last executing test programs: 15m26.576703311s ago: executing program 3 (id=783): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) socket$nl_generic(0x10, 0x3, 0x10) 15m23.485019259s ago: executing program 3 (id=790): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 15m20.125161305s ago: executing program 3 (id=795): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x119, 0x9, 0x0, 0x33) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0) 15m18.523331404s ago: executing program 3 (id=799): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1809c2a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd", @ANYRES32=r6, @ANYBLOB="080004000000000008000400ac14142f08000200e0000002080008000000000008000900030000000800090007010000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'macvlan1\x00', 0x8000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000200000004600003f00000000008490783fffffffac1414aa0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001809c40005020000fffd000000000002d5884d068b91000000"], 0x4e) sendto$inet6(r4, 0x0, 0x0, 0x800, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') lchown(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x0, 0x0) 15m17.511279451s ago: executing program 3 (id=805): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000340)=0xa) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000540)=0x1) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00008f8000/0xb000)=nil, 0xb000, 0x4003, &(0x7f0000000c00)=0xf, 0x7ff, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000bc0)='personality\x00') r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x228a80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r10 = syz_open_dev$mouse(&(0x7f0000000a80), 0x80000001, 0x440) io_submit(r6, 0xa, &(0x7f0000000e40)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x3, r7, &(0x7f0000000240)="c6ea2f318002f209cf795c36f0abee64b1ccccb347f11d96799fcbdc07aa5551341741cee185f5e39023cc4a9271dba5e95addb211b7e45d0c364d43ebe2184d1e369113ca9ef2080c40ed1e56cafb29d208de9c3c2d3a6d6f07d91e513dc79cff3669f30e596bb1d86f980044712f99bed7e602bf7ad7d5fc8340676fd783eb2245eba36f515f495de6b650e1110f7c3bb04f8701e05003ec6c8dc6a9a3955f6ebe6dfdb97086f82678fc3f0fd607870f1dc4f6a841fc4f35e733f2d55d951a66c7164a2b4db132625996afff4574b713b5d8b6e350fb64f957fd3be75c6c179705d3cbc138b1fbd0823f8fc637244a85", 0xf1, 0x4, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x8, r9, 0x0, 0x0, 0xcd, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x4, r7, &(0x7f00000005c0)="a3079ab9dad4248c0613a180e876e4425d69ac2baf82995c3d4f32a2163fb466da11bb21370bb5b6146f5bca0d73dddcc5129b1d4fb72293f952cbd4fac4adea91031ec9ae4c0994f97db700d0052962d67132fea1b71dedca78c6f84609ed8967b6", 0x62, 0x3, 0x0, 0x2, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000680)="8e9b3e695a8d9bcac3310e97d61e2c38584d61657a5b36efbd9f362b29ac6864b083da1531df352b6c5504c725322fc8946dfe617c0353a894ee833ad136d947aad40a890cebcbc677a80c9015137bb3363a813cb75e5494c855658cada84246ef5074f95a94a1dc53129908f20c147c5d0eb0ae3209bd2b3a85a5d85a6a376874176edcb4fb93c92fcb8625325a667e90da0460451670c0b7deb7c657bda81221c98d03dc89ecaf59546998a17a1062b95af839499ecea3519505268b07be294efaa4a8427acb816eeb", 0xca, 0x5, 0x0, 0x2, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0xe, r7, &(0x7f00000007c0)="247409eb6d76453e4b653f742d667bb357e22039e33122761ce53a1097c1647f4c3c4c7365ea362121a21f22750c5797d889cb7bd426e37b5b5d1b85ce35b5572a7007ea7ae2fe983d198595fd10c2bb034dfb7715a03782c53662fc2aedb31228d61c89bb5d2cb1f5d6d4db4e122737dc1d4a4a29a9cae52274ef57d6e0ee6e530b2cb3f4dbc926f5a6355e4a4236", 0x8f, 0x7, 0x0, 0x0, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1000, r3, &(0x7f00000008c0)="f6bd9d22646d26b765a3882e8d05f543eebb835aa6b24842b286d379b6b0d0229b5e2924dbffd85d696230e8b47e7d6607d195106b98f3d9cbc44ec2b5925f505962db39d411e0922e", 0x49, 0x6, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x7, 0x7, r4, &(0x7f0000000980)="edea63726d33977dedf369603062fd1a67ac0cabdcc26170ea27fec16c8af7e71908908033009760fd530f44a45e16864dcfc68e0b2c5eab24805adb9be024e08655d6c7b989f17b8363b8537f8f3b48cbf40014a760899d5679803ae64900114b2157bb8664c98385ea62de6131cdee1bd86527dfaf", 0x76, 0x0, 0x0, 0x2, r9}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0x7f, r10, &(0x7f0000000ac0), 0x0, 0x5}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0xe7d9125f2bdb9306, 0x8, 0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x8, 0x0, 0x2}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000000d40)="311649be67bc52238e083d8b8d99b409a2f380bdb63a3ee2a24846d7033aa2e502d9be351f301dd9c5c8708a35501fa0ee1bcfee082e0bcc59b6d8c53088c634a6a9b58198f62572aeb546cdf3b67af0a4b656de9bfd1fe84e2a76b7e7d739dd72f189c583c03583f8b24bf17dfd08adc39f59c0b687f6c4440899693f35215ea1b1e2b71690e089222aa716f99ccef76e1e7d1568a018d52d7fa6d0acf668833cc8f10d361fc294c5e75bd508d055bd6a5d84d1e9a39b9d", 0xb8, 0xffffffffffffffff, 0x0, 0x0, r7}]) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000180)=@x={0x94, 0x7, "ee1add60fcca"}) r11 = syz_open_dev$sndctrl(&(0x7f0000000ec0), 0x188, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r11, 0xc0045540, &(0x7f0000004580)=0xffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) 15m17.265444386s ago: executing program 3 (id=807): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) capset(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x80) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/18, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 15m16.64666942s ago: executing program 32 (id=807): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigsuspend(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) capset(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x80) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/18, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 3m20.117364543s ago: executing program 2 (id=2279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2f, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_BURST={0x8, 0x6, 0xc5}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd8f37df511533744}]}}]}, 0x74}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x454, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x428, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x3, 0x9, 0x4, 0x6, 0x40, 0x4, 0x40, 0x6, 0x482e3068, 0xff, 0xfffffbea, 0x6, 0x542, 0x400040, 0xe0000, 0x1, 0xc, 0x1, 0x800, 0xd, 0x0, 0x7ff, 0xb3e, 0x3ff, 0x7, 0x7, 0x400, 0x7, 0xa45, 0xc, 0x7f, 0x401, 0x5, 0xfffffff7, 0xfffffff2, 0xdf8, 0x9, 0x7436, 0x7, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1, 0x2bf7, 0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x9, 0x1, 0x4, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x3, 0x80000001, 0x9, 0x5, 0x1cb, 0x5, 0x7, 0x7, 0x7, 0xfff, 0x2, 0x7, 0x9, 0xffff, 0x1, 0x3, 0x4, 0x8, 0xe1cc, 0x9, 0xc7, 0x7, 0x55, 0x6, 0x75a, 0x8, 0x2, 0x6, 0x40, 0x8, 0x7, 0x5, 0x0, 0xf03, 0x7, 0x8, 0x9, 0x3, 0x7, 0x21931f93, 0x1, 0x800, 0x10, 0xfffffffd, 0x0, 0x2, 0xffffffc0, 0x2, 0x7ff, 0x6ed4, 0xffffff80, 0x3, 0x200, 0xcc4, 0x2, 0x3, 0x10b, 0x2, 0x9, 0xac21, 0x0, 0x8, 0xc33, 0xff, 0x1, 0x8, 0x85, 0x2, 0xf1c6, 0x8, 0x5, 0x6, 0x40, 0x4, 0x2, 0xa, 0x80000001, 0x7, 0x7, 0x3, 0x9, 0x7, 0xa93, 0x80000000, 0x80000001, 0x7f, 0x1ff, 0x0, 0x3, 0x870, 0x67bae144, 0x9, 0x4, 0x6a8, 0xe4b, 0x1, 0x13, 0x1, 0x6, 0x4a68, 0xe, 0x10, 0xffffffff, 0x7f, 0x0, 0xa0a, 0x9, 0x3, 0xffffffe8, 0xc71, 0x8, 0xffffff5b, 0x8, 0x0, 0x80000001, 0x5, 0x6, 0x0, 0x30869cc6, 0x0, 0x3ff, 0x4, 0x80, 0x5, 0x15bf41b1, 0xf, 0x6, 0xfffffffe, 0x8, 0x0, 0x943, 0x7, 0xe, 0x5, 0x9, 0x2, 0x0, 0x1, 0x1000, 0x1000, 0x7ff, 0x6, 0x2, 0x0, 0x7, 0xb263, 0x1, 0x7, 0x4, 0x1, 0xc, 0x1, 0x200, 0x8001, 0x5, 0x303f, 0x5d, 0x3, 0x4, 0x3, 0x4, 0x2, 0x7, 0x39b1e32c, 0x0, 0x8a84, 0x9, 0x40, 0x10000, 0x1, 0xb, 0xfffffffd, 0x4, 0x6, 0x5, 0xf2, 0x1834, 0x10000, 0x7ff, 0x1, 0xeb7, 0x67f1, 0x9, 0xffff, 0x3ff, 0x80000000, 0xd, 0x3, 0x10001, 0x2]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x454}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f00000002c0)={0x1, r10}) ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000000)={0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r11, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000880)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 3m19.680350932s ago: executing program 2 (id=2280): close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"/2967], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) fsopen(&(0x7f0000000000)='9p\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000800000000000065b46908bb21f3f9f588ae767f7ec9ff7f9e8cb271b48204ee3ecb3d5759fa3de9038182f9c7ae43bc9f5982eb0140d1af4f64ee64e89d07e6e59bb6441612aaa9f542a1cbbd14a501139a66a6dcf68d5bba08f17e7e93cec3a5762002a6d9167ab48795cadfff63bc3bd223a867b1d194f32ec853c68437163245d6380231dfcc9085d37310bfdcd30cdbebed94112493c29ce218e5e50d742533e2f52be62a5c8a465ca535f1df881f3ce5b3d7e3c025dba2543a43100284ebd200ecbadb55f1f6e426e3df42116344bc9a12295ed97deedcc39fca2668be86029b30f77f22c99627a98161a6f9ffedc2d62201aa940ecb231fc47b6274fe6e47bdb2f196629113ffa3a2894d2cb449bea8dfce621dacdb3eab1285372734ca84d8dad1cdfb2c92accc4abdb2cbb1ddaea3e8fc1c51bae51ef7591ec080b1f52439651df79b69f2677f614259a00b830fc716c63f24abdf76b2540fb2ce0c3aebc4f28f679ac881b3e901109bcbefd120e88945d5e6cc77a38c05205b85e349b8ce640b1a774c11d728004e8c0e1df5f74c0ff5ded055a8f2e8bd116a6fdf6cd492193bc24d13", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 3m18.525802116s ago: executing program 2 (id=2285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r8 = msgget$private(0x0, 0x4a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) msgsnd(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m17.02589259s ago: executing program 2 (id=2289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3m15.193741349s ago: executing program 2 (id=2292): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x406}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe2}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) r5 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000200)) lstat(&(0x7f0000000240)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000007100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r7, &(0x7f0000002900)={0x2020}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000009140)="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", 0x2000, &(0x7f0000001040)={&(0x7f0000000380)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x0, 0x20000, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x1, 0x9}}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x18, 0x0, 0xcd, {0x3}}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x11, 0x0, 0xd77, {'\x00'}}, 0x0, &(0x7f0000000640)={0x78, 0x0, 0x6, {0xfffffffffffffffc, 0x2, 0x0, {0x5, 0x0, 0x0, 0x5, 0x3, 0x5, 0x4, 0x40, 0x9cb7, 0x0, 0x9, r8, r9, 0x9e}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000440)={{0x2, 0xee00, r6, 0x0, r9, 0x40}, 0xff, 0x9, 0x3, 0x7, r10, r11, 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r12, 0x0, r4}) socket$nl_route(0x10, 0x3, 0x0) 3m14.791798764s ago: executing program 2 (id=2294): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8994, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = getpgrp(0xffffffffffffffff) kcmp(r5, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000001c0)={r5}) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 3m14.368566522s ago: executing program 33 (id=2294): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000014) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r3, 0x8994, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfc40) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = getpgrp(0xffffffffffffffff) kcmp(r5, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f00000001c0)={r5}) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200484d}, 0x8000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 25.929213347s ago: executing program 5 (id=2845): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/83, 0x53}, 0x2}], 0x1, 0x0, 0x0) 25.668293918s ago: executing program 5 (id=2846): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25.219150988s ago: executing program 4 (id=2847): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b3f19b4b9fa77c1fc2067b655312cb23ae5e22f962e9f295e69c68e236661318176a8a2e7dd21551109a3d0f58fa8e0fcefd3e151f87b09f8ebaa5676a5f0ab1271cde29d999546dcd7e6980149104f8401c89a61fb5155f871758cbcd4ec7b"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f00000002c0)=@random={'security.', '\xbb\xbb\xbb\xbb\xbb\xbb'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 24.187830371s ago: executing program 5 (id=2848): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 24.123216251s ago: executing program 5 (id=2849): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05250700000000000109022400010000000909040004810300000009210000280122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x32, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) 23.816048183s ago: executing program 4 (id=2850): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r2, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.320611069s ago: executing program 4 (id=2857): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) 22.219927451s ago: executing program 5 (id=2858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.202282887s ago: executing program 1 (id=2859): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000300)={0x20, 0xa, 0x3, "8460ac"}, 0x0, 0x0, 0x0, 0x0}) 22.170346508s ago: executing program 4 (id=2860): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b3f19b4b9fa77c1fc2067b655312cb23ae5e22f962e9f295e69c68e236661318176a8a2e7dd21551109a3d0f58fa8e0fcefd3e151f87b09f8ebaa5676a5f0ab1271cde29d999546dcd7e6980149104f8401c89a61fb5155f871758cbcd4ec7b"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f00000002c0)=@random={'security.', '\xbb\xbb\xbb\xbb\xbb\xbb'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 20.651270258s ago: executing program 6 (id=2862): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) 20.553606927s ago: executing program 6 (id=2863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r1, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 20.480518007s ago: executing program 4 (id=2864): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000408d0450ce00000000000109022400010000e80b09040000010300030009210100330122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 20.480136847s ago: executing program 5 (id=2865): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 20.48000817s ago: executing program 0 (id=2866): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000100)={0x1}, 0x0) 20.373232404s ago: executing program 1 (id=2867): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r8 = msgget$private(0x0, 0x4a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) msgsnd(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20.332177814s ago: executing program 6 (id=2868): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) 20.310736055s ago: executing program 0 (id=2869): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) 20.280528373s ago: executing program 0 (id=2870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 20.103914216s ago: executing program 0 (id=2871): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5a, &(0x7f00000019c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[@dstopts={0x33, 0x0, '\x00', [@generic={0x0, 0x3, "5f98de"}]}], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) 20.054875342s ago: executing program 0 (id=2872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="c20200007d00000005fa0000006a0000004000000000000000000000000000000010000000020000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000000000000000000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200fbe161e90000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xc}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80102) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x5393, &(0x7f0000000040)=ANY=[@ANYBLOB='\r\x00']) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000030101010000000000000000020000001c000f8008004beba2d6882c6e729995be210f230340000000463905e8b470398bd0426fbabd3ffa64000240000000b408000140000000041800028014000180084fbe1684355f89b09c341055b4f27aa8120d7d8e19b8e02e141a6a30181d545461"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44080) 19.325266144s ago: executing program 1 (id=2873): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19.159800207s ago: executing program 1 (id=2874): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r2, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18.627752824s ago: executing program 4 (id=2875): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b3f19b4b9fa77c1fc2067b655312cb23ae5e22f962e9f295e69c68e236661318176a8a2e7dd21551109a3d0f58fa8e0fcefd3e151f87b09f8ebaa5676a5f0ab1271cde29d999546dcd7e6980149104f8401c89a61fb5155f871758cbcd4ec7b"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f00000002c0)=@random={'security.', '\xbb\xbb\xbb\xbb\xbb\xbb'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 18.287564523s ago: executing program 0 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r8 = msgget$private(0x0, 0x4a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) msgsnd(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17.681415301s ago: executing program 1 (id=2877): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x7ffd, 0x0, 0x0, 0x2, 0x0, @broadcast, @loopback}, {0x17, 0x74, 0x0, @rand_addr=0x64010100}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 17.234884378s ago: executing program 1 (id=2878): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000380)=[{0x5, 0x6000, 0x0, 0x0}, {0x4, 0x200, 0x0, 0x0}], 0x2}) 16.835084882s ago: executing program 6 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 16.407506653s ago: executing program 6 (id=2880): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0xfffffe2c) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) 15.909957443s ago: executing program 6 (id=2881): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0015d9"], 0x0, 0x0}) 1.331721349s ago: executing program 34 (id=2865): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xee}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]}) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 862.372763ms ago: executing program 35 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {0x3b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x10}]}) r8 = msgget$private(0x0, 0x4a0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="08d13286cfe7bbab2d5333ba15a3769f1addf0ee78e4a62cf05870d6b5f3da48d5d579e1ce73e2d0f08efe0ed45bccc31b04ae8dfc224afb4910a4a4077c0d4db19d65fb64be511bf0882c0ca5f192a47ee01c3f295e8974276586cbf028b2d46c40", @ANYRESOCT=r3, @ANYRES32=r1], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r8, 0x2, 0x0) msgsnd(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="d1cdc116c4c2d0cb3efcfdc352f7913e52d5dcf4e3cb1e049bc4149ac2672701ca242416320e67dc5c396713d63f6044746266e174c664a8f9f716743b9c7dac517cc7a8d599a9ceb1526efda93dd34d642f64cf8cecb7e0276a0f77f459cba6205b2aadd45c03e94402c118108bbfff8d419cfd3f4f5c70cb05d6cf0f1e", @ANYRES16=r2], 0xe3, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x2, 0x400000000000006, 0x4, 0x7, 0x102000000000002, 0x8000000d, 0x10000002004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x6, 0xfffffffffffffff9, 0x2000000000000003], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 423.017669ms ago: executing program 36 (id=2878): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000380)=[{0x5, 0x6000, 0x0, 0x0}, {0x4, 0x200, 0x0, 0x0}], 0x2}) 260.089785ms ago: executing program 37 (id=2875): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b3f19b4b9fa77c1fc2067b655312cb23ae5e22f962e9f295e69c68e236661318176a8a2e7dd21551109a3d0f58fa8e0fcefd3e151f87b09f8ebaa5676a5f0ab1271cde29d999546dcd7e6980149104f8401c89a61fb5155f871758cbcd4ec7b"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r6, &(0x7f00000002c0)=@random={'security.', '\xbb\xbb\xbb\xbb\xbb\xbb'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 38 (id=2881): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0015d9"], 0x0, 0x0}) kernel console output (not intermixed with test programs): 1778581013.183:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03f499cdd9 code=0x7ffc0000 [ 1196.112127][ T30] audit: type=1326 audit(1778581013.183:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f499cdd9 code=0x7ffc0000 [ 1196.259824][ T30] audit: type=1326 audit(1778581013.183:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f499cdd9 code=0x7ffc0000 [ 1196.363316][ T992] IPVS: starting estimator thread 0... [ 1196.416574][ T30] audit: type=1326 audit(1778581013.213:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2345" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f03f499cdd9 code=0x7ffc0000 [ 1196.509286][T17954] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1196.554563][T17954] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1197.630641][T17962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1198.134268][ T5728] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1198.308384][T17952] IPVS: using max 54 ests per chain, 129600 per kthread [ 1198.525060][ T5728] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1198.540735][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.578952][ T5728] usb 5-1: config 0 has no interfaces? [ 1198.629596][ T5728] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1198.696855][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.726171][ T5728] usb 5-1: config 0 descriptor?? [ 1199.631560][T18013] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2352'. [ 1199.900026][T18012] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.169090][T18018] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1200.232045][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 1200.318806][T18020] loop9: detected capacity change from 0 to 2640 [ 1200.451087][T18026] buffer_io_error: 325 callbacks suppressed [ 1200.451100][T18026] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 1200.546303][T18026] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 1200.619638][T18026] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 1200.619735][T18026] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 1200.624750][T18026] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 1200.626900][T18026] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 1200.626988][T18026] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 1200.627068][T18026] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 1200.627150][T18026] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 1200.627229][T18026] Buffer I/O error on dev loop9, logical block 9, lost async page write [ 1201.585546][ T807] usb 5-1: USB disconnect, device number 124 [ 1201.988605][T18047] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2358'. [ 1203.440185][T18057] netlink: 'syz.5.2359': attribute type 1 has an invalid length. [ 1203.527143][T18061] netlink: 212352 bytes leftover after parsing attributes in process `syz.5.2359'. [ 1204.720397][T18061] bond1: (slave gretap1): making interface the new active one [ 1204.781165][T18061] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1204.836073][T18066] macvlan2: entered promiscuous mode [ 1204.868887][T18066] macvlan2: entered allmulticast mode [ 1204.881796][T18066] bond1: entered promiscuous mode [ 1204.888656][T18066] gretap1: entered promiscuous mode [ 1204.901520][T18066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1204.919158][T18066] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1204.936771][T18066] bond1: left promiscuous mode [ 1204.941629][T18066] gretap1: left promiscuous mode [ 1205.161665][T18074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2362'. [ 1206.223137][T18098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1206.519242][T18103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2369'. [ 1207.245027][ T992] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1207.432717][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1207.461725][ T992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.481708][ T992] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1207.532213][ T992] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.571719][ T992] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1207.593409][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.628105][ T992] usb 1-1: Product: syz [ 1207.643683][ T992] usb 1-1: Manufacturer: syz [ 1207.658062][ T992] usb 1-1: SerialNumber: syz [ 1207.945069][T18121] binder_alloc: 18116: binder_alloc_buf, no vma [ 1209.875794][ T807] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1209.938758][ T992] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1209.976246][ T992] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1210.216331][ T992] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 1210.237893][T18139] netdevsim netdevsim1: Direct firmware load for ýÿÿÿ failed with error -2 [ 1210.278872][T18139] netdevsim netdevsim1: Falling back to sysfs fallback for: ýÿÿÿ [ 1210.321781][ T992] usb 1-1: USB disconnect, device number 123 [ 1210.503101][T18149] fuse: Bad value for 'fd' [ 1210.516804][T18147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2375'. [ 1210.543742][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1211.017383][ T807] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1211.063678][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.100924][ T807] usb 5-1: config 0 has no interfaces? [ 1211.118914][ T807] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1211.144684][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.239672][ T807] usb 5-1: config 0 descriptor?? [ 1212.901237][ T9386] usb 5-1: USB disconnect, device number 125 [ 1213.162374][T18167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2380'. [ 1213.497831][T18177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.932999][T18181] xt_ecn: cannot match TCP bits for non-tcp packets [ 1215.184101][ T807] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1215.346441][ T807] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1215.372206][ T807] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1215.393905][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1215.411643][ T807] usb 5-1: Product: syz [ 1215.420332][ T807] usb 5-1: Manufacturer: syz [ 1215.429965][ T807] usb 5-1: SerialNumber: syz [ 1215.653546][ T807] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 126 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1215.910987][ T807] usb 5-1: USB disconnect, device number 126 [ 1215.931143][ T807] usblp0: removed [ 1216.959161][T18192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.097185][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1218.272601][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 1218.692399][T18217] binder: BINDER_SET_CONTEXT_MGR already set [ 1218.704263][T18217] binder: 18213:18217 ioctl 4018620d 200000004a80 returned -16 [ 1218.814483][T18218] binder: 18213:18218 ioctl c0306201 0 returned -14 [ 1220.164143][T10609] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1220.316371][T10609] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1220.344769][T10609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.375838][T10609] usb 5-1: config 0 has no interfaces? [ 1220.390782][T10609] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1220.425873][T10609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.462553][T10609] usb 5-1: config 0 descriptor?? [ 1221.164294][ T24] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1221.380716][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1221.414893][ T24] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.445986][ T24] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1221.463916][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1221.479832][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1221.493870][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.552028][ T24] usb 2-1: config 0 descriptor?? [ 1221.566682][ T24] usbhid 2-1:0.0: can't add hid device: -22 [ 1221.580187][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1221.863106][T18251] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1221.902992][ T24] usb 2-1: USB disconnect, device number 119 [ 1222.471499][T10609] usb 5-1: USB disconnect, device number 127 [ 1222.604866][T18255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1222.994133][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1223.174887][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.234718][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1223.254149][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1223.267060][ T24] usb 5-1: Product: syz [ 1223.272255][ T24] usb 5-1: Manufacturer: syz [ 1223.277370][ T24] usb 5-1: SerialNumber: syz [ 1223.574684][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1223.850484][T10609] usb 5-1: USB disconnect, device number 2 [ 1223.908197][T10609] usblp0: removed [ 1226.010632][T18302] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1226.079398][T18302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1228.556394][T18319] loop6: detected capacity change from 0 to 524288000 [ 1229.614219][T10609] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1229.855728][T10609] usb 5-1: Using ep0 maxpacket: 32 [ 1229.884851][T10609] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1229.941725][T10609] usb 5-1: config 0 has no interface number 0 [ 1229.993593][T10609] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1230.151711][T10609] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1230.229784][T10609] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.291500][T10609] usb 5-1: Product: syz [ 1230.335624][T10609] usb 5-1: Manufacturer: syz [ 1230.377173][T10609] usb 5-1: SerialNumber: syz [ 1230.417758][T10609] usb 5-1: config 0 descriptor?? [ 1230.510718][T18336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1230.802139][T18336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1230.997600][ T807] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1231.178749][T10609] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1231.209532][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1231.243052][T10609] asix 5-1:0.188: probe with driver asix failed with error -61 [ 1231.270797][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1231.317897][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1231.385634][ T807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1231.427937][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.476545][ T807] usb 1-1: config 0 descriptor?? [ 1231.737978][T18355] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1232.034239][T10609] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1232.206799][T10609] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1232.252483][T10609] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1232.294268][T10609] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1232.310715][T10609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.335036][T10609] usb 6-1: Product: syz [ 1232.350583][T10609] usb 6-1: Manufacturer: syz [ 1232.365650][T10609] usb 6-1: SerialNumber: syz [ 1232.389019][T10609] usb 6-1: config 0 descriptor?? [ 1232.411595][T10609] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1232.625470][T18359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.641923][ T992] usb 5-1: USB disconnect, device number 3 [ 1232.691070][T18359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.930293][T10609] gspca_sunplus: reg_r err -32 [ 1232.939836][T10609] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1233.518013][T10609] usb 6-1: USB disconnect, device number 91 [ 1234.068899][T18387] netlink: 'syz.6.2425': attribute type 5 has an invalid length. [ 1235.272231][T18392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1236.864449][ T807] usbhid 1-1:0.0: can't add hid device: -32 [ 1236.888297][ T807] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1237.689581][T18421] kvm: pic: non byte write [ 1238.608275][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.614729][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.522083][T18442] IPv6: NLM_F_CREATE should be specified when creating new route [ 1239.545695][T18442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1239.555097][T18442] IPv6: NLM_F_CREATE should be set when creating new route [ 1239.562322][T18442] IPv6: NLM_F_CREATE should be set when creating new route [ 1239.569533][T18442] IPv6: NLM_F_CREATE should be set when creating new route [ 1239.886852][T10609] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1240.077502][T10609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1240.139261][T10609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.222049][T10609] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1240.242572][T10609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.321644][T10609] usb 2-1: config 0 descriptor?? [ 1240.883103][T10609] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1240.918480][T10609] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1240.938964][T10609] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1240.961500][T10609] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1240.983350][T10609] elan 0003:04F3:0755.0011: unknown main item tag 0x0 [ 1240.999526][T10609] elan 0003:04F3:0755.0011: failed to start in urb: -90 [ 1241.047505][T10609] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 1241.081529][T18442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.116886][T18442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.186115][T18442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'. [ 1241.260283][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 1242.861961][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.873505][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 1242.886285][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 1242.905779][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.924307][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1242.924321][ T30] audit: type=1800 audit(1778581060.793:1330): pid=18473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2443" name="SYSV00000000" dev="tmpfs" ino=5 res=0 errno=0 [ 1242.967568][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1242.994937][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1243.010309][ T992] usb 2-1: USB disconnect, device number 120 [ 1243.299045][T18486] binder: 18472:18486 ioctl c0306201 0 returned -14 [ 1243.373661][T18481] pimreg3: entered allmulticast mode [ 1243.437728][ T30] audit: type=1326 audit(1778581061.293:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18472 comm="syz.0.2443" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f499cdd9 code=0x0 [ 1243.469074][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2444'. [ 1243.726581][T18492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2446'. [ 1244.213331][T18473] ipvlan0: entered promiscuous mode [ 1244.234830][T18473] bridge0: port 2(ipvlan0) entered blocking state [ 1244.257207][T18473] bridge0: port 2(ipvlan0) entered disabled state [ 1244.268905][T18473] ipvlan0: entered allmulticast mode [ 1244.291844][T18473] bridge0: entered allmulticast mode [ 1244.325656][T18473] ipvlan0: left allmulticast mode [ 1244.332643][T18473] bridge0: left allmulticast mode [ 1244.923667][T18501] trusted_key: encrypted_key: insufficient parameters specified [ 1244.954178][T18501] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1245.035882][ T24] IPVS: starting estimator thread 0... [ 1245.046947][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2449'. [ 1245.062522][T18508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2449'. [ 1245.144241][T18509] IPVS: using max 54 ests per chain, 129600 per kthread [ 1245.454120][ T992] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1245.626020][ T992] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1245.655232][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.681415][ T992] usb 5-1: config 0 has no interfaces? [ 1245.690597][ T992] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1245.713728][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.740650][ T992] usb 5-1: config 0 descriptor?? [ 1247.172238][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2454'. [ 1248.872740][ T24] usb 5-1: USB disconnect, device number 4 [ 1248.934921][T18546] netlink: 'syz.6.2458': attribute type 1 has an invalid length. [ 1249.006144][T18548] netlink: 212352 bytes leftover after parsing attributes in process `syz.6.2458'. [ 1249.907769][T18548] bond1: (slave gretap1): making interface the new active one [ 1249.976343][T18548] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1249.995844][T18563] pimreg: entered allmulticast mode [ 1250.087187][T18550] macvlan2: entered promiscuous mode [ 1250.092634][T18550] macvlan2: entered allmulticast mode [ 1250.123881][T18550] bond1: entered promiscuous mode [ 1250.132606][T18550] gretap1: entered promiscuous mode [ 1250.168392][T18563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2460'. [ 1250.207278][T18550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1250.243349][T18550] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1250.282694][T18550] bond1: left promiscuous mode [ 1250.292870][T18550] gretap1: left promiscuous mode [ 1250.609079][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2462'. [ 1251.149613][T18574] xt_TCPMSS: Only works on TCP SYN packets [ 1251.764068][ T24] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1251.935936][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1251.948674][ T24] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1252.005039][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.055105][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.118383][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.158462][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.205523][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.262005][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.298916][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.330823][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.376237][ T24] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1252.397363][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.420792][ T24] usb 2-1: Product: syz [ 1252.434055][ T24] usb 2-1: Manufacturer: syz [ 1252.452517][T18583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1252.461632][T18583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1252.475800][ T24] usb 2-1: SerialNumber: syz [ 1252.500104][ T24] usb 2-1: config 0 descriptor?? [ 1252.531775][ T24] etas_es58x 2-1:0.0: Starting syz syz (Serial Number syz) [ 1252.759404][ T992] usb 2-1: USB disconnect, device number 121 [ 1253.126679][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2469'. [ 1253.495301][T18604] libceph: resolve '0..' (ret=-3): failed [ 1254.184162][ T992] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1254.334399][ T992] usb 6-1: Using ep0 maxpacket: 8 [ 1254.354640][ T992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1254.402778][ T992] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1254.449762][ T992] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1254.500224][ T992] usb 6-1: Product: syz [ 1254.589089][ T992] usb 6-1: Manufacturer: syz [ 1254.626244][ T992] usb 6-1: SerialNumber: syz [ 1254.878073][ T992] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 1254.945690][ T992] visor 6-1:1.0: probe with driver visor failed with error -71 [ 1255.014609][ T992] usb 6-1: USB disconnect, device number 92 [ 1256.524850][T17731] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1256.650911][ T30] audit: type=1800 audit(1778581074.523:1332): pid=18639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2479" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1256.723520][T17731] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1256.749167][T17731] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1256.775512][T17731] usb 2-1: config 0 has no interface number 0 [ 1256.792567][T17731] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1256.811200][T17731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.846317][T17731] usb 2-1: Product: syz [ 1256.871876][T17731] usb 2-1: Manufacturer: syz [ 1256.895188][T17731] usb 2-1: SerialNumber: syz [ 1256.900450][T18646] binder: 18638:18646 ioctl c0306201 0 returned -14 [ 1256.929093][T17731] usb 2-1: config 0 descriptor?? [ 1256.962130][T17731] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 1257.041754][ T30] audit: type=1326 audit(1778581074.913:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.4.2479" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc53539cdd9 code=0x0 [ 1257.535172][T18639] ipvlan2: entered promiscuous mode [ 1257.549728][T18639] bridge0: port 3(ipvlan2) entered blocking state [ 1257.568928][T18639] bridge0: port 3(ipvlan2) entered disabled state [ 1257.582652][T18639] ipvlan2: entered allmulticast mode [ 1257.606979][T18639] bridge0: entered allmulticast mode [ 1257.631511][T18639] ipvlan2: left allmulticast mode [ 1257.642597][T18639] bridge0: left allmulticast mode [ 1259.084281][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 1259.094772][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1259.127964][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2483'. [ 1259.342732][ T9386] usb 2-1: USB disconnect, device number 122 [ 1259.744561][T18678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 1260.244290][ T9386] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1260.468064][ T9386] usb 2-1: Using ep0 maxpacket: 32 [ 1260.476786][ T9386] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1260.498216][ T9386] usb 2-1: config 0 has no interface number 0 [ 1260.516468][ T9386] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1260.534087][ T9386] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1260.672346][ T9386] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1260.735254][ T9386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.758152][ T9386] usb 2-1: Product: syz [ 1260.771186][ T9386] usb 2-1: Manufacturer: syz [ 1260.812683][ T9386] usb 2-1: SerialNumber: syz [ 1260.845212][ T9386] usb 2-1: config 0 descriptor?? [ 1261.115125][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1261.159763][T18695] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 1262.945493][ T807] usb 2-1: USB disconnect, device number 123 [ 1264.504149][ T9386] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1264.703213][ T9386] usb 5-1: Using ep0 maxpacket: 32 [ 1264.737377][ T9386] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 1264.797214][ T9386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.846886][ T9386] usb 5-1: config 0 has no interface number 0 [ 1264.892494][ T9386] usb 5-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.951911][ T9386] usb 5-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 1265.002639][ T9386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.047155][ T9386] usb 5-1: config 0 descriptor?? [ 1265.102271][ T9386] usbhid 5-1:0.4: couldn't find an input interrupt endpoint [ 1265.407584][T18734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.300694][T18744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.313815][T18744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.860935][T18757] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 1266.940915][T18761] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.2497'. [ 1268.310331][T18769] x_tables: duplicate underflow at hook 4 [ 1268.604680][ T992] usb 5-1: USB disconnect, device number 5 [ 1269.542643][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2502'. [ 1269.579458][T18761] bond2: (slave gretap1): making interface the new active one [ 1269.607773][T18761] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1269.632184][T18762] macvlan0: entered promiscuous mode [ 1269.641047][T18762] macvlan0: entered allmulticast mode [ 1269.650663][T18762] bond2: entered promiscuous mode [ 1269.665223][T18762] gretap1: entered promiscuous mode [ 1269.688327][T18762] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1269.702381][T18762] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1269.732289][T18762] bond2: left promiscuous mode [ 1269.739063][T18762] gretap1: left promiscuous mode [ 1270.360149][T18787] random: crng reseeded on system resumption [ 1271.793054][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2507'. [ 1274.002734][T18837] dummy0: entered allmulticast mode [ 1276.032696][T18857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2520'. [ 1276.412250][T18866] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2522'. [ 1276.554034][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1276.744054][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1276.800205][ T24] usb 2-1: config 0 has no interfaces? [ 1276.845968][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1276.880643][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1276.900953][ T24] usb 2-1: Manufacturer: syz [ 1276.928266][ T24] usb 2-1: config 0 descriptor?? [ 1277.371590][T18864] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1277.670075][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2523'. [ 1278.638227][T18884] fuse: Bad value for 'fd' [ 1278.680192][T18884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.879029][T18897] batadv0: entered promiscuous mode [ 1279.304346][T18901] tipc: Failed to remove unknown binding: 66,1,1/0:1587418339/1587418341 [ 1279.402169][T17731] usb 2-1: USB disconnect, device number 124 [ 1279.848426][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1280.064271][T18908] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1280.115336][T18908] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1280.162978][T18908] veth0_to_bridge: entered allmulticast mode [ 1280.188185][T18908] veth0_to_bridge: entered promiscuous mode [ 1280.214542][T18908] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1280.243645][T18908] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1280.250839][T18908] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 1280.589211][T18922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1281.034095][T17731] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1281.218961][T17731] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1281.240729][T17731] usb 2-1: config 0 has no interface number 0 [ 1281.259544][T17731] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1281.320539][T17731] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1281.351449][T17731] usb 2-1: config 0 interface 113 has no altsetting 0 [ 1281.412394][T17731] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1281.438173][T17731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.461850][T17731] usb 2-1: Product: syz [ 1281.473615][T17731] usb 2-1: Manufacturer: syz [ 1281.489952][T17731] usb 2-1: SerialNumber: syz [ 1281.515066][T17731] usb 2-1: config 0 descriptor?? [ 1281.551759][ C0] usb 2-1: NFC: Urb failure (status -71) [ 1281.570736][T17731] usb 2-1: NFC: Unable to get FW version [ 1281.593297][T17731] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 1282.927165][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2541'. [ 1282.937234][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2541'. [ 1282.951182][T18926] geneve2: entered promiscuous mode [ 1282.958176][T18926] geneve2: entered allmulticast mode [ 1283.005584][T18928] netlink: 'syz.5.2542': attribute type 1 has an invalid length. [ 1283.187672][T18934] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1283.937810][T17731] usb 2-1: USB disconnect, device number 125 [ 1286.578161][T18993] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1288.233255][T19022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.339736][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.520845][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.884672][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 1292.725296][T19104] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2600'. [ 1292.750306][T19104] IPv6: Can't replace route, no match found [ 1294.156477][ T807] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1294.226083][T19134] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1294.354708][ T807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1294.370438][ T807] usb 2-1: config 0 has no interface number 0 [ 1294.383149][ T807] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.416711][ T807] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.459684][ T807] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1294.488718][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.512678][ T807] usb 2-1: config 0 descriptor?? [ 1294.744134][ T807] usbhid 2-1:0.1: can't add hid device: -71 [ 1294.762250][ T807] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1294.782534][ T807] usb 2-1: USB disconnect, device number 126 [ 1294.935302][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1297.158575][T19182] dummy0: entered allmulticast mode [ 1297.683542][T19193] netlink: 408 bytes leftover after parsing attributes in process `syz.6.2630'. [ 1297.851279][T19197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.883589][T19197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.419376][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.434250][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.443410][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.481180][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.513249][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.528127][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2637'. [ 1298.540634][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.574294][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.618614][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.644596][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1298.688118][T19215] netlink: 'syz.5.2638': attribute type 1 has an invalid length. [ 1299.731309][T19237] xt_hashlimit: size too large, truncated to 1048576 [ 1300.057359][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.063669][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.611244][T19256] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1302.804091][T17731] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1302.986245][T17731] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1303.012980][T17731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.048112][T17731] usb 6-1: config 0 has no interfaces? [ 1303.073191][T17731] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1303.111738][T17731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.153788][T17731] usb 6-1: config 0 descriptor?? [ 1304.673166][T19321] dummy0: entered allmulticast mode [ 1304.934111][T17731] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1305.010410][T19325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.036280][T19325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.096008][T17731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.129561][T17731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1305.198957][T17731] usb 2-1: config 1 has no interface number 0 [ 1305.253019][T17731] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1305.295410][T17731] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1305.310703][T17731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.349721][T17731] usb 2-1: Product: syz [ 1305.366772][T17731] usb 2-1: Manufacturer: syz [ 1305.388486][T17731] usb 2-1: SerialNumber: syz [ 1305.415323][T17731] usb 2-1: selecting invalid altsetting 1 [ 1305.821433][T17731] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1305.839605][T17731] cdc_ncm 2-1:1.1: bind() failure [ 1305.858744][T17731] usb 2-1: USB disconnect, device number 127 [ 1305.968267][ T5728] usb 6-1: USB disconnect, device number 93 [ 1307.204937][T19350] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1307.219889][T19350] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2680'. [ 1307.818522][T19363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.829302][T19363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.922213][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2684'. [ 1308.285525][ T5728] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1308.446015][ T5728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1308.458371][ T5728] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1308.499462][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.567097][ T5728] usb 5-1: config 0 descriptor?? [ 1308.581071][T19367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1309.028730][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.091000][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.133650][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.209662][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.259929][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.305172][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.366220][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.409010][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.470688][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.496631][ T5728] koneplus 0003:1E7D:2E22.0012: unknown main item tag 0x0 [ 1309.561846][ T5728] koneplus 0003:1E7D:2E22.0012: hidraw0: USB HID v7b.