0)={0x28, 0xffffffffffffffda, 0x9, {{0x0, 0x7fffffffffffffff, 0x2}}}, &(0x7f0000000400)={0x60, 0x0, 0x40, {{0x23e, 0x9, 0x6, 0x1, 0xc9, 0x0, 0x1, 0x3}}}, &(0x7f0000000480)={0x18, 0x0, 0x1836d66b, {0x9}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x48, 0x0, 0x4, [{0x0, 0x4, 0x6, 0x645, '\xff\xff\xff\xff\xff\xff'}, {0x1, 0xffffffffffff8001, 0x0, 0x4}]}, 0x0, &(0x7f0000000f80)={0xa0, 0x0, 0x9, {{0x3, 0x1, 0x1000, 0x368808c8, 0x2, 0x10001, {0x3, 0x6, 0xffffffffffffff3b, 0xfffffffffffffff9, 0x8a2, 0x1, 0x7, 0x7ff, 0x1, 0x0, 0x58, 0x0, 0x0, 0xffff, 0x7}}}}, &(0x7f0000001040)={0x20, 0xfffffffffffffff5, 0x8001, {0x80, 0x4, 0x5, 0x21}}, &(0x7f0000001080)={0x130, 0xfffffffffffffffe, 0xdb4, {0x6, 0x1, 0x0, '\x00', {0x80, 0x1, 0x8, 0x0, 0x0, r4, 0xc000, '\x00', 0xffffffffffffffff, 0x4, 0x401, 0x3, {0x6, 0x9}, {0x7, 0x2}, {0x9e, 0x6}, {0x7, 0xd7}, 0xffffffff, 0x27, 0x401, 0x6}}}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f0000000680)=[0xee00, 0x0, 0x0, 0x0, 0x0, 0xee01, 0xee00, 0xee00]) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [{}, {0x2, 0x3}, {0x2, 0x5}], {}, [{0x8, 0x2, r4}, {0x8, 0x4, r5}, {0x8, 0x4, r6}, {0x8, 0x0, r7}, {0x8, 0x2, r8}, {0x8, 0x3, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f) ioctl$SIOCGETNODEID(r10, 0x89e1, &(0x7f0000000000)={0x3}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r11, 0xc0106440, &(0x7f00000000c0)={0x3, 0x2, &(0x7f0000000040)}) 3m19.590989888s ago: executing program 9 (id=568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, 0x0, 0x0) 3m18.968360849s ago: executing program 9 (id=572): pipe2(0x0, 0xc800) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x448340, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010000100009"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0x0, 0x0}]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000200)={{0x2, 0x4, @rand_addr=0x64010100}, {0x306, @multicast}, 0x40, {0x2, 0x4e22, @multicast1}, 'veth0_virt_wifi\x00'}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c080) 3m17.164093912s ago: executing program 8 (id=576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e080007"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m15.654631462s ago: executing program 8 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8000, 0x8, 0x5, 0x800, 0x1, 0x2, 0x2, 0x1, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x44880) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x62, 0x9, 0x40}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m13.086856077s ago: executing program 8 (id=583): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0x5, 0x0) 3m12.270123616s ago: executing program 8 (id=587): socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x11, 0x3, 0x1000000) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3m10.864765306s ago: executing program 8 (id=589): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca}) 3m5.694750671s ago: executing program 8 (id=592): syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff8}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012e, 0x2008007, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2, 0xe, 0xe, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0xfffffdaa, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x60000008, 0x4, 0x1, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x400093a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x5f, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x1, 0x50000000, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m3.379928971s ago: executing program 44 (id=572): pipe2(0x0, 0xc800) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x448340, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120141014813442024040075ee690102030109022400010000100009"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0x0, 0x0}]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000200)={{0x2, 0x4, @rand_addr=0x64010100}, {0x306, @multicast}, 0x40, {0x2, 0x4e22, @multicast1}, 'veth0_virt_wifi\x00'}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x20}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @private2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c080) 2m57.397615579s ago: executing program 3 (id=603): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff1}, {0x0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m48.702939277s ago: executing program 45 (id=592): syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff8}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x0, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x5, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x8000, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x7, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012e, 0x2008007, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x12c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2, 0xe, 0xe, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0xfffffdaa, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffd, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x60000008, 0x4, 0x1, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x400093a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x5f, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x1, 0x50000000, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0xe59b, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m48.265091617s ago: executing program 3 (id=606): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2m47.797001862s ago: executing program 7 (id=608): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 2m47.339377546s ago: executing program 3 (id=609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x1000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x9, 0x481, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40049}, 0x80000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x80080) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) ioctl$BLKSECDISCARD(r5, 0x127d, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff243}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x880) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220b000000b04f344ca67bab"], 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a8140900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x80) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c801}, 0x20000080) bind$alg(r1, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) r8 = syz_clone(0xc081c680, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x10000000) accept4(r1, 0x0, 0x0, 0x800) 2m46.097281575s ago: executing program 7 (id=610): socket$inet(0x2, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x11, 0x3, 0x1000000) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m44.580633592s ago: executing program 7 (id=611): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010040}, 0x44000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m43.531982203s ago: executing program 3 (id=612): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301090212"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x452b, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x50, 0x6000, @fd_index=0x8, 0x0, &(0x7f0000000100)=""/72, 0x48, 0x10}) io_uring_enter(r1, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) 2m39.35595483s ago: executing program 3 (id=613): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x3ca}) 2m39.14219869s ago: executing program 7 (id=615): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0xd070, 0x0, 0x0, 0x0) r3 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r3, &(0x7f00000016c0)={0x2020}, 0x2020) 2m32.163610677s ago: executing program 3 (id=616): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000240)={0x0, 0x80fd, 0x80, 0x2, 0xabc}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 2m31.645528404s ago: executing program 7 (id=617): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 2m31.11908799s ago: executing program 7 (id=618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 2m15.231319547s ago: executing program 46 (id=616): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000240)={0x0, 0x80fd, 0x80, 0x2, 0xabc}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r4, r0) 2m15.041924568s ago: executing program 47 (id=618): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 23.630392954s ago: executing program 0 (id=721): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2000000}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 22.736120246s ago: executing program 0 (id=723): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 22.020494173s ago: executing program 0 (id=725): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@gettaction={0x88, 0x32, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x88}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000300)={"105e9b7905b462703dde960403361114cd03a35a53e65d3eb1ca88f17174", 0xb, 0xffffffff, 0x3, [0x2, 0x6, 0x7a, 0x1, 0x8e000, 0x5, 0x6, 0xc3ed, 0x7f, 0x2, 0x8, 0x5, 0x5, 0x9, 0xb, 0x6, 0x20000000, 0x4]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.081789841s ago: executing program 0 (id=726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = dup3(r1, r0, 0x80000) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20000006}, 0x14) r3 = dup(0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) modify_ldt$read(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@private1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x9, 0x9}}) sched_setattr(r4, &(0x7f0000000140)={0x38, 0x0, 0x49, 0x7, 0xa6, 0x6, 0x5, 0x1, 0x1}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r7, 0xffffffffffffffff) 18.079340834s ago: executing program 6 (id=730): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2000000}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 17.281202863s ago: executing program 6 (id=731): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x48a, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x31a0, 0x3, 0x2}, 0x18, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x3, 0x8000288}, &(0x7f0000000200), &(0x7f0000000240)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41c5", 0x3}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f0000003440)=[{&(0x7f00000000c0)="c61221b68a8b", 0x6}], 0x1}}], 0x2, 0x0) 11.477158833s ago: executing program 0 (id=740): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000000)="a058b776e7315b35ac0005f527104cb204c99bf2fc326394941e82e7a2e8d883a5f71a8ef39a458e253b9657efb842a1ad35b878d6c892e77b76a0f3b703fea78f2dd6e9e16dc4fc66257228d0e3f53f2a8092d4bc1e035900b843d950ec760308bec03c21be314b7867a721df6458bb813b7319", 0x74}, {0x0, 0x20}, {0x0}], 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYRES16=r8, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x8907, 0x0) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r11, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 10.944248772s ago: executing program 4 (id=741): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000ec0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x2, 0x800}, 0x90) 10.085945742s ago: executing program 1 (id=742): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}}, 0x0) 10.011044421s ago: executing program 4 (id=743): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9.121740801s ago: executing program 1 (id=745): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00003df000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x10000000000001, 0x0, 0x20, 0x29, 0xce}) 8.78682831s ago: executing program 4 (id=747): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 7.402042444s ago: executing program 6 (id=749): sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000002640)='memory.stat\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x2020) 7.199284599s ago: executing program 4 (id=750): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$video(&(0x7f0000000300), 0x1000000000c, 0x200c1) r3 = socket(0x28, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100fe0000001900040005000000000008000400", @ANYBLOB="753e21dc825dfa861b702bdeb51214d9be20a5b4298af5277f40cd507bafc84717307708dd1f3843497bbe49d966b4aec66a0deca74c1ea8648ab59ca068eded268b169ac787c31e5864a810e592be2b39114107e91f448a59bd158eb29646d1a17c8cef2fd170608c12b3a7ec4021059223", @ANYBLOB="100001000000000020000000"], 0x2c, 0x2) rseq(&(0x7f0000001140)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) socketpair(0xa, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc791, 0xd11c, 0x56d8, 0x7}, 0x7, 0x3, 0x0, 0xfffffeff, 0x0, 0x5}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000100)=0x8) openat$cgroup_pressure(r0, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1d, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0xfffffe85, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, r0}, 0x94) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000000080)=@multiplanar_userptr={0x3ff, 0x6, 0x4, 0x2000, 0x4, {}, {0x2, 0x1, 0x81, 0x7, 0x0, 0x36, "9aed3570"}, 0x0, 0x2, {&(0x7f00000007c0)=[{0x384, 0x8, {&(0x7f0000000740)}, 0x7}, {0x10, 0x6, {&(0x7f0000000780)}, 0x10001}]}, 0x70000000}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x4, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x81}}, 0x9, 0x6, 0xffff, 0xc, 0x15, 0x1, 0x5}, &(0x7f0000000080)=0x9c) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@local, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@private1}}, &(0x7f0000000380)=0xe8) 5.997445823s ago: executing program 1 (id=752): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 5.26234337s ago: executing program 5 (id=753): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x7}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) 4.64622878s ago: executing program 1 (id=754): syz_usb_connect(0x5, 0xe4, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801", @ANYBLOB], 0x0) 3.742939152s ago: executing program 5 (id=755): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1}, 0x0, 0x80000) 3.057872144s ago: executing program 5 (id=756): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@gettaction={0x84, 0x32, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x84}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000300)={"105e9b7905b462703dde960403361114cd03a35a53e65d3eb1ca88f17174", 0xb, 0xffffffff, 0x3, [0x2, 0x6, 0x7a, 0x1, 0x8e000, 0x5, 0x6, 0xc3ed, 0x7f, 0x2, 0x8, 0x5, 0x5, 0x9, 0xb, 0x6, 0x20000000, 0x4]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.824053098s ago: executing program 4 (id=757): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.369550281s ago: executing program 6 (id=758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) 2.305411023s ago: executing program 5 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.003464952s ago: executing program 1 (id=760): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 1.581984589s ago: executing program 6 (id=761): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@gettaction={0x90, 0x32, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x90}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000300)={"105e9b7905b462703dde960403361114cd03a35a53e65d3eb1ca88f17174", 0xb, 0xffffffff, 0x3, [0x2, 0x6, 0x7a, 0x1, 0x8e000, 0x5, 0x6, 0xc3ed, 0x7f, 0x2, 0x8, 0x5, 0x5, 0x9, 0xb, 0x6, 0x20000000, 0x4]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.448643254s ago: executing program 4 (id=762): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00003df000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x10000000000001, 0x0, 0x20, 0x29, 0xce}) 666.773894ms ago: executing program 0 (id=763): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2000000}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x800}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 547.528404ms ago: executing program 5 (id=764): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000811) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 531.566961ms ago: executing program 6 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x7}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) 350.500722ms ago: executing program 1 (id=766): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x1bf}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe2(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 0s ago: executing program 5 (id=767): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) kernel console output (not intermixed with test programs): ve_1) entered forwarding state [ 680.189483][ T1075] hsr_slave_0: left promiscuous mode [ 680.209832][ T1075] hsr_slave_1: left promiscuous mode [ 680.242761][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.285251][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.347149][ T1075] hsr_slave_0: left promiscuous mode [ 680.361080][ T1075] hsr_slave_1: left promiscuous mode [ 680.407700][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.415334][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.457375][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.464999][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.543592][ T1075] veth1_macvtap: left promiscuous mode [ 680.580862][ T1075] veth0_macvtap: left promiscuous mode [ 680.595870][ T1075] veth1_vlan: left promiscuous mode [ 680.606758][ T1075] veth0_vlan: left promiscuous mode [ 681.847547][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 681.881681][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 682.829439][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 682.850632][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 682.860076][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 682.885251][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 682.896175][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.966904][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 682.992082][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 683.162205][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 683.589922][ T8571] team0: Port device team_slave_0 added [ 683.658661][ T8571] team0: Port device team_slave_1 added [ 684.112310][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.124527][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.204797][ T8571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.390605][ T8571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.404848][ T8571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.504773][ T8571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.946224][ T5789] Bluetooth: hci2: command tx timeout [ 685.696646][ T8571] hsr_slave_0: entered promiscuous mode [ 685.747234][ T8571] hsr_slave_1: entered promiscuous mode [ 685.759184][ T8571] debugfs: 'hsr0' already exists in 'hsr' [ 685.766500][ T8571] Cannot create hsr debugfs directory [ 687.030825][ T5789] Bluetooth: hci2: command tx timeout [ 687.199690][ T8482] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.425965][ T8482] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 687.665815][ T8482] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.749456][ T8482] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 688.014194][ T8679] chnl_net:caif_netlink_parms(): no params data found [ 688.313529][ T8484] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 688.513706][ T8484] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 688.567108][ T8484] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 688.621518][ T8721] loop7: detected capacity change from 0 to 7 [ 688.768312][ T8721] Dev loop7: unable to read RDB block 7 [ 688.789495][ T8721] loop7: unable to read partition table [ 688.796945][ T8484] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 688.816328][ T8721] loop7: partition table beyond EOD, truncated [ 688.847747][ T8721] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 689.104501][ T5789] Bluetooth: hci2: command tx timeout [ 689.448152][ T1075] bridge_slave_1: left allmulticast mode [ 689.472333][ T1075] bridge_slave_1: left promiscuous mode [ 689.483209][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.507716][ T1075] bridge_slave_0: left allmulticast mode [ 689.514220][ T1075] bridge_slave_0: left promiscuous mode [ 689.520671][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.537930][ T1075] bridge_slave_1: left allmulticast mode [ 689.544716][ T1075] bridge_slave_1: left promiscuous mode [ 689.551109][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.607797][ T1075] bridge_slave_0: left allmulticast mode [ 689.618018][ T1075] bridge_slave_0: left promiscuous mode [ 689.635176][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.443456][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.497438][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.513343][ T1075] bond0 (unregistering): Released all slaves [ 690.797579][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.827226][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.855340][ T1075] bond0 (unregistering): Released all slaves [ 691.049917][ T8735] pim6reg: entered allmulticast mode [ 691.170711][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.184485][ T5789] Bluetooth: hci2: command tx timeout [ 691.197867][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.216991][ T8679] bridge_slave_0: entered allmulticast mode [ 691.233655][ T8679] bridge_slave_0: entered promiscuous mode [ 691.345997][ T1075] hsr_slave_0: left promiscuous mode [ 691.363817][ T1075] hsr_slave_1: left promiscuous mode [ 691.376318][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.392979][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.430420][ T1075] hsr_slave_0: left promiscuous mode [ 691.463785][ T1075] hsr_slave_1: left promiscuous mode [ 691.470626][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 691.493547][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.998241][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 692.040762][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 692.901624][ T1075] team0 (unregistering): Port device team_slave_1 removed [ 692.970373][ T1075] team0 (unregistering): Port device team_slave_0 removed [ 693.323634][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.331732][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.339343][ T8679] bridge_slave_1: entered allmulticast mode [ 693.361153][ T8679] bridge_slave_1: entered promiscuous mode [ 693.822151][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.845077][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.076280][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 694.148693][ T8571] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 694.199216][ T8679] team0: Port device team_slave_0 added [ 694.252673][ T8679] team0: Port device team_slave_1 added [ 694.272744][ T8571] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 694.472803][ T8571] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 694.579243][ T8571] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 694.668478][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.679507][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.789353][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.814362][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.848135][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.891245][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.909721][ T8769] syz.0.423 uses obsolete (PF_INET,SOCK_PACKET) [ 694.931308][ T8482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.207688][ T8773] loop7: detected capacity change from 0 to 7 [ 695.283439][ T8748] Dev loop7: unable to read RDB block 7 [ 695.305745][ T8748] loop7: unable to read partition table [ 695.316731][ T8748] loop7: partition table beyond EOD, truncated [ 695.371593][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.378690][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.470851][ T8773] Dev loop7: unable to read RDB block 7 [ 695.476721][ T8773] loop7: unable to read partition table [ 695.518055][ T8773] loop7: partition table beyond EOD, truncated [ 695.527240][ T8679] hsr_slave_0: entered promiscuous mode [ 695.546846][ T8773] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 695.571136][ T8679] hsr_slave_1: entered promiscuous mode [ 695.589844][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 695.595726][ T8679] Cannot create hsr debugfs directory [ 695.687649][ T8482] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.781068][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.788491][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.091725][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.099261][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.272860][ T8484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.544645][ T8484] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.727492][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.735040][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.827109][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.834498][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.087357][ T8571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.438010][ T8571] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.763767][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.771317][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.877614][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.885159][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.915662][ T8679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 700.094514][ T8679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 700.220272][ T8679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 700.320867][ T8679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 700.511783][ T8482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.031984][ T8484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.271052][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.502212][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.618497][ T8571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.713894][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.721453][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.819106][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.826454][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.588895][ T8679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.708665][ T8482] veth0_vlan: entered promiscuous mode [ 704.052384][ T8482] veth1_vlan: entered promiscuous mode [ 704.371985][ T8484] veth0_vlan: entered promiscuous mode [ 704.539737][ T8484] veth1_vlan: entered promiscuous mode [ 704.931617][ T8482] veth0_macvtap: entered promiscuous mode [ 705.148996][ T8482] veth1_macvtap: entered promiscuous mode [ 705.395944][ T8571] veth0_vlan: entered promiscuous mode [ 705.492465][ T8484] veth0_macvtap: entered promiscuous mode [ 705.541096][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.636412][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.683151][ T8484] veth1_macvtap: entered promiscuous mode [ 705.716059][ T8571] veth1_vlan: entered promiscuous mode [ 705.756922][ T8482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.882048][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.914806][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.985053][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.013973][ T7751] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.176063][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.341775][ T8484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.455706][ T7751] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.483721][ T7751] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.614308][ T7751] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.643402][ T7751] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.727232][ T8571] veth0_macvtap: entered promiscuous mode [ 706.791085][ T8571] veth1_macvtap: entered promiscuous mode [ 706.998607][ T8679] veth0_vlan: entered promiscuous mode [ 707.206639][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.265024][ T8679] veth1_vlan: entered promiscuous mode [ 707.416867][ T8571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.620173][ T1075] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.666149][ T1075] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.783550][ T1075] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.814722][ T1075] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.104857][ T8679] veth0_macvtap: entered promiscuous mode [ 708.201350][ T8679] veth1_macvtap: entered promiscuous mode [ 708.467836][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.650067][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.873316][ T7751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.902668][ T7751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.911665][ T7751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.044664][ T7751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.416220][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.500817][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.688744][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.761456][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.962419][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.999627][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.299218][ T500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.361688][ T500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.027235][ T8976] loop7: detected capacity change from 0 to 7 [ 714.150448][ T8976] Dev loop7: unable to read RDB block 7 [ 714.190057][ T8976] loop7: unable to read partition table [ 714.217001][ T8976] loop7: partition table beyond EOD, truncated [ 714.259977][ T8976] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 714.280207][ T8981] process 'syz.7.432' launched './file0' with NULL argv: empty string added [ 714.354201][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.406538][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.624816][ T5134] Dev loop7: unable to read RDB block 7 [ 714.639762][ T5134] loop7: unable to read partition table [ 714.646258][ T5134] loop7: partition table beyond EOD, truncated [ 714.664031][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.664119][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.259271][ T5836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 715.443417][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 715.464684][ T8995] 8021q: VLANs not supported on caif0 [ 715.473431][ T5836] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.473596][ T5836] usb 9-1: config 0 interface 0 has no altsetting 0 [ 715.473761][ T5836] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 715.473901][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.478546][ T5836] usb 9-1: config 0 descriptor?? [ 716.096992][ T5836] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 716.188729][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.578644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.794497][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.794590][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.583488][ T5442] usb 9-1: USB disconnect, device number 2 [ 719.227364][ T5836] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 720.837685][ T5836] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 720.999255][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.057736][ T5836] usb 10-1: Product: syz [ 721.062192][ T5836] usb 10-1: Manufacturer: syz [ 721.097098][ T5836] usb 10-1: SerialNumber: syz [ 721.794181][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 721.808740][ T5836] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 721.809005][ T5836] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 722.302509][ T5836] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 722.380558][ T5836] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 722.482470][ T5836] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 722.736609][ T5836] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 722.935569][ T5836] usb 10-1: USB disconnect, device number 2 [ 