last executing test programs: 10m10.234014068s ago: executing program 0 (id=15): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6(0xa, 0x1, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/237, 0xed}], 0x2) 10m8.797456283s ago: executing program 0 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/19, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r3, 0x0, 0x0, 0x20000044) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 10m3.689872586s ago: executing program 0 (id=22): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000faffffee00000000070000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000019300)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)={0x14, r2, 0xd8e0afc25e019b91, 0x74bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20004004) 10m2.14393233s ago: executing program 0 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f6044ae) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="50010000000000000300000000000000040000000000000003000000000000000080020000000000030000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000600000000000000000000000000000002000000000000000600000000800000de000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000401000000000000000100000094015432000000000000000004000000000000000400000000000000ff07000000000000ffff50a0ffffff7fff0f0000ff0700000300000000000000090000000000000000000000000005000000000000000200000000000000020000000600000006ffffec00642d79434235d4943d244d7434da6000000000000000000000000000000000613b952938abbb51b66c", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0100000003"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 10m0.493934214s ago: executing program 0 (id=30): socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x2056, &(0x7f0000000100)=ANY=[], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f00000000c0)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='setgroups\x00') read$FUSE(r4, &(0x7f0000006280)={0x2020}, 0x2020) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x4, 0x2, 0x6}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 9m53.018450477s ago: executing program 0 (id=39): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 9m37.038639294s ago: executing program 32 (id=39): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x100000000, 0x100000000}) r1 = mq_open(&(0x7f0000000080)='GPL\x00', 0x980, 0x80, &(0x7f0000000140)={0x4, 0x2, 0x6, 0xd581}) mq_notify(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$mtd(0x0, 0x260c, 0xa02) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x7f, 0xffff, 0x1, 'queue1\x00', 0x4}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073647a3000000000140000001000010008000000000000000084400afccffe30561b302ac842e12b76d335ff8aeb05d99e21b723644746e09465351201bef9bdb91ce72a90f57a7c3e8241049672a206f520a8e0546cfff94c7c42a203acf447b5679db4e22706d2ee407a9c8dedf2c0558a1cd0fda5921c9b576b739c55a2d9e01c3bd22e422ecbb5e6622f6011819ca4edf0728e13583dd4989c7ea7b9e2b44abd2311ac44606fc8b1fab4c126049fb8bc76ca52e29a3e4853"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000160080ff0000000000000000850000002c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 9m34.879637869s ago: executing program 3 (id=64): r0 = socket(0x10, 0x80002, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 9m23.202584625s ago: executing program 3 (id=85): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 9m22.968163718s ago: executing program 3 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/19, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 9m21.736545488s ago: executing program 3 (id=88): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) 9m20.665251815s ago: executing program 3 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f0000000240), 0x0}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x4c8db000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6e) write$dsp(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44895}, 0x24000814) 9m17.835844981s ago: executing program 3 (id=99): r0 = socket(0x10, 0x80002, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 9m2.266659657s ago: executing program 33 (id=99): r0 = socket(0x10, 0x80002, 0x0) syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 5m13.285462641s ago: executing program 2 (id=476): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x7ff, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0xb, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) 5m10.738286537s ago: executing program 2 (id=480): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) getpeername$netlink(r1, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m8.418515043s ago: executing program 2 (id=484): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff2, 0xe}, {0x0, 0x9}, {0xffe0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) 5m7.368057355s ago: executing program 2 (id=486): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f0000000ac0)='\x02\x00\x00\x06\xd7\xb5\xe9\xc4\xee\xb0\x89c\'\xba\xb1\x81\xc1v\xbb\xb43O\x8a\x00\x80f\xa5\x13\x04S?;\x83\xe6\x9c\x0e \xfa9\xceH\xa5\xf3E\x15\x96&\x81\x81\x83\'.\xe7\xfa\x83\x0fvh\xac&\x92\x11N\x8bn\x9d\x94\xdb^\xa9q\xd5-.\xef8c\xc4|\x1c\x86]m\xe4H>K\x85\xc7\xd0_\x7f\xb50\x97\xa2\x99\xe6\xd4\xcf\xcapi\xf5\xfe!\xdb\xbeh\xf9x\xe8(\xcbg\xacH\x9b\x9br\x17\xa7\x95\x8a\xad\xfb\xca\x87\x04\xe6\xb0\xe6\xbe\xf28\xc9\f\xb1\xfaWr0\xb9:\n?\x8a\x82\x9bq\xad\x89\xd9\x88QY\xb5\xb5\xa3\xd71\xd6\xff\xac\xdc\xf8L\x8e\xf6\x8d\x9a3\xf0w\xc0\x89\xeb\xfb\x9e-\xf1=\x10\xc2\xff\xdb\x9d\xe4[\x90q\a\xc8\xeb\x1c\x1d\xa6\x8dL@!\xd2}E\x93\xf5\xb0\x1au?\xdf\x03b\x11\x8e\xb0\x91*\xad{Pdg\xe0uk}\x8f\x8c\xfe\xf7\xb4\xf8\x1at*\x98\x90\xc3\xd09b)p\xc6]\b-') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x47, [0x7ffe, 0x9, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x2000000, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x2, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x0, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x5, 0x7, 0x10001, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0xfffffffc, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x20000a, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x7, 0xbb31, 0x3, 0xb, 0x80005, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0x7, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0x93d]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x180000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f"], 0x60}}, 0x0) 5m5.516877341s ago: executing program 2 (id=490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) 5m3.034938564s ago: executing program 2 (id=494): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f0000000ac0)='\x02\x00\x00\x06\xd7\xb5\xe9\xc4\xee\xb0\x89c\'\xba\xb1\x81\xc1v\xbb\xb43O\x8a\x00\x80f\xa5\x13\x04S?;\x83\xe6\x9c\x0e \xfa9\xceH\xa5\xf3E\x15\x96&\x81\x81\x83\'.\xe7\xfa\x83\x0fvh\xac&\x92\x11N\x8bn\x9d\x94\xdb^\xa9q\xd5-.\xef8c\xc4|\x1c\x86]m\xe4H>K\x85\xc7\xd0_\x7f\xb50\x97\xa2\x99\xe6\xd4\xcf\xcapi\xf5\xfe!\xdb\xbeh\xf9x\xe8(\xcbg\xacH\x9b\x9br\x17\xa7\x95\x8a\xad\xfb\xca\x87\x04\xe6\xb0\xe6\xbe\xf28\xc9\f\xb1\xfaWr0\xb9:\n?\x8a\x82\x9bq\xad\x89\xd9\x88QY\xb5\xb5\xa3\xd71\xd6\xff\xac\xdc\xf8L\x8e\xf6\x8d\x9a3\xf0w\xc0\x89\xeb\xfb\x9e-\xf1=\x10\xc2\xff\xdb\x9d\xe4[\x90q\a\xc8\xeb\x1c\x1d\xa6\x8dL@!\xd2}E\x93\xf5\xb0\x1au?\xdf\x03b\x11\x8e\xb0\x91*\xad{Pdg\xe0uk}\x8f\x8c\xfe\xf7\xb4\xf8\x1at*\x98\x90\xc3\xd09b)p\xc6]\b-') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x47, [0x7ffe, 0x9, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x2000000, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x2, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x0, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x5, 0x7, 0x10001, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0xfffffffc, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x20000a, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x7, 0xbb31, 0x3, 0xb, 0x80005, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0x7, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0x93d]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x180000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f"], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x2400000c}, 0x4048855) 4m46.405975531s ago: executing program 34 (id=494): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f0000000ac0)='\x02\x00\x00\x06\xd7\xb5\xe9\xc4\xee\xb0\x89c\'\xba\xb1\x81\xc1v\xbb\xb43O\x8a\x00\x80f\xa5\x13\x04S?;\x83\xe6\x9c\x0e \xfa9\xceH\xa5\xf3E\x15\x96&\x81\x81\x83\'.\xe7\xfa\x83\x0fvh\xac&\x92\x11N\x8bn\x9d\x94\xdb^\xa9q\xd5-.\xef8c\xc4|\x1c\x86]m\xe4H>K\x85\xc7\xd0_\x7f\xb50\x97\xa2\x99\xe6\xd4\xcf\xcapi\xf5\xfe!\xdb\xbeh\xf9x\xe8(\xcbg\xacH\x9b\x9br\x17\xa7\x95\x8a\xad\xfb\xca\x87\x04\xe6\xb0\xe6\xbe\xf28\xc9\f\xb1\xfaWr0\xb9:\n?\x8a\x82\x9bq\xad\x89\xd9\x88QY\xb5\xb5\xa3\xd71\xd6\xff\xac\xdc\xf8L\x8e\xf6\x8d\x9a3\xf0w\xc0\x89\xeb\xfb\x9e-\xf1=\x10\xc2\xff\xdb\x9d\xe4[\x90q\a\xc8\xeb\x1c\x1d\xa6\x8dL@!\xd2}E\x93\xf5\xb0\x1au?\xdf\x03b\x11\x8e\xb0\x91*\xad{Pdg\xe0uk}\x8f\x8c\xfe\xf7\xb4\xf8\x1at*\x98\x90\xc3\xd09b)p\xc6]\b-') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x47, [0x7ffe, 0x9, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x4, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x2000000, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x1, 0x2, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x0, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x5, 0x7, 0x10001, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0xfffffffc, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x20000a, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x7, 0xbb31, 0x3, 0xb, 0x80005, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0x7, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0x93d]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x180000) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)="18", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x1b, 0x0, 0x1, 0xfd, 0x6, @multicast}, 0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f"], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x2400000c}, 0x4048855) 13.409691349s ago: executing program 1 (id=845): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x20ab5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x3, 0xd) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 10.152944658s ago: executing program 5 (id=851): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x100000009, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r1 = inotify_init() r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) close_range(r1, 0xffffffffffffffff, 0x0) 9.363862909s ago: executing program 5 (id=852): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) read(r0, &(0x7f0000000840)=""/40, 0x28) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) fsync(r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 9.233315055s ago: executing program 1 (id=853): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b", 0xb4, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r4}, &(0x7f0000000440)=""/210, 0xd2, 0x0) 8.144893861s ago: executing program 5 (id=854): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.974610279s ago: executing program 1 (id=855): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x7, 0x9, {0xffffffffffffffff}, {0xee00}, 0x7f, 0x518}) setresuid(r0, r0, r0) fanotify_init(0x40, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000300)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0xe1e, 0x0, 0x82}], 0x1}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 7.614103428s ago: executing program 1 (id=856): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, 0x0, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x138, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x837}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4001"], 0x14) 7.096569984s ago: executing program 4 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), 0x0, 0x2, r3}, 0x38) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) close_range(r5, r4, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) mmap(&(0x7f0000105000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r6, 0x82ff7000) 7.094479971s ago: executing program 5 (id=858): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)}, 0x20048b88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[], 0xc) write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 5.967755152s ago: executing program 4 (id=859): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 4.890818339s ago: executing program 4 (id=860): r0 = dup(0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20, 0x2, 0x6, 0xa}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r6, 0x0, 0x0, 0x140, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) 3.774638203s ago: executing program 1 (id=861): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff0101300209040000"], 0x0) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha384\x00'}}) 3.733523365s ago: executing program 5 (id=862): shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001100000060000000891776657468315f746f5f627269646765006e69637666300000000000000000000076657468315f746f5f6261746164760076657468305f746f5f626f6e64000000ffffff00aaaaaaaaaabb0000ff0000006e0000006e000000e60000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000008000000200040000000000eda2aededb46cf1cd942696e782c84e94c8aadd296787439ae1c0ee400ec150796e9178168e0c3d3cf5f02b734591749de3428d7ecf71ea2fc50442b82d939e60000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff00"/372]}, 0x1ec) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x155e, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.73166502s ago: executing program 4 (id=863): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05080000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000640003806000008004000180580007800b000100746172676574000048000280080002400000000230000300b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb64bff7360e7749fe5bee3900900010053"], 0x114}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r4 = fcntl$getown(r1, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/llc/socket\x00') io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r2, 0x0}]) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r7, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100), 0xc, &(0x7f00000009c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x884) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001014010029bd7000fe0b000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 2.186882043s ago: executing program 5 (id=864): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\n@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001300)={0x44, &(0x7f00000010c0)=ANY=[@ANYBLOB="2015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.673659449s ago: executing program 4 (id=865): shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000100)=[{r1, 0x5082}], 0x1, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"/372]}, 0x1ec) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x155e, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 644.767196ms ago: executing program 4 (id=866): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 0s ago: executing program 1 (id=867): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8382, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) modify_ldt$write(0x1, &(0x7f00000000c0)={0x3, 0x1000, 0x2000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000002440)=r6) unshare(0x2c020400) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x29, '\x00', @st={0x4, [{0x3, @uvalue=0x8}, {0x3, @uvalue=0xa}, {0x1, @uvalue=0xc18}, {0x2, @svalue=0x40}]}, 