last executing test programs: 17m39.088966892s ago: executing program 2 (id=974): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) fallocate(r5, 0x0, 0x42d7, 0x4) r6 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r6, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() wait4(r7, 0x0, 0x2, 0x0) r8 = getpgid(0x0) getpriority(0x0, r8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f00000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a000100"], 0xf0}}, 0x0) 17m37.612197818s ago: executing program 2 (id=976): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 17m37.004664562s ago: executing program 2 (id=978): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d240500000500000000"], 0x0) 17m36.519869744s ago: executing program 4 (id=979): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) syz_emit_ethernet(0x2e, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4}]}}, @echo}}}}, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) tee(r4, r3, 0xe, 0x4) write$binfmt_script(r5, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000001780)={0x0, 0x2, 0x0, 0x9}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = syz_kvm_add_vcpu$x86(r1, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000380)=0xfffffffe, 0x4) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'veth0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x1, {0x0, 0x0, 0x12, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffe40}}]}, 0x34}}, 0x0) 17m35.420882893s ago: executing program 4 (id=980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000007c0)="f1a9258800456ff03013780200000000", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) rt_sigpending(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0x20000881) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1a) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000060c0), 0x0, 0x4000001) 17m35.050649928s ago: executing program 2 (id=982): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r6, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)}) close_range(r4, 0xffffffffffffffff, 0x0) 17m33.313253472s ago: executing program 4 (id=984): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 17m32.969094101s ago: executing program 4 (id=985): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$uac1(0x6, 0xa0, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x6d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xf2, 0x10, 0x7b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x31}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x402, 0x1, 0x10, 0x40, 0xc, 0x9f}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0xb67, 0x1, "03"}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x0, 0x2, "b82c32"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x301, 0x5, 0x2, 0xa1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x38, 0x9, 0x3, 0xf5, {0x7, 0x25, 0x1, 0x8, 0xf7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0xf1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x8, 0x0, {0x7, 0x25, 0x1, 0x8, 0x4, 0x45}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xf6, 0xff, 0x0, 0x20, 0x7}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x383d}}, {0xc2, &(0x7f0000000440)=@string={0xc2, 0x3, "cca46d977a2594a0807054a7124eb04c40f6c5cc23c6fb2a996796723ed36ea386a4881db207c3faf02c1cf9e6a36b571698ffafc9f0e9c6d2b3b98d6bec738a4a56a2edf909cb820da3d8b74b696a4ba5266623dad3fbd230da55adc3cc2d8d68aae762c46940d7e121efb720cdaba75c13c597de282a84a06baaa37818deef224a0610e7d671f5608bb2bf7e9f99c551002a2e699e437f86c79d85599fc748dfd2c79350d209fefab1a3025e4f47fb4421f52f95b524ff6b5cfde909e65816"}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) prctl$PR_SET_IO_FLUSHER(0x50, 0x10001) 17m32.683898839s ago: executing program 2 (id=986): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) socket$nl_route(0x10, 0x3, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 17m29.718899282s ago: executing program 4 (id=991): unshare(0x40050300) socket$rds(0x15, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c000905020200020200000905820200"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) 17m28.133114574s ago: executing program 2 (id=994): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40048e0}, 0x4000) 17m26.247667315s ago: executing program 4 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) migrate_pages(r0, 0x1, &(0x7f00000000c0)=0x5, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 16m42.582378099s ago: executing program 32 (id=995): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 16m34.577333914s ago: executing program 33 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x5, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) fallocate(r5, 0x0, 0x42d7, 0x4) r6 = getuid() quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r6, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) getpid() wait4(r7, 0x0, 0x2, 0x0) r8 = getpgid(0x0) getpriority(0x0, r8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="f00000001000010029bd7100ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a000100aaaaaaaaaa0e0000b0001680ac0001800c00070000008095"], 0xf0}}, 0x0) 16m24.046380114s ago: executing program 34 (id=994): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) creat(&(0x7f00000000c0)='./file0\x00', 0x6a) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40048e0}, 0x4000) 16m21.301557548s ago: executing program 35 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0xc002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) migrate_pages(r0, 0x1, &(0x7f00000000c0)=0x5, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000040000701faffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 13m18.101235204s ago: executing program 6 (id=1196): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 13m12.697164154s ago: executing program 6 (id=1207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000140)=0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x121c80) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 13m9.42378828s ago: executing program 6 (id=1210): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000140)=0xffffffffffffffff) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x121c80) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0xfffffff9, 0x5, '\x00', 0x10}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 13m8.084399713s ago: executing program 6 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff160800154000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 13m7.894188989s ago: executing program 6 (id=1215): gettid() r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) gettid() socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x4, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "46f7cb83084c066a89827f04", "33af343c1000", "9b3842fc63849f62b6eb1c3c"]}) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f32010203010902"], 0x0) close_range(r1, r2, 0x0) 13m5.249379127s ago: executing program 6 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010000000000000000001d01000008000500", @ANYRES32=0x0], 0x60}}, 0x0) 12m49.663649107s ago: executing program 36 (id=1218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010000000000000000001d01000008000500", @ANYRES32=0x0], 0x60}}, 0x0) 12m46.292300046s ago: executing program 3 (id=1238): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00541f00"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 12m45.534689067s ago: executing program 3 (id=1240): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r2 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00330020c6a3a6c38d16ee1cf254862fc50a41bd07974add1109c0b549e8c5b357d628969130189fa3ae794cb5eeec5e1ff39b8be3511eb3c42414328acc4fbdb2c0aa88e20a16345ad6b4c7a924118623b79d5337cdb3110796fe8ff50df13cc5e0f5ad012a82baac5c55ae1cb476e067afc5b16f1429b9615dbbae", @ANYRES16=r5, @ANYBLOB="080027bd7000fddbdf252500000005001901040000000800a100050000000800a1004e0100000800a10001000000080026006c09000008009f00040000000800350006000000"], 0x4c}, 0x1, 0x0, 0x0, 0xd1690b8f2fa1cb66}, 0x90) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000100)={0xc000000b}) signalfd4(r6, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fsopen(&(0x7f0000000280)='nsfs\x00', 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x8000}) 12m40.731013961s ago: executing program 3 (id=1246): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x4b, 0x0, &(0x7f0000000580), 0x8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000440)) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 12m40.223283137s ago: executing program 3 (id=1249): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) close_range(r0, r1, 0x0) 12m40.038888613s ago: executing program 3 (id=1250): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) write(r8, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r7, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r9, r7, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40081) socket$nl_route(0x10, 0x3, 0x0) 12m38.653513226s ago: executing program 3 (id=1251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m23.314278381s ago: executing program 37 (id=1251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e0000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9m18.53643336s ago: executing program 8 (id=1467): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_disconnect(r0) 9m15.237144514s ago: executing program 8 (id=1469): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8412060, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000}}, 0x50) 9m13.478637265s ago: executing program 8 (id=1470): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000880)=[{0x0, 0x2001, 0x0, 0x0}], 0x1}) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000802) 9m10.085627354s ago: executing program 8 (id=1473): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r2 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00330020c6a3a6c38d16ee1cf254862fc50a41bd07974add1109c0b549e8c5b357d628969130189fa3ae794cb5eeec5e1ff39b8be3511eb3c42414328acc4fbdb2c0aa88e20a16345ad6b4c7a924118623b79d5337cdb3110796fe8ff50df13cc5e0f5ad012a82baac5c55ae1cb476e067afc5b16f1429b9615dbbae", @ANYRES16=r3, @ANYBLOB="080027bd7000fddbdf252500000005001901040000000800a100050000000800a1004e0100000800a10001000000080026006c09000008009f00040000000800350006000000"], 0x4c}, 0x1, 0x0, 0x0, 0xd1690b8f2fa1cb66}, 0x90) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xc000000b}) signalfd4(r4, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000280)='nsfs\x00', 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000000, 0x7d, 0x7, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000040)={0x3ff, 0x3222, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000004, 0x9}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x8000}) 9m8.629582111s ago: executing program 8 (id=1474): mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10) 9m8.462489906s ago: executing program 8 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8m52.988567667s ago: executing program 38 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17.67397568s ago: executing program 1 (id=2710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000300)=&(0x7f0000000240), 0x0) syz_open_dev$cec(&(0x7f0000003a40), 0x0, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="e8020000000000002900000004000000"], 0x2e8}}], 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000040) 15.857244285s ago: executing program 1 (id=2716): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x481, 0x0, 0xf, 0xfffffffffffffffd, 0xff, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = fsopen(&(0x7f0000000340)='f2fs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='\xcfD\xc4\xbf\x95@q\xf0\x0f \x02\xa8\xff\xa7\xfdi\xa7\xd6j\'$\x1d\x14\xb7!\x8b\x84=r \xe34\xdb\x84\x00\xe7\xc9L\a\xfds1n@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\r\x7f;\xf6J18G\x83\xe9]\xf4\x96\xbc\x9e\xfcG\xb5\x1b', &(0x7f0000000a80)='t+\xdb\xaaU\x8e\xd6\x9b\xaa\xe0\xc0\x00r\xa1\xf7\x12\xfb\xed\r\f:\xef\xff\xa7x mT\x14\xafZ\xfa\xb5\xe5\x04\x03\'7\xa9\xf8\xb1O0\x05\xee\xc5\x81\xfd\xa5\xa3\xfe\x81\x06\x00>\xcdF8\xd2x\xb4\x05\x10\x0e\xc2\x85\xfe\xd8b=\xf8q\xa96{\xf49\x88\xb1\xcb\x8cn\n.\xd0;7\xeb\xc5\xd8\x13\xfe\x13\x1a\x01\xa3nK3\xc2p\xb5\n\x0fU6\xc9\xc4\x1f`\x8a\xd6\xf1*~\fD\x8e\"\x1c\xa4\x19J3\xac5.E\xe8\x97K\x82Y\n\x0f\x15\xd7\xb0\xaf-\x89\xcc\xdb>\xd4\xa9F=\x7f\xd5`|MG\xf6FfJ\xcc\xa9(\xea\xb8\x82tXW\xeb\xbd\f/\xbd\x95\x01a\x86G\xbf$\xe3\xd7\x15\x8b\x84\xc4\xc0\xe4;\xcc\xda\xd0+\xc3\x1e\xc7\x12\x14\x95\xcf\x1d\x1a\xa0st\xd9^\x95\xbd\x14\x1e\xa5\xb7+\xa2\xd1\x7f\xae=\x96F\xb8\x94\xfd\xd5\xfdQ\xca\x17\n\x96\t\x1e\x8b%\x82)$\xb6\xca\xbe\x03\xd8\xc5\xde\x05\x81 \xcc\xa5\xb0Z\xfb\xae\xa5\x9b.\x88\x97\xbf\x0e\xa1\x86\x8a\xbb\xd2\x7f\xc5p\xc0vI\x80\f\x871C\xda .\xdc\xf7\xef\x1a\xdc\x97Y-\x04\xc0\xc7\xd3\xa8\xf6yy)\x15FK\xaa\xc4\xd5B\x90\xfe\xd6\xf0\xd6<\a\x91\x10\xf4\x8cl:\x90\x8fHt\x9e\xbb\x91!\x1a\xe7\x8ck\x8dE\xe9\xdcH\x16jK\xb57\x88\xebsvJ\xf1o\x9eC\xd9\x95E\x9aX%\x8a\xe1W\x7f\x1c\x0e\x86f\x93\aN\x02\"//\x14@8lYL\xc09\xc0Gu\xe7\x02\x9b]\xac\xa6!\x96\x91+>Z', 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000002800)=""/4104, 0x1008}], 0x1) 14.047670229s ago: executing program 0 (id=2718): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES8=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) 13.700094182s ago: executing program 9 (id=2720): syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xb}}}}}]}}, 0x0) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca87, 0x0, 0x0, 0x4}) inotify_init1(0x800) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r2], 0x20) 13.254428751s ago: executing program 0 (id=2722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 10.769525367s ago: executing program 7 (id=2725): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.671689105s ago: executing program 9 (id=2726): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = semget$private(0x0, 0x1, 0x3a0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) socket(0x11, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r12 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r12}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000), 0x8) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001000004000000000000816341c3ca7351084c9b1ad64a02127fe6708af697a5ee568a4b9a57713cf789a8dfd2781b0829e27dc4a48efd24f169cc49b1783d06c465f3b8e5f1cc7f2eb1e8f8ded52df8c12390f8ad5ee9c2bfac590e0b46f86b471ed9689a4a9725969ace668505d9bef6eed97054a93d7dbabbed604103828d8b03"], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="010000000800"}) 9.659318944s ago: executing program 7 (id=2727): set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r6 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 7.9388606s ago: executing program 7 (id=2730): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgrcv(0x0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x402800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404ce90}, 0x20048040) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) recvmsg(r2, &(0x7f0000000880)={&(0x7f00000002c0)=@caif=@rfm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/19, 0x13}], 0x5, &(0x7f0000000800)=""/97, 0x61}, 0x40000160) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x8000000000}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r8, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r8, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000005, 0x2, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x894}, 0x80) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) 7.324529001s ago: executing program 5 (id=2731): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r2], 0x0) 7.175563625s ago: executing program 9 (id=2732): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x40, 0xfffffbff, 0xfffffff8, {{0xe, 0x4, 0x2, 0x1, 0x38, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x24, 0xbc, 0x3, 0xb, [{@loopback, 0x9}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x9}, {@broadcast, 0x2}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0x1, 0x40, 0x5, 0x8, 0x8, 0x7, 0x8000, 0x7, 0x80000001, 0x7, 0x401, 0xfffff001, 0x83d, 0x6, 0xd, 0x2, 0xffffffff, 0x6, 0x9, 0x3, 0x4, 0x100, 0x3a55b5be, 0x0, 0xd, 0xca5d, 0x10000, 0x8, 0x6, 0x3, 0x6fad, 0xaf8, 0x8000, 0xf, 0x4d, 0x800, 0x7, 0x31603358, 0x7, 0x3, 0x4, 0x8000, 0x7, 0x592, 0x1e, 0x4, 0x9, 0xffff0919, 0x4, 0x3, 0x8, 0xe8, 0x9, 0x2, 0x6, 0xd, 0xffffffff, 0x1, 0xfff, 0x2, 0x0, 0x1, 0x9, 0x9, 0x8a9, 0x0, 0x7, 0x2d68, 0x800, 0x9, 0x9, 0x8, 0xd6d1, 0x8000, 0xfff, 0xf8, 0x5, 0x7, 0x10001, 0xffffffff, 0xe95, 0x7, 0x8, 0x9, 0x2f7, 0x400, 0xb, 0x6, 0x856c, 0x0, 0x1ff, 0x1, 0x7, 0xfd08, 0x9, 0x3, 0x8, 0xb, 0x4, 0x7, 0x6, 0xa, 0xfffffffa, 0x2, 0x40, 0x0, 0xf49, 0x5, 0x4, 0x0, 0x1, 0x3, 0x81, 0xfff, 0x101, 0xffffffaa, 0x7, 0x0, 0x5, 0x401, 0x2, 0xbb, 0x2, 0x7, 0x6, 0x7fe9, 0x3, 0x4, 0xe9a, 0x7, 0x9, 0x9b, 0xeb3, 0x0, 0x1, 0x7f, 0x1, 0x7, 0x9, 0x2, 0x6, 0x4, 0xfffffffd, 0x9, 0xa6c, 0xc, 0x8, 0x6, 0xc, 0x7, 0x80000001, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5, 