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 1309.655348][ T5728] usb 5-1: USB disconnect, device number 6 [ 1309.929036][T19400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2696'. [ 1309.978193][T19395] fido_id[19395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1310.204256][ T807] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1310.353038][T19403] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1310.372127][T19403] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2698'. [ 1310.386344][T19403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1310.445219][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 1310.466036][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.509973][ T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.542084][ T807] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1310.562066][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.583735][ T807] usb 5-1: config 0 descriptor?? [ 1311.059160][ T807] zydacron 0003:13EC:0006.0013: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 1311.233892][ T807] usb 5-1: USB disconnect, device number 7 [ 1312.021135][T19430] libceph: resolve '0..' (ret=-3): failed [ 1312.374195][T17731] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1312.544072][T17731] usb 6-1: Using ep0 maxpacket: 8 [ 1312.572767][T17731] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1312.623419][T17731] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1312.697092][T17731] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1312.723535][T17731] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1312.772676][T17731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.842435][T17731] usb 6-1: config 0 descriptor?? [ 1313.353125][T17731] redragon 0003:0C45:760B.0014: hidraw0: USB HID vff.fc Device [HID 0c45:760b] on usb-dummy_hcd.5-1/input0 [ 1313.402227][T19447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1313.491641][T17731] usb 6-1: USB disconnect, device number 94 [ 1314.274112][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1314.467765][ T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1314.490200][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.505205][ T24] usb 5-1: config 0 descriptor?? [ 1314.518251][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1314.684372][ T807] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1314.863777][ T807] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1314.878192][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.888702][ T807] usb 2-1: config 0 has no interfaces? [ 1314.894863][ T807] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1314.914964][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.935934][ T807] usb 2-1: config 0 descriptor?? [ 1315.147695][ T24] gp8psk: usb out operation failed. [ 1315.174329][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1315.210484][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1315.219651][T19483] tipc: Cannot configure node identity twice [ 1315.234767][T19483] tipc: Cannot configure node identity twice [ 1315.251399][ T24] usb 5-1: USB disconnect, device number 8 [ 1315.755450][T19498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2728'. [ 1315.979046][T19496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.455979][T19532] usb usb7: usbfs: process 19532 (syz.0.2741) did not claim interface 0 before use [ 1317.470123][T19532] usb usb7: selecting invalid altsetting 6 [ 1318.624101][T17731] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1319.143598][T17731] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1319.194889][T17731] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.264335][T17731] usb 6-1: config 0 has no interfaces? [ 1319.321499][T17731] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1319.379414][T17731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.448591][T17731] usb 6-1: config 0 descriptor?? [ 1319.802755][T19582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.813184][T19582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.824088][T17731] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1319.987346][T17731] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1319.991008][ T24] usb 2-1: USB disconnect, device number 2 [ 1320.033020][T17731] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1320.079422][T17731] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1320.111597][T17731] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1320.137249][T17731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.165655][T17731] usb 5-1: Product: syz [ 1320.190801][T17731] usb 5-1: Manufacturer: syz [ 1320.204673][T17731] usb 5-1: SerialNumber: syz [ 1320.221858][T17731] usb 5-1: config 0 descriptor?? [ 1320.228930][T19577] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1320.238618][T19577] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1320.250252][T17731] usb 5-1: ucan: probing device on interface #0 [ 1320.662080][T17731] usb 5-1: ucan: failed to retrieve device info [ 1320.675669][T17731] usb 5-1: ucan: probe failed; try to update the device firmware [ 1320.729719][T17731] usb 5-1: USB disconnect, device number 9 [ 1320.737055][T19596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.771056][T19596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.483883][T19604] libceph: resolve '0..' (ret=-3): failed [ 1321.494500][ T9386] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1321.665866][ T9386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.680896][ T9386] usb 5-1: config 0 has no interfaces? [ 1321.694658][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1321.705735][ T9386] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1321.725474][ T9386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.742473][ T9386] usb 5-1: Product: syz [ 1321.751343][ T9386] usb 5-1: Manufacturer: syz [ 1321.763372][ T9386] usb 5-1: SerialNumber: syz [ 1321.777473][ T9386] usb 5-1: config 0 descriptor?? [ 1321.864178][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1321.876520][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1321.894928][ T24] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1321.914365][ T24] usb 2-1: string descriptor 0 read error: -22 [ 1321.922305][ T24] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1321.932236][ T24] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1321.956870][ T24] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1321.996473][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1322.011620][ T24] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1322.020145][ T24] usb 2-1: media controller created [ 1322.037592][T19598] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2764'. [ 1322.050884][ T5728] usb 5-1: USB disconnect, device number 10 [ 1322.070216][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1322.495306][T17731] usb 6-1: USB disconnect, device number 95 [ 1323.168886][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 1323.232188][ T24] usb 2-1: USB disconnect, device number 3 [ 1323.574121][ T5728] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1323.747284][ T5728] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1323.777977][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.810589][ T5728] usb 5-1: config 0 has no interfaces? [ 1323.841977][ T5728] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1323.843439][T19627] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2772'. [ 1323.891064][ T5728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.908424][T19628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2772'. [ 1323.960136][ T5728] usb 5-1: config 0 descriptor?? [ 1324.637833][T19642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.672646][T19642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.904140][ T5728] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1325.056028][ T5728] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1325.073729][ T5728] usb 6-1: config 0 has no interface number 0 [ 1325.088957][ T5728] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.109900][ T5728] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.134743][ T5728] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1325.164059][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.209651][ T5728] usb 6-1: config 0 descriptor?? [ 1325.457067][T19658] xt_hashlimit: size too large, truncated to 1048576 [ 1325.479926][ T5728] usbhid 6-1:0.1: can't add hid device: -71 [ 1325.567768][ T807] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1325.594888][ T5728] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1325.648259][ T5728] usb 6-1: USB disconnect, device number 96 [ 1325.725079][T19665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.747196][T19665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.766650][ T807] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1325.782916][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.793833][ T807] usb 2-1: config 0 has no interfaces? [ 1325.800470][ T807] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1325.828393][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.851775][ T807] usb 2-1: config 0 descriptor?? [ 1326.892678][ T807] usb 5-1: USB disconnect, device number 11 [ 1327.415232][ T807] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1327.635174][ T807] usb 5-1: Using ep0 maxpacket: 8 [ 1327.656612][ T807] usb 5-1: config index 0 descriptor too short (expected 26, got 18) [ 1327.703851][ T807] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1327.743558][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.770447][ T807] usb 5-1: Product: syz [ 1327.792727][ T807] usb 5-1: Manufacturer: syz [ 1327.835027][ T807] usb 5-1: SerialNumber: syz [ 1327.892859][ T807] usb 5-1: config 0 descriptor?? [ 1327.921885][ T807] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1328.167455][ T5728] usb 2-1: USB disconnect, device number 4 [ 1328.564025][ T807] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1328.804038][ T807] gspca_sq930x: Sensor ov9630 not yet treated [ 1328.817909][ T807] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 1328.859298][ T807] usb 5-1: USB disconnect, device number 12 [ 1328.871766][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.914464][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.254107][ T9386] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1329.453445][ T9386] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1329.472505][ T9386] usb 2-1: config 0 has no interface number 0 [ 1329.483732][ T9386] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.508470][ T9386] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1329.531924][ T9386] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1329.552809][ T9386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.584681][ T9386] usb 2-1: config 0 descriptor?? [ 1329.740426][T19724] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2803'. [ 1329.821269][ T9386] usbhid 2-1:0.1: can't add hid device: -71 [ 1329.835554][ T9386] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1329.878978][ T9386] usb 2-1: USB disconnect, device number 5 [ 1330.081744][T19739] binder: 19738:19739 ioctl c00c620f 200000000680 returned -22 [ 1330.524067][ T9386] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1330.544076][ T807] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1330.705581][ T807] usb 6-1: config 0 has an invalid interface number: 22 but max is 0 [ 1330.714199][ T807] usb 6-1: config 0 has no interface number 0 [ 1330.726648][ T807] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.737947][ T9386] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 1330.747326][ T9386] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.757618][ T807] usb 6-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.769540][ T9386] usb 5-1: config 0 has no interfaces? [ 1330.776664][ T807] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1330.788254][ T9386] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1330.800044][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.808296][ T9386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.820704][ T807] usb 6-1: config 0 descriptor?? [ 1330.833762][ T9386] usb 5-1: config 0 descriptor?? [ 1331.368131][ T807] elo 0003:04E7:0030.0015: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input22 [ 1331.380722][T19760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1331.408785][T19760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.500413][ T807] usb 6-1: USB disconnect, device number 97 [ 1331.567665][T19762] fido_id[19762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1331.625338][T17731] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1331.857047][T17731] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1331.881218][T17731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.912174][T17731] usb 2-1: config 0 has no interfaces? [ 1331.925153][T17731] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1331.948302][T17731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.002412][T17731] usb 2-1: config 0 descriptor?? [ 1332.375034][T19771] xt_hashlimit: size too large, truncated to 1048576 [ 1332.649725][ T5728] usb 5-1: USB disconnect, device number 13 [ 1333.025586][T19788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.061282][T19788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.334074][T17731] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1333.527956][T17731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1333.579728][T17731] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1333.631177][T17731] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1333.700845][T17731] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1333.733839][T17731] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1333.780034][T17731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.823346][T17731] usb 6-1: config 0 descriptor?? [ 1334.067184][T17731] hdpvr 6-1:0.0: firmware version 0x0 dated [ 1334.093449][T17731] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 1334.122816][T10609] usb 2-1: USB disconnect, device number 6 [ 1334.695207][T19821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.737875][T19821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.786197][T17731] hdpvr 6-1:0.0: Could not setup controls [ 1334.893309][T17731] hdpvr 6-1:0.0: registering videodev failed [ 1334.961625][T17731] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1335.024051][T17731] usb 6-1: USB disconnect, device number 98 [ 1335.084573][ T807] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 1335.285840][ T807] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1335.313177][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1335.348912][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1335.372643][ T807] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1335.381928][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.395548][ T807] usb 2-1: config 0 descriptor?? [ 1335.402188][T19824] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1335.829512][ T807] hid_parser_main: 508 callbacks suppressed [ 1335.829529][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1335.900482][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1335.946096][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1335.985744][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.024034][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.060327][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.082058][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.098182][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.120380][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.138371][ T807] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 1336.169514][ T807] logitech 0003:046D:C294.0016: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 1336.219284][ T807] logitech 0003:046D:C294.0016: no inputs found [ 1336.256769][ T807] usb 2-1: USB disconnect, device number 7 [ 1336.276014][T17731] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 1336.372638][T19835] fido_id[19835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1336.446950][T17731] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1336.478097][T17731] usb 5-1: config 250 has an invalid interface number: 59 but max is 0 [ 1336.503183][T17731] usb 5-1: config 250 has no interface number 0 [ 1336.527775][T17731] usb 5-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 1336.562581][T17731] usb 5-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1336.642152][T17731] usb 5-1: config 250 interface 59 altsetting 255 endpoint 0x82 is Bulk; changing to Interrupt [ 1336.713276][T17731] usb 5-1: config 250 interface 59 altsetting 255 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 1336.768668][T17731] usb 5-1: config 250 interface 59 altsetting 255 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1336.839000][T17731] usb 5-1: config 250 interface 59 has no altsetting 0 [ 1336.881267][T17731] usb 5-1: string descriptor 0 read error: -22 [ 1336.908054][T17731] usb 5-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 1336.947754][T17731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.981906][T19834] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1337.009187][T17731] em28xx 5-1:250.59: New device @ 1.5 Mbps (1b80:e302, interface 59, class 59) [ 1337.044192][T17731] em28xx 5-1:250.59: Device initialization failed. [ 1337.057688][T17731] em28xx 5-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 1337.205546][ T24] usb 5-1: USB disconnect, device number 14 [ 1337.614071][T17731] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1337.778158][T17731] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 