0x7fe}]}) socket$nl_route(0x10, 0x3, 0x0) unshare(0x40000000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0x1}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) socket$kcm(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7) kernel console output (not intermixed with test programs): _1 [ 314.502431][ T5898] usb 5-1: config 0 descriptor?? [ 314.520873][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.765886][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.672728][ T5631] Bluetooth: hci6: command tx timeout [ 315.921007][ T7779] syz_tun: entered allmulticast mode [ 316.407204][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.522132][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.367134][ T7534] hsr_slave_0: entered promiscuous mode [ 317.393763][ T7534] hsr_slave_1: entered promiscuous mode [ 317.414140][ T7796] tipc: Enabling of bearer rejected, already enabled [ 317.613697][ T7803] ip6t_srh: unknown srh match flags FF3F [ 317.770622][ T5631] Bluetooth: hci6: command tx timeout [ 317.783707][ T7783] syz_tun: left allmulticast mode [ 317.814686][ T5898] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 317.864007][ T5898] [drm:udl_init] *ERROR* Selecting channel failed [ 317.979669][ T5898] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 318.009348][ T5898] [drm] Initialized udl on minor 2 [ 318.038344][ T5898] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 318.087782][ T5898] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 318.617800][ T7814] binder: 7812:7814 ioctl c0306201 0 returned -14 [ 319.806573][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 319.823323][ T5898] usb 5-1: USB disconnect, device number 4 [ 319.842722][ T5631] Bluetooth: hci6: command tx timeout [ 319.849318][ T7817] fuse: Unknown parameter 'group_i00000000000000000000' [ 319.858331][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 319.877470][ T31] audit: type=1400 audit(1785131946.432:6): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=7816 comm="syz.2.361" [ 320.162057][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 320.590417][ T24] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 320.685108][ T24] usb 3-1: config 0 has no interface number 0 [ 320.841653][ T24] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 320.877768][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.916610][ T24] usb 3-1: Product: syz [ 320.939369][ T24] usb 3-1: Manufacturer: syz [ 320.957220][ T24] usb 3-1: SerialNumber: syz [ 321.008835][ T24] usb 3-1: config 0 descriptor?? [ 321.277531][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 321.325130][ T24] gspca_m5602: Failed to find a sensor [ 321.340059][ T24] ALi m5602 3-1:0.88: ALi m5602 webcam failed [ 321.556944][ T24] usb 3-1: USB disconnect, device number 5 [ 321.911944][ T5631] Bluetooth: hci6: command tx timeout [ 322.666749][ T194] bridge_slave_1: left allmulticast mode [ 322.698902][ T194] bridge_slave_1: left promiscuous mode [ 322.729249][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.629092][ T194] bridge_slave_0: left allmulticast mode [ 323.634872][ T194] bridge_slave_0: left promiscuous mode [ 323.642764][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.050669][ T5631] Bluetooth: hci0: unexpected event for opcode 0x202a [ 324.979584][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.038157][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.091473][ T186] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 325.092236][ T194] bond0 (unregistering): Released all slaves [ 325.344983][ T186] usb 6-1: Using ep0 maxpacket: 32 [ 325.498781][ T186] usb 6-1: config 0 has no interfaces? [ 325.514838][ T7837] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.528102][ T186] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 325.539542][ T186] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.558563][ T186] usb 6-1: config 0 descriptor?? [ 325.647854][ T7853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.487066][ T7869] binder: 7867:7869 ioctl c0306201 0 returned -14 [ 328.458291][ T7874] geneve3: entered promiscuous mode [ 328.471253][ T7874] geneve3: entered allmulticast mode [ 328.506583][ T37] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.526361][ T37] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 328.550143][ T194] hsr_slave_0: left promiscuous mode [ 328.572027][ T194] hsr_slave_1: left promiscuous mode [ 328.591257][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.630504][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.130053][ T194] team0 (unregistering): Port device team_slave_1 removed [ 329.193007][ T194] team0 (unregistering): Port device team_slave_0 removed [ 329.557212][ T5898] usb 6-1: USB disconnect, device number 9 [ 329.705152][ T37] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 329.801776][ T37] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 329.899048][ T7885] syzkaller0: entered promiscuous mode [ 329.947925][ T7885] syzkaller0: entered allmulticast mode [ 330.516384][ T7901] tipc: Enabling of bearer rejected, already enabled [ 331.306007][ T7534] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.881009][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.888973][ T7915] fuse: Bad value for 'group_id' [ 331.894155][ T7915] fuse: Bad value for 'group_id' [ 331.938882][ T7534] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.976806][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.994465][ T7534] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.019641][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.069100][ T7534] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.148491][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.835346][ T7930] binder: 7928:7930 ioctl c0306201 0 returned -14 [ 332.849511][ T7930] binder: 7928:7930 ioctl c0306201 0 returned -14 [ 335.896746][ T7945] ip6t_srh: unknown srh match flags FF3F [ 336.165849][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.219888][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.249246][ T7765] bridge_slave_0: entered allmulticast mode [ 336.283986][ T7765] bridge_slave_0: entered promiscuous mode [ 336.324966][ T7765] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.348666][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.376525][ T7765] bridge_slave_1: entered allmulticast mode [ 336.408263][ T7765] bridge_slave_1: entered promiscuous mode [ 336.575809][ T7765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.619221][ T7765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.805421][ T7765] team0: Port device team_slave_0 added [ 336.864077][ T7765] team0: Port device team_slave_1 added [ 337.020784][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.054043][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.284051][ T7765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.324761][ T7765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.342920][ T7765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.453756][ T7765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.728046][ T7765] hsr_slave_0: entered promiscuous mode [ 337.750990][ T7765] hsr_slave_1: entered promiscuous mode [ 337.783852][ T7765] debugfs: 'hsr0' already exists in 'hsr' [ 337.811564][ T7765] Cannot create hsr debugfs directory [ 338.475858][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 338.582453][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.451644][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.960329][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.967543][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.822652][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.829862][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.989124][ T7981] fuse: Bad value for 'group_id' [ 343.010420][ T7981] fuse: Bad value for 'group_id' [ 343.206586][ T7986] fuse: Bad value for 'rootmode' [ 345.037644][ T8001] netlink: 112 bytes leftover after parsing attributes in process `syz.5.400'. [ 345.106380][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 345.153536][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.5.400'. [ 345.685851][ T8023] NILFS (nullb0): couldn't find nilfs on the device [ 345.813504][ T7765] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.875853][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 345.903771][ T8028] ubi: mtd0 is already attached to ubi0 [ 345.923719][ T7765] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 345.991163][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.039906][ T7765] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.816340][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.221640][ T7765] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.274078][ T7765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.618194][ T5280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.053505][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.065571][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.073529][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.083505][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.090958][ T8057] fuse: Bad value for 'rootmode' [ 349.096926][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.177252][ T7765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.196150][ T8060] fuse: Bad value for 'group_id' [ 349.220898][ T8060] fuse: Bad value for 'group_id' [ 349.244777][ T7765] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.269247][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.276446][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.396442][ T3281] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.403660][ T3281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.191769][ T5631] Bluetooth: hci2: command tx timeout [ 351.574265][ T8091] netlink: 112 bytes leftover after parsing attributes in process `syz.5.414'. [ 351.923214][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 351.993042][ T8093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.414'. [ 353.890185][ T5631] Bluetooth: hci2: command tx timeout [ 354.238356][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.416'. [ 356.234679][ T5631] Bluetooth: hci2: command tx timeout [ 358.410029][ T5631] Bluetooth: hci2: command tx timeout [ 358.577719][ T7765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.670316][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 358.716078][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.427'. [ 360.590770][ T8071] bridge_slave_1: left allmulticast mode [ 360.628135][ T8071] bridge_slave_1: left promiscuous mode [ 360.650158][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.725207][ T8071] bridge_slave_0: left allmulticast mode [ 360.897034][ T8071] bridge_slave_0: left promiscuous mode [ 360.903811][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.667652][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.718234][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.924455][ T8071] bond0 (unregistering): Released all slaves [ 364.559009][ T8194] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 365.687146][ T7765] veth0_vlan: entered promiscuous mode [ 365.832970][ T8071] hsr_slave_0: left promiscuous mode [ 365.857471][ T8071] hsr_slave_1: left promiscuous mode [ 365.886108][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.914019][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.523500][ T8223] sd 0:0:1:0: PR command failed: 1026 [ 366.543250][ T8223] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 366.556053][ T8223] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 366.715684][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 366.760189][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 366.788755][ T8232] fuse: Unknown parameter 'use00000000000000000000' [ 366.920353][ T8233] ubi: mtd0 is already attached to ubi0 [ 367.429265][ T7765] veth1_vlan: entered promiscuous mode [ 367.702628][ T8213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.313267][ T8204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.585301][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.607067][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.646998][ T8053] bridge_slave_0: entered allmulticast mode [ 368.690715][ T8053] bridge_slave_0: entered promiscuous mode [ 368.726108][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.762828][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.786264][ T8053] bridge_slave_1: entered allmulticast mode [ 368.809684][ T8053] bridge_slave_1: entered promiscuous mode [ 370.554836][ T7765] veth0_macvtap: entered promiscuous mode [ 370.742540][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.442'. [ 370.782579][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.836268][ T7765] veth1_macvtap: entered promiscuous mode [ 370.885564][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.033286][ T8053] team0: Port device team_slave_0 added [ 371.070026][ T8053] team0: Port device team_slave_1 added [ 371.208563][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.217227][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.278479][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.310569][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.322527][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 371.344822][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.369961][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.454272][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.495232][ T7765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.543756][ T30] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 372.166073][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.211519][ T30] usb 6-1: config 0 descriptor?? [ 372.301883][ T6106] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.323167][ T6106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.456292][ T8053] hsr_slave_0: entered promiscuous mode [ 372.470940][ T8053] hsr_slave_1: entered promiscuous mode [ 372.484762][ T6106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.501944][ T8260] syz_tun: entered allmulticast mode [ 372.550760][ T6106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.662851][ T8257] syz_tun: left allmulticast mode [ 372.690746][ T30] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 372.725313][ T30] [drm:udl_init] *ERROR* Selecting channel failed [ 372.819154][ T30] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 372.851680][ T30] [drm] Initialized udl on minor 2 [ 372.877625][ T30] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 372.924487][ T30] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 372.966890][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.224897][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 373.229704][ T30] usb 6-1: USB disconnect, device number 10 [ 373.248782][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 373.911692][ T29] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 374.005269][ T8293] 0x000000000006-0x000000020000 : "" [ 374.014497][ T8293] ftl_cs: FTL header corrupt! [ 374.035160][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.049631][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.059380][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.068242][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.076454][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 374.313525][ T8298] fuse: Unknown parameter 'use00000000000000000000' [ 376.159262][ T5642] Bluetooth: hci4: command tx timeout [ 377.783958][ T8317] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 