last executing test programs: 26m54.4020042s ago: executing program 32 (id=69): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x5, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7) userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x50}}, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) getresgid(&(0x7f0000001200), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f00000007c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="e80000002100000829bd7000fcdbdf250e00000018007380140041801000e78004004a0004003e800400fb80c3c05f47ebdba7f4f01fe3b42ad30ccb8f15233a7977180f927bcb68a79591c3ba10e32578319095685dc193f697bb3aa089fb778828d503b740f603c1acd7cfcd2d66f2b7a78b55fbb00cba174bd5762630f270c6ddeda154f8132a3543e83a77a9c909c9aa45f5901cbd3bf76ab1100a9dd47924af36f5239c12223fc26029b1c0ea0957e36bc5ac41c12aee8bcb617447606e6112ce990e486ea80b8e46631f4ef14ac924c3a65853ddf33452dcdaa97ac23d75ed0d0c470592"], 0xe8}, 0x1, 0x0, 0x0, 0x200000a0}, 0x48000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x40094) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 26m53.678418037s ago: executing program 33 (id=71): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x44000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 26m42.434749613s ago: executing program 34 (id=83): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x38ab, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc1402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r4, 0x0, 0x7ffff004) 26m18.397341163s ago: executing program 35 (id=113): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 25m10.924238194s ago: executing program 36 (id=146): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 24m14.692514571s ago: executing program 37 (id=170): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0xf0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file3\x00', 0x808, &(0x7f00000003c0)=ANY=[], 0x1, 0x1c0, &(0x7f0000000440)="$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") socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x2787bf88466864e, 0x8000) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) r5 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x40, 0x0, 0x7}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001900674c000000000400000003e000000200000000000000000000000000000000000000000a00000000d683c140bfa1fe62375400"/72, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000004"], 0xb8}}, 0x4c050) 23m45.516587612s ago: executing program 38 (id=104): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 22m54.084263728s ago: executing program 39 (id=201): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 22m51.860209728s ago: executing program 40 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2721, 0x0, &(0x7f0000000240)) 22m51.185369678s ago: executing program 41 (id=209): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004b41460860163209ea8001"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="8513645b47582e2a97a8ce85d9b478f8e79abc91b0759c5e68067f4063270373f0b3c285eaa4598221beca2cf971a32e7bfcc3621e499ad19200000000000032b48d6a16f5301af9bd73a58146be54", 0x4f}], 0x1) 22m8.948985289s ago: executing program 42 (id=248): socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r4, 0x0, 0x0, 0x8880) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x9d, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffc8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) creat(0x0, 0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000001780), 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x8ed8fd038ecc8dc3, 0x0, r3, 0x0, &(0x7f0000000280)='./file0\x00', 0x88, 0x0, 0x1, {0x0, r5}}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, 0x0) 21m37.740968591s ago: executing program 43 (id=268): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) semget$private(0x0, 0x5, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x0, 0x4, 0x2, 0x42}}, 0x26) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) 20m55.110471571s ago: executing program 44 (id=322): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/xfrm_stat\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 20m47.056885083s ago: executing program 45 (id=335): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/73, 0x49) 20m36.453025413s ago: executing program 46 (id=350): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 20m23.399345222s ago: executing program 47 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 20m13.8348524s ago: executing program 48 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 19m42.064606847s ago: executing program 49 (id=380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}}, 0x20040054) 17m42.188775043s ago: executing program 50 (id=629): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0xff8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffded, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b8, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$packet(0x11, 0x2, 0x300) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1004, 0x4, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syncfs(r4) mknod(0x0, 0x10, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 17m34.224097939s ago: executing program 51 (id=643): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000009) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x80) 17m20.166041935s ago: executing program 52 (id=660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) memfd_secret(0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) write$binfmt_format(r3, &(0x7f0000000100)='-1\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000000b40), 0x1, 0x0) close(r1) shmget(0x1, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) 16m5.950811126s ago: executing program 53 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) msync(&(0x7f0000080000/0x2000)=nil, 0x2000, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x8002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe1b) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) 15m10.477353635s ago: executing program 54 (id=801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x1, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0}) 15m0.163953692s ago: executing program 55 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x44004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$I2C(0x0, 0x80, 0x14000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 14m35.562838478s ago: executing program 56 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl(r3, 0x2202, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000014000200fe80000000"], 0x44}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) close(0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="10", 0x1, r4) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00A\\']) 13m15.854078115s ago: executing program 57 (id=923): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x81c01) move_mount(r4, 0x0, r0, 0x0, 0x46) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 13m7.985368203s ago: executing program 58 (id=933): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000017c0)='@\x1f)\x03\n*)\\\x00\xb6\xf0\xa3\xce2ho\x8dq\xe4F\x1a\xed\xa2C\xa6\x8a`\xfcE\b\x00\xe3R\xd6\xb8\xa8\x9d\x04\xfd\xaf\xb8vS\xceV\xa5\t\x00S~\x11\xd3\xa3`o\xa9z\xc8\xc9r\x99\x96\\\x8e\xa0\xef\xe6\x8a\xa3\xe5\xa7\xd5r\x96\x0f\x8c\xa61Nud\x14[\xa7\xb1\x1a\x14\xd5\x91T\xec\xfeb\x94\xf7\xec\x12I\x88\'#\xd4L\xf6\"o\xb6\f\x95\x9b\xa8\x02\xaf\x91\xc5(O|\xe7\xee\x90\x86\x9d\x1bP>\xd9\xd7T\x8cg\x91\x99\xd9$\xa3\x008\tn>\x14\x8a\x9a\xb2va\x1c\x88\x03\xdd,\x18\xdc\x8a\x00'/168, 0x2) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000080)=""/13) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) unshare(0x2a020400) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 12m20.80541051s ago: executing program 59 (id=984): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) 11m26.334162267s ago: executing program 60 (id=1043): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x7) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x5, 0x8, 0x2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x5, 0x85, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp6\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000880)={0x80004, 0x2000543}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0xb4b1, 0x4200, 0x0, 0x0}, {0x9, 0x200, 0x0, 0x0}], 0x2}) 11m16.145404476s ago: executing program 61 (id=1051): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 10m37.130927834s ago: executing program 62 (id=1100): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast1, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 10m8.164566618s ago: executing program 63 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r4], 0x378}}, 0x0) open_by_handle_at(r1, &(0x7f0000000100)=@xfs_parent={0x1c, 0x82, {0x5, 0x68f, 0x9, 0x4}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000d54d62fa1ff4c861893784", 0xe}], 0x1) r6 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r6, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x51, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4c890) socket(0x15, 0x5, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x29, 0xb}], 0x10}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x558}}, 0x40) 9m42.088027584s ago: executing program 64 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$media(&(0x7f0000000480), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000f40)) syz_open_dev$I2C(0x0, 0x80, 0x14000) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="02080000dea1"}) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0) 9m38.349442948s ago: executing program 65 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000100)=0x7cd, &(0x7f0000000180)=0x1) socket$netlink(0x10, 0x3, 0x10) 9m19.691253307s ago: executing program 66 (id=1177): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc40102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000012a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9m10.456523224s ago: executing program 67 (id=1184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x82, 0x0, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000740)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a\xdd\x05\xdc\xb8\xc7\xb4v\x1f\xe3\xb6)\x1dM\x1e\xf9\x97\xffLW\x82\t\xf7\xb4\xe2fP\b\n\xdd\x03\x9d&\xd2\xce0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0x10b382) memfd_create(&(0x7f00000008c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.