1337.817856][T17731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.862908][T17731] usb 2-1: config 0 has no interfaces? [ 1337.887106][T17731] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1337.916264][T17731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.956484][T17731] usb 2-1: config 0 descriptor?? [ 1338.361733][T19856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.184578][ T24] usb 6-1: new full-speed USB device number 99 using dummy_hcd [ 1339.278553][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.310605][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.365857][ T24] usb 6-1: too many endpoints for config 0 interface 0 altsetting 4: 129, using maximum allowed: 30 [ 1339.380549][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1339.398390][ T24] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.412461][ T24] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1339.429201][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1339.456469][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0725, bcdDevice= 0.00 [ 1339.491602][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.526393][ T24] usb 6-1: config 0 descriptor?? [ 1340.034801][ T24] wacom 0003:056A:0725.0017: Unknown device_type for 'HID 056a:0725'. Ignoring. [ 1340.189149][ T24] usb 6-1: USB disconnect, device number 99 [ 1340.370209][T10609] usb 2-1: USB disconnect, device number 8 [ 1340.579000][T19881] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2854'. [ 1341.114079][T17731] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1341.295840][T17731] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1341.342035][T17731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.414109][T17731] usb 2-1: config 0 descriptor?? [ 1341.449532][T17731] cp210x 2-1:0.0: cp210x converter detected [ 1341.664639][T19896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.894012][T19899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.922449][T19899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.085923][T17731] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1342.103204][T17731] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1342.153770][T17731] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1342.201152][T17731] usb 2-1: USB disconnect, device number 9 [ 1342.255059][T17731] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1342.297997][T17731] cp210x 2-1:0.0: device disconnected [ 1342.834037][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1343.007456][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.030680][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.048390][ T24] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 1343.058077][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.070646][ T24] usb 5-1: config 0 descriptor?? [ 1343.201204][T19933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2872'. [ 1343.309701][ T807] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1343.480236][ T807] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1343.493995][ T807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.524481][ T807] usb 6-1: config 0 has no interfaces? [ 1343.542905][ T24] hid_parser_main: 31 callbacks suppressed [ 1343.542920][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.563409][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.570693][ T807] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1343.610860][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.620436][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.643168][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.662783][ T807] usb 6-1: config 0 descriptor?? [ 1343.702501][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.734955][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.783208][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.836473][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.871640][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.892500][ T24] asus 0003:048D:CE50.0018: unknown main item tag 0x0 [ 1343.936646][ T24] asus 0003:048D:CE50.0018: hidraw0: USB HID v0.01 Device [HID 048d:ce50] on usb-dummy_hcd.4-1/input0 [ 1343.991938][ T24] usb 5-1: USB disconnect, device number 15 [ 1344.137716][T19938] fido_id[19938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1345.130700][T19946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1346.474345][ T9386] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1346.751790][ T9386] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.838099][ T9386] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1346.892238][ T9386] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1346.938346][ T9386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.989245][ T9386] usb 2-1: config 0 descriptor?? [ 1347.092157][ T9386] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1347.154483][ T9386] dvb-usb: bulk message failed: -22 (3/0) [ 1361.485857][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.593073][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.908347][ T9386] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1362.067804][ T9386] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1362.209962][ T9386] usb 2-1: media controller created [ 1362.406765][ T9386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1362.526129][ T5728] usb 1-1: USB disconnect, device number 124 [ 1362.965141][ T9386] dvb-usb: bulk message failed: -22 (6/0) [ 1363.238747][ T9386] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1363.352776][ T9386] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input98 [ 1363.922050][ T9386] dvb-usb: schedule remote query interval to 150 msecs. [ 1364.022119][ T9386] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1364.116564][ T9386] usb 2-1: USB disconnect, device number 10 [ 1364.298540][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1364.322794][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1364.330920][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1364.368757][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1364.381273][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1364.514787][T17570] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1364.533590][T17570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1364.541877][T17570] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1364.572525][T17570] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1364.585320][T17570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1364.748622][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1364.758319][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1364.766622][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1364.780476][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1364.919241][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1365.363345][ T9386] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1365.453786][T19977] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1365.468342][T19977] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1365.501655][T19977] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1365.509787][T19977] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1365.518167][T19977] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1365.528256][T13865] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1365.538285][T17570] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1365.539173][T19977] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1365.559312][T17570] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1365.635498][T19971] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1366.524106][T19971] Bluetooth: hci5: command tx timeout [ 1366.687419][T19971] Bluetooth: hci6: command tx timeout [ 1367.024989][T11282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.549396][T11282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.565158][T19971] Bluetooth: hci7: command tx timeout [ 1367.644054][T19971] Bluetooth: hci9: command tx timeout [ 1367.724296][T19971] Bluetooth: hci8: command tx timeout [ 1368.604482][T19971] Bluetooth: hci5: command tx timeout [ 1368.766247][T19971] Bluetooth: hci6: command tx timeout [ 1369.595132][T11282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.664021][T19971] Bluetooth: hci7: command tx timeout [ 1369.724406][T19971] Bluetooth: hci9: command tx timeout [ 1369.804194][ T5633] Bluetooth: hci8: command tx timeout [ 1370.306688][T11282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.684524][T19971] Bluetooth: hci5: command tx timeout [ 1370.844044][T19971] Bluetooth: hci6: command tx timeout [ 1371.725409][T19971] Bluetooth: hci7: command tx timeout [ 1371.804802][T19971] Bluetooth: hci9: command tx timeout [ 1371.894128][T19971] Bluetooth: hci8: command tx timeout [ 1372.764043][T19971] Bluetooth: hci5: command tx timeout [ 1372.820317][T11282] vlan2: left allmulticast mode [ 1372.827021][T11282] geneve0: left allmulticast mode [ 1372.837524][T11282] bridge0: port 1(vlan2) entered disabled state [ 1372.924348][T19971] Bluetooth: hci6: command tx timeout [ 1373.804235][T19971] Bluetooth: hci7: command tx timeout [ 1373.884062][T19971] Bluetooth: hci9: command tx timeout [ 1373.976878][T19971] Bluetooth: hci8: command tx timeout [ 1374.023135][T11282] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1374.503542][T11282] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 1375.199267][T11282] bond0 (unregistering): Released all slaves [ 1375.212330][T11282] bond1 (unregistering): Released all slaves [ 1375.238757][T11282] bond2 (unregistering): Released all slaves [ 1375.423580][T19975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.432883][T19975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.444389][T19975] bridge_slave_0: entered allmulticast mode [ 1375.452676][T19975] bridge_slave_0: entered promiscuous mode [ 1375.472002][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1375.663019][T19975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.693689][T19975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.701460][T19975] bridge_slave_1: entered allmulticast mode [ 1375.743022][T19975] bridge_slave_1: entered promiscuous mode [ 1375.815003][T19973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.822297][T19973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.848351][T19973] bridge_slave_0: entered allmulticast mode [ 1375.858600][T19973] bridge_slave_0: entered promiscuous mode [ 1375.911514][T19982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.924198][T19982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.932392][T19982] bridge_slave_0: entered allmulticast mode [ 1375.947535][T19982] bridge_slave_0: entered promiscuous mode [ 1385.238161][T19975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.253550][T19973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.268099][T19973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.275746][T19973] bridge_slave_1: entered allmulticast mode [ 1385.284194][T19973] bridge_slave_1: entered promiscuous mode [ 1385.326737][T19981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.334826][T19981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.342406][T19981] bridge_slave_0: entered allmulticast mode [ 1385.351814][T19981] bridge_slave_0: entered promiscuous mode [ 1385.359952][T19982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.370106][T19982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.377685][T19982] bridge_slave_1: entered allmulticast mode [ 1385.385936][T19982] bridge_slave_1: entered promiscuous mode [ 1385.411426][T19975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.447211][T19980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.456416][T19980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.465069][T19980] bridge_slave_0: entered allmulticast mode [ 1385.472831][T19980] bridge_slave_0: entered promiscuous mode [ 1385.486150][T19981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.495656][T19981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.502942][T19981] bridge_slave_1: entered allmulticast mode [ 1385.511441][T19981] bridge_slave_1: entered promiscuous mode [ 1385.627061][T19973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.640706][T19973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.651639][T19980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.666219][T19980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.673469][T19980] bridge_slave_1: entered allmulticast mode [ 1385.682700][T19980] bridge_slave_1: entered promiscuous mode [ 1385.810789][T19975] team0: Port device team_slave_0 added [ 1385.912556][T19981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.948421][T19982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.002995][T19975] team0: Port device team_slave_1 added [ 1386.055062][T19980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.072284][T19980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.084901][T19981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.102263][T19982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.196616][T19973] team0: Port device team_slave_0 added [ 1386.391253][T19982] team0: Port device team_slave_0 added [ 1386.408641][T19975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.427693][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.459244][T19975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.480086][T19973] team0: Port device team_slave_1 added [ 1386.505644][T11282] hsr_slave_0: left promiscuous mode [ 1386.518223][T11282] hsr_slave_1: left promiscuous mode [ 1386.889526][T19980] team0: Port device team_slave_0 added [ 1386.921918][T19980] team0: Port device team_slave_1 added [ 1386.991969][T19981] team0: Port device team_slave_0 added [ 1387.007289][T19982] team0: Port device team_slave_1 added [ 1387.221298][T19975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.237432][T19975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.316564][T19975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.435231][T19981] team0: Port device team_slave_1 added [ 1387.493083][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1387.542454][T19973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.553780][T19973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.586400][T19973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.620325][T19980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.627379][T19980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.660941][T19980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.688498][T19982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.695838][T19982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.722245][T19982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.771200][T19973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.778306][T19973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.806333][T19973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.820603][T19980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.828015][T19980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.858272][T19980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.893274][T19982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.911031][T19982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.968580][T19982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.051969][T19975] hsr_slave_0: entered promiscuous mode [ 1388.070088][T19975] hsr_slave_1: entered promiscuous mode [ 1388.089641][T19975] debugfs: 'hsr0' already exists in 'hsr' [ 1388.114040][T19975] Cannot create hsr debugfs directory [ 1388.121912][T19981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.134580][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.189046][T19981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.246102][T19981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.280386][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.366961][T19981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.562882][T19982] hsr_slave_0: entered promiscuous mode [ 1388.569736][T19982] hsr_slave_1: entered promiscuous mode [ 1388.576673][T19982] debugfs: 'hsr0' already exists in 'hsr' [ 1388.608105][T19982] Cannot create hsr debugfs directory [ 1388.700035][T19980] hsr_slave_0: entered promiscuous mode [ 1388.707293][T19980] hsr_slave_1: entered promiscuous mode [ 1388.713851][T19980] debugfs: 'hsr0' already exists in 'hsr' [ 1388.727465][T19980] Cannot create hsr debugfs directory [ 1389.303073][T19981] hsr_slave_0: entered promiscuous mode [ 1389.314252][T19981] hsr_slave_1: entered promiscuous mode [ 1389.321012][T19981] debugfs: 'hsr0' already exists in 'hsr' [ 1389.327385][T19981] Cannot create hsr debugfs directory [ 1389.391484][T19973] hsr_slave_0: entered promiscuous mode [ 1389.398430][T19973] hsr_slave_1: entered promiscuous mode [ 1389.405761][T19973] debugfs: 'hsr0' already exists in 'hsr' [ 1389.411539][T19973] Cannot create hsr debugfs directory [ 1389.425364][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1393.164371][T11282] IPVS: stop unused estimator thread 0... [ 