723.028589][ T9048] loop7: detected capacity change from 0 to 7 [ 723.372619][ T9048] Dev loop7: unable to read RDB block 7 [ 723.411822][ T9048] loop7: unable to read partition table [ 723.456469][ T9048] loop7: partition table beyond EOD, truncated [ 723.585903][ T9048] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 726.324623][ T5836] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 726.361559][ T9071] 8021q: VLANs not supported on nlmon0 [ 726.560630][ T5836] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.616203][ T5836] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 726.708543][ T5836] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 726.760987][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.811466][ T5836] usb 9-1: Product: syz [ 726.833429][ T5836] usb 9-1: Manufacturer: syz [ 726.838304][ T5836] usb 9-1: SerialNumber: syz [ 727.024284][ T5836] usb 9-1: config 0 descriptor?? [ 727.626250][ T5836] usb 9-1: USB disconnect, device number 3 [ 727.996269][ T5442] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 728.224841][ T5442] usb 1-1: Using ep0 maxpacket: 16 [ 728.248492][ T5442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.305113][ T5442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.362996][ T5442] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 728.418461][ T5442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.466171][ T5442] usb 1-1: config 0 descriptor?? [ 728.928442][ T5442] hid (null): bogus close delimiter [ 729.055050][ T5442] wacom 0003:056A:0084.0003: bogus close delimiter [ 729.096731][ T5442] wacom 0003:056A:0084.0003: item 0 4 2 10 parsing failed [ 729.164512][ T5442] wacom 0003:056A:0084.0003: parse failed [ 729.192781][ T5442] wacom 0003:056A:0084.0003: probe with driver wacom failed with error -22 [ 730.525918][ T9123] loop7: detected capacity change from 0 to 7 [ 730.735086][ T9123] Dev loop7: unable to read RDB block 7 [ 730.788060][ T9123] loop7: unable to read partition table [ 730.857944][ T9123] loop7: partition table beyond EOD, truncated [ 730.894742][ T9123] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 730.921543][ T5442] usb 1-1: USB disconnect, device number 2 [ 732.190275][ T9139] 8021q: VLANs not supported on nlmon0 [ 733.053650][ T9146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 733.481097][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 733.760113][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 734.056098][ T8571] cgroup: fork rejected by pids controller in /syz9 [ 734.530426][ T5836] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 734.596168][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.671168][ T5836] usb 1-1: Product: syz [ 734.675539][ T5836] usb 1-1: Manufacturer: syz [ 734.779511][ T5836] usb 1-1: SerialNumber: syz [ 734.832222][ T5836] usb 1-1: config 0 descriptor?? [ 734.974320][ T5836] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 735.035821][ T5836] pctv452e: pctv452e_power_ctrl: 1 [ 735.035821][ T5836] [ 735.130098][ T5836] usb 1-1: selecting invalid altsetting 3 [ 735.136008][ T5836] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 735.136008][ T5836] [ 735.259647][ T9163] netlink: 'syz.3.466': attribute type 3 has an invalid length. [ 735.279584][ T5836] dvb-usb: bulk message failed: -22 (5/0) [ 735.366357][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 735.470076][ T5836] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 735.506911][ T5836] usb 1-1: media controller created [ 735.543879][ T5836] dvb-usb: bulk message failed: -22 (8/0) [ 735.576766][ T5836] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 735.619052][ T5836] dvb-usb: MAC address reading failed. [ 735.821904][ T298] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.091597][ T5836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 736.527171][ T298] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.628581][ T5442] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 736.808425][ T298] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.840752][ T5442] usb 8-1: Using ep0 maxpacket: 8 [ 736.873463][ T5442] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 737.008201][ T5442] usb 8-1: config 179 has no interface number 0 [ 737.014787][ T5442] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 737.076543][ T5442] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 737.129007][ T298] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.140091][ T5836] DVB: Unable to find symbol stb0899_attach() [ 737.178530][ T5836] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 737.215642][ T5442] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 737.299811][ T5442] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 737.388214][ T5442] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 737.488426][ T5442] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 737.553568][ T5442] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.647048][ T9168] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 737.828333][ T5836] rc_core: IR keymap rc-tt-1500 not found [ 737.885285][ T5836] Registered IR keymap rc-empty [ 737.950144][ T5836] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 738.062097][ T298] bridge_slave_1: left allmulticast mode [ 738.097083][ T5836] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 738.108439][ T298] bridge_slave_1: left promiscuous mode [ 738.183464][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.224949][ T5836] dvb-usb: schedule remote query interval to 100 msecs. [ 738.298786][ T5836] pctv452e: pctv452e_power_ctrl: 0 [ 738.298786][ T5836] [ 738.306248][ T5836] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 738.349832][ T298] bridge_slave_0: left allmulticast mode [ 738.355660][ T298] bridge_slave_0: left promiscuous mode [ 738.401629][ T5838] usb 8-1: USB disconnect, device number 2 [ 738.401727][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 738.416086][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 738.479737][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 738.487656][ T10] dvb-usb: error -22 while querying for an remote control event. [ 738.499400][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.601338][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 738.660551][ T10] dvb-usb: error -22 while querying for an remote control event. [ 738.867552][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 738.873481][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.057172][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.063109][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.266154][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.297019][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.420914][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.454115][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.617973][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.623893][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.796949][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.802887][ T10] dvb-usb: error -22 while querying for an remote control event. [ 739.966861][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 739.972806][ T10] dvb-usb: error -22 while querying for an remote control event. [ 740.176794][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 740.186589][ T10] dvb-usb: error -22 while querying for an remote control event. [ 740.312241][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.312545][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 740.386735][ T10] dvb-usb: error -22 while querying for an remote control event. [ 740.434007][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.536489][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 740.542427][ T10] dvb-usb: error -22 while querying for an remote control event. [ 740.597697][ T298] bond0 (unregistering): Released all slaves [ 740.761519][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 740.807170][ T10] dvb-usb: error -22 while querying for an remote control event. [ 740.922906][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.005866][ T10] dvb-usb: error -22 while querying for an remote control event. [ 741.061176][ T9189] loop7: detected capacity change from 0 to 7 [ 741.156458][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.162396][ T10] dvb-usb: error -22 while querying for an remote control event. [ 741.293030][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.322173][ T10] dvb-usb: error -22 while querying for an remote control event. [ 741.437951][ T9189] Dev loop7: unable to read RDB block 7 [ 741.443839][ T9189] loop7: unable to read partition table [ 741.497324][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.503251][ T10] dvb-usb: error -22 while querying for an remote control event. [ 741.539483][ T9189] loop7: partition table beyond EOD, truncated [ 741.576440][ T9189] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 741.689166][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.735902][ T10] dvb-usb: error -22 while querying for an remote control event. [ 741.907145][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 741.913469][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.091206][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 742.139965][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.181264][ T298] hsr_slave_0: left promiscuous mode [ 742.251947][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 742.275216][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 742.285037][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 742.296353][ T298] hsr_slave_1: left promiscuous mode [ 742.305814][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 742.325430][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.389715][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 742.389934][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.436376][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 742.442310][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.462400][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 742.465364][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.605507][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 742.611442][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.676950][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.684510][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.770046][ T9206] fuse: Unknown parameter 'use00000000000000000000' [ 742.856400][ T298] veth1_macvtap: left promiscuous mode [ 742.870537][ T298] veth0_macvtap: left promiscuous mode [ 742.878885][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 742.884405][ T298] veth1_vlan: left promiscuous mode [ 742.884774][ T10] dvb-usb: error -22 while querying for an remote control event. [ 742.933937][ T298] veth0_vlan: left promiscuous mode [ 743.065251][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 743.114048][ T10] dvb-usb: error -22 while querying for an remote control event. [ 743.295174][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 743.301110][ T10] dvb-usb: error -22 while querying for an remote control event. [ 743.434847][ C1] hrtimer: interrupt took 228282 ns [ 743.524954][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 743.530887][ T10] dvb-usb: error -22 while querying for an remote control event. [ 743.758087][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 743.764034][ T10] dvb-usb: error -22 while querying for an remote control event. [ 743.931028][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 743.976092][ T10] dvb-usb: error -22 while querying for an remote control event. [ 744.157871][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 744.194620][ T10] dvb-usb: error -22 while querying for an remote control event. [ 744.374840][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 744.405420][ T10] dvb-usb: error -22 while querying for an remote control event. [ 744.450455][ T9229] netlink: 'syz.3.477': attribute type 2 has an invalid length. [ 744.567376][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 744.573312][ T10] dvb-usb: error -22 while querying for an remote control event. [ 744.595510][ T5789] Bluetooth: hci0: command tx timeout [ 744.724578][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 744.741019][ T10] dvb-usb: error -22 while querying for an remote control event. [ 744.844549][ T10] usb 1-1: USB disconnect, device number 3 [ 745.028012][ T298] team0 (unregistering): Port device team_slave_1 removed [ 745.162895][ T298] team0 (unregistering): Port device team_slave_0 removed [ 745.292152][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 745.714134][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 745.834316][ T9204] 8021q: VLANs not supported on caif0 [ 745.906531][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 745.953005][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 745.991169][ T10] usb 1-1: config 179 has no interface number 0 [ 746.040874][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 746.080163][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 746.134047][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.156254][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 746.213631][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 746.293662][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 746.356621][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.367535][ T9245] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 746.470555][ T9234] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 746.673744][ T5789] Bluetooth: hci0: command tx timeout [ 747.116175][ T5442] usb 1-1: USB disconnect, device number 4 [ 747.116252][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 747.130742][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 747.176619][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 747.236261][ T9250] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 747.748075][ T9261] loop7: detected capacity change from 0 to 7 [ 747.802864][ T9261] Dev loop7: unable to read RDB block 7 [ 747.810550][ T9261] loop7: unable to read partition table [ 747.818749][ T9261] loop7: partition table beyond EOD, truncated [ 747.893954][ T9261] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 748.160288][ T9268] fuse: Unknown parameter 'use00000000000000000000' [ 748.240301][ T9199] chnl_net:caif_netlink_parms(): no params data found [ 748.755125][ T5789] Bluetooth: hci0: command tx timeout [ 749.828107][ T9294] 8021q: VLANs not supported on nlmon0 [ 750.444655][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.455866][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.464937][ T9199] bridge_slave_0: entered allmulticast mode [ 750.475103][ T9199] bridge_slave_0: entered promiscuous mode [ 750.597240][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.641539][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.649252][ T9199] bridge_slave_1: entered allmulticast mode [ 750.712516][ T9199] bridge_slave_1: entered promiscuous mode [ 750.837764][ T5789] Bluetooth: hci0: command tx timeout [ 751.270382][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.400950][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 751.432695][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.563403][ T9325] loop7: detected capacity change from 0 to 7 [ 751.601010][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 751.634441][ T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 751.661508][ T10] usb 1-1: config 179 has no interface number 0 [ 751.680952][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 751.752109][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 751.801749][ T9325] Dev loop7: unable to read RDB block 7 [ 751.807695][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 751.840921][ T9325] loop7: unable to read partition table [ 751.855948][ T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 751.874395][ T9199] team0: Port