\xbc\xd2\xe7M\x90\xba,#\n\xf3V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xc4\xa3%\xc2B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\xccEi\xfb\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee<\x8bw\xdd^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x97o \xb9Ah\x1cd\xc6\xd6\x93L\x89&\xe8/\x9c\x93N8\xdb\xe49\xa7V\xe5:\xcc\x99#+U\x96*\xa6\x13\x1b3\xe8\x1b`\xaf\xa5\x0e\xbat\xc8\xfc#\x05', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x0, 0xe4, 0xe4, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x80000}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRESOCT=0x0], 0x7) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) mq_open(0x0, 0x40, 0x0, &(0x7f0000000300)={0x80000001, 0xa, 0x5e05, 0xfffffffc}) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) 8m30.068795678s ago: executing program 69 (id=1198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) close(r0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) write$cgroup_subtree(r0, 0x0, 0x280) 8m24.40269222s ago: executing program 70 (id=1195): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x20) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r0], 0x10}}, 0x0) poll(0x0, 0x0, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x104, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8m18.208155156s ago: executing program 71 (id=1208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0xc11d15b68094f7d1, 0x0, 0x0, {0x2, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000100)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc2, 0xf8, 0xecaa, 0x5886, 0x9, 0x0, 0x10000008, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, &(0x7f0000000140)) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000000a80)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x6) 8m8.100445217s ago: executing program 72 (id=1217): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x805020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x143, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@perf_event={0x4}}, 0x18) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc044054) r2 = epoll_create1(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r4 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@ptr={0x9}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x2}, @union={0x8, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x10, 0x4, 0x1cc7}, {0x5, 0x3, 0xea6}, {0xc, 0x0, 0xfffffffb}]}, @enum={0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x2e, 0x30]}}, &(0x7f00000000c0)=""/47, 0x89, 0x2f, 0x0, 0x2, 0x10000, @value=r3}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000f000000700e0000a0f0ffff80060000", @ANYRES32=r6, @ANYBLOB="000021fea220e6794779654a80c4e2f86b87ffc3ebbca8fcdef8ca3ad3f9dc4a0b960c3c969f65116a20483d4b464d294388ea0962ae5ba33740b8e3f1", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0500000004000000020000000a00"/28], 0x50) 7m51.982979758s ago: executing program 73 (id=1225): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x6, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 7m22.176067073s ago: executing program 74 (id=1233): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 6m50.871361762s ago: executing program 75 (id=1264): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0}) 6m42.193545894s ago: executing program 76 (id=1276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffffffffffff, 0xc}) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0xcf, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="50f1ffff0001010200000000000000000a0000000c00198004000030f601802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) 6m35.107503801s ago: executing program 77 (id=1285): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1008000, &(0x7f00000001c0)=ANY=[], 0x1, 0x5f6, &(0x7f0000001340)="$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") io_setup(0x15, &(0x7f0000000240)=0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa53787855b5ad0011aa0097444cf7000006c05b243cbb0038"], 0x0) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 6m25.915404518s ago: executing program 78 (id=1294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x200}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 5m7.652364087s ago: executing program 79 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000081000040"]) 5m2.069693112s ago: executing program 80 (id=1453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)="2e9b3d93dfb6c575963f886400", 0xd}, {&(0x7f0000000500)="7cbf2f0016f6750d0063395959334821146600c21ac8b4d9578676", 0x1b}], 0x2) 4m5.82494741s ago: executing program 81 (id=1558): ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x1, 0x0, 0x0, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "0300", "e859ad13", ["d5c2a7cdaeea2c6f8e00b600", "808e8889dc7fb3eacf821b00", "2971088d5453005a4e5200", "ff812500004000"]}) 3m59.174797449s ago: executing program 82 (id=1573): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f00000009c0)={0x20, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m52.003422864s ago: executing program 83 (id=1584): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x400, 0x3, 0x0, 0x10000, 0x16, "4415264a88b82c521113fb235902af2556c6b6"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 3m45.620056806s ago: executing program 84 (id=1594): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x289e0cb5, 0x0) r1 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 3m39.627655862s ago: executing program 85 (id=1601): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) exit(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m12.743759005s ago: executing program 86 (id=1608): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x5, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x1, 0x3, 0xffffffff, 0x100}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) 3m5.300969718s ago: executing program 87 (id=1618): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000007c0)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x1008800a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 2m59.34650926s ago: executing program 88 (id=1628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x8, 0x0, 0x8, 0x9, 0x67, 0x4c, 0x3, 0x6, 0x4, 0x4, 0x3, 0x1, 0xa6}, {0x7ff, 0x9, 0x6, 0x1, 0x0, 0x4, 0x9, 0x8, 0x9, 0xee, 0x9, 0x4, 0x3}, {0x9, 0xa, 0x9, 0x1, 0xff, 0x63, 0x6, 0x5, 0x2, 0x9, 0x3, 0x3, 0x2870}], 0xfffff438}) 2m16.474229192s ago: executing program 6 (id=1719): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2m15.535591172s ago: executing program 6 (id=1722): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.323138872s ago: executing program 6 (id=1727): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "35fbb0295d"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) 2m13.267358093s ago: executing program 6 (id=1730): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m12.157017247s ago: executing program 4 (id=1734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(r1, r1, 0x0) 2m12.143173634s ago: executing program 6 (id=1735): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 2m11.380926853s ago: executing program 6 (id=1737): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.087131377s ago: executing program 4 (id=1738): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x1a) 2m7.728222329s ago: executing program 89 (id=1737): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.647311209s ago: executing program 5 (id=1743): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) 2m7.646986003s ago: executing program 4 (id=1744): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048004}, 0x800) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) 2m7.180099469s ago: executing program 4 (id=1745): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 2m5.85748943s ago: executing program 4 (id=1747): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 2m5.008631679s ago: executing program 5 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(r1, r1, 0x0) 2m4.728745939s ago: executing program 4 (id=1750): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x6e, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x2, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0xffffffff, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x0, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x5, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0x2, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0x8, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x13, 0xfffffffd, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0xffe, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10001, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15214b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x44, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x77, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x7f, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x100006, 0x3, 0x8, 0x10, 0x4, 0x6, 0x4, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0xfffffffe, 0x7, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40402, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/158) 2m1.810729228s ago: executing program 90 (id=1750): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x6e, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x2, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0xffffffff, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x0, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x5, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0x2, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0x8, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x13, 0xfffffffd, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0xffe, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10001, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15214b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x44, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x77, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x7f, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x100006, 0x3, 0x8, 0x10, 0x4, 0x6, 0x4, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0xfffffffe, 0x7, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x40402, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/158) 2m1.746972452s ago: executing program 5 (id=1755): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r1, 0xffffffff, 0x7, 0x9, 0x3, [], [0x0, 0x81, 0x7ff, 0x1], [0x5, 0x1, 0x2, 0x401], [0x16c, 0x9, 0x6, 0x7f]}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7}) 2m0.856210289s ago: executing program 5 (id=1756): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 1m59.698043459s ago: executing program 5 (id=1757): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) 1m58.858736557s ago: executing program 5 (id=1759): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 1m55.798605542s ago: executing program 91 (id=1759): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 1m52.628960452s ago: executing program 9 (id=1768): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m48.848226691s ago: executing program 9 (id=1771): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x40502) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000000)={&(0x7f0000000180)=[r1], 0x0, 0x200000000005, 0x1, 0xa}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000140)={&(0x7f00000000c0)=[r3], 0x0, 0x1}) 1m48.229352773s ago: executing program 9 (id=1773): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m47.265785348s ago: executing program 9 (id=1775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 1m46.609117478s ago: executing program 9 (id=1777): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c248691028470923431d4c5d5fbf514fd000000000100", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m45.745037213s ago: executing program 9 (id=1779): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 1m43.518693214s ago: executing program 92 (id=1779): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 1m43.437778061s ago: executing program 7 (id=1781): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={0x0, 0xffffffff, 0x7, 0x9, 0x3, [], [0x0, 0x81, 0x7ff, 0x1], [0x5, 0x1, 0x2, 0x401], [0x16c, 0x9, 0x6, 0x7f]}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6}) 1m42.834043382s ago: executing program 7 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m40.790641177s ago: executing program 7 (id=1783): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.844203921s ago: executing program 7 (id=1784): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 1m39.166294702s ago: executing program 7 (id=1785): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 1m38.31110898s ago: executing program 7 (id=1786): syz_emit_vhci(&(0x7f00000017c0)=ANY=[@ANYBLOB="040ecb590404"], 0x7) 1m35.329066879s ago: executing program 93 (id=1786): syz_emit_vhci(&(0x7f00000017c0)=ANY=[@ANYBLOB="040ecb590404"], 0x7) 31.049883526s ago: executing program 2 (id=1950): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 30.171029077s ago: executing program 2 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 29.143052173s ago: executing program 2 (id=1957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf252500000008002f00050000000a0001007770616e310000000500"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 27.863082955s ago: executing program 2 (id=1963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 27.850135064s ago: executing program 8 (id=1964): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 27.289072162s ago: executing program 2 (id=1967): ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) readahead(r0, 0x7, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x8}}}, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0xffffffff, r1, 0x2}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x55d}}, './file0\x00'}) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x855) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) getsockname$tipc(r4, &(0x7f00000003c0)=@id, &(0x7f0000000400)=0x10) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "01dfac215b4031b66fefeb7e4f3e32881bae5f7e2d143f0f960fa615bf9dd9d03e1f52cd2147e826439dcb34508710523e30ed50e5f9eca12fac480ad1ed2e2b81e934a791b44700fa559db4315a78d943c9d266ce4890133c706416dad5b5bd02ca6c86ec9f366fe86ea2453afd7f20d3d2e1acc10fe152c901a1cb9375e06b5eeba2cc409ce78edfca5e377109e91a9e7f7fc17e0bdfdb89c0496c1fe337cdaf4019f5a7510be1"}, 0xac) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x4) 27.03648468s ago: executing program 8 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001000010027bd7004ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="07000000016a03000a000200"], 0x2c}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 26.609039531s ago: executing program 2 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0400ac000a00060008021100000000000600ab000300000005001301"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x810) 24.048435945s ago: executing program 94 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0400ac000a00060008021100000000000600ab000300000005001301"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x810) 23.938594992s ago: executing program 8 (id=1976): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c248691028470923431d4c5d5fbf514fd000000000100", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23.227427333s ago: executing program 8 (id=1977): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 23.114224744s ago: executing program 0 (id=1978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.26579759s ago: executing program 8 (id=1980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.146035879s ago: executing program 0 (id=1981): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x5, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xc, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0xffffffff, 0x5, 0x0, 0x3ff, 0x6, 0x200007, 0x4c, 0xfffffffd, 0x80, 0x8, 0x9, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0xe4, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0xffffffff, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0x9, 0x9, 0xfffffffb], [0x8a3, 0x6, 0x3, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x80002, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x7ffe, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x4, 0x0, 0x0, 0xc, 0x4, 0xd, 0x3, 0xb8, 0x4, 0x2, 0x5, 0x0, 0x8, 0x1, 0x3, 0x9, 0x6d, 0x81, '\x00', 0x2, 0xfff}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x200, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9}, {}, {}, {0x0, 0x35, 0xff}, {0x20, 0xa, 0xfc}, {0x0, 0x0, 0x6, '\x00', 0x7}, {0x20}, {0x2, 0x2, 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x1, 0xff}, {0x0, 0x0, 0xfe, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0xfc}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x8, 0x0, '\x00', 0xff}, {0x0, 0x75, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x20}, {0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x0, '\x00', 0x1}, {0x0, 0xfc}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.529109755s ago: executing program 8 (id=1983): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x18c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x160, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x134, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0xe7b9, 0x10, 0x100, [{0x4, 0x4, 0x39849ac8, 0x1}, {0x4, 0x1000, 0x7, 0xd443d0e8}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x80000003}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x9, 0x2, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x0, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x5, 0x9, 0x3, 0x80000000}, {0x48b, 0xf, 0xfff, 0x6}]}}]}}]}, 0x18c}}, 0x24040084) 18.276657733s ago: executing program 95 (id=1983): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x18c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xe, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x160, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x134, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0xe7b9, 0x10, 0x100, [{0x4, 0x4, 0x39849ac8, 0x1}, {0x4, 0x1000, 0x7, 0xd443d0e8}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x80000003}, {0x6, 0x7fff, 0x9, 0x7}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x9, 0x2, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x0, 0x2, 0x1}, {0x40, 0x40, 0x3, 0x5}, {0x5, 0x9, 0x3, 0x80000000}, {0x48b, 0xf, 0xfff, 0x6}]}}]}}]}, 0x18c}}, 0x24040084) 18.214261627s ago: executing program 0 (id=1986): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c248691028470923431d4c5d5fbf514fd000000000100", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.952117112s ago: executing program 0 (id=1989): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 16.008605663s ago: executing program 0 (id=1991): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2) 15.113438713s ago: executing program 0 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251200000008000300", @ANYRES32, @ANYBLOB="0400ac000a00060008021100000000000600ab0003000000050013"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x810) 12.377700149s ago: executing program 96 