0x9d, 0x81, 0x800, 0xd17, 0x0, 0x7, 0x5, 0x7, 0x1000, 0x7, 0x5, 0x10, 0x1, 0x6, 0x6, 0x9, 0x6, 0xe0000000, 0x100, 0xfffffffb, 0x2de30, 0x4, 0x2, 0x7, 0x9, 0x9, 0x7, 0x4, 0x8, 0xffff1e51, 0x1, 0x1000, 0x40, 0x401, 0x5, 0x4, 0x8, 0x2, 0xfff, 0x3, 0x7fffffff, 0x1000, 0x4aec, 0x3fe00, 0x0, 0x4, 0x3, 0x4, 0x7180, 0x800, 0x6, 0x0, 0x7, 0x0, 0x3, 0xb4f, 0x9, 0x7fffffff, 0x4, 0x7, 0x45, 0x4, 0x7fff, 0x6, 0x2, 0x7, 0x2bd3, 0x9, 0x6, 0x1, 0x4, 0x400003, 0x4, 0x4, 0x4, 0x6, 0xb, 0x2, 0x533, 0xd, 0x1, 0x4, 0x1ff, 0x6, 0xaf6, 0x91, 0x6a, 0x786, 0x0, 0xff, 0x6, 0x8, 0x4, 0x9, 0xc00, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 6.445864138s ago: executing program 1 (id=2733): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x84rusted:'}, 0x1d, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0105303, &(0x7f00000003c0)={0x0, 0x0, 0x20000}) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close(0x3) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x11, &(0x7f0000000040), 0x0) userfaultfd(0xc0001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 6.273352201s ago: executing program 9 (id=2734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.001769676s ago: executing program 9 (id=2735): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {0x0}], 0x2}, 0x2}], 0x1, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.356452214s ago: executing program 0 (id=2736): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="62afbcf72be12f300800000000fbffff04cc886371faffffff6196ef1844", 0x1e}, {}, {&(0x7f0000000100)="a7ee426162f61dde9d92c11d237d64492516bfc6c8190f0f19a5fd72246ec48887818d65188d25fc5f803fcec0a6d3aaaa5227718bf2a5d48f85f8c1bcdf57a83702e0245a8a0a9543d174901cd877b83d91f11b1ad4cfa0daaa8e41f57ec28a0fcf62d433df940868960c78360a4e9e6dc7ff8f824f00d1fdca536a95dc98214e279bd82df7c0112c9de0fbfea697c85963188f7244f1f0bf70a853a27d6aa99576ce05f214dd9735f6f6124f9df113e1c9a4", 0xb3}, {&(0x7f0000000300)="55762dd9ed8c23f381fbfd", 0xb}, {0x0}], 0x5}, 0x800) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 4.142603538s ago: executing program 1 (id=2737): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgrcv(0x0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x402800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404ce90}, 0x20048040) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) recvmsg(r2, &(0x7f0000000880)={&(0x7f00000002c0)=@caif=@rfm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/19, 0x13}], 0x5, &(0x7f0000000800)=""/97, 0x61}, 0x40000160) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r5, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x8000000000}, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r6, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) 4.138079849s ago: executing program 7 (id=2738): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x20000, 0x0) ioctl$I2C_FUNCS(r1, 0x705, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) listen(0xffffffffffffffff, 0xfff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000080)=""/1, 0x1) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 4.107760593s ago: executing program 5 (id=2739): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x29, 0xfe, 0x4}, {0xa4}, {0x6, 0x0, 0x7f, 0xfffffffc}]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x22020600) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x0, 0x1000, 0x0, 0x3ff, 0x2, 0x5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x5, 0xd34a, 0xfffffffe, 0x900, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) 3.223451546s ago: executing program 0 (id=2740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = open(0x0, 0x101080, 0x0) getdents(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB], 0x2e8}}], 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.009283138s ago: executing program 5 (id=2741): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) socket(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 2.710491047s ago: executing program 7 (id=2742): syz_io_uring_setup(0x1ed3, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c080}, 0xc718593a3a0e9ccb) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1b8, 0x19, 0x1, 0x0, 0x1, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x0, 0x5e}, 0xa, @in6=@private0, 0x0, 0x5}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) socket$inet(0x2, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x1000006, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x104, {0x5, 0x3, 0x0, 0x4000000000008, 0x40000, 0x6, {0x2, 0x6, 0x6, 0x100000000000, 0x4, 0x81, 0x8, 0x6, 0x2008, 0xc000, 0xe44, r3, r4, 0x4, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') syz_usb_connect(0x0, 0x34, 0x0, 0x0) 1.800341172s ago: executing program 0 (id=2743): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgrcv(0x0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x402800, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404ce90}, 0x20048040) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) recvmsg(r2, &(0x7f0000000880)={&(0x7f00000002c0)=@caif=@rfm, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/10, 0xa}, {&(0x7f00000008c0)=""/216, 0xd8}, {&(0x7f0000000640)=""/212, 0xd4}, {&(0x7f0000000740)=""/58, 0x3a}, {&(0x7f0000000780)=""/19, 0x13}], 0x5, &(0x7f0000000800)=""/97, 0x61}, 0x40000160) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r7, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x8000000000}, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r8, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000100)=0xffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000005, 0x2, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x894}, 0x80) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000001c0)=0xd, 0x4) 1.254681937s ago: executing program 9 (id=2744): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x40, 0x40, 0xfffffbff, 0xfffffff8, {{0xe, 0x4, 0x2, 0x1, 0x38, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp_prespec={0x44, 0x24, 0xbc, 0x3, 0xb, [{@loopback, 0x9}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x9}, {@broadcast, 0x2}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0x0, 0x1, 0x40, 0x5, 0x8, 0x8, 0x7, 0x8000, 0x7, 0x80000001, 0x7, 0x401, 0xfffff001, 0x83d, 0x6, 0xd, 0x2, 0xffffffff, 0x6, 0x9, 0x3, 0x4, 0x100, 0x3a55b5be, 0x0, 0xd, 0xca5d, 0x10000, 0x8, 0x6, 0x3, 0x6fad, 0xaf8, 0x8000, 0xf, 0x4d, 0x800, 0x7, 0x31603358, 0x7, 0x3, 0x4, 0x8000, 0x7, 0x592, 0x1e, 0x4, 0x9, 0xffff0919, 0x4, 0x3, 0x8, 0xe8, 0x9, 0x2, 0x6, 0xd, 0xffffffff, 0x1, 0xfff, 0x2, 0x0, 0x1, 0x9, 0x9, 0x8a9, 0x0, 0x7, 0x2d68, 0x800, 0x9, 0x9, 0x8, 0xd6d1, 0x8000, 0xfff, 0xf8, 0x5, 0x7, 0x10001, 0xffffffff, 0xe95, 0x7, 0x8, 0x9, 0x2f7, 0x400, 0xb, 0x6, 0x856c, 0x0, 0x1ff, 0x1, 0x7, 0xfd08, 0x9, 0x3, 0x8, 0xb, 0x4, 0x7, 0x6, 0xa, 0xfffffffa, 0x2, 0x40, 0x0, 0xf49, 0x5, 0x4, 0x0, 0x1, 0x3, 0x81, 0xfff, 0x101, 0xffffffaa, 0x7, 0x0, 0x5, 0x401, 0x2, 0xbb, 0x2, 0x7, 0x6, 0x7fe9, 0x3, 0x4, 0xe9a, 0x7, 0x9, 0x9b, 0xeb3, 0x0, 0x1, 0x7f, 0x1, 0x7, 0x9, 0x2, 0x6, 0x4, 0xfffffffd, 0x9, 0xa6c, 0xc, 0x8, 0x6, 0xc, 0x7, 0x80000001, 0x6, 0x2, 0x8, 0x4, 0x5, 0x5, 0x9d, 0x81, 0x800, 0xd17, 0x0, 0x7, 0x5, 0x7, 0x1000, 0x7, 0x5, 0x10, 0x1, 0x6, 0x6, 0x9, 0x6, 0xe0000000, 0x100, 0xfffffffb, 0x2de30, 0x4, 0x2, 0x7, 0x9, 0x9, 0x7, 0x4, 0x8, 0xffff1e51, 0x1, 0x1000, 0x40, 0x401, 0x5, 0x4, 0x8, 0x2, 0xfff, 0x3, 0x7fffffff, 0x1000, 0x4aec, 0x3fe00, 0x0, 0x4, 0x3, 0x4, 0x7180, 0x800, 0x6, 0x0, 0x7, 0x0, 0x3, 0xb4f, 0x9, 0x7fffffff, 0x4, 0x7, 0x45, 0x4, 0x7fff, 0x6, 0x2, 0x7, 0x2bd3, 0x9, 0x6, 0x1, 0x4, 0x400003, 0x4, 0x4, 0x4, 0x6, 0xb, 0x2, 0x533, 0xd, 0x1, 0x4, 0x1ff, 0x6, 0xaf6, 0x91, 0x6a, 0x786, 0x0, 0xff, 0x6, 0x8, 0x4, 0x9, 0xc00, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file1\x00', 0x8882, 0xa1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 1.191352387s ago: executing program 5 (id=2745): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004885}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 456.578379ms ago: executing program 5 (id=2746): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 448.277262ms ago: executing program 0 (id=2747): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fadbdf2501000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5428a090000000000003d68c95f014c37"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x200408c0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x5, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x34, 0x6}, @enum64={0x6, 0x6, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x9c0, 0x5}, {0xa, 0xb383, 0x4c}, {0x8, 0x1e, 0x5}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0xc}, {0x1, 0x1, 0x1}]}, @enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x9, 0x7}, {0xe, 0x0, 0x5}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000480)=""/115, 0xb1, 0x73, 0x1, 0xa}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, r7, 0x4}, 0x50) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000880}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) 437.17877ms ago: executing program 1 (id=2748): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) 261.372511ms ago: executing program 5 (id=2749): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) socket(0xa, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 62.369691ms ago: executing program 7 (id=2750): sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x126}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x61751478}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xd8}, 0x20000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x10, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, 0x0, 0x0) 0s ago: executing program 1 (id=2751): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0xc, 0x9, 0x4, 0x41}}], 0x58, 0x20004885}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x5, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) kernel console output (not intermixed with test programs): d state [ 926.287141][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.355750][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.400370][ T5819] Bluetooth: hci1: command tx timeout [ 926.434261][ T2281] bond0 (unregistering): Released all slaves [ 927.207261][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.306532][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.399910][ T2281] bond0 (unregistering): Released all slaves [ 927.700542][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.828669][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.909710][ T2281] bond0 (unregistering): Released all slaves [ 927.966701][T11238] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 928.009434][T11238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.515037][T11617] chnl_net:caif_netlink_parms(): no params data found [ 928.558836][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.558997][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.559265][T11546] bridge_slave_0: entered allmulticast mode [ 928.574240][T11546] bridge_slave_0: entered promiscuous mode [ 928.878520][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.878648][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.878910][T11546] bridge_slave_1: entered allmulticast mode [ 928.930581][T11546] bridge_slave_1: entered promiscuous mode [ 929.307151][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.350237][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.448958][T11269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 929.502049][T11269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 929.757022][ T2281] hsr_slave_0: left promiscuous mode [ 929.794855][ T2281] hsr_slave_1: left promiscuous mode [ 929.797243][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.847131][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.045371][ T2281] hsr_slave_0: left promiscuous mode [ 930.084879][ T2281] hsr_slave_1: left promiscuous mode [ 930.086002][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.137642][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.336105][ T2281] hsr_slave_0: left promiscuous mode [ 930.374981][ T2281] hsr_slave_1: left promiscuous mode [ 930.376084][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.437071][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.225368][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 931.285607][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 932.295574][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 932.349961][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 932.905819][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 932.925418][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 933.152333][T11269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 933.192549][T11269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.231378][T11546] team0: Port device team_slave_0 added [ 933.231603][T11269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.270785][T11269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.274167][T11617] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.274305][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.274471][T11617] bridge_slave_0: entered allmulticast mode [ 933.287860][T11617] bridge_slave_0: entered promiscuous mode [ 933.373127][T11546] team0: Port device team_slave_1 added [ 933.375362][T11269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 933.585058][T11269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 933.635022][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.635183][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.635449][T11617] bridge_slave_1: entered allmulticast mode [ 933.647033][T11617] bridge_slave_1: entered promiscuous mode [ 934.050130][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 934.101636][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 934.104239][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.104256][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.104282][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.105373][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 934.108397][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 934.109257][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 934.332026][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.352369][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.352387][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.352415][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.595056][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.262124][T11617] team0: Port device team_slave_0 added [ 935.313715][T11617] team0: Port device team_slave_1 added [ 935.529882][T11546] hsr_slave_0: entered promiscuous mode [ 935.531609][T11546] hsr_slave_1: entered promiscuous mode [ 935.698051][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.698071][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.698101][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.778153][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.778173][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.778206][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.315336][ T60] Bluetooth: hci0: command tx timeout [ 936.570655][T11617] hsr_slave_0: entered promiscuous mode [ 936.572569][T11617] hsr_slave_1: entered promiscuous mode [ 936.573822][T11617] debugfs: 'hsr0' already exists in 'hsr' [ 936.573861][T11617] Cannot create hsr debugfs directory [ 938.394987][ T60] Bluetooth: hci0: command tx timeout [ 938.661772][T12000] chnl_net:caif_netlink_parms(): no params data found [ 939.127509][T11269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.522883][T12000] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.523092][T12000] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.523331][T12000] bridge_slave_0: entered allmulticast mode [ 939.540413][T12000] bridge_slave_0: entered promiscuous mode [ 939.552116][T12000] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.552268][T12000] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.552506][T12000] bridge_slave_1: entered allmulticast mode [ 939.559612][T12000] bridge_slave_1: entered promiscuous mode [ 939.567158][T11269] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.763389][ T8989] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.763542][ T8989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.788673][T12000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.861844][T12000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.037887][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.039889][ T8989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.474974][ T60] Bluetooth: hci0: command tx timeout [ 940.478698][T12000] team0: Port device team_slave_0 added [ 940.562427][T12000] team0: Port device team_slave_1 added [ 940.745818][T12000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.745838][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.745870][T12000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.195674][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 