device team_slave_0 added [ 751.886232][ T9325] loop7: partition table beyond EOD, truncated [ 751.900875][ T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 751.944456][ T9325] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 751.964865][ T9199] team0: Port device team_slave_1 added [ 751.984777][ T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 752.013233][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.101906][ T9319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.681093][ T5442] usb 1-1: USB disconnect, device number 5 [ 752.685130][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 752.695582][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 752.789250][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.844361][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.010591][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.072437][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.126145][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.210017][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.692070][ T9199] hsr_slave_0: entered promiscuous mode [ 753.759004][ T9199] hsr_slave_1: entered promiscuous mode [ 753.815133][ T9199] debugfs: 'hsr0' already exists in 'hsr' [ 753.830047][ T9199] Cannot create hsr debugfs directory [ 754.407266][ T9343] fuse: Unknown parameter 'use00000000000000000000' [ 756.774296][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.791878][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.139380][ T9361] 8021q: VLANs not supported on caif0 [ 757.328144][ T9199] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 757.516878][ T9199] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 757.692467][ T9199] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 757.849274][ T9374] loop7: detected capacity change from 0 to 7 [ 757.854034][ T9199] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 758.117143][ T9374] Dev loop7: unable to read RDB block 7 [ 758.123059][ T9374] loop7: unable to read partition table [ 758.208093][ T9374] loop7: partition table beyond EOD, truncated [ 758.238227][ T9374] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 758.947309][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 759.187216][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 759.220522][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 759.260417][ T10] usb 4-1: config 179 has no interface number 0 [ 759.320063][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 759.367371][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 759.432127][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 759.455169][ T9388] loop2: detected capacity change from 0 to 7 [ 759.482575][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 759.501074][ T9388] Dev loop2: unable to read RDB block 7 [ 759.541267][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 759.567588][ T9388] loop2: unable to read partition table [ 759.579122][ T9388] loop2: partition table beyond EOD, truncated [ 759.585659][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 759.615432][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.626111][ T9388] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 759.684028][ T9383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.057897][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 760.230183][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.331802][ T5442] usb 4-1: USB disconnect, device number 3 [ 760.331903][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 760.346240][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 760.591981][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.652352][ T9391] fuse: Unknown parameter 'user_i00000000000000000000' [ 760.828978][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.836594][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.124113][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.131800][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.461563][ T9431] 8021q: VLANs not supported on nlmon0 [ 764.530775][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.795992][ T9437] loop7: detected capacity change from 0 to 7 [ 764.955742][ T9437] Dev loop7: unable to read RDB block 7 [ 764.961528][ T9437] loop7: unable to read partition table [ 765.024786][ T9437] loop7: partition table beyond EOD, truncated [ 765.078144][ T9437] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 765.596809][ T9447] loop2: detected capacity change from 0 to 7 [ 765.633899][ T5839] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 765.691472][ T9447] Dev loop2: unable to read RDB block 7 [ 765.758226][ T9447] loop2: unable to read partition table [ 765.804798][ T9447] loop2: partition table beyond EOD, truncated [ 765.837685][ T9447] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 765.870547][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.904343][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.971798][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 766.091829][ T5839] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 766.144043][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.214876][ T5839] usb 8-1: config 0 descriptor?? [ 766.253542][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 766.493735][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 766.528593][ T10] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 766.593937][ T10] usb 9-1: config 179 has no interface number 0 [ 766.623411][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 766.759632][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 766.855373][ T5839] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 766.878683][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 766.917031][ T10] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 766.965020][ T10] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 767.020545][ T10] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 767.059911][ T5839] usb 8-1: USB disconnect, device number 3 [ 767.102565][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.218632][ T9451] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 767.566289][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input7 [ 767.788917][ T7824] usb 9-1: USB disconnect, device number 4 [ 767.789009][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 767.803371][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 768.127476][ T9466] fido_id[9466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 768.769229][ T9199] veth0_vlan: entered promiscuous mode [ 768.900532][ T9199] veth1_vlan: entered promiscuous mode [ 769.428962][ T9199] veth0_macvtap: entered promiscuous mode [ 769.555095][ T9482] tipc: Enabling of bearer rejected, failed to enable media [ 769.759670][ T9199] veth1_macvtap: entered promiscuous mode [ 770.073350][ T9492] 8021q: VLANs not supported on nlmon0 [ 770.247638][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.528194][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.811979][ T1102] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.980681][ T1140] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.028260][ T1102] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.094861][ T1102] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.256101][ T9507] loop7: detected capacity change from 0 to 7 [ 771.382742][ T9510] loop2: detected capacity change from 0 to 7 [ 771.433111][ T9510] Dev loop2: unable to read RDB block 7 [ 771.472623][ T9507] Dev loop7: unable to read RDB block 7 [ 771.473070][ T9510] loop2: unable to read partition table [ 771.491675][ T9510] loop2: partition table beyond EOD, truncated [ 771.496769][ T9507] loop7: unable to read partition table [ 771.498131][ T9510] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 771.571789][ T9507] loop7: partition table beyond EOD, truncated [ 771.591561][ T9507] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 773.050148][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 773.257102][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 773.289351][ T10] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 773.317885][ T10] usb 8-1: config 179 has no interface number 0 [ 773.352371][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 773.388161][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 773.450213][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 773.487625][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 773.520649][ T10] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 773.590998][ T10] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 773.649381][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.736991][ T9528] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 774.046824][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input8 [ 774.232926][ T5834] usb 8-1: USB disconnect, device number 4 [ 774.232968][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 774.233167][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 775.009148][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 775.379887][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 775.974317][ T9566] tipc: Enabling of bearer rejected, failed to enable media [ 776.073734][ T9562] 8021q: VLANs not supported on caif0 [ 777.729805][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 777.787974][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 777.795786][ T10] usb 9-1: can't read configurations, error -71 [ 778.059263][ T9600] loop2: detected capacity change from 0 to 7 [ 778.084224][ T9600] Dev loop2: unable to read RDB block 7 [ 778.089565][ T9601] loop7: detected capacity change from 0 to 7 [ 778.158555][ T9600] loop2: unable to read partition table [ 778.208538][ T9600] loop2: partition table beyond EOD, truncated [ 778.298249][ T9600] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.524909][ T9010] Dev loop7: unable to read RDB block 7 [ 778.616853][ T9010] loop7: unable to read partition table [ 778.656398][ T9010] loop7: partition table beyond EOD, truncated [ 778.883736][ T9601] Dev loop7: unable to read RDB block 7 [ 778.904446][ T9601] loop7: unable to read partition table [ 778.947977][ T9601] loop7: partition table beyond EOD, truncated [ 779.001206][ T9601] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 779.302120][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 779.631312][ T9579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.631390][ T9579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.811336][ T9608] netlink: 'syz.8.553': attribute type 3 has an invalid length. [ 779.845145][ T9579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.845232][ T9579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.277273][ T9608] tmpfs: Unknown parameter 'rootmode' [ 781.226346][ T5834] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 781.360751][ T9637] tipc: Enabling of bearer rejected, failed to enable media [ 781.485927][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 781.522938][ T5834] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 781.555917][ T5834] usb 1-1: config 179 has no interface number 0 [ 781.562403][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 781.649925][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 781.742533][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 781.839471][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 781.885630][ T5834] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 781.985869][ T5834] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 782.065616][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.145060][ T9632] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 782.709761][ T5834] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input10 [ 782.792612][ T9653] 8021q: VLANs not supported on nlmon0 [ 782.821526][ T5838] usb 1-1: USB disconnect, device number 6 [ 782.821620][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 782.839958][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 783.226229][ T9656] tipc: Enabling of bearer rejected, failed to enable media [ 784.414620][ T5785] Bluetooth: hci5: command 0x0406 tx timeout [ 785.039342][ T9684] loop7: detected capacity change from 0 to 7 [ 785.252221][ T9684] Dev loop7: unable to read RDB block 7 [ 785.335438][ T9684] loop7: unable to read partition table [ 785.341887][ T9684] loop7: partition table beyond EOD, truncated [ 785.363932][ T9684] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 786.541612][ T9702] tipc: Enabling of bearer rejected, failed to enable media [ 787.257910][ T5834] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 787.373681][ T9717] 8021q: VLANs not supported on nlmon0 [ 787.543077][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 787.689389][ T5834] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.805317][ T5834] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.907102][ T5834] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 787.992653][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.053096][ T5834] usb 10-1: Product: syz [ 788.093526][ T5838] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 788.124783][ T5834] usb 10-1: Manufacturer: syz [ 788.129680][ T5834] usb 10-1: SerialNumber: syz [ 788.244949][ T5834] usb 10-1: config 0 descriptor?? [ 788.302572][ T5838] usb 8-1: Using ep0 maxpacket: 8 [ 788.315890][ T5838] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 788.399999][ T5838] usb 8-1: config 179 has no interface number 0 [ 788.407094][ T5836] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 788.440285][ T5838] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 788.494895][ T5838] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 788.555028][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.576'. [ 788.557200][ T5838] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.632407][ T5836] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 788.663057][ T5836] usb 4-1: config 0 has no interface number 0 [ 788.669360][ T5836] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.708757][ T5838] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 788.757154][ T5836] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 788.769456][ T5838] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 788.795907][ T5836] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 788.809955][ T5838] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 788.821406][ T5836] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 788.834655][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.854649][ T5836] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 788.960431][ T9725] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 789.003497][ T5836] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 789.079940][ T5836] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 789.197326][ T9712] netlink: 'syz.9.572': attribute type 1 has an invalid length. [ 789.387433][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input11 [ 789.423043][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.265205][ T10] usb 8-1: USB disconnect, device number 5 [ 790.265567][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 790.265775][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 790.294299][ T9712] team0: Device gtp0 is of different type [ 790.348344][ T5836] usb 4-1: config 0 descriptor?? [ 790.371818][ T9727] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 790.379658][ T9727] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 790.546329][ T5836] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 790.713489][ T9744] tipc: Enabling of bearer rejected, failed to enable media [ 791.271268][ T5834] usb 4-1: USB disconnect, device number 4 [ 791.328758][ T5834] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 791.521778][ T9753] loop7: detected capacity change from 0 to 7 [ 791.921188][ T9753] Dev loop7: unable to read RDB block 7 [ 791.990854][ T9753] loop7: unable to read partition table [ 791.997012][ T9753] loop7: partition table beyond EOD, truncated [ 792.041236][ T9753] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 793.165331][ T9774] tipc: Enabling of bearer rejected, failed to enable media [ 793.556399][ T9783] 8021q: VLANs not supported on nlmon0 [ 799.916699][ T5836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 800.146844][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 800.169340][ T5836] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 800.198539][ T9807] tipc: Enabling of bearer rejected, failed to enable media [ 800.216485][ T5836] usb 4-1: config 179 has no interface number 0 [ 800.222957][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 800.275074][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 800.330470][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 800.463417][ T5836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 800.516891][ T5836] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 800.605546][ T5836] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 800.656495][ T5834] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 800.671344][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.876282][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 800.928233][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.937480][ T9803] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 801.033013][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.156082][ T5834] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 801.335149][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.686603][ T5838] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 801.708239][ T5834] usb 8-1: config 0 descriptor?? [ 801.739088][ T5836] usb 4-1: USB disconnect, device number 5 [ 801.745798][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 801.754325][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 802.169276][ T5834] hid (null): bogus close delimiter [ 802.229178][ T5834] wacom 0003:056A:0084.0005: bogus close delimiter [ 802.335858][ T5834] wacom 0003:056A:0084.0005: item 0 4 2 10 parsing failed [ 802.378949][ T5834] wacom 0003:056A:0084.0005: parse failed [ 802.510123][ T5834] wacom 0003:056A:0084.0005: probe with driver wacom failed with error -22 [ 802.758304][ T5836] usb 10-1: USB disconnect, device number 3 [ 803.787287][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 803.816798][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 803.833838][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 803.848374][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 803.868439][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.284717][ T5836] usb 8-1: USB disconnect, device number 6 [ 804.715630][ T9848] 8021q: VLANs not supported on nlmon0 [ 805.924265][ T5785] Bluetooth: hci3: command tx timeout [ 806.221202][ T9860] tipc: Enabling of bearer rejected, failed to enable media [ 806.400745][ T298] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.811130][ T298] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.054521][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 807.377768][ T298] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.652302][ T298] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.024848][ T5789] Bluetooth: hci3: command tx timeout [ 812.331080][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 812.337282][ T5785] Bluetooth: hci3: command tx timeout [ 815.320422][ T9884] Bluetooth: hci3: command tx timeout [ 816.827322][ T298] bridge_slave_1: left allmulticast mode [ 816.855393][ T298] bridge_slave_1: left promiscuous mode [ 816.909028][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.007557][ T298] bridge_slave_0: left allmulticast mode [ 817.088350][ T298] bridge_slave_0: left promiscuous mode [ 817.094861][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.177008][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.183761][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.287798][ T9884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 818.308251][ T9884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 818.320449][ T9884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 818.332728][ T9884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 818.353930][ T9884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 818.697519][ T5834] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 818.735556][ T298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.830248][ T298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.887523][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 818.924700][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.953609][ T298] bond0 (unregistering): Released all slaves [ 818.975234][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.995746][ T5834] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 819.107231][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.189213][ T5834] usb 4-1: config 0 descriptor?? [ 819.403183][ T9901] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 819.527768][ T9901] team0: Port device batadv1 added [ 819.621426][ T5834] hid (null): bogus close delimiter [ 819.708003][ T5834] wacom 0003:056A:0084.0006: bogus close delimiter [ 819.732259][ T5834] wacom 0003:056A:0084.0006: item 0 4 2 10 parsing failed [ 819.764572][ T5834] wacom 0003:056A:0084.0006: parse failed [ 819.782986][ T5834] wacom 0003:056A:0084.0006: probe with driver wacom failed with error -22 [ 819.981927][ T9917] 8021q: VLANs not supported on nlmon0 [ 820.248954][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.303845][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.323086][ T9843] bridge_slave_0: entered allmulticast mode [ 820.374440][ T9843] bridge_slave_0: entered promiscuous mode [ 820.399078][ T5789] Bluetooth: hci0: command tx timeout [ 820.756234][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.799217][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.863246][ T9843] bridge_slave_1: entered allmulticast mode [ 820.925983][ T9843] bridge_slave_1: entered promiscuous mode [ 821.272691][ T298] hsr_slave_0: left promiscuous mode [ 821.345915][ T298] hsr_slave_1: left promiscuous mode [ 821.371694][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.409675][ T5834] usb 4-1: USB disconnect, device number 6 [ 821.432294][ T298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.508212][ T298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.542909][ T298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.900002][ T298] veth1_macvtap: left promiscuous mode [ 821.944990][ T298] veth0_macvtap: left promiscuous mode [ 821.978869][ T298] veth1_vlan: left promiscuous mode [ 822.004676][ T298] veth0_vlan: left promiscuous mode [ 822.256745][ T5839] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 822.477610][ T5789] Bluetooth: hci0: command tx timeout [ 822.517017][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.602777][ T5839] usb 4-1: config 0 has no interfaces? [ 822.686006][ T5839] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 822.747511][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.825499][ T5839] usb 4-1: Product: syz [ 822.829856][ T5839] usb 4-1: Manufacturer: syz [ 822.834608][ T5839] usb 4-1: SerialNumber: syz [ 822.947576][ T5839] usb 4-1: config 0 descriptor?? [ 823.204187][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 823.246937][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 823.465291][ T5839] usb 4-1: USB disconnect, device number 7 [ 824.516211][ T298] team0 (unregistering): Port device team_slave_1 removed [ 824.555899][ T9884] Bluetooth: hci0: command tx timeout [ 824.674908][ T298] team0 (unregistering): Port device team_slave_0 removed [ 825.328563][ T9931] tipc: Enabling of bearer rejected, failed to enable media [ 825.477303][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.706640][ T9884] Bluetooth: hci0: command tx timeout [ 828.817806][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.405382][ T9843] team0: Port device team_slave_0 added [ 833.446891][ T9843] team0: Port device team_slave_1 added [ 833.781850][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.813785][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.879038][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.983463][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.051028][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.099818][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.310374][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.112642][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.201384][T10025] loop2: detected capacity change from 0 to 7 [ 837.432277][T10025] Dev loop2: unable to read RDB block 7 [ 837.544499][T10025] loop2: unable to read partition table [ 837.595029][T10025] loop2: partition table beyond EOD, truncated [ 837.658359][T10025] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 837.710576][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.861795][ T9843] hsr_slave_0: entered promiscuous mode [ 837.941906][ T9843] hsr_slave_1: entered promiscuous mode [ 837.983112][ T9843] debugfs: 'hsr0' already exists in 'hsr' [ 838.018429][ T9843] Cannot create hsr debugfs directory [ 838.223452][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.301494][T10030] netlink: 'syz.0.621': attribute type 2 has an invalid length. [ 839.067801][ T9908] chnl_net:caif_netlink_parms(): no params data found [ 839.578872][T10040] fuse: Unknown parameter '0x0000000000000003' [ 840.398644][ T13] bridge_slave_1: left allmulticast mode [ 840.404508][ T13] bridge_slave_1: left promiscuous mode [ 846.484128][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.648916][ T13] bridge_slave_0: left allmulticast mode [ 846.735899][ T13] bridge_slave_0: left promiscuous mode [ 846.742431][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.893233][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.013089][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.103651][ T13] bond0 (unregistering): Released all slaves [ 850.853165][ T9843] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.334547][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 851.362193][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 851.372509][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 851.378305][T10072] fuse: Unknown parameter '0x0000000000000003' [ 851.403024][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 851.428891][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 851.457057][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 851.474021][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 851.483640][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 851.496309][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 851.507712][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 851.706069][ T9843] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.057897][ T9843] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.508392][ T5789] Bluetooth: hci5: command tx timeout [ 856.537801][ T49] Bluetooth: hci6: command tx timeout [ 858.620485][ T5789] Bluetooth: hci5: command tx timeout [ 858.626079][ T5789] Bluetooth: hci6: command tx timeout [ 858.792182][ T9843] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.889419][ T9908] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.917805][ T9908] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.956835][ T9908] bridge_slave_0: entered allmulticast mode [ 858.991246][ T9908] bridge_slave_0: entered promiscuous mode [ 859.049542][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.067942][ T9908] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.075714][ T9908] bridge_slave_1: entered allmulticast mode [ 859.167454][ T9908] bridge_slave_1: entered promiscuous mode [ 859.786283][ T13] hsr_slave_0: left promiscuous mode [ 859.817035][ T13] hsr_slave_1: left promiscuous mode [ 859.824921][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.862722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.025003][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.047860][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.148378][ T13] veth1_macvtap: left promiscuous mode [ 860.154074][ T13] veth0_macvtap: left promiscuous mode [ 860.186774][ T13] veth1_vlan: left promiscuous mode [ 860.192308][ T13] veth0_vlan: left promiscuous mode [ 860.696620][ T5789] Bluetooth: hci6: command tx timeout [ 860.706432][ T5789] Bluetooth: hci5: command tx timeout [ 861.191337][ T13] team0 (unregistering): Port device team_slave_1 removed [ 861.213183][ T13] team0 (unregistering): Port device team_slave_0 removed [ 862.023178][ T9908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.154497][ T9908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.785486][ T5789] Bluetooth: hci5: command tx timeout [ 862.789312][ T49] Bluetooth: hci6: command tx timeout [ 863.474068][T10115] fuse: Unknown parameter 'fd0x0000000000000003' [ 863.480070][ T9908] team0: Port device team_slave_0 added [ 863.579558][ T9908] team0: Port device team_slave_1 added [ 863.726242][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 863.748064][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 863.766354][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 863.808015][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 863.835232][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 863.897345][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.955353][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.763661][ T9908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.702804][ T49] Bluetooth: hci2: command tx timeout [ 869.705171][ T49] Bluetooth: hci2: command tx timeout [ 870.259087][ T9908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.293339][ T9908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.371637][ T9908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.473892][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.755453][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.099465][ T9908] hsr_slave_0: entered promiscuous mode [ 871.143556][ T9908] hsr_slave_1: entered promiscuous mode [ 871.162259][ T9908] debugfs: 'hsr0' already exists in 'hsr' [ 871.187333][ T9908] Cannot create hsr debugfs directory [ 871.352864][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.730832][ T49] Bluetooth: hci2: command tx timeout [ 873.155602][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.461578][T10074] chnl_net:caif_netlink_parms(): no params data found [ 873.605734][T10071] chnl_net:caif_netlink_parms(): no params data found [ 873.819881][ T49] Bluetooth: hci2: command tx timeout [ 874.908474][T10172] fuse: Unknown parameter 'fd0x0000000000000003' [ 879.972213][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.982769][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.004129][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.924353][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.102801][T10119] chnl_net:caif_netlink_parms(): no params data found [ 884.210206][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.220690][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.230588][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.243794][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 884.255491][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.333479][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.363826][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.394986][T10071] bridge_slave_0: entered allmulticast mode [ 884.415477][T10071] bridge_slave_0: entered promiscuous mode [ 884.451778][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.523609][T10074] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.549056][T10074] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.559197][T10074] bridge_slave_0: entered allmulticast mode [ 884.572836][T10074] bridge_slave_0: entered promiscuous mode [ 