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251200000008000300", @ANYRES32, @ANYBLOB="0400ac000a00060008021100000000000600ab0003000000050013"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x810) 12.286661115s ago: executing program 3 (id=1996): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000001c0)={r2, 0xffffffff, 0x7, 0x9, 0x3, [], [0x0, 0x81, 0x7ff, 0x1], [0x5, 0x1, 0x2, 0x401], [0x16c, 0x9, 0x6, 0x7f]}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6}) 11.70695645s ago: executing program 3 (id=1997): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c248691028470923431d4c5d5fbf514fd000000000100", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10.848898124s ago: executing program 3 (id=1998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}, {0x0, 0x88be, 0x8}}}}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 9.454239523s ago: executing program 3 (id=1999): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 8.900388429s ago: executing program 3 (id=2000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.2632504s ago: executing program 1 (id=2002): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00070c00000000fcffffff07000000", @ANYRES32=r2, @ANYBLOB="410186000a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4090) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c818}, 0x90) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.097900257s ago: executing program 3 (id=2003): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.708783348s ago: executing program 97 (id=2003): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.677896186s ago: executing program 1 (id=2005): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8300, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c248691028470923431d4c5d5fbf514fd000000000100", r3}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.217461026s ago: executing program 1 (id=2006): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x5, 0x10, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbc2, 0x4a732f64, 0x1000, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ffc, 0x5, 0x7, 0x81, 0x6, 0xf9a2, 0x80000001, 0x7, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x28, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x1000, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf785, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x0, 0x2, 0x2, 0x9, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x800077, 0x9, 0xf66, 0x810000, 0x1, 0x5, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8008, 0x40f1, 0x2, 0x3, 0x101, 0x3b, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa"], 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4.449473083s ago: executing program 1 (id=2007): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 3.801905602s ago: executing program 1 (id=2008): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 1.989189023s ago: executing program 1 (id=2009): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2) 0s ago: executing program 98 (id=2009): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2) kernel console output (not intermixed with test programs): 8164][T14934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.055549][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.082063][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.295623][ T3592] hsr_slave_0: left promiscuous mode [ 1705.355214][ T3592] hsr_slave_1: left promiscuous mode [ 1705.363394][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.372675][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.424221][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.432202][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.493449][ T3592] veth1_macvtap: left promiscuous mode [ 1705.499801][ T3592] veth0_macvtap: left promiscuous mode [ 1705.506184][ T3592] veth1_vlan: left promiscuous mode [ 1705.511799][ T3592] veth0_vlan: left promiscuous mode [ 1706.278848][ T3592] team0 (unregistering): Port device team_slave_1 removed [ 1706.394600][ T3592] team0 (unregistering): Port device team_slave_0 removed [ 1707.073041][T14934] hsr_slave_0: entered promiscuous mode [ 1707.082201][T14934] hsr_slave_1: entered promiscuous mode [ 1707.167461][T14347] Bluetooth: hci2: command tx timeout [ 1707.804346][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1707.837989][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1707.859623][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1707.942037][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1707.957090][T14990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.964815][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.967741][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1707.972757][T14990] bridge_slave_0: entered allmulticast mode [ 1707.990773][T14990] bridge_slave_0: entered promiscuous mode [ 1708.155499][T14990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.163171][T14990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.172015][T14990] bridge_slave_1: entered allmulticast mode [ 1708.182068][T14990] bridge_slave_1: entered promiscuous mode [ 1708.318652][T14990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.427602][T14990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1708.838463][T14990] team0: Port device team_slave_0 added [ 1709.041480][T14990] team0: Port device team_slave_1 added [ 1709.205327][ T5805] Bluetooth: hci2: command tx timeout [ 1709.272059][T14990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.279711][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.306635][T14990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1709.519709][T14990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1709.527243][T14990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.553877][T14990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.599077][T14934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1709.697886][T14934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1709.957282][T14934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1709.982775][T14934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1710.112925][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1710.165613][ T5805] Bluetooth: hci3: command tx timeout [ 1710.266828][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.337558][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1710.350862][T14990] hsr_slave_0: entered promiscuous mode [ 1710.361451][T14990] hsr_slave_1: entered promiscuous mode [ 1710.368781][ T24] usb 9-1: config 0 has no interfaces? [ 1710.370701][T14990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1710.374622][ T24] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1710.382195][T14990] Cannot create hsr debugfs directory [ 1710.397854][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.514450][ T24] usb 9-1: config 0 descriptor?? [ 1710.518789][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.780117][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.811657][ T24] usb 9-1: USB disconnect, device number 16 [ 1710.827085][T15029] chnl_net:caif_netlink_parms(): no params data found [ 1711.071416][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.773841][ T12] bridge_slave_1: left allmulticast mode [ 1711.781994][ T12] bridge_slave_1: left promiscuous mode [ 1711.789104][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.860493][ T12] bridge_slave_0: left allmulticast mode [ 1711.874237][ T12] bridge_slave_0: left promiscuous mode [ 1711.882200][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.335876][ T5805] Bluetooth: hci3: command tx timeout [ 1712.446079][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.511478][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.533405][ T12] bond0 (unregistering): Released all slaves [ 1713.247831][T14934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.482769][ T12] hsr_slave_0: left promiscuous mode [ 1713.503054][ T12] hsr_slave_1: left promiscuous mode [ 1713.512770][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.521264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.559938][T14347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1713.566654][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.574772][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.606130][ T12] veth1_macvtap: left promiscuous mode [ 1713.606748][T14347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1713.613060][ T12] veth0_macvtap: left promiscuous mode [ 1713.613417][ T12] veth1_vlan: left promiscuous mode [ 1713.632962][ T12] veth0_vlan: left promiscuous mode [ 1713.654678][T14347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1713.847288][T14347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1713.860268][T14347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1714.371467][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1714.404138][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1714.466112][T14347] Bluetooth: hci3: command tx timeout [ 1715.096446][T15029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.104294][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.112457][T15029] bridge_slave_0: entered allmulticast mode [ 1715.122334][T15029] bridge_slave_0: entered promiscuous mode [ 1715.298525][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.306596][T15029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.314476][T15029] bridge_slave_1: entered allmulticast mode [ 1715.324328][T15029] bridge_slave_1: entered promiscuous mode [ 1715.349440][T14934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.835207][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.842864][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.864029][T14990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1715.925937][T14347] Bluetooth: hci4: command tx timeout [ 