377.835866][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.842671][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.852954][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 377.862180][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.452'. [ 378.055269][ T8317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.233365][ T5642] Bluetooth: hci4: command tx timeout [ 378.283986][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.438410][ T8322] bond1: (slave geneve2): making interface the new active one [ 378.467879][ T8322] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 378.995090][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.030745][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 379.368585][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.838942][ T8350] ubi: mtd0 is already attached to ubi0 [ 379.948688][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.314118][ T5642] Bluetooth: hci4: command tx timeout [ 380.794184][ T8053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.850820][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.930874][ T8053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.959369][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 381.139411][ T8053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.198145][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.231233][ T8053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.288458][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.363065][ T8367] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 381.456121][ T8371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 381.611576][ T8371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.460'. [ 381.659547][ T8367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 382.258323][ T8384] fuse: Unknown parameter 'user_i00000000000000000000' [ 382.391825][ T5642] Bluetooth: hci4: command tx timeout [ 382.447495][ T58] bridge_slave_1: left allmulticast mode [ 382.528512][ T58] bridge_slave_1: left promiscuous mode [ 382.564827][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.985513][ T58] bridge_slave_0: left allmulticast mode [ 383.153500][ T58] bridge_slave_0: left promiscuous mode [ 383.231137][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.583251][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 385.748752][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.961223][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.992954][ T58] bond0 (unregistering): Released all slaves [ 386.798367][ T8387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.156762][ T8411] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 388.665627][ T8420] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 389.316327][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.501417][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 389.540490][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.583858][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.591053][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.313663][ T8426] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 390.317626][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.328477][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.360238][ T8428] warning: `syz.1.473' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 390.373514][ T29] usb 3-1: no configurations [ 390.395676][ T29] usb 3-1: can't read configurations, error -22 [ 390.633053][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 390.750389][ T58] hsr_slave_0: left promiscuous mode [ 390.796703][ T58] hsr_slave_1: left promiscuous mode [ 390.815188][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.831873][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.863711][ T29] usb 3-1: no configurations [ 390.871663][ T29] usb 3-1: can't read configurations, error -22 [ 390.889610][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.912055][ T29] usb usb3-port1: attempt power cycle [ 390.917500][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.023731][ T58] veth1_macvtap: left promiscuous mode [ 391.034894][ T58] veth0_macvtap: left promiscuous mode [ 391.052689][ T58] veth1_vlan: left promiscuous mode [ 391.066739][ T58] veth0_vlan: left promiscuous mode [ 391.332301][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 391.554064][ T29] usb 3-1: device not accepting address 8, error -71 [ 392.452584][ T8439] vivid-005: kernel_thread() failed [ 393.068593][ T8447] ubi: mtd0 is already attached to ubi0 [ 393.717616][ T58] team0 (unregistering): Port device team_slave_1 removed [ 393.799974][ T58] team0 (unregistering): Port device team_slave_0 removed [ 394.257015][ T5770] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 394.475892][ T5770] usb 6-1: Using ep0 maxpacket: 8 [ 395.445663][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.469861][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.482475][ T8291] bridge_slave_0: entered allmulticast mode [ 395.515605][ T8291] bridge_slave_0: entered promiscuous mode [ 396.665980][ T8469] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 396.700212][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.738616][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.776881][ T8291] bridge_slave_1: entered allmulticast mode [ 396.805428][ T8291] bridge_slave_1: entered promiscuous mode [ 397.474579][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.499252][ T31] audit: type=1400 audit(1785132024.052:7): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=8479 comm="syz.1.483" [ 397.578119][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.626647][ T5770] usb 6-1: unable to get BOS descriptor or descriptor too short [ 397.658156][ T5770] usb 6-1: no configurations [ 397.678259][ T5770] usb 6-1: can't read configurations, error -22 [ 397.773196][ T8291] team0: Port device team_slave_0 added [ 397.791413][ T29] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 397.825258][ T8291] team0: Port device team_slave_1 added [ 397.973287][ T29] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 397.984987][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.006980][ T29] usb 2-1: config 0 has no interface number 0 [ 398.014498][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.065858][ T29] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 398.082950][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.098897][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.111478][ T29] usb 2-1: Product: syz [ 398.119804][ T29] usb 2-1: Manufacturer: syz [ 398.136051][ T29] usb 2-1: SerialNumber: syz [ 398.159299][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.179480][ T29] usb 2-1: config 0 descriptor?? [ 398.196269][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.268675][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.437369][ T29] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 398.465321][ T29] gspca_m5602: Failed to find a sensor [ 398.496982][ T29] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 398.542584][ T29] usb 2-1: USB disconnect, device number 6 [ 398.559607][ T8291] hsr_slave_0: entered promiscuous mode [ 398.586683][ T8291] hsr_slave_1: entered promiscuous mode [ 398.605448][ T8291] debugfs: 'hsr0' already exists in 'hsr' [ 398.611268][ T8291] Cannot create hsr debugfs directory [ 398.836612][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.920608][ T8497] Can't find ip_set type hash:ip,po [ 403.856326][ T8530] vivid-001: kernel_thread() failed [ 404.030083][ T8528] fuse: Unknown parameter 'group_i00000000000000000000' [ 404.188860][ T8533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 404.454014][ T31] audit: type=1400 audit(1785132030.972:8): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=8526 comm="syz.1.495" [ 404.551124][ T8053] veth0_vlan: entered promiscuous mode [ 404.811602][ T5898] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 405.130169][ T8053] veth1_vlan: entered promiscuous mode [ 405.263763][ T5898] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 405.280524][ T5898] usb 2-1: config 0 has no interface number 0 [ 405.319377][ T5898] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 405.358507][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.380630][ T5898] usb 2-1: Product: syz [ 405.393402][ T5898] usb 2-1: Manufacturer: syz [ 405.418581][ T5898] usb 2-1: SerialNumber: syz [ 405.442666][ T8053] veth0_macvtap: entered promiscuous mode [ 405.464662][ T5898] usb 2-1: config 0 descriptor?? [ 405.501112][ T8053] veth1_macvtap: entered promiscuous mode [ 405.607494][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.702989][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.710921][ T5898] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 405.756043][ T5898] gspca_m5602: Failed to find a sensor [ 405.770703][ T194] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.776731][ T5898] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 405.816125][ T5898] usb 2-1: USB disconnect, device number 7 [ 407.018442][ T194] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.068862][ T194] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.111979][ T194] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.265934][ T8568] ip6t_srh: unknown srh match flags FF3F [ 409.965493][ T8291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 410.503092][ T8291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.770950][ T8291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.353428][ T8291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.400281][ T8291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.779247][ T8291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.789697][ T8291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.840009][ T8291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.802064][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.823655][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.833141][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.844757][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.858411][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.156906][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.249319][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.654260][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.661510][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.721949][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.729132][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.911826][ T5642] Bluetooth: hci6: command tx timeout [ 416.299021][ T8291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.317486][ T8291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.512355][ T8616] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 417.556398][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.833153][ T5642] Bluetooth: hci6: command tx timeout [ 419.638297][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.683783][ T8648] fuse: Unknown parameter 'group_i00000000000000000000' [ 419.720702][ T31] audit: type=1400 audit(1785132046.272:9): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=8646 comm="syz.4.512" [ 419.950565][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.001596][ T5898] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 420.084487][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.106367][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.115460][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.127867][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.137961][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 420.186410][ T5898] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 420.200090][ T5898] usb 5-1: config 0 has no interface number 0 [ 420.208715][ T5898] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 420.220752][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.228986][ T5898] usb 5-1: Product: syz [ 420.233303][ T5898] usb 5-1: Manufacturer: syz [ 420.238005][ T5898] usb 5-1: SerialNumber: syz [ 420.260243][ T5898] usb 5-1: config 0 descriptor?? [ 420.410971][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.512488][ T5898] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 420.549895][ T5898] gspca_m5602: Failed to find a sensor [ 420.572981][ T5898] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 420.611820][ T5898] usb 5-1: USB disconnect, device number 5 [ 422.451823][ T5631] Bluetooth: hci6: command tx timeout [ 422.457355][ T5642] Bluetooth: hci2: command tx timeout [ 425.133153][ T5642] Bluetooth: hci2: command tx timeout [ 425.139887][ T5631] Bluetooth: hci6: command tx timeout [ 427.191973][ T5631] Bluetooth: hci2: command tx timeout [ 428.791063][ T8690] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 429.130783][ T49] bridge_slave_1: left allmulticast mode [ 429.177671][ T49] bridge_slave_1: left promiscuous mode [ 429.198300][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.272143][ T5631] Bluetooth: hci2: command tx timeout [ 429.685209][ T49] bridge_slave_0: left allmulticast mode [ 429.696922][ T49] bridge_slave_0: left promiscuous mode [ 429.703959][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.954857][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.990667][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.025874][ T49] bond0 (unregistering): Released all slaves [ 432.074360][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.214212][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 433.406110][ T8722] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 434.928207][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.935997][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.999297][ T8596] bridge_slave_0: entered allmulticast mode [ 435.026036][ T8739] can: request_module (can-proto-3) failed. [ 435.703344][ T8596] bridge_slave_0: entered promiscuous mode [ 435.947025][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.025380][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.123865][ T8596] bridge_slave_1: entered allmulticast mode [ 437.394417][ T8596] bridge_slave_1: entered promiscuous mode [ 438.150220][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.179375][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.202211][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.237718][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.265670][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.950017][ T8746] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 438.977989][ T8746] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 439.023922][ T8746] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 439.103072][ T8746] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 439.306022][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.314322][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.330642][ T8746] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 440.797119][ T8774] : entered promiscuous mode [ 440.803808][ T5631] Bluetooth: hci3: command tx timeout [ 441.108588][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 442.142744][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.242150][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.779971][ T49] hsr_slave_0: left promiscuous mode [ 442.788326][ T49] hsr_slave_1: left promiscuous mode [ 442.795395][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.805124][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.813672][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.822817][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.844721][ T49] veth1_macvtap: left promiscuous mode [ 442.850420][ T49] veth0_macvtap: left promiscuous mode [ 442.856785][ T49] veth1_vlan: left promiscuous mode [ 442.862887][ T49] veth0_vlan: left promiscuous mode [ 442.871712][ T5631] Bluetooth: hci3: command tx timeout [ 443.307710][ T49] team0 (unregistering): Port device team_slave_1 removed [ 443.332977][ T49] team0 (unregistering): Port device team_slave_0 removed [ 443.640722][ T8596] team0: Port device team_slave_0 added [ 443.729041][ T8596] team0: Port device team_slave_1 added [ 444.498867][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.539043][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.174457][ T5631] Bluetooth: hci3: command tx timeout [ 446.176402][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.413254][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 447.083037][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.142221][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.251138][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.654494][ T5642] Bluetooth: hci3: command tx timeout [ 449.975780][ T8596] hsr_slave_0: entered promiscuous mode [ 449.992974][ T8596] hsr_slave_1: entered promiscuous mode [ 454.026038][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.044936][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.052795][ T8653] bridge_slave_0: entered allmulticast mode [ 454.071524][ T8653] bridge_slave_0: entered promiscuous mode [ 454.093449][ T8653] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.121487][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.129061][ T8653] bridge_slave_1: entered allmulticast mode [ 454.554918][ T8653] bridge_slave_1: entered promiscuous mode [ 455.314684][ T8653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.374539][ T8653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.477415][ T8882] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 458.643104][ T8888] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 458.725177][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 458.789613][ T8653] team0: Port device team_slave_0 added [ 459.275963][ T8888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.210705][ T8653] team0: Port device team_slave_1 added [ 461.820166][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.827862][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 461.853300][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.916904][ T8653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.950116][ T8653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.970449][ T8653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.998532][ T5900] usb 5-1: device descriptor read/64, error -71 [ 462.031416][ T8653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.254577][ T5900] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 462.261367][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.401514][ T5900] usb 5-1: device descriptor read/64, error -71 [ 462.690228][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.716722][ T5900] usb usb5-port1: attempt power cycle [ 463.891723][ T8653] hsr_slave_0: entered promiscuous mode [ 463.922694][ T8653] hsr_slave_1: entered promiscuous mode [ 463.931875][ T5900] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 463.958375][ T8653] debugfs: 'hsr0' already exists in 'hsr' [ 463.972412][ T8653] Cannot create hsr debugfs directory [ 463.973306][ T5900] usb 5-1: device descriptor read/8, error -71 [ 464.056828][ T8934] NILFS (nullb0): couldn't find nilfs on the device [ 464.652086][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.794049][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 465.616868][ T8596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 465.799783][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.850158][ T8949] 0x000000000006-0x000000020000 : "" [ 465.870069][ T8949] ftl_cs: FTL header corrupt! [ 466.719007][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.830505][ T8944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 466.903125][ T8596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 467.203147][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.886910][ T8596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.101856][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.248555][ T8596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.503701][ T8596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.818820][ T8966] vivid-009: kernel_thread() failed [ 470.986992][ T8596] kthread_run failed with err -4 [ 471.134047][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.168441][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.207856][ T8761] bridge_slave_0: entered allmulticast mode [ 471.254804][ T8761] bridge_slave_0: entered promiscuous mode [ 471.290040][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.379010][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.957172][ T8761] bridge_slave_1: entered allmulticast mode [ 471.966861][ T8761] bridge_slave_1: entered promiscuous mode [ 472.024093][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.038215][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.047694][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.142928][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.180299][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.955172][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.126338][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.123054][ T8996] can: request_module (can-proto-3) failed. [ 474.791400][ T5631] Bluetooth: hci4: command tx timeout [ 474.896893][ T8761] team0: Port device team_slave_0 added [ 475.010530][ T8761] team0: Port device team_slave_1 added [ 475.038599][ T49] bridge_slave_1: left allmulticast mode [ 475.059992][ T49] bridge_slave_1: left promiscuous mode [ 475.100005][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.155309][ T49] bridge_slave_0: left allmulticast mode [ 475.163812][ T49] bridge_slave_0: left promiscuous mode [ 475.169605][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.227840][ T9015] netlink: 'syz.1.560': attribute type 1 has an invalid length. [ 475.245930][ T49] bridge_slave_1: left allmulticast mode [ 475.251704][ T49] bridge_slave_1: left promiscuous mode [ 475.265269][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.278056][ T49] bridge_slave_0: left allmulticast mode [ 475.284383][ T49] bridge_slave_0: left promiscuous mode [ 475.290130][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.552530][ T5900] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 475.691959][ T5900] usb 6-1: device descriptor read/64, error -71 [ 475.720151][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.742065][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.762896][ T49] bond0 (unregistering): Released all slaves [ 475.978627][ T49] bond1 (unregistering): (slave geneve2): Releasing active interface [ 476.688702][ T5900] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 476.763496][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.787001][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.801855][ T49] bond0 (unregistering): Released all slaves [ 476.841004][ T49] bond1 (unregistering): Released all slaves [ 476.849211][ T5900] usb 6-1: device descriptor read/64, error -71 [ 476.871497][ T5631] Bluetooth: hci4: command tx timeout [ 476.986396][ T5900] usb usb6-port1: attempt power cycle [ 477.079316][ T9015] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 477.088373][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 477.133574][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.155020][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.249323][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.338337][ T49] tipc: Disabling bearer [ 477.345714][ T49] tipc: Left network mode [ 477.347053][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.381297][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.409264][ T5900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 477.464390][ T5900] usb 6-1: device descriptor read/8, error -71 [ 479.161886][ T5631] Bluetooth: hci4: command tx timeout [ 479.196630][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.321574][ T5900] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 479.369247][ T5900] usb 6-1: device descriptor read/8, error -71 [ 479.419473][ T8653] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 479.465263][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.483634][ T5900] usb usb6-port1: unable to enumerate USB device [ 479.494911][ T8653] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 479.551968][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.576485][ T9042] syz_tun: entered allmulticast mode [ 479.731473][ T8653] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 479.795352][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.155261][ T8761] hsr_slave_0: entered promiscuous mode [ 480.191173][ T8761] hsr_slave_1: entered promiscuous mode [ 480.225359][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 480.270055][ T8761] Cannot create hsr debugfs directory [ 480.425781][ T5642] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 480.441796][ T5642] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 480.451278][ T5642] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 480.462942][ T5642] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 480.479373][ T5642] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 480.706084][ T9012] syz_tun: left allmulticast mode [ 481.191556][ T5642] Bluetooth: hci4: command tx timeout [ 481.929484][ T9074] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 482.561441][ T5642] Bluetooth: hci6: command tx timeout [ 484.490470][ T9091] ubi: mtd0 is already attached to ubi0 [ 484.647155][ T5642] Bluetooth: hci6: command tx timeout [ 487.224896][ T5642] Bluetooth: hci6: command tx timeout [ 487.270574][ T49] hsr_slave_0: left promiscuous mode [ 487.321815][ T49] hsr_slave_1: left promiscuous mode [ 487.337806][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.396016][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.459275][ T49] hsr_slave_0: left promiscuous mode [ 487.497451][ T49] hsr_slave_1: left promiscuous mode [ 487.524583][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.544825][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.569463][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.592820][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.617635][ T49] veth1_macvtap: left promiscuous mode [ 487.623828][ T49] veth0_macvtap: left promiscuous mode [ 487.629538][ T49] veth1_vlan: left promiscuous mode [ 487.636116][ T49] veth0_vlan: left promiscuous mode [ 487.992632][ T49] team0 (unregistering): Port device team_slave_1 removed [ 488.013726][ T49] team0 (unregistering): Port device team_slave_0 removed [ 488.407694][ T49] team0 (unregistering): Port device team_slave_1 removed [ 488.426845][ T49] team0 (unregistering): Port device team_slave_0 removed [ 489.275932][ T5642] Bluetooth: hci6: command tx timeout [ 490.516164][ T9112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.538202][ T9137] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 492.350860][ T8761] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.510663][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 492.952837][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.577'. [ 492.984326][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.5.577'. [ 494.721074][ T8761] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 495.409116][ T8761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.477820][ T49] IPVS: stop unused estimator thread 0... [ 495.505249][ T9166] geneve4: entered promiscuous mode [ 495.543390][ T9166] geneve4: entered allmulticast mode [ 495.818016][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.841211][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.859140][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.870386][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.544439][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.564706][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.572709][ T5631] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.589033][ T8978] bridge_slave_0: entered allmulticast mode [ 497.619149][ T8978] bridge_slave_0: entered promiscuous mode [ 497.633006][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.673504][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.711120][ T8978] bridge_slave_1: entered allmulticast mode [ 497.745656][ T8978] bridge_slave_1: entered promiscuous mode [ 497.834644][ T9187] syzkaller0: entered promiscuous mode [ 497.870564][ T9187] syzkaller0: entered allmulticast mode [ 497.896551][ T9190] tipc: Enabled bearer , priority 0 [ 498.085814][ T9177] tipc: Resetting bearer [ 498.217422][ T9176] tipc: Resetting bearer [ 498.272793][ T9176] tipc: Disabling bearer [ 498.305294][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.352194][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.891200][ T9207] ubi: mtd0 is already attached to ubi0 [ 499.046516][ T8978] team0: Port device team_slave_0 added [ 499.077079][ T8978] team0: Port device team_slave_1 added [ 499.452392][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 499.888466][ T5631] Bluetooth: hci2: command tx timeout [ 500.926266][ T9235] vivid-001: kernel_thread() failed [ 501.078643][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.093995][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.144107][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.385379][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.723205][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.939676][ T5631] Bluetooth: hci2: command tx timeout [ 502.061045][ T9237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.108783][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 502.152224][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.167205][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.267195][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.001454][ T5631] Bluetooth: hci2: command tx timeout [ 504.743680][ T8978] hsr_slave_0: entered promiscuous mode [ 504.750419][ T8978] hsr_slave_1: entered promiscuous mode [ 504.805773][ T8978] debugfs: 'hsr0' already exists in 'hsr' [ 504.812606][ T8978] Cannot create hsr debugfs directory [ 506.081607][ T5631] Bluetooth: hci2: command tx timeout [ 506.115126][ T9283] sd 0:0:1:0: PR command failed: 1026 [ 506.134153][ T9283] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 506.141103][ T9283] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 506.325052][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.399393][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.432155][ T9055] bridge_slave_0: entered allmulticast mode [ 506.569710][ T9055] bridge_slave_0: entered promiscuous mode [ 506.938530][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.994991][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.026503][ T9055] bridge_slave_1: entered allmulticast mode [ 507.062031][ T9055] bridge_slave_1: entered promiscuous mode [ 510.189893][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 510.307451][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.491130][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.916869][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.599'. [ 513.240783][ T9055] team0: Port device team_slave_0 added [ 513.249373][ T9055] team0: Port device team_slave_1 added [ 