941.232599][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 941.258683][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 941.282384][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 941.322986][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.941457][T12000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.941478][T12000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 941.941507][T12000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.554786][ T60] Bluetooth: hci0: command tx timeout [ 943.354894][ T60] Bluetooth: hci2: command tx timeout [ 943.874714][T12000] hsr_slave_0: entered promiscuous mode [ 943.877853][T12000] hsr_slave_1: entered promiscuous mode [ 943.889926][T12000] debugfs: 'hsr0' already exists in 'hsr' [ 943.889953][T12000] Cannot create hsr debugfs directory [ 945.445982][ T60] Bluetooth: hci2: command tx timeout [ 947.065078][ T2281] bridge_slave_1: left allmulticast mode [ 947.065111][ T2281] bridge_slave_1: left promiscuous mode [ 947.065396][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.146648][ T2281] bridge_slave_0: left allmulticast mode [ 947.146682][ T2281] bridge_slave_0: left promiscuous mode [ 947.147053][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.365146][ T2281] bridge_slave_1: left allmulticast mode [ 947.365182][ T2281] bridge_slave_1: left promiscuous mode [ 947.365466][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.474864][ T2281] bridge_slave_0: left allmulticast mode [ 947.474901][ T2281] bridge_slave_0: left promiscuous mode [ 947.475934][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.515605][ T60] Bluetooth: hci2: command tx timeout [ 948.030183][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.147572][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.229437][ T2281] bond0 (unregistering): Released all slaves [ 948.815566][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.935437][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.019029][ T2281] bond0 (unregistering): Released all slaves [ 949.245122][T11546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 949.321025][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.404923][T11546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 949.521047][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.592987][T11546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.602963][ T60] Bluetooth: hci2: command tx timeout [ 949.667875][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.688013][T11546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.744313][T11546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.760052][T12161] chnl_net:caif_netlink_parms(): no params data found [ 950.456255][ T2281] hsr_slave_0: left promiscuous mode [ 950.494726][ T2281] hsr_slave_1: left promiscuous mode [ 950.495935][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.572272][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.744796][ T2281] hsr_slave_0: left promiscuous mode [ 950.794762][ T2281] hsr_slave_1: left promiscuous mode [ 950.795944][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.835693][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.555746][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 951.627267][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 952.437077][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 952.498011][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 952.645303][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 952.645417][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 953.430524][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.430632][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.430815][T12161] bridge_slave_0: entered allmulticast mode [ 953.452367][T12161] bridge_slave_0: entered promiscuous mode [ 953.470770][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.470957][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.471196][T12161] bridge_slave_1: entered allmulticast mode [ 953.537877][T12161] bridge_slave_1: entered promiscuous mode [ 953.544069][T11617] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 953.608691][T11617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 953.719912][T11617] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 953.790451][T11617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 954.173960][T11617] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 954.270623][T11617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 954.298930][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 954.348928][T11617] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 954.404098][T11617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 954.420127][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.947356][T12161] team0: Port device team_slave_0 added [ 955.098149][T12161] team0: Port device team_slave_1 added [ 955.236768][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.236789][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.236816][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.396593][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.396614][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.396646][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.805699][T12161] hsr_slave_0: entered promiscuous mode [ 955.807353][T12161] hsr_slave_1: entered promiscuous mode [ 955.815269][T12161] debugfs: 'hsr0' already exists in 'hsr' [ 955.815302][T12161] Cannot create hsr debugfs directory [ 956.686206][T11546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.034233][T12000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 957.098771][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.104439][T11546] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.129695][T12000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 957.173681][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.547168][T12000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 957.590332][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.612685][T12000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 957.695924][T12000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.717410][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.729443][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.814085][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.849603][ T8989] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.849715][ T8989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.986710][T11617] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.054949][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.055186][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.103698][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.103852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.410071][T12000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.611603][T12000] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.669002][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.669240][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.727221][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.727397][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.115359][ T8912] bridge_slave_1: left allmulticast mode [ 960.115384][ T8912] bridge_slave_1: left promiscuous mode [ 960.115580][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.216680][ T8912] bridge_slave_0: left allmulticast mode [ 960.216714][ T8912] bridge_slave_0: left promiscuous mode [ 960.220390][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.136165][ T8912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.256748][ T8912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.358400][ T8912] bond0 (unregistering): Released all slaves [ 962.086307][ T8912] hsr_slave_0: left promiscuous mode [ 962.125025][ T8912] hsr_slave_1: left promiscuous mode [ 962.125745][ T8912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.175809][ T8912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.796037][ T8912] team0 (unregistering): Port device team_slave_1 removed [ 962.865571][ T8912] team0 (unregistering): Port device team_slave_0 removed [ 963.297734][T11546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.326047][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.511342][T12161] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 963.611096][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 963.621774][T12161] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 963.791341][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 963.818358][T12161] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 963.911956][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.922898][T12161] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 963.939123][T12161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 964.705183][T11546] veth0_vlan: entered promiscuous mode [ 964.858073][T11546] veth1_vlan: entered promiscuous mode [ 965.078651][T12000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.251143][T11617] veth0_vlan: entered promiscuous mode [ 965.324034][T11546] veth0_macvtap: entered promiscuous mode [ 965.379760][T11617] veth1_vlan: entered promiscuous mode [ 965.409568][T11546] veth1_macvtap: entered promiscuous mode [ 965.471059][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.600254][T11546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.703395][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.717144][T11546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 965.847419][ T2281] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.847635][ T2281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.888992][T11617] veth0_macvtap: entered promiscuous mode [ 965.901132][ T2281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.922069][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.922299][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.924208][ T1446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.964682][ T1446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.965726][T11617] veth1_macvtap: entered promiscuous mode [ 965.983951][ T1446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.550674][T11617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.721073][T11617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.841052][T12000] veth0_vlan: entered promiscuous mode [ 966.943119][ T8989] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.987762][ T8989] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.994455][ T8989] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.003420][ T8989] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.005979][ T1060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.005998][ T1060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.071559][T12000] veth1_vlan: entered promiscuous mode [ 967.401469][ T2281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.401493][ T2281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.216268][ T1446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.216292][ T1446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.337846][T12000] veth0_macvtap: entered promiscuous mode [ 968.433676][T12000] veth1_macvtap: entered promiscuous mode [ 968.791898][T12976] vivid-007: disconnect [ 969.444381][T12966] vivid-007: reconnect [ 969.583898][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.630023][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.630048][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.684037][T12000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.739394][T12000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.804281][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.817987][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.868098][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.878643][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.260562][T12161] veth0_vlan: entered promiscuous mode [ 971.017109][T12161] veth1_vlan: entered promiscuous mode [ 971.248159][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.248183][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.502042][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.502067][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.968660][T12161] veth0_macvtap: entered promiscuous mode [ 973.102740][T12161] veth1_macvtap: entered promiscuous mode [ 973.821415][T12130] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 974.309072][T12130] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.309110][T12130] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 974.309154][T12130] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 974.309180][T12130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.383643][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.419324][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.510554][ T1446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.527020][ T1446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.530659][ T1446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.652578][ T1446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.927855][T12130] usb 10-1: usb_control_msg returned -71 [ 976.927922][T12130] usbtmc 10-1:16.0: can't read capabilities [ 977.052921][T12130] usb 10-1: USB disconnect, device number 2 [ 979.173159][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2100'. [ 979.999247][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.999271][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.761268][ T2239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.761293][ T2239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.488563][T13109] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in; [ 986.488563][T13109] program syz.0.1264 not setting count and/or reply_len properly [ 991.321666][ T60] Bluetooth: hci0: unexpected cc 0x0c13 length: 85 > 1 [ 992.699548][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 993.728452][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 993.742369][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 993.795930][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 993.802732][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 996.588776][T12130] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 996.747849][T12130] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.747890][T12130] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.747939][T12130] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 996.747966][T12130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.515399][ T60] Bluetooth: hci3: command tx timeout [ 999.728199][ T5819] Bluetooth: hci3: command tx timeout [ 1000.561536][T12130] usb 10-1: usb_control_msg returned -71 [ 1000.561592][T12130] usbtmc 10-1:16.0: can't read capabilities [ 1000.600809][T12130] usb 10-1: USB disconnect, device number 3 [ 1001.797286][ T60] Bluetooth: hci3: command tx timeout [ 1002.005521][T12130] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1002.169377][T12130] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.169559][T12130] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1002.169592][T12130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.230231][T12130] usb 10-1: config 0 descriptor?? [ 1002.337405][T12130] pwc: Askey VC010 type 2 USB webcam detected. [ 1002.480352][T12130] pwc: send_video_command error -71 [ 1002.480376][T12130] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1002.480520][T12130] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1002.502384][T12130] usb 10-1: USB disconnect, device number 4 [ 1003.852248][ T60] Bluetooth: hci3: command tx timeout [ 1004.520632][ T3500] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.972658][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 1005.633426][ T3500] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.325799][T13279] process 'syz.1.2147' launched './file2' with NULL argv: empty string added [ 1015.263955][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1015.264040][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.580237][ T815] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1015.740885][ T3500] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.758942][ T815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.758978][ T815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.759022][ T815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1015.759045][ T815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.458839][ T5468] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1017.542513][ T815] usb 1-1: usb_control_msg returned -71 [ 1017.542570][ T815] usbtmc 1-1:16.0: can't read capabilities [ 1017.559856][ T815] usb 1-1: USB disconnect, device number 31 [ 1021.828966][ T3500] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.722619][T13150] chnl_net:caif_netlink_parms(): no params data found [ 