1715.950324][T15029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.959930][T14990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1715.985611][T14990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1716.032264][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.040014][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.112649][T15029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.142300][T14990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1716.486190][T14347] Bluetooth: hci3: command tx timeout [ 1716.509197][ T4216] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.534781][T15029] team0: Port device team_slave_0 added [ 1716.574176][T15029] team0: Port device team_slave_1 added [ 1716.650337][ T4216] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.778016][ T4216] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.044422][T15029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.053691][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.083033][T15029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.129372][ T4216] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.248120][T15029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.255600][T15029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.282313][T15029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.030501][T14347] Bluetooth: hci4: command tx timeout [ 1718.051581][T15029] hsr_slave_0: entered promiscuous mode [ 1718.062547][T15029] hsr_slave_1: entered promiscuous mode [ 1718.071785][T15029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1718.079844][T15029] Cannot create hsr debugfs directory [ 1718.088931][ T4216] bridge_slave_1: left allmulticast mode [ 1718.094861][ T4216] bridge_slave_1: left promiscuous mode [ 1718.101809][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.167205][ T4216] bridge_slave_0: left allmulticast mode [ 1718.173192][ T4216] bridge_slave_0: left promiscuous mode [ 1718.180241][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.673371][ T4216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.693150][ T4216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.723064][ T4216] bond0 (unregistering): Released all slaves [ 1718.819510][T15055] chnl_net:caif_netlink_parms(): no params data found [ 1718.943809][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1718.979169][T14348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1718.988974][T14348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1719.004854][T14348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1719.018172][T14348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1719.569389][ T4216] hsr_slave_0: left promiscuous mode [ 1719.589232][ T4216] hsr_slave_1: left promiscuous mode [ 1719.597541][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1719.606523][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1719.619442][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1719.627330][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.652694][ T4216] veth1_macvtap: left promiscuous mode [ 1719.660719][ T4216] veth0_macvtap: left promiscuous mode [ 1719.666983][ T4216] veth1_vlan: left promiscuous mode [ 1719.672612][ T4216] veth0_vlan: left promiscuous mode [ 1720.085819][T14347] Bluetooth: hci4: command tx timeout [ 1720.274011][ T4216] team0 (unregistering): Port device team_slave_1 removed [ 1720.309380][ T4216] team0 (unregistering): Port device team_slave_0 removed [ 1721.104732][T14990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1721.134155][T14347] Bluetooth: hci0: command tx timeout [ 1721.183679][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1721.669538][T14990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1721.683860][T15055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.694600][T15055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.704235][T15055] bridge_slave_0: entered allmulticast mode [ 1721.714398][T15055] bridge_slave_0: entered promiscuous mode [ 1721.865683][T15055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.873367][T15055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.881552][T15055] bridge_slave_1: entered allmulticast mode [ 1721.891125][T15055] bridge_slave_1: entered promiscuous mode [ 1722.009285][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.017042][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.137478][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.145289][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.170100][T14347] Bluetooth: hci4: command tx timeout [ 1722.330324][T15055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.371634][T15055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.483233][T15055] team0: Port device team_slave_0 added [ 1722.583495][T15075] chnl_net:caif_netlink_parms(): no params data found [ 1722.643315][T15055] team0: Port device team_slave_1 added [ 1722.744357][T14934] veth0_vlan: entered promiscuous mode [ 1722.964788][T15055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1722.973292][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.000648][T15055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.050069][T15029] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1723.104841][T15055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.112313][T15055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1723.139659][T15055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.175668][T15029] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1723.209912][T14347] Bluetooth: hci0: command tx timeout [ 1723.218220][T15029] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1723.243808][T15029] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1723.391741][T14934] veth1_vlan: entered promiscuous mode [ 1723.588994][T15055] hsr_slave_0: entered promiscuous mode [ 1723.599683][T15055] hsr_slave_1: entered promiscuous mode [ 1723.608690][T15055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1723.616752][T15055] Cannot create hsr debugfs directory [ 1724.234143][T15075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.242290][T15075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.250464][T15075] bridge_slave_0: entered allmulticast mode [ 1724.265187][T15075] bridge_slave_0: entered promiscuous mode [ 1724.308413][T15075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.316510][T15075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.324315][T15075] bridge_slave_1: entered allmulticast mode [ 1724.334309][T15075] bridge_slave_1: entered promiscuous mode [ 1724.420999][T14934] veth0_macvtap: entered promiscuous mode [ 1724.509133][T14934] veth1_macvtap: entered promiscuous mode [ 1724.759936][T15075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1724.861787][T15075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1724.990282][T14934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.126649][T15075] team0: Port device team_slave_0 added [ 1725.186750][T14934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.226778][T15075] team0: Port device team_slave_1 added [ 1725.288669][T14347] Bluetooth: hci0: command tx timeout [ 1725.434701][T15075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1725.442300][T15075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.470598][T15075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1725.517881][T15075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.525398][T15075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.552007][T15075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1725.600318][T14934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.609887][T14934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.620414][T14934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.630644][T14934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.665334][T15029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.940104][T14990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.969601][T15075] hsr_slave_0: entered promiscuous mode [ 1725.980570][T15075] hsr_slave_1: entered promiscuous mode [ 1725.989671][T15075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1725.997610][T15075] Cannot create hsr debugfs directory [ 1726.105186][T15029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1726.465231][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.472876][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.507140][T15055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1726.595250][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.602924][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.677101][T15055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1726.778672][T15055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1726.877464][T15055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1727.374607][T14347] Bluetooth: hci0: command tx timeout [ 1728.418375][T15075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1728.526775][T15075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1728.623389][T15075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1728.724466][T15075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1729.083755][T15055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.398782][T15029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.417271][T15055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.453845][T14990] veth0_vlan: entered promiscuous mode [ 1729.571585][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.579352][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1729.607544][T14990] veth1_vlan: entered promiscuous mode [ 1729.737946][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.745705][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1730.193351][T14990] veth0_macvtap: entered promiscuous mode [ 1730.311239][T14990] veth1_macvtap: entered promiscuous mode [ 