515.178616][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.210098][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.946856][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.985930][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.993138][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.020380][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.544202][ T9055] hsr_slave_0: entered promiscuous mode [ 516.550969][ T9055] hsr_slave_1: entered promiscuous mode [ 516.572556][ T9055] debugfs: 'hsr0' already exists in 'hsr' [ 516.578307][ T9055] Cannot create hsr debugfs directory [ 516.766822][ T49] bridge_slave_1: left allmulticast mode [ 516.790998][ T49] bridge_slave_1: left promiscuous mode [ 516.809401][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.892853][ T49] bridge_slave_0: left allmulticast mode [ 516.906165][ T49] bridge_slave_0: left promiscuous mode [ 516.929031][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.044355][ T49] bridge_slave_1: left allmulticast mode [ 517.077603][ T49] bridge_slave_1: left promiscuous mode [ 517.114141][ T9368] NILFS (nullb0): couldn't find nilfs on the device [ 517.219489][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.561232][ T49] bridge_slave_0: left allmulticast mode [ 517.673960][ T49] bridge_slave_0: left promiscuous mode [ 517.683492][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.458036][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.487654][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.508464][ T49] bond0 (unregistering): Released all slaves [ 519.193709][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.226462][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.242451][ T49] bond0 (unregistering): Released all slaves [ 519.419508][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 520.142804][ T9396] NILFS (nullb0): couldn't find nilfs on the device [ 520.307257][ T9399] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 522.574641][ T9415] NILFS (nullb0): couldn't find nilfs on the device [ 524.239903][ T9429] ip6t_srh: unknown srh match flags FF3F [ 528.277995][ T9445] can: request_module (can-proto-3) failed. [ 530.196831][ T49] hsr_slave_0: left promiscuous mode [ 530.449613][ T49] hsr_slave_1: left promiscuous mode [ 530.458347][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.466591][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.479145][ T49] hsr_slave_0: left promiscuous mode [ 530.485616][ T49] hsr_slave_1: left promiscuous mode [ 530.491930][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.555100][ T9473] NILFS (nullb0): couldn't find nilfs on the device [ 531.139394][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.537732][ T49] team0 (unregistering): Port device team_slave_1 removed [ 531.558985][ T49] team0 (unregistering): Port device team_slave_0 removed [ 531.990867][ T49] team0 (unregistering): Port device team_slave_1 removed [ 532.194024][ T49] team0 (unregistering): Port device team_slave_0 removed [ 532.222182][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 532.233880][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 532.298756][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 532.991516][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.023725][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.031624][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.409495][ T9495] NILFS (nullb0): couldn't find nilfs on the device [ 534.144764][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.235131][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.267407][ T9182] bridge_slave_0: entered allmulticast mode [ 534.290808][ T9182] bridge_slave_0: entered promiscuous mode [ 534.484021][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 534.707059][ T9503] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 535.114758][ T5631] Bluetooth: hci3: command tx timeout [ 535.317204][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.400006][ T9508] ip6t_srh: unknown srh match flags FF3F [ 535.429647][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.437654][ T9182] bridge_slave_1: entered allmulticast mode [ 535.445542][ T9182] bridge_slave_1: entered promiscuous mode [ 535.489549][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.503145][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.351854][ T5631] Bluetooth: hci3: command tx timeout [ 538.753666][ T9516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 538.960563][ T9182] team0: Port device team_slave_0 added [ 538.990129][ T9182] team0: Port device team_slave_1 added [ 539.435163][ T5631] Bluetooth: hci3: command tx timeout [ 540.544452][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.553615][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.601654][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.727125][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.771397][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.835293][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.521200][ T5631] Bluetooth: hci3: command tx timeout [ 542.796398][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.809080][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.817632][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.836971][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.849431][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.916422][ T9182] hsr_slave_0: entered promiscuous mode [ 542.974606][ T9182] hsr_slave_1: entered promiscuous mode [ 544.951766][ T5642] Bluetooth: hci4: command tx timeout [ 545.967668][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.640'. [ 547.032567][ T5642] Bluetooth: hci4: command tx timeout [ 547.637758][ T9606] ip6t_srh: unknown srh match flags FF3F [ 547.777698][ T5900] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 549.122215][ T5642] Bluetooth: hci4: command tx timeout [ 549.343529][ T5900] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 550.719578][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.758505][ T5900] usb 6-1: config 0 descriptor?? [ 550.799986][ T5900] usb 6-1: can't set config #0, error -71 [ 550.811991][ T5900] usb 6-1: USB disconnect, device number 17 [ 551.192962][ T5642] Bluetooth: hci4: command tx timeout [ 551.816705][ T49] bridge_slave_1: left allmulticast mode [ 551.845128][ T49] bridge_slave_1: left promiscuous mode [ 551.880934][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.950994][ T49] bridge_slave_0: left allmulticast mode [ 551.973733][ T49] bridge_slave_0: left promiscuous mode [ 551.989445][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.029442][ T49] bridge_slave_1: left allmulticast mode [ 552.040022][ T49] bridge_slave_1: left promiscuous mode [ 552.051285][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.066060][ T49] bridge_slave_0: left allmulticast mode [ 552.074827][ T49] bridge_slave_0: left promiscuous mode [ 552.084756][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.218685][ T9649] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 552.287493][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 552.315087][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.335758][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.354334][ T49] bond0 (unregistering): Released all slaves [ 552.478441][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.495490][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.508724][ T49] bond0 (unregistering): Released all slaves [ 552.702273][ T9637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 552.850135][ T9649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 554.128041][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.144507][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.159630][ T9486] bridge_slave_0: entered allmulticast mode [ 554.194049][ T9486] bridge_slave_0: entered promiscuous mode [ 554.271546][ T5752] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 554.326717][ T9486] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.342977][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.358015][ T9486] bridge_slave_1: entered allmulticast mode [ 554.396451][ T9486] bridge_slave_1: entered promiscuous mode [ 554.471057][ T9486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.487294][ T9486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.505960][ T5752] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 554.515281][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.701708][ T5752] usb 2-1: config 0 descriptor?? [ 554.720209][ T5752] cp210x 2-1:0.0: cp210x converter detected [ 555.749378][ T9486] team0: Port device team_slave_0 added [ 555.788391][ T5752] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 555.816207][ T5752] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 555.835593][ T5752] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 555.876577][ T5752] usb 2-1: cp210x converter now attached to ttyUSB0 [ 556.028866][ T9486] team0: Port device team_slave_1 added [ 556.558690][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.596967][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.635586][ T9486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.651647][ T9486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.664328][ T9486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.694072][ T9486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.764890][ T9486] hsr_slave_0: entered promiscuous mode [ 556.773546][ T9486] hsr_slave_1: entered promiscuous mode [ 556.780074][ T9486] debugfs: 'hsr0' already exists in 'hsr' [ 556.786442][ T9486] Cannot create hsr debugfs directory [ 556.960383][ T9717] ubi: mtd0 is already attached to ubi0 [ 557.532978][ T24] usb 2-1: USB disconnect, device number 8 [ 557.584174][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 557.601399][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 557.677883][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 557.701686][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 557.701774][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 557.717771][ T24] cp210x 2-1:0.0: device disconnected [ 557.726230][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 557.791262][ T49] hsr_slave_0: left promiscuous mode [ 557.838809][ T49] hsr_slave_1: left promiscuous mode [ 557.858829][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.888782][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.898637][ T9726] ip6t_srh: unknown srh match flags FF3F [ 559.124755][ T49] hsr_slave_0: left promiscuous mode [ 559.304181][ T49] hsr_slave_1: left promiscuous mode [ 559.483522][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.658957][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.754007][ T5642] Bluetooth: hci6: command tx timeout [ 561.831922][ T5642] Bluetooth: hci6: command tx timeout [ 561.940340][ T49] team0 (unregistering): Port device team_slave_1 removed [ 561.973944][ T49] team0 (unregistering): Port device team_slave_0 removed [ 562.161236][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.171122][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.909900][ T49] team0 (unregistering): Port device team_slave_1 removed [ 562.937211][ T49] team0 (unregistering): Port device team_slave_0 removed [ 563.911514][ T5642] Bluetooth: hci6: command tx timeout [ 564.481449][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 564.708080][ T9779] ubi: mtd0 is already attached to ubi0 [ 564.839337][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.023507][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.239327][ T9] usb 5-1: config 0 descriptor?? [ 565.280168][ T9] cp210x 5-1:0.0: cp210x converter detected [ 566.345879][ T5642] Bluetooth: hci6: command tx timeout [ 566.570734][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 566.604062][ T9] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 566.611709][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 566.934890][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 567.077623][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.094072][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.107453][ T9552] bridge_slave_0: entered allmulticast mode [ 567.118298][ T9552] bridge_slave_0: entered promiscuous mode [ 567.128944][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.136260][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.144904][ T9552] bridge_slave_1: entered allmulticast mode [ 567.153511][ T9552] bridge_slave_1: entered promiscuous mode [ 567.459250][ T9552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.476028][ T9552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.618926][ T9552] team0: Port device team_slave_0 added [ 567.645227][ T9552] team0: Port device team_slave_1 added [ 567.701752][ T9802] fuse: Unknown parameter 'group_i00000000000000000000' [ 567.720761][ T31] audit: type=1400 audit(1785132194.272:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=9801 comm="syz.1.671" [ 567.924363][ T9] usb 5-1: USB disconnect, device number 10 [ 567.936071][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.950376][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 567.963527][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.981463][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 567.993233][ T9552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.013920][ T9] cp210x 5-1:0.0: device disconnected [ 568.030726][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.040055][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.076539][ T9552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.105270][ T9486] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.130677][ T9486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.208137][ T24] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 568.216513][ T24] usb 2-1: config 0 has no interface number 0 [ 568.225477][ T24] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 568.235107][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.244089][ T24] usb 2-1: Product: syz [ 568.248407][ T24] usb 2-1: Manufacturer: syz [ 568.386855][ T9486] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 568.448071][ T9486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.489889][ T9486] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 568.489912][ T24] usb 2-1: SerialNumber: syz [ 568.504904][ T24] usb 2-1: config 0 descriptor?? [ 568.839251][ T9486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.265394][ T24] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 569.384316][ T49] bridge_slave_1: left allmulticast mode [ 569.401795][ T49] bridge_slave_1: left promiscuous mode [ 569.420240][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.480403][ T24] gspca_m5602: Failed to find a sensor [ 569.486068][ T24] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 569.494635][ T24] usb 2-1: USB disconnect, device number 9 [ 569.586179][ T49] bridge_slave_0: left allmulticast mode [ 569.592284][ T49] bridge_slave_0: left promiscuous mode [ 569.598079][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.636862][ T49] bridge_slave_1: left allmulticast mode [ 569.647293][ T49] bridge_slave_1: left promiscuous mode [ 569.657063][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.835580][ T9816] ip6t_srh: unknown srh match flags FF3F [ 569.891685][ T49] bridge_slave_0: left allmulticast mode [ 569.897405][ T49] bridge_slave_0: left promiscuous mode [ 569.903871][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.467970][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.565914][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.613888][ T49] bond0 (unregistering): Released all