1023.530947][T13380] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1023.533295][T10983] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1023.619544][T13381] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2163'. [ 1024.464721][ T5816] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1025.739082][ T5816] usb 2-1: Using ep0 maxpacket: 32 [ 1026.002080][ T5816] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1026.002902][ T5816] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1026.002928][ T5816] usb 2-1: can't read configurations, error -71 [ 1026.100883][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.100961][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.101135][T13150] bridge_slave_0: entered allmulticast mode [ 1026.125779][T13150] bridge_slave_0: entered promiscuous mode [ 1026.250586][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.251564][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.251741][T13150] bridge_slave_1: entered allmulticast mode [ 1026.270251][T13150] bridge_slave_1: entered promiscuous mode [ 1028.002009][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.196655][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.428850][ T5468] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1034.453326][T13150] team0: Port device team_slave_0 added [ 1034.464130][T13150] team0: Port device team_slave_1 added [ 1035.785667][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.785689][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.785720][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.887351][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.887373][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.887406][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.634775][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.097279][T13150] hsr_slave_0: entered promiscuous mode [ 1037.104296][T13150] hsr_slave_1: entered promiscuous mode [ 1037.108332][T13150] debugfs: 'hsr0' already exists in 'hsr' [ 1037.108362][T13150] Cannot create hsr debugfs directory [ 1038.249913][ T3500] bridge_slave_1: left allmulticast mode [ 1038.249949][ T3500] bridge_slave_1: left promiscuous mode [ 1038.250254][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.337249][ T3500] bridge_slave_0: left allmulticast mode [ 1038.337284][ T3500] bridge_slave_0: left promiscuous mode [ 1038.337604][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.532886][ T5956] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1040.985100][ T5956] usb 10-1: Using ep0 maxpacket: 8 [ 1040.993366][ T5956] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1041.028686][ T5956] usb 10-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1041.028725][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 1041.028748][ T5956] usb 10-1: Product: syz [ 1041.028764][ T5956] usb 10-1: Manufacturer: syz [ 1041.028781][ T5956] usb 10-1: SerialNumber: syz [ 1041.102781][ T5956] usb 10-1: config 0 descriptor?? [ 1043.924856][ T5819] Bluetooth: hci1: command 0x0406 tx timeout [ 1044.058339][ T9] usb 10-1: USB disconnect, device number 5 [ 1044.575385][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.787565][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.882111][ T3500] bond0 (unregistering): Released all slaves [ 1044.926744][ T3500] bond1 (unregistering): Released all slaves [ 1045.217429][T13506] input: syz1 as /devices/virtual/input/input24 [ 1046.910595][ T5468] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1050.561922][T13534] program syz.0.2196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1052.078205][ T5819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1052.123845][ T5819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1052.164699][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1052.194606][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1052.197873][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1053.350737][T13565] program syz.0.2202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.469377][ T5468] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1054.874764][ T5819] Bluetooth: hci5: command tx timeout [ 1055.211473][T13579] Unknown options in mask b7f2 [ 1056.506760][ T815] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1056.694960][ T815] usb 6-1: Using ep0 maxpacket: 32 [ 1056.955214][ T60] Bluetooth: hci5: command tx timeout [ 1057.114707][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 1059.821955][ T5819] Bluetooth: hci5: command tx timeout [ 1060.145556][ T815] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1060.190260][T13636] syz.5.2214 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1060.193384][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2214'. [ 1060.643609][ T815] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1060.643656][ T815] usb 6-1: can't read configurations, error -71 [ 1062.561816][ T5819] Bluetooth: hci5: command tx timeout [ 1064.390305][ T3500] hsr_slave_0: left promiscuous mode [ 1064.481351][ T3500] hsr_slave_1: left promiscuous mode [ 1064.482094][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.482113][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.538978][ T3500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1064.539001][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.907473][ T3500] veth1_macvtap: left promiscuous mode [ 1064.907591][ T3500] veth0_macvtap: left promiscuous mode [ 1064.907968][ T3500] veth1_vlan: left promiscuous mode [ 1064.908241][ T3500] veth0_vlan: left promiscuous mode [ 1065.004666][ T815] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1065.161201][ T815] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.161241][ T815] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.161290][ T815] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1065.161316][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.354691][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 1067.657578][ T5860] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1067.915863][ T5860] usb 10-1: Using ep0 maxpacket: 32 [ 1068.274768][ T815] usb 2-1: usb_control_msg returned -71 [ 1068.274827][ T815] usbtmc 2-1:16.0: can't read capabilities [ 1068.433813][ T815] usb 2-1: USB disconnect, device number 43 [ 1069.406319][ T5860] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1069.407213][ T5860] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1069.407237][ T5860] usb 10-1: can't read configurations, error -71 [ 1069.954827][T13701] input: syz1 as /devices/virtual/input/input25 [ 1071.394862][ T5956] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1071.775337][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 1071.800676][ T5956] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.579916][ T5956] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1072.579950][ T5956] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1072.579971][ T5956] usb 6-1: Product: syz [ 1072.579985][ T5956] usb 6-1: Manufacturer: syz [ 1072.654710][ T5956] hub 6-1:4.0: bad descriptor, ignoring hub [ 1072.654754][ T5956] hub 6-1:4.0: probe with driver hub failed with error -5 [ 1072.661949][ T5956] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 1073.520222][T13724] program syz.5.2234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.565335][T13185] usb 6-1: USB disconnect, device number 4 [ 1073.640150][T13726] program syz.5.2235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1077.348963][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1077.349075][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1080.544006][T13760] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2244'. [ 1080.737578][T13762] input: syz1 as /devices/virtual/input/input26 [ 1082.299751][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1082.515406][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1082.855519][T13774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2249'. [ 1085.753185][T13758] block nbd1: shutting down sockets [ 1085.989889][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 1085.989921][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2251'. [ 1087.043669][T13808] vivid-007: disconnect [ 1087.500308][T13795] vivid-007: reconnect [ 1087.966807][T13550] chnl_net:caif_netlink_parms(): no params data found [ 1089.634701][ T31] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1089.797644][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.797684][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1089.797734][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.797759][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.903853][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.903996][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.904264][T13550] bridge_slave_0: entered allmulticast mode [ 1091.938783][T13550] bridge_slave_0: entered promiscuous mode [ 1091.982360][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.983386][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.001589][T13550] bridge_slave_1: entered allmulticast mode [ 1092.061245][T13550] bridge_slave_1: entered promiscuous mode [ 1092.215099][ T3500] bridge_slave_1: left allmulticast mode [ 1092.215129][ T3500] bridge_slave_1: left promiscuous mode [ 1092.216569][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.434447][ T3500] bridge_slave_0: left allmulticast mode [ 1092.434908][ T3500] bridge_slave_0: left promiscuous mode [ 1092.436864][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.928208][ T31] usb 2-1: usb_control_msg returned -71 [ 1092.928266][ T31] usbtmc 2-1:16.0: can't read capabilities [ 1093.034862][ T31] usb 2-1: USB disconnect, device number 44 [ 1093.256766][ T5956] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1093.408442][ T5956] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1093.408482][ T5956] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1093.408529][ T5956] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1093.408555][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.592032][T13847] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2262'. [ 1096.083111][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.259380][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.346604][ T3500] bond0 (unregistering): Released all slaves [ 1096.858210][ T5956] usb 1-1: usb_control_msg returned -71 [ 1096.858251][ T5956] usbtmc 1-1:16.0: can't read capabilities [ 1096.956326][ T5956] usb 1-1: USB disconnect, device number 32 [ 1098.664834][ T3500] hsr_slave_0: left promiscuous mode [ 1098.886773][ T3500] hsr_slave_1: left promiscuous mode [ 1098.888061][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.940084][T13881] vivid-007: disconnect [ 1099.332950][T13865] vivid-007: reconnect [ 1099.378745][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.991009][T13902] vivid-007: disconnect [ 1101.414343][T13894] vivid-007: reconnect [ 1103.065459][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 1103.205275][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 1103.550114][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.790817][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 1104.141720][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.169534][T13550] team0: Port device team_slave_0 added [ 1105.189743][T13550] team0: Port device team_slave_1 added [ 1105.273334][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.273355][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.273387][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.427035][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.427055][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.427097][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.674657][ T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1105.700610][T13942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 1106.141983][T13550] hsr_slave_0: entered promiscuous mode [ 1106.143766][T13550] hsr_slave_1: entered promiscuous mode [ 1106.162246][T13550] debugfs: 'hsr0' already exists in 'hsr' [ 1106.162278][T13550] Cannot create hsr debugfs directory [ 1106.250668][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1106.250708][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.250755][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1106.250781][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.961241][ T9] usb 2-1: usb_control_msg returned -71 [ 1109.961374][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1110.217262][ T9] usb 2-1: USB disconnect, device number 45 [ 1110.814580][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1110.974620][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1113.229346][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1113.230500][ T5895] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1113.230542][ T5895] usb 6-1: can't read configurations, error -71 [ 1113.504170][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'. [ 1113.868576][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1113.958571][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1113.996912][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1114.011538][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1114.014190][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1116.171984][ T60] Bluetooth: hci3: command tx timeout [ 1116.244689][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1116.424613][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1117.592806][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1117.593858][ T31] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1117.593897][ T31] usb 6-1: can't read configurations, error -71 [ 1117.756169][T14011] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2294'. [ 1117.760580][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 1118.239159][ T60] Bluetooth: hci3: command tx timeout [ 1118.350106][ T12] bridge_slave_1: left allmulticast mode [ 1118.350142][ T12] bridge_slave_1: left promiscuous mode [ 1118.350342][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.456673][ T12] bridge_slave_0: left allmulticast mode [ 1118.456697][ T12] bridge_slave_0: left promiscuous mode [ 1118.456898][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.191147][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.313546][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.391663][ T12] bond0 (unregistering): Released all slaves [ 1120.158906][ T12] hsr_slave_0: left promiscuous mode [ 1120.196330][ T12] hsr_slave_1: left promiscuous mode [ 1120.197100][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.236386][ T9] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1120.256102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.318854][ T60] Bluetooth: hci3: command tx timeout [ 1120.386873][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1120.386897][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1120.386924][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1120.386938][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.394715][ T60] Bluetooth: hci3: command tx timeout [ 1123.387886][ T9] usb 2-1: usb_control_msg returned -71 [ 1123.387920][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1123.436600][ T9] usb 2-1: USB disconnect, device number 46 [ 1123.834969][T14048] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2299'. [ 1123.838830][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 1125.365693][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1125.418123][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1126.417772][T13981] chnl_net:caif_netlink_parms(): no params data found [ 1132.169230][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1132.169291][ T37] audit: type=1326 audit(2000000052.530:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.169638][ T37] audit: type=1326 audit(2000000052.530:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.169880][ T37] audit: type=1326 audit(2000000052.540:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.170776][ T37] audit: type=1326 audit(2000000052.550:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.171057][ T37] audit: type=1326 audit(2000000052.550:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.188997][ T37] audit: type=1326 audit(2000000052.550:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.189571][ T37] audit: type=1326 audit(2000000052.550:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.190028][ T37] audit: type=1326 audit(2000000052.550:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.404976][ T37] audit: type=1326 audit(2000000052.550:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1132.405344][ T37] audit: type=1326 audit(2000000052.550:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14080 comm="syz.5.