1730.608294][T14990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1730.661535][T15075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.741488][T14990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.886317][T14990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.895885][T14990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.904933][T14990] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.914285][T14990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.952107][T15075] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.073894][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.081644][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.199605][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.207356][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.567071][T15055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.188706][T15055] veth0_vlan: entered promiscuous mode [ 1733.236904][T15029] veth0_vlan: entered promiscuous mode [ 1733.293972][T15055] veth1_vlan: entered promiscuous mode [ 1733.422004][T15029] veth1_vlan: entered promiscuous mode [ 1733.702790][T15055] veth0_macvtap: entered promiscuous mode [ 1733.858716][T15055] veth1_macvtap: entered promiscuous mode [ 1733.963956][T15075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.011423][T15029] veth0_macvtap: entered promiscuous mode [ 1734.119569][T15029] veth1_macvtap: entered promiscuous mode [ 1734.161058][T15055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.301157][T15055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.399300][T15055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.408738][T15055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.418041][T15055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.427341][T15055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.464011][T15029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.610807][T15029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.692822][T15029] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.703020][T15029] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.712293][T15029] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.721782][T15029] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.857408][T15075] veth0_vlan: entered promiscuous mode [ 1735.014762][T15075] veth1_vlan: entered promiscuous mode [ 1735.085337][ T8179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.093476][ T8179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.360009][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.369278][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.678680][T15075] veth0_macvtap: entered promiscuous mode [ 1735.834610][T15075] veth1_macvtap: entered promiscuous mode [ 1736.193661][T15075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1736.421204][T15075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1736.569418][T15075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.580136][T15075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.590458][T15075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.599638][T15075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1740.690470][ T3743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1740.699441][ T3743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.007296][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.016589][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1741.775357][ T1097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.001148][ T1097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.240593][ T1097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.440508][ T1097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.126006][ T1097] bridge_slave_1: left allmulticast mode [ 1743.131984][ T1097] bridge_slave_1: left promiscuous mode [ 1743.138876][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.242070][ T1097] bridge_slave_0: left allmulticast mode [ 1743.248205][ T1097] bridge_slave_0: left promiscuous mode [ 1743.254924][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.947828][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1744.036935][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1744.063582][ T1097] bond0 (unregistering): Released all slaves [ 1744.506423][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.514570][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.563872][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1744.580531][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.119768][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1745.128915][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1745.217114][ T1097] hsr_slave_0: left promiscuous mode [ 1745.227693][ T1097] hsr_slave_1: left promiscuous mode [ 1745.239747][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.248832][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.273496][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.282890][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.356594][ T1097] veth1_macvtap: left promiscuous mode [ 1745.362471][ T1097] veth0_macvtap: left promiscuous mode [ 1745.368772][ T1097] veth1_vlan: left promiscuous mode [ 1745.374476][ T1097] veth0_vlan: left promiscuous mode [ 1746.364523][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 1746.410216][T14348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1746.419977][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 1746.486751][T14348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1746.498498][T14348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1746.512626][T14348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1746.610442][T14348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1746.783486][T13857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1746.793913][T13857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.059539][ T3999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.067778][ T3999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.387845][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.396633][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1748.727292][T14348] Bluetooth: hci1: command tx timeout [ 1748.815544][T10375] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1749.015754][T15272] chnl_net:caif_netlink_parms(): no params data found [ 1749.038463][T10375] usb 1-1: Using ep0 maxpacket: 32 [ 1749.071561][T10375] usb 1-1: config 0 has no interfaces? [ 1749.077695][T10375] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1749.087604][T10375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.153121][T10375] usb 1-1: config 0 descriptor?? [ 1749.444302][T10375] usb 1-1: USB disconnect, device number 18 [ 1749.784769][ T3592] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.869915][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1616'. [ 1750.012739][ T3592] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.249576][ T3592] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.434646][ T3592] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1750.825255][T14348] Bluetooth: hci1: command tx timeout [ 1751.391030][ T3592] bridge_slave_1: left allmulticast mode [ 1751.403229][ T3592] bridge_slave_1: left promiscuous mode [ 1751.410278][ T3592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.479212][ T3592] bridge_slave_0: left allmulticast mode [ 1751.486760][ T3592] bridge_slave_0: left promiscuous mode [ 1751.493470][ T3592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.005962][ T3592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1752.064612][ T3592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1752.083020][ T3592] bond0 (unregistering): Released all slaves [ 1752.107162][T15272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.120553][T15272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.129314][T15272] bridge_slave_0: entered allmulticast mode [ 1752.139373][T15272] bridge_slave_0: entered promiscuous mode [ 1752.195176][T15272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.202865][T15272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.210996][T15272] bridge_slave_1: entered allmulticast mode [ 1752.226638][T15272] bridge_slave_1: entered promiscuous mode [ 1752.601993][T15272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1752.734311][T15272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1752.916100][T14348] Bluetooth: hci1: command tx timeout [ 1753.079509][T15329] process 'syz.0.1622' launched './file1' with NULL argv: empty string added [ 1753.168748][ T3592] hsr_slave_0: left promiscuous mode [ 1753.195558][ T3592] hsr_slave_1: left promiscuous mode [ 1753.204009][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.214727][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1753.274522][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.282675][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.411700][ T3592] veth1_macvtap: left promiscuous mode [ 1753.424656][ T3592] veth0_macvtap: left promiscuous mode [ 1753.431160][ T3592] veth1_vlan: left promiscuous mode [ 1753.436996][ T3592] veth0_vlan: left promiscuous mode [ 1754.178860][T14347] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1754.198411][T14347] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1754.221124][T14347] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1754.237794][T14347] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1754.260442][T14347] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1754.709493][ T3592] team0 (unregistering): Port device team_slave_1 removed [ 1754.780809][ T3592] team0 (unregistering): Port device team_slave_0 removed [ 1754.977123][T14347] Bluetooth: hci1: command tx timeout [ 1755.139906][T15272] team0: Port device team_slave_0 added [ 1755.498130][T15272] team0: Port device team_slave_1 added [ 