1394.419118][T11282] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.033037][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1395.185695][T11282] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.444865][T11282] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.657171][T11282] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.981100][T11282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.042470][T19982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1397.121598][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.138356][T19982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1397.171495][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1397.191402][T19982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1397.230862][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.349069][T11282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.377898][T19982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1397.396023][T19982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1397.640064][T11282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.897766][T11282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.928693][T19980] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1397.942302][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.951842][T19980] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1397.981036][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.000547][T19980] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1398.032429][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.061629][T19980] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1398.097234][T19980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.272575][T19982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.829416][T19982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.108617][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.115831][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.157843][T19973] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1399.290566][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1399.323767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.330963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.461640][T11282] bridge_slave_1: left allmulticast mode [ 1412.475160][T11282] bridge_slave_1: left promiscuous mode [ 1412.497689][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.556243][T11282] bridge_slave_0: left allmulticast mode [ 1412.561948][T11282] bridge_slave_0: left promiscuous mode [ 1412.568700][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.599252][T11282] pimreg3: left allmulticast mode [ 1412.665798][T11282] bridge_slave_1: left allmulticast mode [ 1412.671552][T11282] bridge_slave_1: left promiscuous mode [ 1412.678943][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.708157][T11282] bridge_slave_0: left allmulticast mode [ 1412.713867][T11282] bridge_slave_0: left promiscuous mode [ 1412.720264][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.803344][T11282] pimreg3: left allmulticast mode [ 1413.305531][T11282] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1413.440911][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1413.462205][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1413.479260][T11282] bond0 (unregistering): Released all slaves [ 1413.507798][T11282] bond1 (unregistering): Released all slaves [ 1422.622285][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1422.660372][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1422.689415][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1422.778129][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1422.787585][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1422.950704][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.957094][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.087474][T19971] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1423.107765][T19971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1423.117381][T19971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1423.127040][T19971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1423.137811][T19971] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1423.607889][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1423.761591][T17570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1423.778014][T17570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1423.789259][T19977] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1423.799023][T17570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1423.810059][T17570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1423.818114][T17570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1423.869339][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1423.880540][ T5633] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1423.900153][ T5633] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1423.920866][ T5633] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1423.934310][ T5633] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1423.942627][ T5633] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1424.054651][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1424.075289][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1424.241972][T11282] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1424.844515][ T5633] Bluetooth: hci0: command tx timeout [ 1425.244054][ T5633] Bluetooth: hci2: command tx timeout [ 1425.884186][ T5633] Bluetooth: hci4: command tx timeout [ 1426.044432][ T5633] Bluetooth: hci10: command tx timeout [ 1426.124380][ T5633] Bluetooth: hci3: command tx timeout [ 1426.924142][ T5633] Bluetooth: hci0: command tx timeout [ 1427.324624][ T5633] Bluetooth: hci2: command tx timeout [ 1427.964127][ T5633] Bluetooth: hci4: command tx timeout [ 1428.124362][ T5633] Bluetooth: hci10: command tx timeout [ 1428.204120][ T5633] Bluetooth: hci3: command tx timeout [ 1429.004192][ T5633] Bluetooth: hci0: command tx timeout [ 1429.406495][ T5633] Bluetooth: hci2: command tx timeout [ 1430.044160][ T5633] Bluetooth: hci4: command tx timeout [ 1430.210310][ T5633] Bluetooth: hci10: command tx timeout [ 1430.284252][ T5633] Bluetooth: hci3: command tx timeout [ 1431.084199][ T5633] Bluetooth: hci0: command tx timeout [ 1431.484113][ T5633] Bluetooth: hci2: command tx timeout [ 1432.124201][ T5633] Bluetooth: hci4: command tx timeout [ 1432.284381][ T5633] Bluetooth: hci10: command tx timeout [ 1432.364218][ T5633] Bluetooth: hci3: command tx timeout [ 1434.858551][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.881563][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.897205][T11282] bond0 (unregistering): Released all slaves [ 1434.938807][T11282] bond1 (unregistering): Released all slaves [ 1434.969114][T19973] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1434.992565][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.354370][T20144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1443.372186][T20144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.387323][T20144] bridge_slave_0: entered allmulticast mode [ 1443.426165][T20144] bridge_slave_0: entered promiscuous mode [ 1443.455286][T20144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1443.474629][T20144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1443.496012][T20144] bridge_slave_1: entered allmulticast mode [ 1443.520502][T20144] bridge_slave_1: entered promiscuous mode [ 1444.410608][T20144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1444.424770][T20144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1444.434213][T20155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.441750][T20155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.449209][T20155] bridge_slave_0: entered allmulticast mode [ 1444.463512][T20155] bridge_slave_0: entered promiscuous mode [ 1444.472431][T20155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.479914][T20155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1444.487351][T20155] bridge_slave_1: entered allmulticast mode [ 1444.495413][T20155] bridge_slave_1: entered promiscuous mode [ 1444.748679][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.768344][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.787593][T20150] bridge_slave_0: entered allmulticast mode [ 1444.809238][T20150] bridge_slave_0: entered promiscuous mode [ 1444.971416][T20155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.026119][T11282] hsr_slave_0: left promiscuous mode [ 1445.040738][T11282] hsr_slave_1: left promiscuous mode [ 1445.055887][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.073525][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.111600][T11282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.132432][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.581005][T11282] hsr_slave_0: left promiscuous mode [ 1445.608600][T11282] hsr_slave_1: left promiscuous mode [ 1445.637693][T11282] veth1_macvtap: left promiscuous mode [ 1445.656250][T11282] veth0_macvtap: left promiscuous mode [ 1454.159232][T11282] veth1_vlan: left promiscuous mode [ 1454.216981][T11282] veth0_vlan: left promiscuous mode [ 1455.219753][T11282] veth1_macvtap: left promiscuous mode [ 1455.234320][T11282] veth0_macvtap: left promiscuous mode [ 1455.292881][T11282] veth1_vlan: left promiscuous mode [ 1455.307630][T11282] veth0_vlan: left promiscuous mode [ 1483.419895][T19971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1483.435394][T19971] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1483.444608][T19971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1483.458236][T19971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1483.478665][T19971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1483.726346][ T5633] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1483.749215][ T5633] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1483.758470][ T5633] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1483.768780][ T5633] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1483.847007][ T5633] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1484.173674][ T5633] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1484.201190][ T5633] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1484.210475][ T5633] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1484.227492][ T5633] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1484.235625][ T5633] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1484.367168][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.373582][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.417957][T19971] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1484.439192][T19971] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1484.450201][T19971] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1484.460887][T19971] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1484.483688][T19971] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1484.725672][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1484.827410][T19971] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1484.848975][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1484.924679][T19971] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1484.935203][T19971] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1484.943335][T19971] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1484.951729][T19971] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1485.564134][T19971] Bluetooth: hci5: command tx timeout [ 1485.963978][T19971] Bluetooth: hci7: command tx timeout [ 1486.364515][T19971] Bluetooth: hci8: command tx timeout [ 1486.604578][T19971] Bluetooth: hci9: command tx timeout [ 1487.084000][T19971] Bluetooth: hci11: command tx timeout [ 1487.644524][T19971] Bluetooth: hci5: command tx timeout [ 1488.044062][T19971] Bluetooth: hci7: command tx timeout [ 1488.447494][T19971] Bluetooth: hci8: command tx timeout [ 1488.684348][T19971] Bluetooth: hci9: command tx timeout [ 1489.164074][T19971] Bluetooth: hci11: command tx timeout [ 1489.724414][T19971] Bluetooth: hci5: command tx timeout [ 1490.124056][T19971] Bluetooth: hci7: command tx timeout [ 1490.524102][T19971] Bluetooth: hci8: command tx timeout [ 1490.764085][T19971] Bluetooth: hci9: command tx timeout [ 1491.243964][T19971] Bluetooth: hci11: command tx timeout [ 1491.580718][T19971] Bluetooth: hci6: command 0x0406 tx timeout [ 1491.804128][T19971] Bluetooth: hci5: command tx timeout [ 1492.208841][T19971] Bluetooth: hci7: command tx timeout [ 1492.604002][T19971] Bluetooth: hci8: command tx timeout [ 1492.843992][T19971] Bluetooth: hci9: command tx timeout [ 1493.344114][ T5633] Bluetooth: hci11: command tx timeout [ 1493.707957][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.716677][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.730568][T20150] bridge_slave_1: entered allmulticast mode [ 1493.758423][T20150] bridge_slave_1: entered promiscuous mode [ 1493.818738][T20157] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 1493.896459][T20144] team0: Port device team_slave_0 added [ 1494.101481][T20155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.068067][T20251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.081219][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.101512][T20251] bridge_slave_0: entered allmulticast mode [ 1500.118741][T20251] bridge_slave_0: entered promiscuous mode [ 1500.225259][T20251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.232769][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.240805][T20251] bridge_slave_1: entered allmulticast mode [ 1500.250358][T20251] bridge_slave_1: entered promiscuous mode [ 1500.485191][T20251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.602592][T20253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.617037][T20253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.634145][T20253] bridge_slave_0: entered allmulticast mode [ 1500.658621][T20253] bridge_slave_0: entered promiscuous mode [ 1500.676806][T20253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.694395][T20253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.714178][T20253] bridge_slave_1: entered allmulticast mode [ 1500.734410][T20253] bridge_slave_1: entered promiscuous mode [ 1500.824240][T20250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.839917][T20250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.857174][T20250] bridge_slave_0: entered allmulticast mode [ 1500.916050][T20250] bridge_slave_0: entered promiscuous mode [ 1500.950126][T20250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.990121][T20250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.997915][T20250] bridge_slave_1: entered allmulticast mode [ 1501.006274][T20250] bridge_slave_1: entered promiscuous mode [ 1501.032724][T20251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.059528][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.067538][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.086837][T20247] bridge_slave_0: entered allmulticast mode [ 1501.113313][T20247] bridge_slave_0: entered promiscuous mode [ 1501.305933][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.313535][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.364236][T20247] bridge_slave_1: entered allmulticast mode [ 1501.375748][T20247] bridge_slave_1: entered promiscuous mode [ 1501.485050][T20251] team0: Port device team_slave_0 added [ 1501.551272][T20253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.566768][T20253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.582290][T20242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.590416][T20242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.598525][T20242] bridge_slave_0: entered allmulticast mode [ 1501.615113][T20242] bridge_slave_0: entered promiscuous mode [ 1501.646122][T11282] IPVS: stop unused estimator thread 0... [ 1501.663255][T20250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.678441][T11282] IPVS: stop unused estimator thread 0... [ 1501.699576][T20251] team0: Port device team_slave_1 added [ 1501.775778][T20242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.783250][T20242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.790922][T20242] bridge_slave_1: entered allmulticast mode [ 1501.808433][T20242] bridge_slave_1: entered promiscuous mode [ 1501.848861][T20250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.888012][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.945909][T20242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.005490][T20251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.019470][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.046394][T20251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.061792][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.079713][T20253] team0: Port device team_slave_0 added [ 1502.090087][T20253] team0: Port device team_slave_1 added [ 1502.103012][T20242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.148189][T20250] team0: Port device team_slave_0 added [ 1502.157858][T20250] team0: Port device team_slave_1 added [ 1502.164835][T20251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.172553][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.249534][T20251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.170460][T20247] team0: Port device team_slave_0 added [ 1503.225491][T20253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.244110][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.290474][T20253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.322927][T20242] team0: Port device team_slave_0 added [ 1503.351873][T20250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.359042][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.386090][T20250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.517743][T20247] team0: Port device team_slave_1 added [ 1503.538627][T20253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.550647][T20253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.601589][T20253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.622140][T20242] team0: Port device team_slave_1 added [ 1503.638723][T20250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.647064][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.673714][T20250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.711969][T20251] hsr_slave_0: entered promiscuous mode [ 1503.718902][T20251] hsr_slave_1: entered promiscuous mode [ 