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67584c819 code=0x7ffc0000 [ 1133.838212][T13981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.838388][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.838668][T13981] bridge_slave_0: entered allmulticast mode [ 1133.842963][T13981] bridge_slave_0: entered promiscuous mode [ 1133.859606][T13981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.859730][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.860115][T13981] bridge_slave_1: entered allmulticast mode [ 1133.862994][T13981] bridge_slave_1: entered promiscuous mode [ 1134.757590][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2312'. [ 1135.033378][T14117] program syz.9.2315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1135.488265][T13981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.558569][T13981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.655440][T14125] Bluetooth: MGMT ver 1.23 [ 1136.742561][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2317'. [ 1136.742584][T14127] openvswitch: netlink: Flow key attr not present in new flow. [ 1136.774153][T13981] team0: Port device team_slave_0 added [ 1136.800295][T13981] team0: Port device team_slave_1 added [ 1136.960522][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1136.960632][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1137.367055][T13981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.367068][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.367087][T13981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.711256][T13981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.711306][T13981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.711365][T13981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.434677][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1138.434701][ T37] audit: type=1326 audit(2000000058.800:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.434782][ T37] audit: type=1326 audit(2000000058.800:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.434830][ T37] audit: type=1326 audit(2000000058.810:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.434877][ T37] audit: type=1326 audit(2000000058.820:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.434922][ T37] audit: type=1326 audit(2000000058.820:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.434970][ T37] audit: type=1326 audit(2000000058.840:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.435016][ T37] audit: type=1326 audit(2000000058.840:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.435063][ T37] audit: type=1326 audit(2000000058.840:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.435110][ T37] audit: type=1326 audit(2000000058.850:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1138.435158][ T37] audit: type=1326 audit(2000000058.850:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14129 comm="syz.9.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7953cdc819 code=0x7ffc0000 [ 1140.142543][T13981] hsr_slave_0: entered promiscuous mode [ 1140.152311][T13981] hsr_slave_1: entered promiscuous mode [ 1140.168131][T13981] debugfs: 'hsr0' already exists in 'hsr' [ 1140.168153][T13981] Cannot create hsr debugfs directory [ 1141.621982][T14151] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1144.913527][T14159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.913681][T14159] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1146.159676][T14159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1146.159849][T14159] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1146.323847][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 1146.377417][T14159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1146.377503][T14159] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1146.770673][T14159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1146.770833][T14159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1148.178803][T14159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1148.178920][T14159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1148.198919][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1148.404769][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 1148.404823][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 1148.510423][T14159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1149.544063][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.579685][T14216] ceph: No mds server is up or the cluster is laggy [ 1149.619530][ T5792] libceph: connect (1)[c::]:6789 error -101 [ 1149.620356][ T5792] libceph: mon0 (1)[c::]:6789 connect error [ 1150.514195][ T5819] Bluetooth: hci3: command 0x0c1a tx timeout [ 1150.514377][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 1150.514762][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1152.920142][T14235] Bluetooth: hci2: command 0x0406 tx timeout [ 1152.920190][T14235] Bluetooth: hci3: command 0x0c1a tx timeout [ 1153.390617][T14224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1154.047185][T14224] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1154.051063][T14224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1154.092268][T14224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1155.143414][T13552] Bluetooth: hci3: command 0x0c1a tx timeout [ 1155.206267][T14224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1155.679334][T14235] Bluetooth: hci4: command 0x0406 tx timeout [ 1156.138702][T14235] Bluetooth: hci1: command 0x0406 tx timeout [ 1157.007060][T14262] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1157.075438][T14235] Bluetooth: hci2: command 0x0406 tx timeout [ 1157.075490][T14235] Bluetooth: hci0: command 0x0406 tx timeout [ 1157.274710][T13552] Bluetooth: hci3: command 0x0c1a tx timeout [ 1160.987102][T14288] 9p: Bad value for 'wfdno' [ 1164.368999][ T10] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1164.552445][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1164.552485][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.552536][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1164.552561][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.255272][ T10] usb 1-1: usb_control_msg returned -71 [ 1167.255331][ T10] usbtmc 1-1:16.0: can't read capabilities [ 1167.337959][ T10] usb 1-1: USB disconnect, device number 33 [ 1168.257158][T14338] mmap: syz.0.2366 (14338) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1169.602937][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1170.329119][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1170.340425][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1170.340447][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.345282][ T10] usb 1-1: config 0 descriptor?? [ 1170.371314][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1171.266418][ T10] gspca_vc032x: reg_w err -110 [ 1171.266489][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266498][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266504][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266509][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266515][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266520][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266526][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266530][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266536][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266541][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266547][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266553][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266557][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266563][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266568][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266573][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266578][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266583][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1171.266588][ T10] gspca_vc032x: Unknown sensor... [ 1171.266644][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1171.467850][T14351] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1171.488022][T14351] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1171.488286][T14351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1171.488532][T14351] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1171.764979][T14351] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1172.233402][ T5956] usb 1-1: USB disconnect, device number 34 [ 1173.154295][T13552] Bluetooth: hci4: command 0x0406 tx timeout [ 1173.517780][T13552] Bluetooth: hci2: command 0x0406 tx timeout [ 1173.517839][T13552] Bluetooth: hci0: command 0x0406 tx timeout [ 1173.517873][T13552] Bluetooth: hci1: command 0x0406 tx timeout [ 1176.171132][T14235] Bluetooth: hci3: command 0x0c1a tx timeout [ 1176.908192][T14235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1177.139469][T14235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1177.165366][T14235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1177.221120][T14235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1177.232986][T14235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1179.447292][T13552] Bluetooth: hci5: command tx timeout [ 1179.618921][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 1179.619215][ T37] audit: type=1326 audit(2000000100.860:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.619572][ T37] audit: type=1326 audit(2000000100.860:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.620095][ T37] audit: type=1326 audit(2000000100.860:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.620536][ T37] audit: type=1326 audit(2000000100.860:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.621074][ T37] audit: type=1326 audit(2000000100.860:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.621458][ T37] audit: type=1326 audit(2000000100.860:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.621911][ T37] audit: type=1326 audit(2000000100.860:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.622265][ T37] audit: type=1326 audit(2000000100.860:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.622550][ T37] audit: type=1326 audit(2000000100.860:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1179.623000][ T37] audit: type=1326 audit(2000000100.860:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14406 comm="syz.1.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc523a9c819 code=0x7ffc0000 [ 1181.523252][T13552] Bluetooth: hci5: command tx timeout [ 1183.594716][T13552] Bluetooth: hci5: command tx timeout [ 1185.419821][ T31] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1185.584638][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 1185.594348][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.594389][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1185.594694][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1185.594727][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1185.594764][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 1185.594789][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.674612][T13552] Bluetooth: hci5: command tx timeout [ 1185.700246][ T31] usb 2-1: config 0 descriptor?? [ 1185.763449][T14453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1185.763471][T14453] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.648458][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 1186.648692][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 1186.686027][T14455] ceph: No mds server is up or the cluster is laggy [ 1186.871619][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 1186.871767][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1186.895735][ T31] usb 2-1: USB disconnect, device number 47 [ 1187.418826][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2391'. [ 1187.418855][T14472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2391'. [ 1188.842845][T14383] chnl_net:caif_netlink_parms(): no params data found [ 1190.462185][T14383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.462346][T14383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.481844][T14383] bridge_slave_0: entered allmulticast mode [ 1190.495293][T14383] bridge_slave_0: entered promiscuous mode [ 1190.536373][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.536454][T14383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.536634][T14383] bridge_slave_1: entered allmulticast mode [ 1190.538410][T14383] bridge_slave_1: entered promiscuous mode [ 1191.406867][T14383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.456745][T14383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.173519][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2399'. [ 1192.179731][T14383] team0: Port device team_slave_0 added [ 1192.276291][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2399'. [ 1192.317045][T14383] team0: Port device team_slave_1 added [ 1192.779433][T14383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.779454][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.779483][T14383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.846382][T14383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.846404][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.846436][T14383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.160882][ T2281] bridge_slave_1: left allmulticast mode [ 1193.160916][ T2281] bridge_slave_1: left promiscuous mode [ 1193.161203][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.409087][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1193.990894][ T2281] bridge_slave_0: left allmulticast mode [ 1193.990919][ T2281] bridge_slave_0: left promiscuous mode [ 1193.991115][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.699502][ T2281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.816917][T14570] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2410'. [ 1195.817284][ T2281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.289474][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2410'. [ 1196.307607][ T2281] bond0 (unregistering): Released all slaves [ 1196.462967][T14383] hsr_slave_0: entered promiscuous mode [ 1196.465376][T14383] hsr_slave_1: entered promiscuous mode [ 1196.470592][T14383] debugfs: 'hsr0' already exists in 'hsr' [ 1196.470618][T14383] Cannot create hsr debugfs directory [ 1197.494619][ T5895] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1197.597846][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2416'. [ 1197.652457][ T2281] hsr_slave_0: left promiscuous mode [ 1197.664602][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1197.687241][ T5895] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1197.687276][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.759533][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1198.759615][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1198.778754][ T5895] usb 2-1: config 0 descriptor?? [ 1198.811316][ T2281] hsr_slave_1: left promiscuous mode [ 1198.834924][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.022283][ T2281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.044874][ T5895] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1199.623313][ T5895] gspca_vc032x: reg_w err -110 [ 1199.623336][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623348][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623358][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623368][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623378][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623388][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623397][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623407][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623417][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623427][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623436][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623446][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623455][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623465][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623474][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623485][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623494][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623503][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 1199.623513][ T5895] gspca_vc032x: Unknown sensor... [ 1199.623625][ T5895] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1202.205806][ T2281] team0 (unregistering): Port device team_slave_1 removed [ 1202.424252][ T2281] team0 (unregistering): Port device team_slave_0 removed [ 1202.789805][ T5956] usb 2-1: USB disconnect, device number 48 [ 1203.664653][ T5956] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1203.897551][ T5956] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1203.897590][ T5956] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1203.897636][ T5956] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1203.897662][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.217072][ T31] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1205.389322][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1205.389346][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.389376][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1205.389396][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.047694][ T31] usb 2-1: usb_control_msg returned -71 [ 1208.047824][ T31] usbtmc 2-1:16.0: can't read capabilities [ 1208.419800][ T31] usb 2-1: USB disconnect, device number 49 [ 1208.956754][ T5956] usb 6-1: usb_control_msg returned -110 [ 1208.956788][ T5956] usbtmc 6-1:16.0: can't read capabilities [ 1209.000988][ T31] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1209.188592][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.222177][ T31] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1209.222214][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.222235][ T31] usb 2-1: Product: syz [ 1209.222251][ T31] usb 2-1: Manufacturer: syz [ 1209.222269][ T31] usb 2-1: SerialNumber: syz [ 1209.410641][ T31] usb 2-1: config 0 descriptor?? [ 1209.443865][ T31] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1210.288467][ T31] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1210.288575][ T31] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1210.328328][ T31] usb 2-1: USB disconnect, device number 50 [ 1210.704671][T13185] usb 6-1: USB disconnect, device number 9 [ 1215.298250][T14693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2439'. [ 1223.151689][T14383] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1223.224596][T13185] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1223.227977][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1223.229526][T14383] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1223.324562][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1223.325338][T14383] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1223.395369][T13185] usb 2-1: Using ep0 maxpacket: 32 [ 1223.397053][T13185] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1223.397073][T13185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.430833][T13185] usb 2-1: config 0 descriptor?? [ 1223.505939][T13185] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1223.758430][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1223.831023][T14383] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1224.205135][T13185] gspca_vc032x: reg_w err -110 [ 1224.205160][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205174][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205184][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205195][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205205][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205215][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205225][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205235][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205246][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205255][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205266][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205275][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205286][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205296][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205305][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205314][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205324][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205335][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1224.205345][T13185] gspca_vc032x: Unknown sensor... [ 1224.205442][T13185] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1224.283798][T14383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1225.018102][ T5895] usb 2-1: USB disconnect, device number 51 [ 1225.245019][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1225.296789][T14383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.394819][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1225.402580][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1225.402614][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.432085][T14383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.475188][ T10] usb 1-1: config 0 descriptor?? [ 1225.697101][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.701290][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.848208][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1226.114265][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.115132][ T9572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.254611][ T815] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1226.354853][ T10] gspca_vc032x: reg_r err -110 [ 1226.354876][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354889][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354898][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354909][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354919][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354929][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354939][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354949][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354960][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354969][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354979][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354987][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.354995][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355011][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355020][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355029][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355038][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355047][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 1226.355056][ T10] gspca_vc032x: Unknown sensor... [ 1226.355148][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1226.471021][ T815] usb 2-1: Using ep0 maxpacket: 16 [ 1226.536999][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.537023][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1226.537038][ T815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1226.537070][ T815] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1226.537087][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.606449][ T815] usb 2-1: config 0 descriptor?? [ 1227.267181][ T815] HID 045e:07da: Invalid code 65791 type 1 [ 1227.352989][ T815] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input27 [ 1227.616215][ T31] usb 1-1: USB disconnect, device number 35 [ 1227.919714][ T815] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1227.952161][ T815] usb 2-1: USB disconnect, device number 52 [ 1229.359198][T14812] fido_id[14812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1230.036785][T14383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.368379][T14850] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1235.279916][T14235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1235.605687][T14235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1235.612868][T14235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1235.649051][T14235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1235.654958][T14235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1237.342236][T14888] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1237.948021][T13552] Bluetooth: hci3: command tx timeout [ 1238.872972][T14908] kernel profiling enabled (shift: 9) [ 1239.995264][T13552] Bluetooth: hci3: command tx timeout [ 1241.201600][T14932] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1242.074638][T13552] Bluetooth: hci3: command tx timeout [ 1242.229424][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 1244.154560][T13552] Bluetooth: hci3: command tx timeout [ 1244.236193][ T5895] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1244.384786][ T10] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1244.404622][ T5895] usb 10-1: Using ep0 maxpacket: 32 [ 1244.430142][ T5895] usb 10-1: config 4 has an invalid interface number: 196 but max is 0 [ 1244.430163][ T5895] usb 10-1: config 4 has no interface number 0 [ 1244.430193][ T5895] usb 10-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1244.430210][ T5895] usb 10-1: config 4 interface 196 has no altsetting 0 [ 1244.499939][ T5895] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1244.499963][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1244.499977][ T5895] usb 10-1: Product: syz [ 1244.499985][ T5895] usb 10-1: Manufacturer: syz [ 1244.500078][ T5895] usb 10-1: SerialNumber: syz [ 1244.547421][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.552474][ T10] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1244.552506][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.552529][ T10] usb 2-1: Product: syz [ 1244.552544][ T10] usb 2-1: Manufacturer: syz [ 1244.552561][ T10] usb 2-1: SerialNumber: syz [ 1244.617351][ T10] usb 2-1: config 0 descriptor?? [ 1244.620804][T14964] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1244.655615][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1245.532607][ T10] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1245.533776][ T10] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1245.591128][ T10] usb 2-1: USB disconnect, device number 53 [ 1247.935574][T14983] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1248.412593][T14875] chnl_net:caif_netlink_parms(): no params data found [ 1249.987631][T14991] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1250.364571][ T5895] ipheth 10-1:4.196: ipheth_get_macaddr: usb_control_msg: -32 [ 1250.364918][ T5895] ipheth 10-1:4.196: probe with driver ipheth failed with error -32 [ 1250.734604][ T10] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1250.907697][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.926654][ T10] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1250.926690][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.926712][ T10] usb 1-1: Product: syz [ 1250.926728][ T10] usb 1-1: Manufacturer: syz [ 1250.926746][ T10] usb 1-1: SerialNumber: syz [ 1251.103644][ T10] usb 1-1: config 0 descriptor?? [ 1251.201695][ T10] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1252.277018][ T10] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 1252.277125][ T10] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1252.320096][ T10] usb 1-1: USB disconnect, device number 36 [ 1252.608409][ T31] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1252.764018][ T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.764085][ T31] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1252.764114][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1252.768657][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1252.768691][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.768711][ T31] usb 6-1: Product: syz [ 1252.768725][ T31] usb 6-1: Manufacturer: syz [ 1252.768738][ T31] usb 6-1: SerialNumber: syz [ 1253.616282][T14875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.616439][T14875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.616692][T14875] bridge_slave_0: entered allmulticast mode [ 1253.689748][T14875] bridge_slave_0: entered promiscuous mode [ 1253.691035][ T31] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1253.841186][ T31] usb 6-1: USB disconnect, device number 10 [ 1253.911546][T14875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.911670][T14875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.911912][T14875] bridge_slave_1: entered allmulticast mode [ 1253.949143][T14875] bridge_slave_1: entered promiscuous mode [ 1254.586385][ T5956] usb 10-1: USB disconnect, device number 8 [ 1255.934341][T15042] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1257.326351][T13185] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1257.431246][T14875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.471627][T14875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.494787][T13185] usb 1-1: Using ep0 maxpacket: 32 [ 1257.497528][T13185] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1257.497563][T13185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.533664][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2504'. [ 1257.660093][T13185] usb 1-1: config 0 descriptor?? [ 1257.772110][T13185] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1258.092600][T14875] team0: Port device team_slave_0 added [ 1258.240121][T14875] team0: Port device team_slave_1 added [ 1258.475170][T13185] gspca_vc032x: reg_w err -110 [ 1258.475194][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475205][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475215][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475223][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475233][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475243][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475252][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475262][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475271][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475281][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475290][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475299][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475308][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475318][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475327][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475336][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475345][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475355][T13185] gspca_vc032x: I2c Bus Busy Wait 00 [ 1258.475364][T13185] gspca_vc032x: Unknown sensor... [ 1258.475552][T13185] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1259.013895][T13185] usb 1-1: USB disconnect, device number 37 [ 1259.216230][T15083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1259.216253][T15083] IPv6: NLM_F_CREATE should be set when creating new route [ 1260.421198][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1260.421279][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1260.614841][T14875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.614864][T14875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.614897][T14875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.621574][T14875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.621594][T14875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1260.621627][T14875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.569680][ T1060] bridge_slave_1: left allmulticast mode [ 1262.569716][ T1060] bridge_slave_1: left promiscuous mode [ 1262.570005][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.905142][ T1060] bridge_slave_0: left allmulticast mode [ 1262.905175][ T1060] bridge_slave_0: left promiscuous mode [ 1262.905454][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.474679][ T5886] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1265.503316][T15145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1265.503341][T15145] IPv6: NLM_F_CREATE should be set when creating new route [ 1265.629875][T15144] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1265.644675][ T5886] usb 10-1: Using ep0 maxpacket: 32 [ 1265.659831][ T5886] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1265.659869][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.689599][ T5886] usb 10-1: config 0 descriptor?? [ 1265.704324][ T5886] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1266.405701][ T5886] gspca_vc032x: reg_w err -110 [ 1266.405724][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405736][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405746][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405756][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405766][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405775][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405784][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405794][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405803][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405812][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405820][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405829][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405857][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405866][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405874][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405883][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405892][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405901][ T5886] gspca_vc032x: I2c Bus Busy Wait 00 [ 1266.405911][ T5886] gspca_vc032x: Unknown sensor... [ 1266.406004][ T5886] vc032x 10-1:0.0: probe with driver vc032x failed with error -22 [ 1268.006832][ T5886] usb 10-1: USB disconnect, device number 9 [ 1268.230460][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.497668][T15181] 9p: Bad value for 'wfdno' [ 1269.665501][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.673802][T15187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1269.719410][ T1060] bond0 (unregistering): Released all slaves [ 1269.851399][T14875] hsr_slave_0: entered