884.645450][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.656067][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.663845][T10071] bridge_slave_1: entered allmulticast mode [ 884.675654][T10071] bridge_slave_1: entered promiscuous mode [ 884.714559][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.732185][T10074] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.741339][T10074] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.753530][T10074] bridge_slave_1: entered allmulticast mode [ 884.763910][T10074] bridge_slave_1: entered promiscuous mode [ 885.187360][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.322602][T10074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.385657][T10074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.435669][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.044028][T10074] team0: Port device team_slave_0 added [ 886.088636][T10074] team0: Port device team_slave_1 added [ 886.373918][T10071] team0: Port device team_slave_0 added [ 886.381789][ T5789] Bluetooth: hci3: command tx timeout [ 886.919668][T10071] team0: Port device team_slave_1 added [ 887.667221][ T13] bridge_slave_1: left allmulticast mode [ 887.697222][ T13] bridge_slave_1: left promiscuous mode [ 887.723645][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.814395][ T13] bridge_slave_0: left allmulticast mode [ 887.864357][ T13] bridge_slave_0: left promiscuous mode [ 887.881479][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.932120][ T13] bridge_slave_1: left allmulticast mode [ 887.961087][ T13] bridge_slave_1: left promiscuous mode [ 888.000857][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.049480][ T13] bridge_slave_0: left allmulticast mode [ 888.086334][ T13] bridge_slave_0: left promiscuous mode [ 888.108353][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.442458][ T5789] Bluetooth: hci3: command tx timeout [ 889.044622][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.090956][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.100841][T10234] fuse: Unknown parameter 'fd0x0000000000000003' [ 889.125757][ T13] bond0 (unregistering): Released all slaves [ 889.484686][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.510270][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.539741][ T13] bond0 (unregistering): Released all slaves [ 889.558941][T10074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.568914][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.605035][T10074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.630674][T10119] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.638662][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.647702][T10119] bridge_slave_0: entered allmulticast mode [ 889.674521][T10119] bridge_slave_0: entered promiscuous mode [ 889.687588][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 889.719581][T10119] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.731453][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.745835][T10119] bridge_slave_1: entered allmulticast mode [ 889.756168][T10119] bridge_slave_1: entered promiscuous mode [ 889.773988][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.783943][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.837614][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.912862][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 889.933916][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 889.946686][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.958032][T10074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.965676][ T10] usb 1-1: Product: syz [ 889.969999][ T10] usb 1-1: Manufacturer: syz [ 889.975021][T10074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.005775][ T10] usb 1-1: SerialNumber: syz [ 890.021601][ T10] usb 1-1: config 0 descriptor?? [ 890.038716][T10074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.159736][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.175710][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.218348][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.312795][ T10] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 890.320487][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 890.364665][ T10] usb 1-1: USB disconnect, device number 7 [ 890.407197][T10119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.458524][T10119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.522069][ T5789] Bluetooth: hci3: command tx timeout [ 890.812329][T10119] team0: Port device team_slave_0 added [ 890.912987][T10074] hsr_slave_0: entered promiscuous mode [ 890.952926][T10074] hsr_slave_1: entered promiscuous mode [ 890.971576][T10074] debugfs: 'hsr0' already exists in 'hsr' [ 890.977473][T10074] Cannot create hsr debugfs directory [ 891.177548][T10119] team0: Port device team_slave_1 added [ 891.188240][T10257] kvm: pic: single mode not supported [ 891.203053][T10257] kvm: pic: single mode not supported [ 891.208584][T10257] kvm: pic: level sensitive irq not supported [ 891.272235][T10257] kvm: pic: level sensitive irq not supported [ 891.293097][T10257] kvm: pic: single mode not supported [ 891.296847][T10071] hsr_slave_0: entered promiscuous mode [ 891.300522][T10257] kvm: pic: single mode not supported [ 891.325143][T10071] hsr_slave_1: entered promiscuous mode [ 891.341819][T10257] kvm: pic: single mode not supported [ 891.342380][T10257] kvm: pic: single mode not supported [ 891.354595][T10071] debugfs: 'hsr0' already exists in 'hsr' [ 891.375318][T10257] kvm: pic: level sensitive irq not supported [ 891.376272][T10257] kvm: pic: single mode not supported [ 891.383537][T10071] Cannot create hsr debugfs directory [ 891.383569][T10257] kvm: pic: single mode not supported [ 891.383606][T10257] kvm: pic: level sensitive irq not supported [ 891.383819][T10257] kvm: pic: level sensitive irq not supported [ 891.435267][T10257] kvm: pic: level sensitive irq not supported [ 891.461137][T10257] kvm: pic: single mode not supported [ 891.467358][T10257] kvm: pic: level sensitive irq not supported [ 891.507211][T10257] kvm: pic: level sensitive irq not supported [ 891.537957][T10257] kvm: pic: level sensitive irq not supported [ 891.556983][T10257] kvm: pic: level sensitive irq not supported [ 891.581134][T10257] kvm: pic: single mode not supported [ 892.123382][T10119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.161784][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.232449][T10119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.262307][T10119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.269414][T10119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.303830][T10119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.494715][ T13] hsr_slave_0: left promiscuous mode [ 892.507322][ T13] hsr_slave_1: left promiscuous mode [ 892.532792][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.550427][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.578056][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.595094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.603052][ T5789] Bluetooth: hci3: command tx timeout [ 892.645915][ T13] hsr_slave_0: left promiscuous mode [ 892.666138][ T13] hsr_slave_1: left promiscuous mode [ 892.690520][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.698064][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.712138][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.719689][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.767805][ T13] veth1_macvtap: left promiscuous mode [ 892.774001][ T13] veth0_macvtap: left promiscuous mode [ 892.779777][ T13] veth1_vlan: left promiscuous mode [ 892.785504][ T13] veth0_vlan: left promiscuous mode [ 892.793670][ T13] veth1_macvtap: left promiscuous mode [ 892.799255][ T13] veth0_macvtap: left promiscuous mode [ 892.805467][ T13] veth1_vlan: left promiscuous mode [ 892.811492][ T13] veth0_vlan: left promiscuous mode [ 893.482457][ T13] team0 (unregistering): Port device team_slave_1 removed [ 893.507281][ T13] team0 (unregistering): Port device team_slave_0 removed [ 893.955764][ T13] team0 (unregistering): Port device team_slave_1 removed [ 893.981624][ T13] team0 (unregistering): Port device team_slave_0 removed [ 894.323763][T10276] 8021q: VLANs not supported on caif0 [ 894.344603][T10194] chnl_net:caif_netlink_parms(): no params data found [ 895.294956][T10119] hsr_slave_0: entered promiscuous mode [ 895.329313][T10119] hsr_slave_1: entered promiscuous mode [ 895.348619][T10119] debugfs: 'hsr0' already exists in 'hsr' [ 895.374868][T10119] Cannot create hsr debugfs directory [ 896.581625][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.591648][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.604858][T10194] bridge_slave_0: entered allmulticast mode [ 896.623526][T10194] bridge_slave_0: entered promiscuous mode [ 896.699136][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.725802][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.742253][T10194] bridge_slave_1: entered allmulticast mode [ 896.753143][T10194] bridge_slave_1: entered promiscuous mode [ 897.034233][T10194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.106092][T10194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.443931][T10194] team0: Port device team_slave_0 added [ 897.507458][T10194] team0: Port device team_slave_1 added [ 897.564422][T10074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 897.724951][T10074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 897.762558][T10074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 897.793367][T10194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.807690][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.834286][T10194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.895619][T10074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 897.948507][T10194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.955613][T10194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.994165][T10194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.416972][ T13] bridge_slave_1: left allmulticast mode [ 898.430732][ T13] bridge_slave_1: left promiscuous mode [ 898.437416][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.451730][ T13] bridge_slave_0: left allmulticast mode [ 898.458351][ T13] bridge_slave_0: left promiscuous mode [ 898.464817][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.486889][ T13] bridge_slave_1: left allmulticast mode [ 898.505004][ T13] bridge_slave_1: left promiscuous mode [ 898.521248][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.533677][ T13] bridge_slave_0: left allmulticast mode [ 898.541267][ T13] bridge_slave_0: left promiscuous mode [ 898.549196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.804845][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.829844][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.875005][ T13] bond0 (unregistering): Released all slaves [ 899.125055][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.146198][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.170886][ T13] bond0 (unregistering): Released all slaves [ 899.199037][T10194] hsr_slave_0: entered promiscuous mode [ 899.209139][T10194] hsr_slave_1: entered promiscuous mode [ 899.222616][T10194] debugfs: 'hsr0' already exists in 'hsr' [ 899.248360][T10194] Cannot create hsr debugfs directory [ 899.442521][ T13] hsr_slave_0: left promiscuous mode [ 899.454790][ T13] hsr_slave_1: left promiscuous mode [ 899.466375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.486405][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.524044][ T13] hsr_slave_0: left promiscuous mode [ 899.532795][ T13] hsr_slave_1: left promiscuous mode [ 899.541280][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.551125][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.986101][ T13] team0 (unregistering): Port device team_slave_1 removed [ 900.010134][ T13] team0 (unregistering): Port device team_slave_0 removed [ 900.191545][T10309] fuse: Unknown parameter '000000000000000000000100x0000000000000008' [ 900.268110][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 900.934542][ T13] team0 (unregistering): Port device team_slave_1 removed [ 901.011325][ T13] team0 (unregistering): Port device team_slave_0 removed [ 901.419309][T10309] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.427269][T10309] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.801769][T10071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 901.907284][T10071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 901.990614][T10071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 902.064543][T10071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.104165][T10074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.326054][T10119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 903.358267][T10119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 903.448246][T10119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 903.528538][T10074] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.583355][T10119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 903.780731][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.788256][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.865526][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.936122][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.943415][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.086818][T10194] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 904.141528][T10194] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 904.223006][T10194] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 904.358469][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.390037][T10194] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 904.459408][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.466950][ T9590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.692493][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.700010][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.778452][T10317] 8021q: VLANs not supported on nlmon0 [ 906.672478][T10119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.178721][T10194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.361041][T10119] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.544493][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.552041][ T9579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.636361][T10194] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.801769][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.809331][ T9579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.970139][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.977734][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.057840][T10074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.099547][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.107051][ T9026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.482031][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.891723][T10074] veth0_vlan: entered promiscuous mode [ 909.063856][T10074] veth1_vlan: entered promiscuous mode [ 909.638045][T10074] veth0_macvtap: entered promiscuous mode [ 909.726926][T10074] veth1_macvtap: entered promiscuous mode [ 910.108854][T10074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 910.137356][T10119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.154077][T10361] 8021q: VLANs not supported on caif0 [ 910.269484][T10074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.480990][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.529398][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.569543][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.698851][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.057410][T10194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.850994][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.876643][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.890336][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.913213][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.946394][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 