1503.826997][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.838289][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.871682][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.940435][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.952134][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.981825][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.029261][T20253] hsr_slave_0: entered promiscuous mode [ 1504.036199][T20253] hsr_slave_1: entered promiscuous mode [ 1504.042722][T20253] debugfs: 'hsr0' already exists in 'hsr' [ 1504.074055][T20253] Cannot create hsr debugfs directory [ 1504.116346][T20242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.125417][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.154689][T20242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.349693][T20242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.366325][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.409023][T20242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.442631][T20250] hsr_slave_0: entered promiscuous mode [ 1504.451286][T20250] hsr_slave_1: entered promiscuous mode [ 1504.458644][T20250] debugfs: 'hsr0' already exists in 'hsr' [ 1504.464535][T20250] Cannot create hsr debugfs directory [ 1504.588542][T20247] hsr_slave_0: entered promiscuous mode [ 1504.599944][T20247] hsr_slave_1: entered promiscuous mode [ 1504.607134][T20247] debugfs: 'hsr0' already exists in 'hsr' [ 1504.612910][T20247] Cannot create hsr debugfs directory [ 1504.701310][T20242] hsr_slave_0: entered promiscuous mode [ 1504.709380][T20242] hsr_slave_1: entered promiscuous mode [ 1504.716934][T20242] debugfs: 'hsr0' already exists in 'hsr' [ 1504.729433][T20242] Cannot create hsr debugfs directory [ 1507.937887][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1508.227364][T20253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1508.255791][T20253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1508.276476][T20253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1508.306042][T20253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1508.386027][T20253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1508.401732][T20253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1508.552951][T20253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1508.581281][T20253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1509.131150][T20253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.162490][T20253] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.190728][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.197919][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.239158][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.246349][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.670614][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1509.744556][T20253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.799426][T11282] bridge_slave_1: left allmulticast mode [ 1509.812761][T11282] bridge_slave_1: left promiscuous mode [ 1509.850156][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.888441][T11282] bridge_slave_0: left allmulticast mode [ 1509.894835][T11282] bridge_slave_0: left promiscuous mode [ 1509.900687][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.937958][T11282] bridge_slave_1: left allmulticast mode [ 1509.943695][T11282] bridge_slave_1: left promiscuous mode [ 1509.951084][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.989315][T11282] bridge_slave_0: left allmulticast mode [ 1509.995052][T11282] bridge_slave_0: left promiscuous mode [ 1510.000875][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.090177][T11282] bridge_slave_1: left allmulticast mode [ 1510.097519][T11282] bridge_slave_1: left promiscuous mode [ 1510.103297][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.122943][T11282] bridge_slave_0: left allmulticast mode [ 1510.130877][T11282] bridge_slave_0: left promiscuous mode [ 1510.137190][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.190100][T11282] bridge_slave_1: left allmulticast mode [ 1510.197442][T11282] bridge_slave_1: left promiscuous mode [ 1510.213684][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.242734][T11282] bridge_slave_0: left allmulticast mode [ 1510.248691][T11282] bridge_slave_0: left promiscuous mode [ 1510.255034][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.300219][T11282] bridge_slave_1: left allmulticast mode [ 1510.306119][T11282] bridge_slave_1: left promiscuous mode [ 1510.311938][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.330743][T11282] bridge_slave_0: left allmulticast mode [ 1510.337796][T11282] bridge_slave_0: left promiscuous mode [ 1510.345225][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.382731][T11282] bridge_slave_1: left allmulticast mode [ 1510.392036][T11282] bridge_slave_1: left promiscuous mode [ 1510.398378][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.421006][T11282] bridge_slave_0: left allmulticast mode [ 1510.427163][T11282] bridge_slave_0: left promiscuous mode [ 1510.433056][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.477394][T11282] bridge_slave_1: left allmulticast mode [ 1510.491150][T11282] bridge_slave_1: left promiscuous mode [ 1510.502509][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.531296][T11282] bridge_slave_0: left allmulticast mode [ 1510.537168][T11282] bridge_slave_0: left promiscuous mode [ 1510.542934][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.579168][T11282] bridge_slave_1: left allmulticast mode [ 1510.585243][T11282] bridge_slave_1: left promiscuous mode [ 1510.591005][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.610325][T11282] bridge_slave_0: left allmulticast mode [ 1510.617409][T11282] bridge_slave_0: left promiscuous mode [ 1510.625113][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.934824][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.979386][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.176260][T11282] bond0 (unregistering): Released all slaves [ 1511.437888][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.463234][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.483203][T11282] bond0 (unregistering): Released all slaves [ 1511.596877][T11282] bond0 (unregistering): Released all slaves [ 1511.723108][T11282] bond0 (unregistering): Released all slaves [ 1511.865260][T11282] bond0 (unregistering): Released all slaves [ 1511.989657][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.016365][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.035558][T11282] bond0 (unregistering): Released all slaves [ 1512.185514][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.217720][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.238896][T11282] bond0 (unregistering): Released all slaves [ 1512.690544][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.742511][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.761648][T11282] bond0 (unregistering): Released all slaves [ 1513.183395][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.203231][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.227560][T11282] bond0 (unregistering): Released all slaves [ 1513.362284][T11282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1513.389031][T11282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1513.408376][T11282] bond0 (unregistering): Released all slaves [ 1513.800002][T20253] veth0_vlan: entered promiscuous mode [ 1513.832976][T20253] veth1_vlan: entered promiscuous mode [ 1514.035785][T20253] veth0_macvtap: entered promiscuous mode [ 1514.070835][T20253] veth1_macvtap: entered promiscuous mode [ 1514.155837][T20253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.182870][T20251] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1514.267063][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1514.297532][T20253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.319719][T20251] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1520.204122][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1521.153472][ C1] sched: DL replenish lagged too much [ 1527.297039][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1527.435594][T11282] hsr_slave_0: left promiscuous mode [ 1527.443505][T11282] hsr_slave_1: left promiscuous mode [ 1527.469387][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.478868][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.578545][T11282] hsr_slave_0: left promiscuous mode [ 1527.606772][T11282] hsr_slave_1: left promiscuous mode [ 1527.771199][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.877527][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.048117][T11282] hsr_slave_0: left promiscuous mode [ 1528.086008][T11282] hsr_slave_1: left promiscuous mode [ 1528.093479][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.131795][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.222293][T11282] hsr_slave_0: left promiscuous mode [ 1528.232068][T11282] hsr_slave_1: left promiscuous mode [ 1528.239322][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.253049][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.280747][T11282] hsr_slave_0: left promiscuous mode [ 1528.290406][T11282] hsr_slave_1: left promiscuous mode [ 1528.298692][T11282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.308737][T11282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.868073][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1528.900654][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1529.456893][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1529.864213][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1529.909053][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1543.979771][T19971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1544.005302][T19971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1544.025618][T19971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1544.033716][T19971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1544.041858][T19971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1544.210098][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1544.231935][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1544.252135][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1544.260342][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1544.279265][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1544.845239][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1544.888341][T19971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1544.919036][T19971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1544.935259][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1544.944682][T19971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1544.985252][T17570] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1545.012965][T17570] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1545.025754][T19977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1545.026423][T19977] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1545.097696][T17570] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1545.105863][T17570] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1545.118716][T17570] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.176268][T19971] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1545.208295][T19971] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1545.216625][T19971] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1545.228884][T19971] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1545.236684][T19971] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1545.808474][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.815147][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.124081][T19971] Bluetooth: hci0: command tx timeout [ 1546.365523][T19971] Bluetooth: hci2: command tx timeout [ 1547.085763][T19971] Bluetooth: hci3: command tx timeout [ 1547.324071][T19971] Bluetooth: hci6: command tx timeout [ 1547.484401][T19971] Bluetooth: hci4: command tx timeout [ 1548.204015][T19971] Bluetooth: hci0: command tx timeout [ 1548.446019][T19971] Bluetooth: hci2: command tx timeout [ 1549.163959][T19971] Bluetooth: hci3: command tx timeout [ 1549.405054][T19971] Bluetooth: hci6: command tx timeout [ 1549.564364][T19971] Bluetooth: hci4: command tx timeout [ 1550.284030][T19971] Bluetooth: hci0: command tx timeout [ 1550.525132][T19971] Bluetooth: hci2: command tx timeout [ 1551.244883][T19971] Bluetooth: hci3: command tx timeout [ 1551.483916][T19971] Bluetooth: hci6: command tx timeout [ 1551.645810][T19971] Bluetooth: hci4: command tx timeout [ 1551.878370][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1551.915623][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1552.366191][T19971] Bluetooth: hci0: command tx timeout [ 1552.417400][T11282] team0 (unregistering): Port device team_slave_1 removed [ 1552.441578][T11282] team0 (unregistering): Port device team_slave_0 removed [ 1552.603944][T19971] Bluetooth: hci2: command tx timeout [ 1552.642033][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.724749][T20251] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1552.757876][T20251] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1553.019699][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.121041][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.334215][T19971] Bluetooth: hci3: command tx timeout [ 1553.369474][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.575544][T19971] Bluetooth: hci6: command tx timeout [ 1553.734605][T19971] Bluetooth: hci4: command tx timeout [ 1554.839588][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1556.609998][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1557.643253][T20455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.651090][T20455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.659057][T20455] bridge_slave_0: entered allmulticast mode [ 1557.672797][T20455] bridge_slave_0: entered promiscuous mode [ 1558.161185][T20455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.178651][T20455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.188424][T20455] bridge_slave_1: entered allmulticast mode [ 1558.196866][T20455] bridge_slave_1: entered promiscuous mode [ 1558.408965][T20458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.441937][T20458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.484247][T20458] bridge_slave_0: entered allmulticast mode [ 1558.492134][T20458] bridge_slave_0: entered promiscuous mode [ 1558.577170][T20464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.593992][T20464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.602858][T20464] bridge_slave_0: entered allmulticast mode [ 1558.627751][T20464] bridge_slave_0: entered promiscuous mode [ 1558.680590][T20462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.704157][T20462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.711543][T20462] bridge_slave_0: entered allmulticast mode [ 1558.736791][T20462] bridge_slave_0: entered promiscuous mode [ 1558.745634][T20458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.752804][T20458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.761460][T20458] bridge_slave_1: entered allmulticast mode [ 1558.770207][T20458] bridge_slave_1: entered promiscuous mode [ 1558.804733][T20464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.812891][T20464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.828574][T20464] bridge_slave_1: entered allmulticast mode [ 1558.838750][T20464] bridge_slave_1: entered promiscuous mode [ 1558.994464][T20462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.007191][T20462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.052134][T20462] bridge_slave_1: entered allmulticast mode [ 1559.076096][T20462] bridge_slave_1: entered promiscuous mode [ 1559.184205][T20455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.221686][T20455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1607.304327][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.310696][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.544789][T20464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.335537][T19971] Bluetooth: hci7: command 0x0406 tx timeout [ 1609.341623][T19977] Bluetooth: hci5: command 0x0406 tx timeout [ 1623.881311][T13865] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1623.895019][T13865] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1623.911082][T13865] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1623.931098][T13865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1623.950168][T13865] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1623.996869][T13865] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1624.021470][T13865] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1624.031308][T13865] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1624.044277][T13865] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1624.053393][T20560] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1624.077114][T20560] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1624.135257][T19971] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1624.166293][T19971] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1624.187717][T19971] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1624.207296][T19971] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1624.224142][T19971] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1624.231798][T19971] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1624.239591][T13865] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1624.247227][T19971] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1624.255096][T13865] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1624.271189][T19971] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1624.325532][T19979] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1624.355938][T19979] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1624.365051][T19971] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1624.374403][T19979] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1624.505424][T20458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.900141][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1626.141470][T19979] Bluetooth: hci9: command tx timeout [ 1626.366775][T19979] Bluetooth: hci12: command tx timeout [ 1626.375353][T19977] Bluetooth: hci11: command tx timeout [ 1626.444011][T19979] Bluetooth: hci8: command tx timeout [ 1626.524423][T19979] Bluetooth: hci10: command tx timeout [ 1628.204331][T19979] Bluetooth: hci9: command tx timeout [ 1628.444046][T19979] Bluetooth: hci12: command tx timeout [ 1628.449681][T19977] Bluetooth: hci11: command tx timeout [ 1628.524017][T19979] Bluetooth: hci8: command tx timeout [ 1628.604131][T19979] Bluetooth: hci10: command tx timeout [ 1630.284504][T19979] Bluetooth: hci9: command tx timeout [ 1630.523905][T19979] Bluetooth: hci12: command tx timeout [ 1630.529451][T19977] Bluetooth: hci11: command tx timeout [ 1630.604137][T19979] Bluetooth: hci8: command tx timeout [ 1630.685440][T19979] Bluetooth: hci10: command tx timeout [ 1632.364501][T19979] Bluetooth: hci9: command tx timeout [ 1632.613266][T19979] Bluetooth: hci12: command tx timeout [ 1632.618930][T19979] Bluetooth: hci11: command tx timeout [ 1632.684355][T19979] Bluetooth: hci8: command tx timeout [ 1632.764243][T19979] Bluetooth: hci10: command tx timeout [ 1650.133909][ T31] INFO: task syz-executor:20242 blocked for more than 143 seconds. [ 1650.141944][ T31] Tainted: G L syzkaller #0 [ 1650.155346][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1650.173959][ T31] task:syz-executor state:D stack:22776 pid:20242 tgid:20242 ppid:1 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc [ 1650.213950][ T31] Call Trace: [ 1650.217315][ T31] [ 1650.220257][ T31] __schedule+0x1821/0x5740 [ 1650.233119][ T31] ? __pfx___schedule+0x10/0x10 [ 1650.243915][ T31] ? schedule+0x90/0x360 [ 1650.251584][ T31] schedule+0x164/0x360 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1650.263822][ T31] schedule_preempt_disabled+0x13/0x30 [ 1650.275700][ T31] __mutex_lock+0x7f7/0x1550 [ 1650.283837][ T31] ? __pfx_vsscanf+0x10/0x10 [ 1650.295072][ T31] ? __mutex_lock+0x608/0x1550 [ 1650.304704][ T31] ? del_device_store+0xd7/0x370 [ 1650.321492][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1650.326723][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1650.331593][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1650.346677][ T31] del_device_store+0xd7/0x370 [ 1650.357389][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 1650.363610][ T31] ? __pfx_del_device_store+0x10/0x10 [ 1650.377079][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 1650.382349][ T31] ? sysfs_kf_write+0x166/0x260 [ 1650.388056][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1650.393307][ T31] kernfs_fop_write_iter+0x3af/0x540 [ 1650.399029][ T31] vfs_write+0x61d/0xb90 [ 1650.403330][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1650.410921][ T31] ? do_sys_openat2+0x14c/0x200 [ 1650.417021][ T31] ? kmem_cache_free+0x182/0x650 [ 1650.422007][ T31] ? fd_install+0x94/0x3d0 [ 1650.426947][ T31] ksys_write+0x150/0x270 [ 1650.431328][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1650.436601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.442711][ T31] do_syscall_64+0x15f/0xf80 [ 1650.448185][ T31] ? trace_irq_disable+0x3b/0x140 [ 1650.453307][ T31] ? clear_bhb_loop+0x40/0x90 [ 1650.458518][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.464793][ T31] RIP: 0033:0x7fe87895d60e [ 1650.469264][ T31] RSP: 002b:00007fe878d3f1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1650.486626][ T31] RAX: ffffffffffffffda RBX: 000055556ff6e500 RCX: 00007fe87895d60e [ 1650.531631][ T31] RDX: 0000000000000001 RSI: 00007fe878d3f270 RDI: 0000000000000005 [ 1650.588133][ T31] RBP: 00007fe878a335ec R08: 0000000000000000 R09: 0000000000000000 [ 1650.611313][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1650.638095][ T31] R13: 00007fe878d3f270 R14: 00007fe879744620 R15: 0000000000000003 [ 1650.652444][ T31] [ 1650.656025][ T31] [ 1650.656025][ T31] Showing all locks held in the system: [ 1650.664116][ T31] 3 locks held by kworker/u8:1/13: [ 1650.669260][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1650.681453][ T31] #1: ffffc90000127c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1650.693012][ T31] #2: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1650.718765][ T31] 1 lock held by khungtaskd/31: [ 1650.723673][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1650.734161][ T31] 3 locks held by kworker/u8:5/139: [ 1650.739395][ T31] #0: ffff888031ce7940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1650.752450][ T31] #1: ffffc90002f2fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1650.776818][ T31] #2: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1650.786679][ T31] 6 locks held by kworker/u8:10/1177: [ 1650.792104][ T31] 1 lock held by dhcpcd/5289: [ 1650.797084][ T31] #0: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1650.807120][ T31] 2 locks held by getty/5381: [ 1650.811824][ T31] #0: ffff888036d8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1650.822134][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1650.842505][ T31] 4 locks held by kworker/u8:6/11282: [ 1650.848657][ T31] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1650.862090][ T31] #1: ffffc9000322fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1650.873028][ T31] #2: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1650.882657][ T31] #3: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1650.892852][ T31] 1 lock held by syz.5.2865/19915: [ 1650.898330][ T31] 4 locks held by syz-executor/20242: [ 1650.903740][ T31] #0: ffff888035266410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1650.912951][ T31] #1: ffff88804af06480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1650.923247][ T31] #2: ffff888028772878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1650.948250][ T31] #3: ffffffff8f64f560 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1650.962117][ T31] 7 locks held by syz-executor/20247: [ 1650.969035][ T31] #0: ffff888035266410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1650.978371][ T31] #1: ffff88804af07480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1650.992922][ T31] #2: ffff888028772878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1651.004710][ T31] #3: ffffffff8f64f560 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1651.017466][ T31] #4: ffff8880451e3128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1651.028650][ T31] #5: ffff88802baa4258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1651.039415][ T31] #6: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 1651.057244][ T31] 3 locks held by kworker/1:7/20416: [ 1651.062702][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1651.079046][ T31] #1: ffffc9000359fc40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1651.094293][ T31] #2: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1651.105711][ T31] 1 lock held by syz-executor/20455: [ 1651.115414][ T31] #0: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1651.128549][ T31] 1 lock held by syz-executor/20458: [ 1651.134593][ T31] #0: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1651.144906][ T31] 1 lock held by syz-executor/20462: [ 1651.150227][ T31] #0: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1651.166042][ T31] 1 lock held by syz-executor/20465: [ 1651.174210][ T31] #0: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1651.183425][ T31] 2 locks held by syz-executor/20564: [ 1651.193344][ T31] #0: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1651.203194][ T31] #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 1651.213524][ T31] 2 locks held by syz-executor/20565: [ 1651.219394][ T31] #0: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1651.229103][ T31] #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 1651.240402][ T31] 2 locks held by syz-executor/20566: [ 1651.246143][ T31] #0: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1651.270070][ T31] #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 1651.283262][ T31] 2 locks held by syz-executor/20567: [ 1651.288921][ T31] #0: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1651.302135][ T31] #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 1651.312493][ T31] 2 locks held by syz-executor/20569: [ 1651.318246][ T31] #0: ffffffff8fdc13e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1651.328888][ T31] #1: ffffffff8fdd00c0 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x88/0x290 [ 1651.339474][ T31] [ 1651.341835][ T31] ============================================= [ 1651.341835][ T31] [ 1651.355556][ T31] NMI backtrace for cpu 1 [ 1651.355591][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.355612][ T31] Tainted: [L]=SOFTLOCKUP [ 1651.355618][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1651.355628][ T31] Call Trace: [ 1651.355634][ T31] [ 1651.355641][ T31] dump_stack_lvl+0xe8/0x150 [ 1651.355663][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1651.355682][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1651.355700][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1651.355719][ T31] sys_info+0x135/0x170 [ 1651.355734][ T31] watchdog+0xfd3/0x1030 [ 1651.355762][ T31] ? watchdog+0x1c9/0x1030 [ 1651.355787][ T31] kthread+0x388/0x470 [ 1651.355806][ T31] ? __pfx_watchdog+0x10/0x10 [ 1651.355824][ T31] ? __pfx_kthread+0x10/0x10 [ 1651.355843][ T31] ret_from_fork+0x514/0xb70 [ 1651.355862][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.355878][ T31] ? __switch_to+0xc79/0x1410 [ 1651.355901][ T31] ? __pfx_kthread+0x10/0x10 [ 1651.355921][ T31] ret_from_fork_asm+0x1a/0x30 [ 1651.355951][ T31] [ 1651.355957][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1651.474812][ C0] NMI backtrace for cpu 0 [ 1651.474844][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.474865][ C0] Tainted: [L]=SOFTLOCKUP [ 1651.474872][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1651.474883][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1651.474909][ C0] RIP: 0010:lock_acquire+0x7c/0x350 [ 1651.474933][ C0] Code: a3 05 58 05 8f 0e 73 0d e8 11 28 09 00 84 c0 0f 84 ca 01 00 00 83 3d 12 38 8f 0e 00 0f 84 d3 00 00 00 48 8b b4 24 90 00 00 00 <4c> 89 ef e8 3c 23 8f 00 83 3d f5 37 8f 0e 00 0f 84 ce 00 00 00 65 [ 1651.474949][ C0] RSP: 0018:ffffc90000006c58 EFLAGS: 00000202 [ 1651.474962][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000103 [ 1651.474972][ C0] RDX: 0000000000000000 RSI: ffffffff8176f273 RDI: ffffffff8c28af00 [ 1651.474983][ C0] RBP: ffffffff8176f256 R08: 0000000000000000 R09: 0000000000000000 [ 1651.474992][ C0] R10: ffffc90000006e18 R11: ffffffff81b0ebd0 R12: 0000000000000002 [ 1651.475003][ C0] R13: ffffffff8e95cd60 R14: 0000000000000000 R15: 0000000000000000 [ 1651.475013][ C0] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 1651.475025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.475036][ C0] CR2: 00007f3ee921ed70 CR3: 0000000032872000 CR4: 00000000003526f0 [ 1651.475049][ C0] Call Trace: [ 1651.475056][ C0] [ 1651.475067][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1651.475085][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1651.475110][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1651.475127][ C0] unwind_next_frame+0xc3/0x2550 [ 1651.475143][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1651.475163][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1651.475180][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1651.475199][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1651.475217][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1651.475238][ C0] arch_stack_walk+0x11b/0x150 [ 1651.475258][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1651.475277][ C0] stack_trace_save+0xa9/0x100 [ 1651.475298][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1651.475319][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1651.475337][ C0] ? __switchdev_handle_fdb_event_to_device+0x391/0x4c0 [ 1651.475360][ C0] kasan_save_track+0x3e/0x80 [ 1651.475378][ C0] ? kasan_save_track+0x3e/0x80 [ 1651.475395][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1651.475413][ C0] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 1651.475432][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1651.475471][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1651.475491][ C0] kmem_cache_alloc_node_noprof+0x384/0x690 [ 1651.475511][ C0] ? __alloc_skb+0x27d/0x7d0 [ 1651.475527][ C0] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 1651.475547][ C0] __alloc_skb+0x27d/0x7d0 [ 1651.475566][ C0] fdb_notify+0xa6/0x160 [ 1651.475585][ C0] br_fdb_update+0x4c8/0x690 [ 1651.475606][ C0] ? __pfx_br_fdb_update+0x10/0x10 [ 1651.475629][ C0] br_handle_frame_finish+0x573/0x1c80 [ 1651.475653][ C0] ? skb_ext_add+0x148/0x8f0 [ 1651.475671][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1651.475687][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1651.475708][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1651.475724][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1651.475743][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1651.475759][ C0] ? ipt_do_table+0x13d2/0x1630 [ 1651.475778][ C0] ? nf_hook_slow+0x176/0x220 [ 1651.475802][ C0] br_nf_pre_routing_finish+0x13d7/0x1a90 [ 1651.475830][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1651.475852][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1651.475876][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1651.475895][ C0] ? NF_HOOK+0xa2/0x6e0 [ 1651.475915][ C0] NF_HOOK+0x64e/0x6e0 [ 1651.475933][ C0] ? net_generic+0x1e/0x240 [ 1651.475954][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1651.475975][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1651.475998][ C0] ? setup_pre_routing+0x4f1/0x6f0 [ 1651.476020][ C0] br_nf_pre_routing+0xed5/0x14c0 [ 1651.476040][ C0] ? __pfx_br_nf_pre_routing_finish+0x10/0x10 [ 1651.476065][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1651.476085][ C0] br_handle_frame+0x1277/0x1510 [ 1651.476109][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1651.476124][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1651.476149][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1651.476163][ C0] __netif_receive_skb_core+0x98f/0x3170 [ 1651.476181][ C0] ? ip_rcv_finish_core+0x100a/0x1c00 [ 1651.476199][ C0] ? kmem_cache_free+0x182/0x650 [ 1651.476222][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1651.476241][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1651.476257][ C0] ? ip_rcv_finish+0x160/0x2a0 [ 1651.476276][ C0] ? NF_HOOK+0x336/0x3c0 [ 1651.476297][ C0] ? process_backlog+0x3eb/0x1950 [ 1651.476317][ C0] ? process_backlog+0x3eb/0x1950 [ 1651.476333][ C0] ? process_backlog+0x3eb/0x1950 [ 1651.476350][ C0] ? process_backlog+0x3eb/0x1950 [ 1651.476367][ C0] process_backlog+0x76d/0x1950 [ 1651.476392][ C0] __napi_poll+0xae/0x340 [ 1651.476407][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1651.476424][ C0] net_rx_action+0x627/0xf70 [ 1651.476440][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1651.476465][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1651.476489][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 1651.476514][ C0] handle_softirqs+0x22a/0x840 [ 1651.476530][ C0] ? do_softirq+0x76/0xd0 [ 1651.476547][ C0] ? __alloc_skb+0x186/0x7d0 [ 1651.476563][ C0] ? __alloc_skb+0x186/0x7d0 [ 1651.476580][ C0] do_softirq+0x76/0xd0 [ 1651.476593][ C0] [ 1651.476599][ C0] [ 1651.476605][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1651.476620][ C0] __alloc_skb+0x1aa/0x7d0 [ 1651.476640][ C0] nsim_dev_trap_report_work+0x29a/0xb90 [ 1651.476667][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1651.476684][ C0] process_scheduled_works+0xb5d/0x1860 [ 1651.476713][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1651.476731][ C0] ? assign_work+0x3d5/0x5e0 [ 1651.476748][ C0] worker_thread+0xa53/0xfc0 [ 1651.476775][ C0] kthread+0x388/0x470 [ 1651.476794][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1651.476808][ C0] ? __pfx_kthread+0x10/0x10 [ 1651.476827][ C0] ret_from_fork+0x514/0xb70 [ 1651.476844][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1651.476859][ C0] ? __switch_to+0xc79/0x1410 [ 1651.476880][ C0] ? __pfx_kthread+0x10/0x10 [ 1651.476898][ C0] ret_from_fork_asm+0x1a/0x30 [ 1651.476923][ C0] [ 1652.112848][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1652.119739][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1652.130422][ T31] Tainted: [L]=SOFTLOCKUP [ 1652.134758][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1652.144821][ T31] Call Trace: [ 1652.148105][ T31] [ 1652.151048][ T31] vpanic+0x56c/0xa60 [ 1652.155040][ T31] ? __pfx___schedule+0x10/0x10 [ 1652.159902][ T31] ? __pfx_vpanic+0x10/0x10 [ 1652.164410][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1652.170580][ T31] panic+0xc5/0xd0 [ 1652.174308][ T31] ? __pfx_panic+0x10/0x10 [ 1652.178738][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1652.184127][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1652.190295][ T31] watchdog+0x102c/0x1030 [ 1652.194643][ T31] ? watchdog+0x1c9/0x1030 [ 1652.199078][ T31] kthread+0x388/0x470 [ 1652.203156][ T31] ? __pfx_watchdog+0x10/0x10 [ 1652.207838][ T31] ? __pfx_kthread+0x10/0x10 [ 1652.212441][ T31] ret_from_fork+0x514/0xb70 [ 1652.217047][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1652.222167][ T31] ? __switch_to+0xc79/0x1410 [ 1652.226858][ T31] ? __pfx_kthread+0x10/0x10 [ 1652.231458][ T31] ret_from_fork_asm+0x1a/0x30 [ 1652.236245][ T31] [ 1652.239640][ T31] Kernel Offset: disabled [ 1652.243952][ T31] Rebooting in 86400 seconds..