promiscuous mode [ 1269.868481][T14875] hsr_slave_1: entered promiscuous mode [ 1269.869084][T14875] debugfs: 'hsr0' already exists in 'hsr' [ 1269.869101][T14875] Cannot create hsr debugfs directory [ 1269.884551][ T5886] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1270.355053][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1271.275709][ T5886] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1271.275751][ T5886] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1271.275780][ T5886] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1271.275807][ T5886] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.275853][ T5886] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1271.275879][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.838975][ T5886] usb 6-1: GET_CAPABILITIES returned 0 [ 1272.839051][ T5886] usbtmc 6-1:16.0: can't read capabilities [ 1272.871340][ T5886] usb 6-1: USB disconnect, device number 11 [ 1277.640074][ T5886] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1278.021119][ T5886] usb 1-1: Using ep0 maxpacket: 8 [ 1278.042585][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1278.042621][ T5886] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1278.042642][ T5886] usb 1-1: Product: syz [ 1278.042657][ T5886] usb 1-1: Manufacturer: syz [ 1278.042672][ T5886] usb 1-1: SerialNumber: syz [ 1278.364541][ T5886] usb 1-1: config 0 descriptor?? [ 1279.122450][ T5886] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1279.486298][ T1060] hsr_slave_0: left promiscuous mode [ 1279.510307][ T1060] hsr_slave_1: left promiscuous mode [ 1279.511522][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.555702][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.634586][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1279.646468][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1279.784497][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1279.800720][ T10] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1279.800753][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.800773][ T10] usb 10-1: Product: syz [ 1279.800788][ T10] usb 10-1: Manufacturer: syz [ 1279.800801][ T10] usb 10-1: SerialNumber: syz [ 1279.815135][ T10] usb 10-1: config 0 descriptor?? [ 1279.828754][ T10] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 1280.058776][ T5886] gspca_zc3xx: reg_w_i err -110 [ 1280.058888][ T5886] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1281.915659][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 1281.996916][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 1282.101683][ T10] usb 10-1: USB disconnect, device number 10 [ 1282.709977][T15247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.718179][T15247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.949881][ T5895] usb 1-1: USB disconnect, device number 38 [ 1285.536206][T15283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1286.952084][T15292] netlink: 'syz.1.2561': attribute type 4 has an invalid length. [ 1288.244783][ T5886] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1288.394908][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 1288.466630][ T5886] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1288.466654][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.466667][ T5886] usb 2-1: Product: syz [ 1288.466676][ T5886] usb 2-1: Manufacturer: syz [ 1288.466685][ T5886] usb 2-1: SerialNumber: syz [ 1288.527765][ T5886] usb 2-1: config 0 descriptor?? [ 1288.566583][ T5886] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1288.942542][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 1288.961529][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.984743][ T5886] usb 2-1: USB disconnect, device number 54 [ 1289.119747][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.746825][T12130] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1292.747153][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1292.874621][T12130] usb 1-1: device descriptor read/64, error -32 [ 1293.115292][T12130] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1293.298662][T12130] usb 1-1: Using ep0 maxpacket: 32 [ 1293.325696][T12130] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 1293.325730][T12130] usb 1-1: config 4 has no interface number 0 [ 1293.325762][T12130] usb 1-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1293.325779][T12130] usb 1-1: config 4 interface 196 has no altsetting 0 [ 1293.333848][T12130] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1293.333885][T12130] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1293.333905][T12130] usb 1-1: Product: syz [ 1293.333919][T12130] usb 1-1: Manufacturer: syz [ 1293.333933][T12130] usb 1-1: SerialNumber: syz [ 1293.488541][T15337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1295.601077][T14235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1295.708388][T14235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1295.720649][T14235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1295.756907][T14235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1295.763889][T14235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1297.994775][T13552] Bluetooth: hci5: command tx timeout [ 1298.364589][ T5816] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1298.546258][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 1298.604832][ T5816] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1298.604854][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.759190][ T5816] usb 6-1: config 0 descriptor?? [ 1298.990511][ T5816] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1299.006810][T12130] ipheth 1-1:4.196: ipheth_get_macaddr: usb_control_msg: -32 [ 1299.009977][T12130] ipheth 1-1:4.196: probe with driver ipheth failed with error -32 [ 1299.534783][ T5816] gspca_vc032x: reg_w err -110 [ 1299.534806][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534818][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534826][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534835][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534845][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534854][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534862][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534871][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534880][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534888][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534896][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534904][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534912][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534921][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534930][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534939][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534948][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534956][ T5816] gspca_vc032x: I2c Bus Busy Wait 00 [ 1299.534964][ T5816] gspca_vc032x: Unknown sensor... [ 1299.535054][ T5816] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 1299.894034][ T5860] usb 6-1: USB disconnect, device number 12 [ 1300.234636][T13552] Bluetooth: hci5: command tx timeout [ 1300.270956][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'. [ 1300.687961][T12130] usb 1-1: USB disconnect, device number 40 [ 1300.810649][ T5891] kworker/0:4 (5891) used greatest stack depth: 14760 bytes left [ 1302.314927][T13552] Bluetooth: hci5: command tx timeout [ 1302.413560][T15374] dummy0: entered promiscuous mode [ 1302.513080][T15346] chnl_net:caif_netlink_parms(): no params data found [ 1302.812222][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2587'. [ 1303.070329][T15389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.153787][T15389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.654675][ T5956] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1303.807951][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 1303.810737][ T5956] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1303.810770][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.876951][ T5956] usb 2-1: config 0 descriptor?? [ 1303.900196][ T5956] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1304.394776][T13552] Bluetooth: hci5: command tx timeout [ 1304.572661][T15346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.583703][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.584002][T15346] bridge_slave_0: entered allmulticast mode [ 1304.614787][ T5956] gspca_vc032x: reg_w err -110 [ 1304.614805][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614812][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614818][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614823][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614829][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614835][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614839][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614845][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614850][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614855][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614860][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614865][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614871][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614876][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614882][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614887][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614892][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614897][ T5956] gspca_vc032x: I2c Bus Busy Wait 00 [ 1304.614902][ T5956] gspca_vc032x: Unknown sensor... [ 1304.614961][ T5956] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 1304.703503][T15346] bridge_slave_0: entered promiscuous mode [ 1304.803974][T15346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.804261][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.877992][T15346] bridge_slave_1: entered allmulticast mode [ 1304.892897][T15346] bridge_slave_1: entered promiscuous mode [ 1305.258578][T15346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.326394][T15346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1305.626811][ T5860] usb 2-1: USB disconnect, device number 55 [ 1305.714981][T15346] team0: Port device team_slave_0 added [ 1305.742389][T15346] team0: Port device team_slave_1 added [ 1305.992144][T15346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.992160][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.992178][T15346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.002274][T15346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.002293][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.002321][T15346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.311807][T15346] hsr_slave_0: entered promiscuous mode [ 1306.318789][T15346] hsr_slave_1: entered promiscuous mode [ 1306.323906][T15346] debugfs: 'hsr0' already exists in 'hsr' [ 1306.323935][T15346] Cannot create hsr debugfs directory [ 1308.626922][T15444] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1308.981082][T15395] libceph: connect (1)[c::]:6789 error -101 [ 1308.983210][T15395] libceph: mon0 (1)[c::]:6789 connect error [ 1309.029749][T15395] libceph: connect (1)[c::]:6789 error -101 [ 1309.030085][T15395] libceph: mon0 (1)[c::]:6789 connect error [ 1309.030253][T15456] ceph: No mds server is up or the cluster is laggy [ 1309.288560][T15395] libceph: connect (1)[c::]:6789 error -101 [ 1309.288784][T15395] libceph: mon0 (1)[c::]:6789 connect error [ 1310.744097][T15463] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1310.981265][T15469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.981290][T15469] IPv6: NLM_F_CREATE should be set when creating new route [ 1311.387903][T10983] bridge_slave_1: left allmulticast mode [ 1311.387938][T10983] bridge_slave_1: left promiscuous mode [ 1311.388260][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.549210][T10983] bridge_slave_0: left allmulticast mode [ 1311.549248][T10983] bridge_slave_0: left promiscuous mode [ 1311.549575][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.588749][T10983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.706215][T10983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.802288][T10983] bond0 (unregistering): Released all slaves [ 1313.286375][ T815] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1313.518544][ T815] usb 2-1: Using ep0 maxpacket: 16 [ 1313.522191][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.522251][ T815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.522279][ T815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1313.522327][ T815] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1313.522353][ T815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.550281][ T815] usb 2-1: config 0 descriptor?? [ 1314.171383][ T815] usbhid 2-1:0.0: can't add hid device: -71 [ 1314.171520][ T815] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1314.662961][ T815] usb 2-1: USB disconnect, device number 56 [ 1315.005481][T15505] team_slave_0: entered promiscuous mode [ 1315.005540][T15505] team_slave_1: entered promiscuous mode [ 1315.012929][ T815] libceph: connect (1)[c::]:6789 error -101 [ 1315.013149][ T815] libceph: mon0 (1)[c::]:6789 connect error [ 1315.019983][T15505] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1315.125571][T15507] ceph: No mds server is up or the cluster is laggy [ 1315.167842][T15506] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1315.182346][ T815] libceph: connect (1)[c::]:6789 error -101 [ 1315.241294][ T815] libceph: mon0 (1)[c::]:6789 connect error [ 1315.500045][ T815] libceph: connect (1)[c::]:6789 error -101 [ 1315.500278][ T815] libceph: mon0 (1)[c::]:6789 connect error [ 1315.763503][T15527] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2614'. [ 1315.959152][T10983] hsr_slave_0: left promiscuous mode [ 1316.056164][T15534] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1316.111985][T15539] netlink: 'syz.1.2614': attribute type 4 has an invalid length. [ 1316.142353][T10983] hsr_slave_1: left promiscuous mode [ 1316.143482][T10983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.198500][T10983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.917614][T15547] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1318.667623][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2620'. [ 1318.737248][T10983] team0 (unregistering): Port device team_slave_1 removed [ 1318.816306][T10983] team0 (unregistering): Port device team_slave_0 removed [ 1319.794557][ T9405] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1319.966230][ T9405] usb 6-1: Using ep0 maxpacket: 16 [ 1320.012770][ T9405] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1320.012807][ T9405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.012828][ T9405] usb 6-1: Product: syz [ 1320.012864][ T9405] usb 6-1: Manufacturer: syz [ 1320.012880][ T9405] usb 6-1: SerialNumber: syz [ 1320.103312][ T9405] usb 6-1: config 0 descriptor?? [ 1320.118685][ T9405] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1320.408219][ T9405] usb 6-1: USB disconnect, device number 13 [ 1321.290601][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1321.290683][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1325.121703][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2633'. [ 1325.157804][T15615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.264049][T15615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.505124][ T816] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1326.667060][ T816] usb 10-1: Using ep0 maxpacket: 32 [ 1328.149376][ T816] usb 10-1: config 4 has an invalid interface number: 196 but max is 0 [ 1328.149412][ T816] usb 10-1: config 4 has no interface number 0 [ 1328.149466][ T816] usb 10-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1328.149496][ T816] usb 10-1: config 4 interface 196 has no altsetting 0 [ 1328.749660][T15346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1328.913241][T15346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.981440][T15346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1329.049266][T15346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1329.050328][T15346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1329.286344][T15346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1329.295508][T15346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1329.483148][T15346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1332.323260][T15346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1332.504208][T15346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1332.581431][ T3500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.581785][ T3500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.093522][ T3500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.093613][ T3500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.217396][ T816] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1333.217435][ T816] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1333.442866][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 1333.470634][T15666] ceph: No mds server is up or the cluster is laggy [ 1333.506997][ T816] usb 10-1: can't set config #4, error -32 [ 1333.566202][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 1335.637066][T15675] bond_slave_0: entered promiscuous mode [ 1335.637142][T15675] bond_slave_1: entered promiscuous mode [ 1335.641409][T15675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1335.903104][T15678] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1335.974518][T13185] usb 10-1: USB disconnect, device number 11 [ 1336.938319][T15698] bond_slave_0: entered promiscuous mode [ 1336.938390][T15698] bond_slave_1: entered promiscuous mode [ 1337.063269][T15698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1337.179997][T15703] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1337.289817][ T816] IPVS: starting estimator thread 0... [ 1337.598761][T15712] IPVS: using max 7 ests per chain, 16800 per kthread [ 1338.286270][T15346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.184578][T13185] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1339.387238][T13185] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.387303][T13185] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1339.387335][T13185] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1339.403344][T13185] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1339.403377][T13185] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.403397][T13185] usb 6-1: Product: syz [ 1339.403411][T13185] usb 6-1: Manufacturer: syz [ 1339.403425][T13185] usb 6-1: SerialNumber: syz [ 1341.890657][T15734] kAFS: unable to lookup cell '(,c¾ûL' [ 1342.195055][T13185] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1342.260924][T13185] usb 6-1: USB disconnect, device number 14 [ 1343.003862][T15346] veth0_vlan: entered promiscuous mode [ 1343.098742][T15346] veth1_vlan: entered promiscuous mode [ 1343.338149][T15346] veth0_macvtap: entered promiscuous mode [ 1343.390266][T15346] veth1_macvtap: entered promiscuous mode [ 1343.539916][T15346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.776335][T15346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.856986][ T8912] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.858952][ T8912] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.860705][ T8912] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.866657][ T8912] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.467145][ T8912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1346.467173][ T8912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.832100][T15821] ceph: No mds server is up or the cluster is laggy [ 1346.832890][ T9405] libceph: connect (1)[c::]:6789 error -101 [ 1346.833100][ T9405] libceph: mon0 (1)[c::]:6789 connect error [ 1347.514060][ T2281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.514078][ T2281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.198958][T15841] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2672'. [ 1349.456958][T15844] netlink: 'syz.9.2672': attribute type 4 has an invalid length. [ 1349.559064][T15841] fuse: Bad value for 'fd' [ 1353.530087][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2687'. [ 1359.384174][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1359.384572][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1359.417922][T15923] ceph: No mds server is up or the cluster is laggy [ 1360.384558][T12130] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1360.594544][T12130] usb 8-1: Using ep0 maxpacket: 16 [ 1360.615482][T12130] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1360.615517][T12130] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.615540][T12130] usb 8-1: Product: syz [ 1360.615555][T12130] usb 8-1: Manufacturer: syz [ 1360.615571][T12130] usb 8-1: SerialNumber: syz [ 1360.628929][T12130] usb 8-1: config 0 descriptor?? [ 1360.655888][T12130] ums-onetouch 8-1:0.0: USB Mass Storage device detected [ 1362.354632][ T816] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1362.485598][ T31] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1362.517871][ T816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.517936][ T816] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1362.517978][ T816] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1362.521081][ T816] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1362.521112][ T816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.521134][ T816] usb 6-1: Product: syz [ 1362.521148][ T816] usb 6-1: Manufacturer: syz [ 1362.521157][ T816] usb 6-1: SerialNumber: syz [ 1362.634755][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 1362.658694][ T31] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1362.658728][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.658749][ T31] usb 10-1: Product: syz [ 1362.658764][ T31] usb 10-1: Manufacturer: syz [ 1362.658779][ T31] usb 10-1: SerialNumber: syz [ 1362.736801][ T31] usb 10-1: config 0 descriptor?? [ 1362.766703][ T31] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 1362.829869][ T5886] usb 8-1: USB disconnect, device number 44 [ 1363.088878][T15970] kAFS: unable to lookup cell '(,c¾ûL' [ 1363.091277][ T31] usb 10-1: USB disconnect, device number 12 [ 1363.280836][ T816] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1363.307963][ T816] usb 6-1: USB disconnect, device number 15 [ 1363.614498][ T5886] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 1363.780142][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1363.780181][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.780203][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1363.780245][ T5886] usb 8-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1363.780270][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.870080][ T5886] usb 8-1: config 0 descriptor?? [ 1365.499634][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499676][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499704][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499739][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499766][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499793][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499821][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499849][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499877][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1365.499905][ T5886] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 1366.850421][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2714'. [ 1367.180824][ T5886] elecom 0003:056E:00E6.0008: hidraw0: USB HID v0.08 Device [HID 056e:00e6] on usb-dummy_hcd.7-1/input0 [ 1367.260723][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'. [ 1368.104503][ T31] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1368.200543][ T10] IPVS: starting estimator thread 0... [ 1368.278868][ T31] usb 10-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1368.278916][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.278940][ T31] usb 10-1: Product: syz [ 1368.278957][ T31] usb 10-1: Manufacturer: syz [ 1368.278973][ T31] usb 10-1: SerialNumber: syz [ 1368.317235][T16040] IPVS: using max 8 ests per chain, 19200 per kthread [ 1368.794528][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1368.808113][ T5886] usb 8-1: USB disconnect, device number 45 [ 1368.971503][ T9] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 1368.971541][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.971565][ T9] usb 6-1: Product: syz [ 1368.971581][ T9] usb 6-1: Manufacturer: syz [ 1368.971598][ T9] usb 6-1: SerialNumber: syz [ 1371.447716][ T31] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1371.482605][ T31] usb 10-1: USB disconnect, device number 13 [ 1371.795449][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1371.895159][ T9] usb 6-1: USB disconnect, device number 16 [ 1372.093698][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2728'. [ 1372.289405][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2726'. [ 1373.262198][T16068] warning: `syz.9.2726' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1373.607312][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1373.607328][ T37] audit: type=1326 audit(2000000294.860:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.608223][ T37] audit: type=1326 audit(2000000294.860:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.609000][ T37] audit: type=1326 audit(2000000294.860:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.610537][ T37] audit: type=1326 audit(2000000294.860:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.611542][ T37] audit: type=1326 audit(2000000294.860:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.611989][ T37] audit: type=1326 audit(2000000294.860:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.612202][ T37] audit: type=1326 audit(2000000294.860:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.612626][ T37] audit: type=1326 audit(2000000294.860:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.613442][ T37] audit: type=1326 audit(2000000294.860:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.718131][ T37] audit: type=1326 audit(2000000294.860:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16079 comm="syz.7.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f03abc819 code=0x7ffc0000 [ 1373.857038][T16078] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2729'. [ 1373.857862][T16078] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1373.970001][T16083] ip6tnl1: entered allmulticast mode [ 1374.666165][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2732'. [ 1374.694607][T12130] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1374.845994][T12130] usb 6-1: Using ep0 maxpacket: 16 [ 1374.867386][T12130] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1374.867424][T12130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.867448][T12130] usb 6-1: Product: syz [ 1374.867464][T12130] usb 6-1: Manufacturer: syz [ 1374.867481][T12130] usb 6-1: SerialNumber: syz [ 1374.916196][T12130] usb 6-1: config 0 descriptor?? [ 1374.921198][T12130] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1376.385108][T12130] usb 6-1: USB disconnect, device number 17 [ 1377.957407][T16115] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 1378.115616][T16122] ip6tnl1: entered allmulticast mode [ 1379.702345][T16149] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2742'. [ 1379.793452][ T37] kauditd_printk_skb: 263 callbacks suppressed [ 1379.793475][ T37] audit: type=1326 audit(2000000301.040:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35254fc819 code=0x7ffc0000 [ 1379.795301][ T37] audit: type=1326 audit(2000000301.040:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35254fc819 code=0x7ffc0000 [ 1379.795350][ T37] audit: type=1326 audit(2000000301.050:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35254fc819 code=0x7ffc0000 [ 1379.796345][ T37] audit: type=1326 audit(2000000301.050:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f35254fc819 code=0x7ffc0000 [ 1379.838945][T16138] bond_slave_0: entered promiscuous mode [ 1379.839001][T16138] bond_slave_1: entered promiscuous mode [ 1379.850568][ T37] audit: type=1326 audit(2000000301.100:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35254fc819 code=0x7ffc0000 [ 1379.850879][ T37] audit: type=1326 audit(2000000301.100:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35254fc582 code=0x7ffc0000 [ 1379.864510][ T37] audit: type=1326 audit(2000000301.100:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f35254fc617 code=0x7ffc0000 [ 1379.864566][ T37] audit: type=1326 audit(2000000301.110:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f35254b9511 code=0x7ffc0000 [ 1379.864617][ T37] audit: type=1326 audit(2000000301.110:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f35254fd609 code=0x7ffc0000 [ 1379.867928][ T37] audit: type=1326 audit(2000000301.120:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16150 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f35254b8c6c code=0x7ffc0000 [ 1379.898626][T16138] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1379.952453][T16156] ip6tnl1: entered allmulticast mode [ 1381.545686][T14235] ================================================================== [ 1381.545780][T14235] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.545904][T14235] Read of size 8 at addr ffffc9000e3f1008 by task kworker/u9:2/14235 [ 1381.545923][T14235] [ 1381.545967][T14235] CPU: 1 UID: 0 PID: 14235 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1381.546022][T14235] Tainted: [L]=SOFTLOCKUP [ 1381.546032][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1381.546047][T14235] Workqueue: hci1 hci_rx_work [ 1381.546173][T14235] Call Trace: [ 1381.546206][T14235] [ 1381.546260][T14235] dump_stack_lvl+0xe8/0x150 [ 1381.546377][T14235] print_address_description+0x55/0x1e0 [ 1381.546420][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.546462][T14235] print_report+0x58/0x70 [ 1381.546492][T14235] kasan_report+0x117/0x150 [ 1381.546609][T14235] ? rt_spin_lock+0x20e/0x400 [ 1381.546705][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.546739][T14235] __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.546764][T14235] kcov_remote_start+0x2af/0x710 [ 1381.546841][T14235] hci_rx_work+0x10f/0x1040 [ 1381.546876][T14235] ? process_scheduled_works+0xa70/0x1860 [ 1381.546967][T14235] process_scheduled_works+0xb5d/0x1860 [ 1381.547009][T14235] ? __pfx_process_scheduled_works+0x10/0x10 [ 1381.547041][T14235] ? assign_work+0x3d5/0x5e0 [ 1381.547075][T14235] worker_thread+0xa53/0xfc0 [ 1381.547106][T14235] kthread+0x388/0x470 [ 1381.547153][T14235] ? __pfx_worker_thread+0x10/0x10 [ 1381.547173][T14235] ? __pfx_kthread+0x10/0x10 [ 1381.547196][T14235] ret_from_fork+0x514/0xb70 [ 1381.547280][T14235] ? __pfx_ret_from_fork+0x10/0x10 [ 1381.547314][T14235] ? __switch_to+0xc79/0x1410 [ 1381.547382][T14235] ? __pfx_kthread+0x10/0x10 [ 1381.547409][T14235] ret_from_fork_asm+0x1a/0x30 [ 1381.547440][T14235] [ 1381.547469][T14235] [ 1381.547476][T14235] The buggy address belongs to a vmalloc virtual mapping [ 1381.547516][T14235] Memory state around the buggy address: [ 1381.547549][T14235] ffffc9000e3f0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1381.547565][T14235] ffffc9000e3f0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1381.547639][T14235] >ffffc9000e3f1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1381.547658][T14235] ^ [ 1381.547671][T14235] ffffc9000e3f1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1381.547686][T14235] ffffc9000e3f1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1381.547698][T14235] ================================================================== [ 1381.548989][T14235] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1381.549023][T14235] CPU: 1 UID: 0 PID: 14235 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1381.549056][T14235] Tainted: [L]=SOFTLOCKUP [ 1381.549065][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1381.549081][T14235] Workqueue: hci1 hci_rx_work [ 1381.549116][T14235] Call Trace: [ 1381.549127][T14235] [ 1381.549137][T14235] vpanic+0x56c/0xa60 [ 1381.549165][T14235] ? __pfx_vpanic+0x10/0x10 [ 1381.549193][T14235] panic+0xc5/0xd0 [ 1381.549215][T14235] ? __pfx_panic+0x10/0x10 [ 1381.549237][T14235] ? preempt_schedule_thunk+0x16/0x30 [ 1381.549269][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549292][T14235] ? preempt_schedule_thunk+0x16/0x30 [ 1381.549323][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549351][T14235] check_panic_on_warn+0x89/0xb0 [ 1381.549473][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549496][T14235] end_report+0x73/0x170 [ 1381.549540][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549572][T14235] kasan_report+0x128/0x150 [ 1381.549604][T14235] ? rt_spin_lock+0x20e/0x400 [ 1381.549634][T14235] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549662][T14235] __list_del_entry_valid_or_report+0xb5/0x190 [ 1381.549687][T14235] kcov_remote_start+0x2af/0x710 [ 1381.549723][T14235] hci_rx_work+0x10f/0x1040 [ 1381.549757][T14235] ? process_scheduled_works+0xa70/0x1860 [ 1381.549793][T14235] process_scheduled_works+0xb5d/0x1860 [ 1381.549840][T14235] ? __pfx_process_scheduled_works+0x10/0x10 [ 1381.549877][T14235] ? assign_work+0x3d5/0x5e0 [ 1381.549912][T14235] worker_thread+0xa53/0xfc0 [ 1381.549946][T14235] kthread+0x388/0x470 [ 1381.549971][T14235] ? __pfx_worker_thread+0x10/0x10 [ 1381.549989][T14235] ? __pfx_kthread+0x10/0x10 [ 1381.550015][T14235] ret_from_fork+0x514/0xb70 [ 1381.550049][T14235] ? __pfx_ret_from_fork+0x10/0x10 [ 1381.550082][T14235] ? __switch_to+0xc79/0x1410 [ 1381.550111][T14235] ? __pfx_kthread+0x10/0x10 [ 1381.550138][T14235] ret_from_fork_asm+0x1a/0x30 [ 1381.550171][T14235] [ 1381.550690][T14235] Kernel Offset: disabled