913.793367][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 913.808384][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 913.829363][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 913.850584][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 913.870522][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.073025][ T49] Bluetooth: hci0: command tx timeout [ 915.556662][T10376] chnl_net:caif_netlink_parms(): no params data found [ 915.643610][ T1150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.907468][ T1150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.949316][ T49] Bluetooth: hci4: command tx timeout [ 916.134683][T10119] veth0_vlan: entered promiscuous mode [ 916.232111][ T1150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.335131][T10194] veth0_vlan: entered promiscuous mode [ 916.362841][T10119] veth1_vlan: entered promiscuous mode [ 916.511438][ T1150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.881834][T10119] veth0_macvtap: entered promiscuous mode [ 916.951699][T10119] veth1_macvtap: entered promiscuous mode [ 917.072069][T10119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.106263][T10119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.150890][ T49] Bluetooth: hci0: command tx timeout [ 917.296727][T10376] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.328633][T10376] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.336414][T10376] bridge_slave_0: entered allmulticast mode [ 917.385044][T10376] bridge_slave_0: entered promiscuous mode [ 917.677992][ T1102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.720270][ T1102] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.757307][ T1102] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.777266][ T1102] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.031533][ T49] Bluetooth: hci4: command tx timeout [ 918.330383][T10376] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.347902][T10376] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.382216][T10376] bridge_slave_1: entered allmulticast mode [ 918.403328][T10376] bridge_slave_1: entered promiscuous mode [ 918.436720][T10194] veth1_vlan: entered promiscuous mode [ 919.172941][T10381] chnl_net:caif_netlink_parms(): no params data found [ 919.251352][ T49] Bluetooth: hci0: command tx timeout [ 919.264253][T10376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.445461][T10376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.548709][ T1150] bridge_slave_1: left allmulticast mode [ 919.554549][ T1150] bridge_slave_1: left promiscuous mode [ 919.564468][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.589916][ T1150] bridge_slave_0: left allmulticast mode [ 919.595744][ T1150] bridge_slave_0: left promiscuous mode [ 919.615426][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.998950][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.013788][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.030439][ T1150] bond0 (unregistering): Released all slaves [ 920.108717][ T49] Bluetooth: hci4: command tx timeout [ 920.306550][ T1150] hsr_slave_0: left promiscuous mode [ 920.324175][ T1150] hsr_slave_1: left promiscuous mode [ 920.333861][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.351996][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.364313][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.372512][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.413964][ T1150] veth1_macvtap: left promiscuous mode [ 920.420811][ T1150] veth0_macvtap: left promiscuous mode [ 920.432871][ T1150] veth1_vlan: left promiscuous mode [ 920.443437][ T1150] veth0_vlan: left promiscuous mode [ 921.222409][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 921.273462][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 921.307537][ T49] Bluetooth: hci0: command tx timeout [ 921.566390][T10376] team0: Port device team_slave_0 added [ 921.633107][T10376] team0: Port device team_slave_1 added [ 921.962634][T10194] veth0_macvtap: entered promiscuous mode [ 922.002741][T10376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.013805][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.090868][T10376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.125509][T10376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.132617][T10376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.183292][T10376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.202148][ T49] Bluetooth: hci4: command tx timeout [ 924.018700][T10194] veth1_macvtap: entered promiscuous mode [ 924.429098][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.514587][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.567835][T10381] bridge_slave_0: entered allmulticast mode [ 924.638674][T10381] bridge_slave_0: entered promiscuous mode [ 924.937560][T10376] hsr_slave_0: entered promiscuous mode [ 924.972881][T10376] hsr_slave_1: entered promiscuous mode [ 925.018188][T10376] debugfs: 'hsr0' already exists in 'hsr' [ 925.044166][T10376] Cannot create hsr debugfs directory [ 925.061573][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.084976][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.092846][T10381] bridge_slave_1: entered allmulticast mode [ 925.103055][T10381] bridge_slave_1: entered promiscuous mode [ 925.604925][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 925.614027][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 925.634524][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 925.647137][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 925.657115][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 926.126219][T10194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.365930][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.476455][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.837105][T10194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.306002][ T1150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.361527][T10381] team0: Port device team_slave_0 added [ 927.391619][T10381] team0: Port device team_slave_1 added [ 927.518385][ T1150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.530245][ T1150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.708507][ T5789] Bluetooth: hci5: command tx timeout [ 927.877132][ T1150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.255153][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.268204][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.304547][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.654046][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.670707][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.763244][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.468866][ T53] bridge_slave_1: left allmulticast mode [ 929.500402][ T53] bridge_slave_1: left promiscuous mode [ 929.533721][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.566690][ T53] bridge_slave_0: left allmulticast mode [ 929.581739][ T53] bridge_slave_0: left promiscuous mode [ 929.588385][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.783748][ T5789] Bluetooth: hci5: command tx timeout [ 930.323172][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.392739][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.439703][ T53] bond0 (unregistering): Released all slaves [ 930.775141][T10381] hsr_slave_0: entered promiscuous mode [ 930.825429][T10381] hsr_slave_1: entered promiscuous mode [ 930.846728][T10381] debugfs: 'hsr0' already exists in 'hsr' [ 930.891081][T10381] Cannot create hsr debugfs directory [ 931.161249][ T53] hsr_slave_0: left promiscuous mode [ 931.182962][ T53] hsr_slave_1: left promiscuous mode [ 931.190617][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.213085][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.863387][ T5789] Bluetooth: hci5: command tx timeout [ 932.162088][ T53] team0 (unregistering): Port device team_slave_1 removed [ 932.232084][ T53] team0 (unregistering): Port device team_slave_0 removed [ 932.925831][T10483] chnl_net:caif_netlink_parms(): no params data found [ 933.980705][ T5789] Bluetooth: hci5: command tx timeout [ 934.694552][ T1150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.087271][ T1150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.194465][T10376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 935.559936][ T1150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.650238][T10376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 935.896949][T10376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 935.963135][T10376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 936.194434][ T1150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.457287][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.476349][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.487069][T10483] bridge_slave_0: entered allmulticast mode [ 936.541316][T10483] bridge_slave_0: entered promiscuous mode [ 936.635781][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.657869][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.687612][T10483] bridge_slave_1: entered allmulticast mode [ 936.716196][T10483] bridge_slave_1: entered promiscuous mode [ 936.936089][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.998091][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.129195][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.294539][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.855339][T10483] team0: Port device team_slave_0 added [ 937.900376][T10483] team0: Port device team_slave_1 added [ 937.945977][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.955863][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.234380][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.262322][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.343103][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.436253][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.445241][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.497724][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.725400][ T1150] bridge_slave_1: left allmulticast mode [ 938.747490][ T1150] bridge_slave_1: left promiscuous mode [ 938.753931][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.878845][ T1150] bridge_slave_0: left allmulticast mode [ 938.884686][ T1150] bridge_slave_0: left promiscuous mode [ 938.914299][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.986822][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.023531][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.043753][ T1150] bond0 (unregistering): Released all slaves [ 940.147290][T10593] tipc: Enabling of bearer rejected, failed to enable media [ 940.207376][T10381] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 940.420288][T10381] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 940.556712][T10483] hsr_slave_0: entered promiscuous mode [ 940.608931][T10483] hsr_slave_1: entered promiscuous mode [ 940.628858][T10483] debugfs: 'hsr0' already exists in 'hsr' [ 940.634762][T10483] Cannot create hsr debugfs directory [ 940.712150][ T1150] hsr_slave_0: left promiscuous mode [ 940.741988][ T1150] hsr_slave_1: left promiscuous mode [ 940.758029][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.768551][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.785760][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.796248][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.845829][ T1150] veth1_macvtap: left promiscuous mode [ 940.863369][ T1150] veth0_macvtap: left promiscuous mode [ 940.890312][ T1150] veth1_vlan: left promiscuous mode [ 940.936478][ T1150] veth0_vlan: left promiscuous mode [ 940.999175][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.005770][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.277726][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 942.347052][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 942.912499][T10381] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 943.199621][T10381] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 943.205530][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 943.416617][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 943.513295][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.564931][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 943.599291][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.778426][ T24] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 943.826458][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.870611][ T24] usb 1-1: Product: syz [ 943.900240][ T24] usb 1-1: Manufacturer: syz [ 943.906529][ T24] usb 1-1: SerialNumber: syz [ 943.997769][ T24] usb 1-1: config 0 descriptor?? [ 944.113485][ T24] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 944.331196][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.341711][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.036469][T10376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.808116][T10376] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.012418][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.020030][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.193747][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.354754][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.362280][ T9579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.628536][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.949087][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.956467][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.136410][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.143832][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.263240][T10483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 949.448906][T10483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 949.506736][T10483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 949.630161][T10483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 950.135096][T10381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.938783][ T7824] usb 1-1: USB disconnect, device number 8 [ 953.073847][T10376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.120655][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.639111][T10483] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.994167][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.115367][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.122888][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.319343][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.326787][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.874435][T10376] veth0_vlan: entered promiscuous mode [ 955.264239][T10376] veth1_vlan: entered promiscuous mode [ 956.376390][T10376] veth0_macvtap: entered promiscuous mode [ 956.825039][T10376] veth1_macvtap: entered promiscuous mode [ 957.193878][T10381] veth0_vlan: entered promiscuous mode [ 957.375762][T10381] veth1_vlan: entered promiscuous mode [ 957.395388][T10376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.519988][T10376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.580464][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.679264][ T298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.773949][ T298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.895110][ T298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.947198][ T298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.119562][T10381] veth0_macvtap: entered promiscuous mode [ 959.274257][T10381] veth1_macvtap: entered promiscuous mode [ 959.869735][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.188939][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.523648][ T9026] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.553359][ T9026] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.587888][ T9026] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.612647][ T9026] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.938590][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.719'. [ 962.159082][T10483] veth0_vlan: entered promiscuous mode [ 962.288990][T10483] veth1_vlan: entered promiscuous mode [ 962.792822][T10483] veth0_macvtap: entered promiscuous mode [ 962.935440][T10483] veth1_macvtap: entered promiscuous mode [ 963.176510][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.432929][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.572998][ T9026] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.625697][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.740861][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.803736][T10798] syz.6.724 (10798): drop_caches: 2 [ 963.807020][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.623352][ T29] audit: type=1326 audit(1772828975.812:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 964.771374][ T29] audit: type=1326 audit(1772828975.812:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 964.930194][ T29] audit: type=1326 audit(1772828975.822:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 965.114735][ T29] audit: type=1326 audit(1772828975.822:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 965.565877][ T29] audit: type=1326 audit(1772828976.012:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 965.674352][ T29] audit: type=1326 audit(1772828976.012:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 965.784162][ T29] audit: type=1326 audit(1772828976.