slaves [ 572.153841][ T9825] ubi: mtd0 is already attached to ubi0 [ 572.940749][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.970276][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.993380][ T49] bond0 (unregistering): Released all slaves [ 573.089525][ T9552] hsr_slave_0: entered promiscuous mode [ 573.099539][ T9552] hsr_slave_1: entered promiscuous mode [ 573.107886][ T9552] debugfs: 'hsr0' already exists in 'hsr' [ 573.115257][ T9552] Cannot create hsr debugfs directory [ 573.254729][ T9486] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 573.288445][ T9486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.373146][ T9831] NILFS (nullb0): couldn't find nilfs on the device [ 574.105611][ T9839] siw: device registration error -23 [ 574.556403][ T9836] can: request_module (can-proto-3) failed. [ 574.811535][ T5900] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 575.014179][ T5900] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 575.034340][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.156865][ T5900] usb 2-1: config 0 descriptor?? [ 575.215090][ T5900] cp210x 2-1:0.0: cp210x converter detected [ 575.597169][ T5900] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 575.609034][ T5900] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 575.618067][ T5900] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 575.669022][ T5900] usb 2-1: cp210x converter now attached to ttyUSB0 [ 576.810387][ T49] hsr_slave_0: left promiscuous mode [ 576.834176][ T49] hsr_slave_1: left promiscuous mode [ 576.848057][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.869596][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.900919][ T5642] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 577.053956][ T49] hsr_slave_0: left promiscuous mode [ 577.060896][ T49] hsr_slave_1: left promiscuous mode [ 577.067739][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.076158][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.301896][ T5621] usb 2-1: USB disconnect, device number 10 [ 577.364371][ T5621] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 577.418780][ T5621] cp210x 2-1:0.0: device disconnected [ 577.611083][ T49] team0 (unregistering): Port device team_slave_1 removed [ 577.683013][ T9876] ubi: mtd0 is already attached to ubi0 [ 577.694677][ T49] team0 (unregistering): Port device team_slave_0 removed [ 578.579887][ T49] team0 (unregistering): Port device team_slave_1 removed [ 578.628670][ T49] team0 (unregistering): Port device team_slave_0 removed [ 579.206110][ T9888] ip6t_srh: unknown srh match flags FF3F [ 579.422576][ T5900] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 579.912189][ T5900] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.095267][ T5900] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.127007][ T9552] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.234321][ T5900] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 580.319893][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.365439][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.827828][ T5900] usb 6-1: config 0 descriptor?? [ 580.975028][ T9552] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 581.310821][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.957839][ T9552] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 584.000764][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.012446][ T9552] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 584.047220][ T9552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.067467][ T9893] syz_tun: entered allmulticast mode [ 584.148822][ T9903] fuse: Unknown parameter 'group_i00000000000000000000' [ 584.193939][ T9898] syz_tun: left allmulticast mode [ 584.205354][ T31] audit: type=1400 audit(1785132210.752:11): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=9901 comm="syz.1.695" [ 584.233061][ T5752] usb 6-1: USB disconnect, device number 18 [ 584.354782][ T9486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.450859][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.477161][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.501904][ T9720] bridge_slave_0: entered allmulticast mode [ 584.515021][ T9720] bridge_slave_0: entered promiscuous mode [ 584.531427][ T186] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 584.534943][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.561591][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.604244][ T9720] bridge_slave_1: entered allmulticast mode [ 584.696626][ T9720] bridge_slave_1: entered promiscuous mode [ 584.807231][ T186] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 584.892080][ T186] usb 2-1: config 0 has no interface number 0 [ 585.184305][ T186] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 585.217589][ T186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.244763][ T186] usb 2-1: Product: syz [ 585.257458][ T186] usb 2-1: Manufacturer: syz [ 585.269395][ T186] usb 2-1: SerialNumber: syz [ 585.280487][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.302826][ T186] usb 2-1: config 0 descriptor?? [ 585.328439][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.361020][ T9486] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.496751][ T9720] team0: Port device team_slave_0 added [ 585.519082][ T9720] team0: Port device team_slave_1 added [ 585.540967][ T186] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 585.575833][ T186] gspca_m5602: Failed to find a sensor [ 585.591686][ T186] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 585.634218][ T186] usb 2-1: USB disconnect, device number 11 [ 585.655037][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.662246][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.718100][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.725253][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.366854][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.402913][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.443299][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.464419][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.511218][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.572123][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.872411][ T9486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.245761][ T9720] hsr_slave_0: entered promiscuous mode [ 589.256713][ T9720] hsr_slave_1: entered promiscuous mode [ 589.449953][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.222552][ T9947] ip6t_srh: unknown srh match flags FF3F [ 593.039891][ T9552] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.536791][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.544003][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.615785][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.623002][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.948839][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.964167][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.977047][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.988068][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.997348][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 598.192362][ T5642] Bluetooth: hci2: command tx timeout [ 598.604719][ T9720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 598.691750][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 598.923367][ T9720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 599.321624][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.385926][ T9720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 599.440370][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.231618][ T5642] Bluetooth: hci2: command tx timeout [ 600.525636][ T9720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 600.569234][ T9720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.631984][T10020] NILFS (nullb0): couldn't find nilfs on the device [ 601.553779][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 603.548676][ T5642] Bluetooth: hci2: command tx timeout [ 604.143696][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.155149][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.164722][ T5631] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.174595][ T5631] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.183927][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.200571][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 604.421712][T10053] fuse: Unknown parameter 'group_i00000000000000000000' [ 604.471460][ T31] audit: type=1400 audit(1785132231.022:12): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=10052 comm="syz.1.721" [ 605.338703][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.398134][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.491442][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 605.591581][ T5631] Bluetooth: hci2: command tx timeout [ 605.648032][ T5631] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 605.808374][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.815653][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.868320][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.875551][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.093393][ T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 606.111475][ T9] usb 2-1: config 0 has no interface number 0 [ 606.128453][ T9] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 606.175776][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.216890][ T6067] bridge_slave_1: left allmulticast mode [ 606.226480][ T9] usb 2-1: Product: syz [ 606.231609][ T5631] Bluetooth: hci3: command tx timeout [ 606.240505][ T9] usb 2-1: Manufacturer: syz [ 606.241716][ T6067] bridge_slave_1: left promiscuous mode [ 606.254953][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.267822][ T6067] bridge_slave_0: left allmulticast mode [ 606.268048][ T9] usb 2-1: SerialNumber: syz [ 606.273869][ T6067] bridge_slave_0: left promiscuous mode [ 606.284017][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.177726][ T9] usb 2-1: config 0 descriptor?? [ 608.045677][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 608.055539][ T9] gspca_m5602: Failed to find a sensor [ 608.061010][ T9] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 608.080479][ T9] usb 2-1: USB disconnect, device number 12 [ 608.287849][ T6067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.319346][ T5631] Bluetooth: hci3: command tx timeout [ 608.389879][ T6067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.576710][ T6067] bond0 (unregistering): Released all slaves [ 608.676611][T10078] NILFS (nullb0): couldn't find nilfs on the device [ 610.289555][T10079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 610.392809][ T5631] Bluetooth: hci3: command tx timeout [ 612.478410][ T5631] Bluetooth: hci3: command tx timeout [ 613.396373][T10109] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 614.349100][T10119] fuse: Unknown parameter 'group_i00000000000000000000' [ 614.380347][T10121] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 614.419172][ T31] audit: type=1400 audit(1785132240.962:13): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=10116 comm="syz.4.735" [ 614.694316][ T9121] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 614.765927][ T6067] hsr_slave_0: left promiscuous mode [ 614.772971][ T6067] hsr_slave_1: left promiscuous mode [ 614.803654][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.828888][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.831814][ T29] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 614.874203][ T186] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 614.884286][ T9121] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 614.899266][ T9121] usb 5-1: config 0 has no interface number 0 [ 614.926137][ T9121] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 614.948548][ T9121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.968045][ T9121] usb 5-1: Product: syz [ 614.978339][ T9121] usb 5-1: Manufacturer: syz [ 614.990864][ T9121] usb 5-1: SerialNumber: syz [ 615.004334][ T29] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 615.034018][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.044677][ T9121] usb 5-1: config 0 descriptor?? [ 615.054086][ T186] usb 2-1: no configurations [ 615.061159][ T29] usb 6-1: config 0 descriptor?? [ 615.079544][ T186] usb 2-1: can't read configurations, error -22 [ 615.088926][ T29] cp210x 6-1:0.0: cp210x converter detected [ 615.227599][ T186] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 615.308252][ T9121] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 615.347415][ T9121] gspca_m5602: Failed to find a sensor [ 615.388007][ T9121] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 615.413259][ T186] usb 2-1: no configurations [ 615.414880][ T9121] usb 5-1: USB disconnect, device number 11 [ 615.435023][ T186] usb 2-1: can't read configurations, error -22 [ 615.468412][ T186] usb usb2-port1: attempt power cycle [ 615.506829][ T29] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 615.551053][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 615.612006][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 615.730546][ T29] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -32 [ 615.758298][ T29] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 615.797781][ T29] usb 6-1: cp210x converter now attached to ttyUSB0 [ 615.838351][ T29] usb 6-1: USB disconnect, device number 19 [ 615.861755][ T186] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 615.892846][ T186] usb 2-1: no configurations [ 615.909986][ T186] usb 2-1: can't read configurations, error -22 [ 615.913305][ T29] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.965990][ T29] cp210x 6-1:0.0: device disconnected [ 616.275354][ T186] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 616.491785][ T186] usb 2-1: device descriptor read/8, error -71 [ 616.635994][ T186] usb usb2-port1: unable to enumerate USB device [ 617.269448][ T9971] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.300676][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.327398][ T9971] bridge_slave_0: entered allmulticast mode [ 617.361287][ T9971] bridge_slave_0: entered promiscuous mode [ 617.384544][ T9971] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.401571][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.421619][ T9971] bridge_slave_1: entered allmulticast mode [ 617.429548][ T9971] bridge_slave_1: entered promiscuous mode [ 617.653140][ T9971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.666285][ T9971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.714465][ T9971] team0: Port device team_slave_0 added [ 617.743214][ T9971] team0: Port device team_slave_1 added [ 617.804775][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.818372][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.846324][ T9971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.861056][ T9971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.873762][ T9971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.169076][ T9971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.224079][T10185] siw: device registration error -23 [ 620.288570][T10183] can: request_module (can-proto-3) failed. [ 620.335657][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 620.379235][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 620.403843][ T9971] hsr_slave_0: entered promiscuous mode [ 620.410273][ T9971] hsr_slave_1: entered promiscuous mode [ 620.417079][ T9971] debugfs: 'hsr0' already exists in 'hsr' [ 620.423557][ T9971] Cannot create hsr debugfs directory [ 