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 965.906756][ T29] audit: type=1326 audit(1772828976.132:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 966.078345][ T29] audit: type=1326 audit(1772828976.392:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10828 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe02435cfce code=0x7ffc0000 [ 966.195733][ T29] audit: type=1326 audit(1772828976.382:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10811 comm="syz.0.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02439c799 code=0x7ffc0000 [ 966.597631][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.729'. [ 967.621074][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.670458][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.925053][ T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.957368][ T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.268738][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.364972][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.448917][T10865] kAFS: unable to lookup cell 'ÿ' [ 969.024785][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.085692][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.603034][T10895] loop2: detected capacity change from 0 to 7 [ 970.664711][T10895] Dev loop2: unable to read RDB block 7 [ 970.701740][T10895] loop2: unable to read partition table [ 970.710674][T10895] loop2: partition table beyond EOD, truncated [ 970.795973][T10895] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 972.942514][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 973.141179][ T500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.149152][ T500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.583643][ T298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.676712][ T298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.017909][T10933] warning: `syz.0.740' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 975.425264][T10951] loop2: detected capacity change from 0 to 7 [ 975.497534][T10951] Dev loop2: unable to read RDB block 7 [ 975.569241][T10951] loop2: unable to read partition table [ 975.629680][T10951] loop2: partition table beyond EOD, truncated [ 975.724070][T10951] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 976.834264][T10962] loop2: detected capacity change from 0 to 7 [ 976.901387][T10962] Dev loop2: unable to read RDB block 7 [ 976.907212][T10962] loop2: AHDI p1 p2 p3 [ 977.033515][T10962] loop2: partition table partially beyond EOD, truncated [ 977.095731][T10962] loop2: p1 start 1818582900 is beyond EOD, truncated [ 977.160171][T10962] loop2: p3 start 335544320 is beyond EOD, truncated [ 977.689031][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 981.303183][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 981.558438][ T24] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 981.615838][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.675945][ T24] usb 2-1: config 0 has no interface number 0 [ 981.682291][ T24] usb 2-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 981.813621][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 981.832328][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.858093][ T24] usb 2-1: config 0 descriptor?? [ 981.992569][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 982.121016][ T1093] usb 2-1: Failed to submit usb control message: -71 [ 982.124060][T10277] usb 2-1: USB disconnect, device number 4 [ 982.175447][ T1093] usb 2-1: unable to send the bmi data to the device: -71 [ 982.182784][ T1093] usb 2-1: unable to get target info from device [ 982.255780][ T1093] usb 2-1: could not get target info (-71) [ 982.261849][ T1093] usb 2-1: could not probe fw (-71) [ 982.703483][T11015] loop2: detected capacity change from 0 to 7 [ 982.764160][T11015] Dev loop2: unable to read RDB block 7 [ 982.827711][T11015] loop2: unable to read partition table [ 982.906213][T11015] loop2: partition table beyond EOD, truncated [ 982.980784][T11015] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 983.584378][T11023] loop2: detected capacity change from 0 to 7 [ 983.607493][T10338] Dev loop2: unable to read RDB block 7 [ 983.613313][T10338] loop2: AHDI p1 p2 p3 [ 983.666917][T10338] loop2: partition table partially beyond EOD, truncated [ 983.710350][T10338] loop2: p1 start 1818582900 is beyond EOD, truncated [ 983.727600][T10338] loop2: p3 start 335544320 is beyond EOD, truncated [ 983.773556][T11023] Dev loop2: unable to read RDB block 7 [ 983.794920][T11023] loop2: AHDI p1 p2 p3 [ 983.816040][T11023] loop2: partition table partially beyond EOD, truncated [ 983.824097][T11023] loop2: p1 start 1818582900 is beyond EOD, truncated [ 983.897425][T11023] loop2: p3 start 335544320 is beyond EOD, truncated [ 984.115631][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.761'. [ 985.222340][T11043] syz_tun: entered allmulticast mode [ 985.277545][T11043] ===================================================== [ 985.285495][T11043] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x3400 [ 985.298062][T11043] _copy_to_iter+0xef3/0x3400 [ 985.302898][T11043] __skb_datagram_iter+0x18f/0x12b0 [ 985.310670][T11043] skb_copy_datagram_iter+0x5b/0x240 [ 985.316343][T11043] raw_recvmsg+0x2c8/0xab0 [ 985.321068][T11043] inet_recvmsg+0x33c/0x690 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.325957][T11043] sock_recvmsg+0x22d/0x310 [ 985.330791][T11043] sock_read_iter+0x2c8/0x360 [ 985.335860][T11043] __io_read+0xc18/0x2540 [ 985.340408][T11043] io_read+0x6b/0x3c0 [ 985.344688][T11043] __io_issue_sqe+0x2ba/0x790 [ 985.349568][T11043] io_issue_sqe+0x5ad/0x24e0 [ 985.354594][T11043] io_req_task_submit+0xd1/0x220 [ 985.359706][T11043] io_poll_task_func+0x12d0/0x1930 [ 985.365170][T11043] io_handle_tw_list+0x39e/0x700 [ 985.370297][T11043] tctx_task_work_run+0x90/0x390 [ 985.375562][T11043] tctx_task_work+0x6d/0xc0 [ 985.380234][T11043] task_work_run+0x208/0x2b0 [ 985.385324][T11043] get_signal+0x136/0x2a70 [ 985.395128][T11043] arch_do_signal_or_restart+0x53/0xc00 [ 985.400916][T11043] exit_to_user_mode_loop+0x117/0x1b60 [ 985.408252][T11043] do_syscall_64+0x24d/0xf80 [ 985.413079][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.419316][T11043] [ 985.421714][T11043] Uninit was created at: [ 985.426432][T11043] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 985.432577][T11043] __alloc_skb+0x855/0x1190 [ 985.437504][T11043] ipmr_cache_report+0x410/0x2200 [ 985.442727][T11043] ipmr_cache_unresolved+0x53d/0xd20 [ 985.448344][T11043] ip_mr_input+0xe78/0xfb0 [ 985.452907][T11043] ip_rcv_finish+0x53e/0x560 [ 985.457968][T11043] ip_rcv+0xcb/0x370 [ 985.462026][T11043] netif_receive_skb+0x356/0x1160 [ 985.468285][T11043] tun_rx_batched+0x1da/0x980 [ 985.473183][T11043] tun_get_user+0x6002/0x7830 [ 985.478160][T11043] tun_chr_write_iter+0x3e9/0x5c0 [ 985.483431][T11043] vfs_write+0xbe1/0x15c0 [ 985.488126][T11043] ksys_write+0x1d9/0x470 [ 985.497914][T11043] __x64_sys_write+0x97/0xf0 [ 985.502680][T11043] x64_sys_call+0x2ff0/0x3ea0 [ 985.509198][T11043] do_syscall_64+0x134/0xf80 [ 985.514190][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.520242][T11043] [ 985.522625][T11043] Bytes 22-27 of 28 are uninitialized [ 985.528295][T11043] Memory access of size 28 starts at ffff8881088d79c0 [ 985.535675][T11043] Data copied to user address 0000200000000240 [ 985.541914][T11043] [ 985.544631][T11043] CPU: 0 UID: 0 PID: 11043 Comm: syz.1.766 Tainted: G L syzkaller #0 PREEMPT(full) [ 985.555806][T11043] Tainted: [L]=SOFTLOCKUP [ 985.560213][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.570922][T11043] ===================================================== [ 985.578116][T11043] Disabling lock debugging due to kernel taint [ 985.662745][T11043] Kernel panic - not syncing: kmsan.panic set ... [ 985.669332][T11043] CPU: 0 UID: 0 PID: 11043 Comm: syz.1.766 Tainted: G B L syzkaller #0 PREEMPT(full) [ 985.680415][T11043] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 985.686052][T11043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 985.696239][T11043] Call Trace: [ 985.699607][T11043] [ 985.702614][T11043] __dump_stack+0x26/0x30 [ 985.707113][T11043] dump_stack_lvl+0x50/0x1c0 [ 985.711867][T11043] ? dump_stack+0x12/0x25 [ 985.716368][T11043] dump_stack+0x1e/0x25 [ 985.720678][T11043] vpanic+0x7b4/0x1430 [ 985.724919][T11043] panic+0x15d/0x160 [ 985.728999][T11043] kmsan_report+0x31a/0x320 [ 985.733683][T11043] ? kmsan_internal_check_memory+0x1e8/0x240 [ 985.739828][T11043] ? kmsan_copy_to_user+0xef/0x190 [ 985.745100][T11043] ? _copy_to_iter+0xef3/0x3400 [ 985.750060][T11043] ? __skb_datagram_iter+0x18f/0x12b0 [ 985.755610][T11043] ? skb_copy_datagram_iter+0x5b/0x240 [ 985.761263][T11043] ? raw_recvmsg+0x2c8/0xab0 [ 985.766027][T11043] ? inet_recvmsg+0x33c/0x690 [ 985.770823][T11043] ? sock_recvmsg+0x22d/0x310 [ 985.775641][T11043] ? sock_read_iter+0x2c8/0x360 [ 985.780618][T11043] ? __io_read+0xc18/0x2540 [ 985.785252][T11043] ? io_read+0x6b/0x3c0 [ 985.789538][T11043] ? __io_issue_sqe+0x2ba/0x790 [ 985.794531][T11043] ? io_issue_sqe+0x5ad/0x24e0 [ 985.799425][T11043] ? io_req_task_submit+0xd1/0x220 [ 985.804679][T11043] ? io_poll_task_func+0x12d0/0x1930 [ 985.810117][T11043] ? io_handle_tw_list+0x39e/0x700 [ 985.815388][T11043] ? tctx_task_work_run+0x90/0x390 [ 985.820674][T11043] ? tctx_task_work+0x6d/0xc0 [ 985.825503][T11043] ? task_work_run+0x208/0x2b0 [ 985.830432][T11043] ? get_signal+0x136/0x2a70 [ 985.835152][T11043] ? arch_do_signal_or_restart+0x53/0xc00 [ 985.841000][T11043] ? exit_to_user_mode_loop+0x117/0x1b60 [ 985.846803][T11043] ? do_syscall_64+0x24d/0xf80 [ 985.851687][T11043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.857889][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.863174][T11043] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 985.869682][T11043] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 985.875917][T11043] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 985.881963][T11043] ? stack_depot_save_flags+0x610/0x790 [ 985.887702][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.892993][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 985.898996][T11043] kmsan_internal_check_memory+0x1e8/0x240 [ 985.904991][T11043] kmsan_copy_to_user+0xef/0x190 [ 985.910112][T11043] _copy_to_iter+0xef3/0x3400 [ 985.914910][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.920208][T11043] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 985.926724][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.932034][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 985.938039][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.943367][T11043] __skb_datagram_iter+0x18f/0x12b0 [ 985.948750][T11043] ? __skb_try_recv_datagram+0x5f1/0x6e0 [ 985.954565][T11043] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 985.960413][T11043] skb_copy_datagram_iter+0x5b/0x240 [ 985.965876][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 985.971873][T11043] raw_recvmsg+0x2c8/0xab0 [ 985.976477][T11043] ? __pfx_raw_recvmsg+0x10/0x10 [ 985.981575][T11043] inet_recvmsg+0x33c/0x690 [ 985.986194][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 985.991497][T11043] ? __pfx_inet_recvmsg+0x10/0x10 [ 985.996639][T11043] sock_recvmsg+0x22d/0x310 [ 986.001295][T11043] sock_read_iter+0x2c8/0x360 [ 986.006136][T11043] ? __pfx_sock_read_iter+0x10/0x10 [ 986.011484][T11043] __io_read+0xc18/0x2540 [ 986.015961][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.021258][T11043] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 986.027780][T11043] io_read+0x6b/0x3c0 [ 986.031898][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.037183][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 986.043169][T11043] ? __pfx_io_read+0x10/0x10 [ 986.047894][T11043] ? __pfx_io_read+0x10/0x10 [ 986.052614][T11043] __io_issue_sqe+0x2ba/0x790 [ 986.057424][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.062724][T11043] io_issue_sqe+0x5ad/0x24e0 [ 986.067447][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.072724][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 986.078712][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.083995][T11043] ? kmsan_report+0x310/0x320 [ 986.088836][T11043] io_req_task_submit+0xd1/0x220 [ 986.093922][T11043] io_poll_task_func+0x12d0/0x1930 [ 986.099180][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.104489][T11043] ? __pfx_io_poll_task_func+0x10/0x10 [ 986.110110][T11043] io_handle_tw_list+0x39e/0x700 [ 986.115252][T11043] tctx_task_work_run+0x90/0x390 [ 986.120363][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.125649][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 986.131640][T11043] ? __pfx_tctx_task_work+0x10/0x10 [ 986.137000][T11043] tctx_task_work+0x6d/0xc0 [ 986.141657][T11043] task_work_run+0x208/0x2b0 [ 986.146430][T11043] get_signal+0x136/0x2a70 [ 986.150983][T11043] ? filter_irq_stacks+0x13f/0x190 [ 986.156349][T11043] ? stack_depot_save_flags+0x35/0x790 [ 986.161944][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.167250][T11043] ? arch_do_signal_or_restart+0x43/0xc00 [ 986.173106][T11043] ? exit_to_user_mode_loop+0x117/0x1b60 [ 986.178915][T11043] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 986.184907][T11043] arch_do_signal_or_restart+0x53/0xc00 [ 986.190579][T11043] ? vfs_write+0x13e6/0x15c0 [ 986.195316][T11043] ? kmsan_get_metadata+0xf1/0x160 [ 986.200605][T11043] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 986.207109][T11043] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 986.213369][T11043] exit_to_user_mode_loop+0x117/0x1b60 [ 986.219024][T11043] ? ksys_write+0x3ac/0x470 [ 986.223702][T11043] ? __x64_sys_write+0x97/0xf0 [ 986.228648][T11043] do_syscall_64+0x24d/0xf80 [ 986.233366][T11043] ? clear_bhb_loop+0x50/0xa0 [ 986.238184][T11043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.244222][T11043] RIP: 0033:0x7f5be035cfce [ 986.248749][T11043] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 986.268490][T11043] RSP: 002b:00007f5be12c3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 986.277039][T11043] RAX: 000000000000003e RBX: 00007f5be12c46c0 RCX: 00007f5be035cfce [ 986.285110][T11043] RDX: 000000000000003e RSI: 0000200000000240 RDI: 00000000000000c8 [ 986.293179][T11043] RBP: 00007f5be0432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 986.301251][T11043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.309320][T11043] R13: 00007f5be0616038 R14: 00007f5be0615fa0 R15: 00007ffcf6911328 [ 986.317464][T11043] [ 986.321006][T11043] Kernel Offset: disabled [ 986.325377][T11043] Rebooting in 86400 seconds..