620.436359][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 620.450019][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 620.475560][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.865635][T10214] fuse: Unknown parameter 'group_i00000000000000000000' [ 620.917253][ T31] audit: type=1400 audit(1785132247.452:14): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=10212 comm="syz.5.747" [ 621.186702][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 621.447086][ T29] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 621.478659][ T29] usb 6-1: config 0 has no interface number 0 [ 621.762306][ T29] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 621.776331][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.821389][ T29] usb 6-1: Product: syz [ 621.847316][ T29] usb 6-1: Manufacturer: syz [ 621.863780][ T29] usb 6-1: SerialNumber: syz [ 621.897839][ T29] usb 6-1: config 0 descriptor?? [ 622.126856][ T29] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 622.153614][ T29] gspca_m5602: Failed to find a sensor [ 622.169305][ T29] ALi m5602 6-1:0.88: ALi m5602 webcam failed [ 622.196198][ T29] usb 6-1: USB disconnect, device number 20 [ 623.803227][ T5642] Bluetooth: hci4: command tx timeout [ 623.811328][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.820015][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.005942][ T6067] bridge_slave_1: left allmulticast mode [ 624.027007][ T6067] bridge_slave_1: left promiscuous mode [ 624.254910][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.275712][ T6067] bridge_slave_0: left allmulticast mode [ 624.281936][ T6067] bridge_slave_0: left promiscuous mode [ 624.287697][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.000094][ T8785] IPVS: starting estimator thread 0... [ 625.136107][T10250] IPVS: using max 27 ests per chain, 64800 per kthread [ 625.316489][ T6067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.358694][ T6067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.385460][ T6067] bond0 (unregistering): Released all slaves [ 625.832123][ T5642] Bluetooth: hci4: command tx timeout [ 626.375194][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.384101][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.392767][T10044] bridge_slave_0: entered allmulticast mode [ 626.407577][T10044] bridge_slave_0: entered promiscuous mode [ 626.555999][T10259] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 627.102963][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.110179][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.118387][T10044] bridge_slave_1: entered allmulticast mode [ 627.127547][T10044] bridge_slave_1: entered promiscuous mode [ 627.139628][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 627.630251][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.810178][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.921420][ T5642] Bluetooth: hci4: command tx timeout [ 628.167616][ T6067] hsr_slave_0: left promiscuous mode [ 628.216138][ T6067] hsr_slave_1: left promiscuous mode [ 628.258052][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.310603][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.794260][ T5642] Bluetooth: hci0: unexpected event for opcode 0x2039 [ 629.224735][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 629.288206][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 630.031525][ T5642] Bluetooth: hci4: command tx timeout [ 630.885997][T10044] team0: Port device team_slave_0 added [ 630.919171][T10290] fuse: Unknown parameter 'group_i00000000000000000000' [ 630.935561][ T31] audit: type=1400 audit(1785132257.492:15): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=10289 comm="syz.4.760" [ 631.019164][T10044] team0: Port device team_slave_1 added [ 631.171421][ T29] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 631.353805][ T29] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 631.417026][ T29] usb 5-1: config 0 has no interface number 0 [ 631.536117][ T29] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 631.573462][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.623920][ T29] usb 5-1: Product: syz [ 631.656661][ T29] usb 5-1: Manufacturer: syz [ 631.692073][ T29] usb 5-1: SerialNumber: syz [ 631.872525][ T29] usb 5-1: config 0 descriptor?? [ 631.897368][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.935766][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.028281][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.126633][ T29] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 632.149557][ T29] gspca_m5602: Failed to find a sensor [ 632.158856][ T29] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 632.185312][ T29] usb 5-1: USB disconnect, device number 12 [ 632.195357][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.230503][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.539719][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.717498][T10322] NILFS (nullb0): couldn't find nilfs on the device [ 635.222421][T10044] hsr_slave_0: entered promiscuous mode [ 635.331989][T10044] hsr_slave_1: entered promiscuous mode [ 635.363234][T10044] debugfs: 'hsr0' already exists in 'hsr' [ 635.430815][T10044] Cannot create hsr debugfs directory [ 639.632156][ T9121] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 639.813371][ T9121] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 639.836742][ T9121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.877569][ T9121] usb 2-1: config 0 descriptor?? [ 639.901854][ T9121] cp210x 2-1:0.0: cp210x converter detected [ 640.410099][ T9971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 640.439591][ T9971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 640.460221][ T9971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 640.480989][ T9971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 640.497019][ T9121] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 640.558735][ T9971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 640.578559][ T9971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 640.595502][ T5631] Bluetooth: hci5: unexpected event for opcode 0x2039 [ 640.720511][ T9121] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 640.758961][ T9121] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 640.987472][ T9121] usb 2-1: cp210x converter now attached to ttyUSB0 [ 641.210672][ T9121] usb 2-1: USB disconnect, device number 17 [ 641.506545][ T9121] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 641.592876][ T9121] cp210x 2-1:0.0: device disconnected [ 641.755013][ T9971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 641.786177][ T9971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 641.917046][T10384] fuse: Unknown parameter 'group_i00000000000000000000' [ 641.969076][ T31] audit: type=1400 audit(1785132268.522:16): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=5B5B8A215E pid=10380 comm="syz.1.774" [ 642.033023][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.056512][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.060884][T10387] netlink: 'syz.5.775': attribute type 1 has an invalid length. [ 642.073632][T10190] bridge_slave_0: entered allmulticast mode [ 642.093418][T10190] bridge_slave_0: entered promiscuous mode [ 642.142840][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 642.170468][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 642.241569][ T5770] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 642.262147][T10387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 642.283486][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.293739][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.301148][T10190] bridge_slave_1: entered allmulticast mode [ 642.312576][T10190] bridge_slave_1: entered promiscuous mode [ 642.413205][ T5770] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 642.435845][ T5770] usb 2-1: config 0 has no interface number 0 [ 642.457510][ T5770] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 642.472969][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.493672][ T5770] usb 2-1: Product: syz [ 642.506517][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.519629][ T5770] usb 2-1: Manufacturer: syz [ 642.529775][ T5770] usb 2-1: SerialNumber: syz [ 642.539684][ T5863] bridge_slave_1: left allmulticast mode [ 642.549152][ T5770] usb 2-1: config 0 descriptor?? [ 642.557203][ T5863] bridge_slave_1: left promiscuous mode [ 642.578223][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.603031][ T5863] bridge_slave_0: left allmulticast mode [ 642.608783][ T5863] bridge_slave_0: left promiscuous mode [ 642.616323][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.658460][T10400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.776'. [ 642.774194][ T5770] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 642.806689][ T5770] gspca_m5602: Failed to find a sensor [ 642.824479][ T5770] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 642.848257][ T5770] usb 2-1: USB disconnect, device number 18 [ 643.124731][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.156416][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.179679][ T5863] bond0 (unregistering): Released all slaves [ 644.054339][T10422] vivid-009: kernel_thread() failed [ 645.954004][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.648569][T10190] team0: Port device team_slave_0 added [ 646.876941][T10190] team0: Port device team_slave_1 added [ 647.501602][T10437] vivid-001: kernel_thread() failed [ 647.885177][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.953278][T10448] siw: device registration error -23 [ 648.170711][ T30] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 648.673241][T10442] can: request_module (can-proto-3) failed. [ 649.071047][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.097491][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.178203][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.185402][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.213435][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.275409][ T30] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 649.287418][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.342598][ T30] usb 5-1: config 0 descriptor?? [ 649.388601][ T30] cp210x 5-1:0.0: cp210x converter detected [ 649.512202][ T5863] hsr_slave_0: left promiscuous mode [ 649.525641][ T5863] hsr_slave_1: left promiscuous mode [ 649.553040][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.583526][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.669628][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.786'. [ 649.757557][ T30] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 650.018346][ T30] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 650.027201][ T30] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 650.052929][ T30] usb 5-1: cp210x converter now attached to ttyUSB0 [ 650.213818][ T30] usb 5-1: USB disconnect, device number 13 [ 650.262563][ T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 650.284767][ T30] cp210x 5-1:0.0: device disconnected [ 650.373380][ T5863] team0 (unregistering): Port device team_slave_1 removed [ 650.406976][ T5863] team0 (unregistering): Port device team_slave_0 removed [ 650.767544][T10190] hsr_slave_0: entered promiscuous mode [ 650.789457][T10190] hsr_slave_1: entered promiscuous mode [ 651.077969][T10044] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 651.119427][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.140449][T10044] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 651.915013][T10471] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 651.935680][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.096571][T10480] netlink: 'syz.5.789': attribute type 1 has an invalid length. [ 652.257062][T10044] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 652.289667][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.316578][T10044] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 652.329095][T10044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.397282][T10480] 8021q: adding VLAN 0 to HW filter on device bond3 [ 652.444111][T10481] macvlan2: entered promiscuous mode [ 652.484430][T10481] macvlan2: entered allmulticast mode [ 652.522837][T10481] bond3: entered allmulticast mode [ 652.537327][T10481] bond3: entered promiscuous mode [ 652.553481][T10481] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 652.591062][T10481] team0: Port device macvlan2 added [ 652.663631][ T9971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.552205][ T9971] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.786709][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.793869][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.957681][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.964862][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.121113][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 656.876394][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.990035][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.146665][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.153860][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.199820][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.207013][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.160279][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 659.223315][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.253705][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.262915][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.271001][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 659.280785][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 659.426906][T10554] NILFS (nullb0): couldn't find nilfs on the device [ 659.503540][T10190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.584823][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.745695][T10190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 659.953236][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.969855][T10190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 659.987613][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.250552][T10190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 660.298355][T10190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.422975][ T5643] Bluetooth: hci2: command tx timeout [ 664.521537][ T5643] Bluetooth: hci2: command tx timeout [ 666.151803][ T8071] bridge_slave_1: left allmulticast mode [ 666.163611][ T8071] bridge_slave_1: left promiscuous mode [ 666.189558][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.216956][ T8071] bridge_slave_0: left allmulticast mode [ 666.231502][ T8071] bridge_slave_0: left promiscuous mode [ 666.244532][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.264382][ T5631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 666.274911][ T5631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 666.286253][ T5631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 666.295811][ T5631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 666.306988][ T5631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 666.561992][T10619] file system registered [ 666.583017][T10617] netlink: 'syz.5.806': attribute type 1 has an invalid length. [ 666.635177][ T5631] Bluetooth: hci2: command tx timeout [ 667.531162][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.556457][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.589201][ T8071] bond0 (unregistering): Released all slaves [ 667.644883][T10617] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 668.396567][ T5631] Bluetooth: hci6: command tx timeout [ 668.711512][ T5631] Bluetooth: hci2: command tx timeout [ 669.054704][T10190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.290546][T10635] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 669.512380][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 669.652321][T10190] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.730933][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.738190][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.878438][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.885638][ T6106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.471795][ T5631] Bluetooth: hci6: command tx timeout [ 672.051367][T10671] vivid-001: kernel_thread() failed [ 672.391796][ T8071] hsr_slave_0: left promiscuous mode [ 672.416886][ T8071] hsr_slave_1: left promiscuous mode [ 672.442627][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.474158][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.553086][ T5631] Bluetooth: hci6: command tx timeout [ 674.823191][T10693] 0x000000000006-0x000000020000 : "" [ 674.836536][ T5631] Bluetooth: hci6: command tx timeout [ 674.888239][T10693] ftl_cs: FTL header corrupt! [ 676.329464][T10708] vivid-003: kernel_thread() failed [ 676.933865][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 677.195098][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 677.216733][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 680.375954][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 680.388288][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 680.396520][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 680.406547][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 680.419071][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 680.690264][T10744] can: request_module (can-proto-3) failed. [ 680.860043][T10744] siw: device registration error -23 [ 682.005178][T10765] ubi: mtd0 is already attached to ubi0 [ 682.140765][T10555] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.158440][T10555] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.178524][T10555] bridge_slave_0: entered allmulticast mode [ 682.186600][T10555] bridge_slave_0: entered promiscuous mode [ 682.223192][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 682.296927][T10555] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.319931][T10555] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.373645][T10555] bridge_slave_1: entered allmulticast mode [ 682.409900][T10555] bridge_slave_1: entered promiscuous mode [ 682.884160][ T5643] Bluetooth: hci3: command tx timeout [ 683.219651][T10555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.275865][T10555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.684257][T10793] ISOFS: Unable to identify CD-ROM format. [ 684.509002][T10555] team0: Port device team_slave_0 added [ 684.762486][T10802] 0x000000000006-0x000000020000 : "" [ 684.774843][T10802] ftl_cs: FTL header corrupt! [ 684.857340][T10555] team0: Port device team_slave_1 added [ 684.990789][ T5643] Bluetooth: hci3: command tx timeout [ 685.072384][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.081872][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.938140][T10555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.945280][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.983995][T10555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.288644][T10555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.295996][T10555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.324493][T10555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.533744][T10792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 687.091508][ T5643] Bluetooth: hci3: command tx timeout [ 689.090230][ T8071] bridge_slave_1: left allmulticast mode [ 689.113964][ T5643] Bluetooth: hci3: command tx timeout [ 689.119854][ T8071] bridge_slave_1: left promiscuous mode [ 689.135388][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.193824][ T8071] bridge_slave_0: left allmulticast mode [ 689.201424][ T8071] bridge_slave_0: left promiscuous mode [ 689.215420][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.601826][T10834] ubi: mtd0 is already attached to ubi0 [ 689.657483][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.668552][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.679670][ T8071] bond0 (unregistering): Released all slaves [ 689.714220][T10555] hsr_slave_0: entered promiscuous mode [ 689.720954][T10555] hsr_slave_1: entered promiscuous mode [ 689.730305][T10555] debugfs: 'hsr0' already exists in 'hsr' [ 689.750172][T10555] Cannot create hsr debugfs directory [ 690.346278][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.363930][T10611] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.378920][T10611] bridge_slave_0: entered allmulticast mode [ 690.408959][T10611] bridge_slave_0: entered promiscuous mode [ 691.508043][T10611] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.964260][T10611] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.993017][T10611] bridge_slave_1: entered allmulticast mode [ 692.031012][T10611] bridge_slave_1: entered promiscuous mode [ 692.320450][T10848] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 692.874661][ T8071] hsr_slave_0: left promiscuous mode [ 692.880846][ T8071] hsr_slave_1: left promiscuous mode [ 692.929731][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.087453][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.956376][T10868] 0x000000000006-0x000000020000 : "" [ 693.969707][T10868] ftl_cs: FTL header corrupt! [ 694.287260][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 694.326982][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 694.899859][ T5643] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 695.815516][T10611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.300405][T10869] tipc: Started in network mode [ 696.307725][T10869] tipc: Node identity ac14140f, cluster identity 4711 [ 696.321039][T10869] tipc: New replicast peer: 172.30.0.5 [ 696.343471][T10869] tipc: Enabled bearer , priority 10 [ 696.372893][T10611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.218490][T10890] ubi: mtd0 is already attached to ubi0 [ 697.914803][T10611] team0: Port device team_slave_0 added [ 697.963324][ T8785] tipc: Node number set to 2886997007 [ 698.119560][T10611] team0: Port device team_slave_1 added [ 698.450920][T10611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.485660][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.527712][T10611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.643550][T10611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.658967][T10611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.687647][T10611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.143076][T10611] hsr_slave_0: entered promiscuous mode [ 699.149656][T10611] hsr_slave_1: entered promiscuous mode [ 699.156773][T10611] debugfs: 'hsr0' already exists in 'hsr' [ 699.165518][T10611] Cannot create hsr debugfs directory [ 700.173339][T10745] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.180575][T10745] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.187973][T10745] bridge_slave_0: entered allmulticast mode [ 700.196204][T10745] bridge_slave_0: entered promiscuous mode [ 700.251260][T10745] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.264666][T10745] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.313380][T10921] blktrace: Concurrent blktraces are not allowed on loop8 [ 700.353125][T10745] bridge_slave_1: entered allmulticast mode [ 700.456297][T10745] bridge_slave_1: entered promiscuous mode [ 701.164443][T10745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.179352][T10745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.226171][T10745] team0: Port device team_slave_0 added [ 701.236207][T10745] team0: Port device team_slave_1 added [ 701.345740][T10897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 701.460888][T10925] blktrace: Concurrent blktraces are not allowed on loop8 [ 702.145134][T10745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.162860][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.228239][T10745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.265783][T10745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.275614][T10745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.305574][T10745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.469404][T10555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 702.572254][ T5770] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 702.726041][T10555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 703.220733][ T5770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.277495][ T5770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.311089][ T5770] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 703.359579][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.377714][T10555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 703.396628][ T5770] usb 2-1: Product: syz [ 703.404087][T10555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 703.417655][ T5770] usb 2-1: Manufacturer: syz [ 703.438338][ T5770] usb 2-1: SerialNumber: syz [ 703.520677][T10555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 703.533696][T10555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 703.545964][T10555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 703.560515][T10555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 703.579958][T10745] hsr_slave_0: entered promiscuous mode [ 703.587488][T10745] hsr_slave_1: entered promiscuous mode [ 703.596973][T10745] debugfs: 'hsr0' already exists in 'hsr' [ 703.606761][T10745] Cannot create hsr debugfs directory [ 704.612353][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 704.925237][ T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 704.948271][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.987126][ T9] usb 6-1: config 0 descriptor?? [ 705.033048][ T9] cp210x 6-1:0.0: cp210x converter detected [ 705.171075][ T8071] bridge_slave_1: left allmulticast mode [ 705.177823][ T8071] bridge_slave_1: left promiscuous mode [ 705.185047][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.216290][ T8071] bridge_slave_0: left allmulticast mode [ 705.225017][ T8071] bridge_slave_0: left promiscuous mode [ 705.240567][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.241200][ T5770] usb 2-1: USB disconnect, device number 19 [ 705.328782][ T7085] udevd[7085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.752055][ T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 706.681248][T10960] Oops: general protection fault, probably for non-canonical address 0xfcb1250abf43c1fe: 0000 [#1] SMP KASAN NOPTI [ 706.693361][T10960] KASAN: maybe wild-memory-access in range [0xe5894855fa1e0ff0-0xe5894855fa1e0ff7] [ 706.702644][T10960] CPU: 1 UID: 0 PID: 10960 Comm: syz.1.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.713492][T10960] Tainted: [L]=SOFTLOCKUP [ 706.717803][T10960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 706.727847][T10960] RIP: 0010:try_module_get+0x24/0xc0 [ 706.733156][T10960] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c [ 706.752764][T10960] RSP: 0018:ffffc90004f9f850 EFLAGS: 00010212 [ 706.758831][T10960] RAX: 1cb1290abf43c1fe RBX: e5894855fa1e0ff3 RCX: 0000000000000000 [ 706.766795][T10960] RDX: 0000000000000001 RSI: 0000000000000008 RDI: e5894855fa1e0ff3 [ 706.774762][T10960] RBP: ffff888078482e00 R08: ffffffff8fb24a0f R09: 1ffffffff1f64941 [ 706.782733][T10960] R10: dffffc0000000000 R11: fffffbfff1f64942 R12: ffff88802ab03c18 [ 706.790701][T10960] R13: ffffffff874dd3d0 R14: ffff888029858750 R15: dffffc0000000000 [ 706.798679][T10960] FS: 00007f5abfcf06c0(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 706.807610][T10960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.814190][T10960] CR2: 00007f5abed86b40 CR3: 000000005498b000 CR4: 0000000000350ef0 [ 706.822160][T10960] Call Trace: [ 706.825431][T10960] [ 706.828352][T10960] dvb_device_open+0xef/0x340 [ 706.833039][T10960] chrdev_open+0x4d9/0x600 [ 706.837458][T10960] ? __pfx_chrdev_open+0x10/0x10 [ 706.842397][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.848031][T10960] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 706.854359][T10960] ? __pfx_chrdev_open+0x10/0x10 [ 706.859301][T10960] do_dentry_open+0x816/0x1380 [ 706.864082][T10960] vfs_open+0x3b/0x340 [ 706.868195][T10960] ? path_openat+0x2e2d/0x3830 [ 706.872961][T10960] path_openat+0x2e44/0x3830 [ 706.877551][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.883203][T10960] do_file_open+0x23e/0x4a0 [ 706.887703][T10960] ? __pfx___schedule+0x10/0x10 [ 706.892560][T10960] ? __pfx_do_file_open+0x10/0x10 [ 706.897593][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.903227][T10960] ? _raw_spin_unlock+0x3f/0x50 [ 706.908073][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.910422][ T9] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 706.913703][T10960] ? alloc_fd+0x651/0x6c0 [ 706.913751][T10960] do_sys_openat2+0x115/0x200 [ 706.921815][ T9] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 706.925670][T10960] ? srso_alias_return_thunk+0x5/0xfbef5 [ 706.932139][ T9] usb 6-1: cp210x converter now attached to ttyUSB0 [ 706.936795][T10960] ? lockdep_hardirqs_on+0x7a/0x110 [ 706.954185][T10960] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.959402][T10960] __x64_sys_openat+0x138/0x170 [ 706.964256][T10960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.970312][T10960] do_syscall_64+0x174/0x580 [ 706.974894][T10960] ? trace_irq_disable+0x3b/0x140 [ 706.979922][T10960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.986070][T10960] RIP: 0033:0x7f5abed5e6ce [ 706.990470][T10960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 707.010064][T10960] RSP: 002b:00007f5abfcefb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 707.018471][T10960] RAX: ffffffffffffffda RBX: 00007f5abfcf06c0 RCX: 00007f5abed5e6ce [ 707.026431][T10960] RDX: 0000000000000002 RSI: 00007f5abfcefc00 RDI: ffffffffffffff9c [ 707.034388][T10960] RBP: 00007f5abfcefc00 R08: 0000000000000000 R09: 0000000000000000 [ 707.042345][T10960] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 707.050304][T10960] R13: 00007f5abf026218 R14: 00007f5abf026180 R15: 00007ffdc64c4948 [ 707.058274][T10960] [ 707.061276][T10960] Modules linked in: [ 707.065755][T10960] ---[ end trace 0000000000000000 ]--- [ 707.071247][T10960] RIP: 0010:try_module_get+0x24/0xc0 [ 707.077677][T10960] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 b0 01 48 85 ff 74 72 48 89 fb 49 bf 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 64 83 3b 02 74 5b 4c 8d b3 f8 04 00 00 4c [ 707.097730][T10960] RSP: 0018:ffffc90004f9f850 EFLAGS: 00010212 [ 707.103825][T10960] RAX: 1cb1290abf43c1fe RBX: e5894855fa1e0ff3 RCX: 0000000000000000 [ 707.111851][T10960] RDX: 0000000000000001 RSI: 0000000000000008 RDI: e5894855fa1e0ff3 [ 707.119803][T10960] RBP: ffff888078482e00 R08: ffffffff8fb24a0f R09: 1ffffffff1f64941 [ 707.127780][T10960] R10: dffffc0000000000 R11: fffffbfff1f64942 R12: ffff88802ab03c18 [ 707.135763][T10960] R13: ffffffff874dd3d0 R14: ffff888029858750 R15: dffffc0000000000 [ 707.143742][T10960] FS: 00007f5abfcf06c0(0000) GS:ffff88812504e000(0000) knlGS:0000000000000000 [ 707.152682][T10960] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.159279][T10960] CR2: 00007f5abed86b40 CR3: 000000005498b000 CR4: 0000000000350ef0 [ 707.167308][T10960] Kernel panic - not syncing: Fatal exception [ 707.173590][T10960] Kernel Offset: disabled [ 707.177895][T10960] Rebooting in 86400 seconds..