1756.067758][T15272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.076123][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.105212][T15272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1756.152151][T15356] fuse: Bad value for 'fd' [ 1756.174790][T15272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1756.182385][T15272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1756.211352][T15272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1756.407043][T14347] Bluetooth: hci4: command tx timeout [ 1756.603678][ T3592] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.998947][ T3592] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.156295][T15272] hsr_slave_0: entered promiscuous mode [ 1757.166979][T15272] hsr_slave_1: entered promiscuous mode [ 1757.241648][ T3592] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.421877][ T3592] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.496301][T15338] chnl_net:caif_netlink_parms(): no params data found [ 1758.137475][ T3592] bridge_slave_1: left allmulticast mode [ 1758.143471][ T3592] bridge_slave_1: left promiscuous mode [ 1758.150661][ T3592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.188695][ T3592] bridge_slave_0: left allmulticast mode [ 1758.197594][ T3592] bridge_slave_0: left promiscuous mode [ 1758.204331][ T3592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.536727][T14347] Bluetooth: hci4: command tx timeout [ 1758.797103][ T3592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.837351][ T3592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.877961][ T3592] bond0 (unregistering): Released all slaves [ 1759.141352][ T9709] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1759.306035][ T9709] usb 10-1: Using ep0 maxpacket: 32 [ 1759.324663][ T9709] usb 10-1: config 0 has no interfaces? [ 1759.331971][ T9709] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1759.341618][ T9709] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.393559][ T9709] usb 10-1: config 0 descriptor?? [ 1759.516786][ T1889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1759.664673][ T9709] usb 10-1: USB disconnect, device number 13 [ 1759.721433][ T1889] usb 6-1: Using ep0 maxpacket: 16 [ 1759.787124][ T1889] usb 6-1: config 0 has no interfaces? [ 1759.819974][ T1889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1759.830381][ T1889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1759.839064][ T1889] usb 6-1: SerialNumber: syz [ 1759.877444][ T1889] usb 6-1: config 0 descriptor?? [ 1759.924059][ T3592] hsr_slave_0: left promiscuous mode [ 1759.941486][ T3592] hsr_slave_1: left promiscuous mode [ 1759.953599][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.961802][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.991718][T14348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1760.017132][T14348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1760.028447][T14348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1760.040690][ T3592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1760.049129][ T3592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1760.079659][T14348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1760.116148][ T3592] veth1_macvtap: left promiscuous mode [ 1760.121999][ T3592] veth0_macvtap: left promiscuous mode [ 1760.128487][ T3592] veth1_vlan: left promiscuous mode [ 1760.134127][ T3592] veth0_vlan: left promiscuous mode [ 1760.138718][T14348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1760.161199][ T1889] usb 6-1: USB disconnect, device number 12 [ 1760.566916][T14348] Bluetooth: hci4: command tx timeout [ 1761.382259][ T3592] team0 (unregistering): Port device team_slave_1 removed [ 1761.427820][ T3592] team0 (unregistering): Port device team_slave_0 removed [ 1762.197223][T15396] Bluetooth: hci5: Frame reassembly failed (-84) [ 1762.223824][T15338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.231687][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.240426][T15338] bridge_slave_0: entered allmulticast mode [ 1762.248919][ T5805] Bluetooth: hci0: command tx timeout [ 1762.255880][T15338] bridge_slave_0: entered promiscuous mode [ 1762.505979][T15338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.513651][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.521867][T15338] bridge_slave_1: entered allmulticast mode [ 1762.532094][T15338] bridge_slave_1: entered promiscuous mode [ 1762.647183][T14347] Bluetooth: hci4: command tx timeout [ 1762.815114][T15338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.872125][T15338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.239884][T15338] team0: Port device team_slave_0 added [ 1763.373100][T15338] team0: Port device team_slave_1 added [ 1763.439198][T15272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1763.486474][T15272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1763.692697][T15272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1763.811138][T15272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1763.841558][T15338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.849210][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.876605][T15338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.910791][T15380] chnl_net:caif_netlink_parms(): no params data found [ 1763.941672][T15338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.949175][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1763.975824][T15338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1764.255652][T14348] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1764.325239][T14348] Bluetooth: hci0: command tx timeout [ 1764.542907][T15418] macvtap1: entered allmulticast mode [ 1764.549004][T15418] veth0_macvtap: entered allmulticast mode [ 1764.697150][T15338] hsr_slave_0: entered promiscuous mode [ 1764.712753][T15338] hsr_slave_1: entered promiscuous mode [ 1764.722146][T15338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1764.730233][T15338] Cannot create hsr debugfs directory [ 1765.634718][T15380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.643560][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.651948][T15380] bridge_slave_0: entered allmulticast mode [ 1765.661953][T15380] bridge_slave_0: entered promiscuous mode [ 1765.746928][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1765.753699][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1765.866267][T15380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.874172][T15380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.882605][T15380] bridge_slave_1: entered allmulticast mode [ 1765.892538][T15380] bridge_slave_1: entered promiscuous mode [ 1765.902477][ T1889] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1766.132585][ T1889] usb 10-1: Using ep0 maxpacket: 32 [ 1766.162219][ T1889] usb 10-1: config 0 has no interfaces? [ 1766.168278][ T1889] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1766.177935][ T1889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.221616][ T1889] usb 10-1: config 0 descriptor?? [ 1766.252079][T15380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.307180][T15272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.403457][T15380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.416966][T14348] Bluetooth: hci0: command tx timeout [ 1766.520451][ T9709] usb 10-1: USB disconnect, device number 14 [ 1766.542462][T15435] vxcan0: tx address claim with different name [ 1766.803738][T15380] team0: Port device team_slave_0 added [ 1766.913833][T15380] team0: Port device team_slave_1 added [ 1766.952250][T15272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.140376][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.148342][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.294097][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.301842][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1767.318651][T15380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.326046][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.352772][T15380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.519077][T15380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.527368][T15380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1767.555185][T15380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.632450][T15338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1767.731063][T15338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1767.802491][T15338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1767.964413][T14348] Bluetooth: hci2: unexpected subevent 0x1a length: 244 > 6 [ 1768.060635][T15338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1768.088341][T15441] binder: 15440:15441 ioctl 4018620d 0 returned -22 [ 1768.138831][T15380] hsr_slave_0: entered promiscuous mode [ 1768.149976][T15380] hsr_slave_1: entered promiscuous mode [ 1768.159231][T15380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1768.167313][T15380] Cannot create hsr debugfs directory [ 1768.179425][T15442] binder: 15440:15442 ioctl c0306201 0 returned -14 [ 1768.514810][T14348] Bluetooth: hci0: command tx timeout [ 1770.505310][T15338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.638832][T15338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.817898][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.825682][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.893700][T15272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.927061][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.934694][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.024294][T15380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1771.146657][T15380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1771.267530][T15380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1771.388370][T15380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1771.825435][ T9709] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1772.035896][ T9709] usb 6-1: Using ep0 maxpacket: 32 [ 1772.086997][ T9709] usb 6-1: config 0 has no interfaces? [ 1772.092860][ T9709] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1772.103351][ T9709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.159506][ T9709] usb 6-1: config 0 descriptor?? [ 1772.450682][T10564] usb 6-1: USB disconnect, device number 13 [ 1772.561136][T14348] Bluetooth: hci3: unexpected subevent 0x1a length: 244 > 6 [ 1773.020361][T15380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1773.245742][T15380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1773.321432][ T3743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.329206][ T3743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.437570][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.445386][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.511899][T15338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.698625][T15490] binder: 15488:15490 ioctl 4018620d 0 returned -22 [ 1774.355320][T15272] veth0_vlan: entered promiscuous mode [ 1774.479866][T15272] veth1_vlan: entered promiscuous mode [ 1774.893696][T15272] veth0_macvtap: entered promiscuous mode [ 1775.047623][T15272] veth1_macvtap: entered promiscuous mode [ 1775.243419][T15272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.353306][T14348] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1775.453001][T15272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1775.597286][T15272] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.606621][T15272] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.615908][T15272] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.625075][T15272] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.266563][T15380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1777.027433][T15338] veth0_vlan: entered promiscuous mode [ 1777.173112][T15338] veth1_vlan: entered promiscuous mode [ 1777.590981][T15338] veth0_macvtap: entered promiscuous mode [ 1777.691385][T15338] veth1_macvtap: entered promiscuous mode [ 1778.008881][T15338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1778.036217][T14348] Bluetooth: hci2: unexpected subevent 0x1a length: 244 > 6 [ 1778.117175][T15338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1778.140831][T15338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.151623][T15338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.160937][T15338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.171816][T15338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.605670][ T5863] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1778.847710][ T5863] usb 10-1: Using ep0 maxpacket: 32 [ 1778.915840][ T5863] usb 10-1: config 0 has no interfaces? [ 1778.921811][ T5863] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1778.931630][ T5863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.041140][ T5863] usb 10-1: config 0 descriptor?? [ 1779.357663][T11727] usb 10-1: USB disconnect, device number 15 [ 1779.918541][T15380] veth0_vlan: entered promiscuous mode [ 1780.079725][T15380] veth1_vlan: entered promiscuous mode [ 1780.530328][T15380] veth0_macvtap: entered promiscuous mode [ 1780.629937][T15380] veth1_macvtap: entered promiscuous mode [ 1780.930654][T15380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.023730][T15380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.083391][T15380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.099702][T15380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.110616][T15380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.119937][T15380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1783.629416][T14348] Bluetooth: hci2: unexpected subevent 0x1a length: 244 > 6 [ 1784.688548][T14611] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1784.876129][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.885453][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.943047][T14611] usb 6-1: Using ep0 maxpacket: 32 [ 1785.001636][T14611] usb 6-1: config 0 has no interfaces? [ 1785.008010][T14611] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1785.017776][T14611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.134725][T14611] usb 6-1: config 0 descriptor?? [ 1785.185949][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1785.196772][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1786.737437][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1786.745923][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.130357][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.140956][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1787.672666][T11727] usb 6-1: USB disconnect, device number 14 [ 1789.196967][T14348] Bluetooth: hci3: unexpected subevent 0x1a length: 244 > 6 [ 1790.345939][T10693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.354173][T10693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.755637][ T3743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1790.763783][ T3743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1790.781118][T15680] input: syz1 as /devices/virtual/input/input16 [ 1791.427609][T15688] loop6: detected capacity change from 0 to 524287999 [ 1791.615617][T11727] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1791.865244][T11727] usb 7-1: Using ep0 maxpacket: 32 [ 1791.923617][T11727] usb 7-1: config 0 has no interfaces? [ 1791.964480][T11727] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1791.980255][T11727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.061876][T15696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 1792.135911][T11727] usb 7-1: config 0 descriptor?? [ 1793.507240][T14348] Bluetooth: hci2: unexpected subevent 0x1a length: 244 > 6 [ 1794.579965][T11727] usb 7-1: USB disconnect, device number 11 [ 1796.400713][T15740] loop6: detected capacity change from 0 to 524287999 [ 1796.608667][ T30] audit: type=1326 audit(1750106292.879:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.6.1702" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x0 [ 1797.108256][T15751] No control pipe specified [ 1798.216259][ T5114] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1798.446812][ T5114] usb 10-1: Using ep0 maxpacket: 32 [ 1798.529859][ T5114] usb 10-1: config 0 has no interfaces? [ 1798.536828][ T5114] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1798.546507][ T5114] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.726870][ T5114] usb 10-1: config 0 descriptor?? [ 1798.755571][ T1889] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1798.995218][ T1889] usb 5-1: Using ep0 maxpacket: 16 [ 1799.086088][ T1889] usb 5-1: config 0 has no interfaces? [ 1799.129514][ T1889] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1799.140250][ T1889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1799.148772][ T1889] usb 5-1: SerialNumber: syz [ 1799.257167][ T1889] usb 5-1: config 0 descriptor?? [ 1799.490008][ T1889] usb 5-1: USB disconnect, device number 20 [ 1800.575980][T15780] syz_tun: entered allmulticast mode [ 1800.666743][T15780] dvmrp1: entered allmulticast mode [ 1800.963313][ T1889] usb 10-1: USB disconnect, device number 16 [ 1801.191746][T15777] syz_tun: left allmulticast mode [ 1801.785797][T15789] autofs: Bad value for 'fd' [ 1804.165334][ T1889] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1804.242980][T11727] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1804.364012][ T1889] usb 10-1: Using ep0 maxpacket: 16 [ 1804.412630][ T1889] usb 10-1: config 0 has no interfaces? [ 1804.450274][ T1889] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1804.460175][ T1889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1804.468775][ T1889] usb 10-1: SerialNumber: syz [ 1804.495471][T11727] usb 6-1: Using ep0 maxpacket: 32 [ 1804.556844][T11727] usb 6-1: config 0 has no interfaces? [ 1804.562918][T11727] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1804.573762][T11727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.594119][ T1889] usb 10-1: config 0 descriptor?? [ 1804.668788][T11727] usb 6-1: config 0 descriptor?? [ 1804.865280][T11727] usb 10-1: USB disconnect, device number 17 [ 1804.963179][ T1889] usb 6-1: USB disconnect, device number 15 [ 1805.495913][ T1889] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1805.728703][ T1889] usb 6-1: Using ep0 maxpacket: 32 [ 1805.788338][ T1889] usb 6-1: config 0 has no interfaces? [ 1805.794196][ T1889] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1805.803832][ T1889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.920195][ T1889] usb 6-1: config 0 descriptor?? [ 1806.633053][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.904188][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.129416][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.382637][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1807.565800][ T1889] usb 6-1: USB disconnect, device number 16 [ 1808.171148][ T63] bridge_slave_1: left allmulticast mode [ 1808.177329][ T63] bridge_slave_1: left promiscuous mode [ 1808.184191][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.318821][ T63] bridge_slave_0: left allmulticast mode [ 1808.324814][ T63] bridge_slave_0: left promiscuous mode [ 1808.339155][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.989675][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1809.023186][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1809.039653][ T63] bond0 (unregistering): Released all slaves [ 1809.616577][T14348] Bluetooth: hci0: command 0x0406 tx timeout [ 1809.671365][ T63] hsr_slave_0: left promiscuous mode [ 1809.705340][ T63] hsr_slave_1: left promiscuous mode [ 1809.713588][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1809.722846][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.758677][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1809.771608][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.835874][ T63] veth1_macvtap: left promiscuous mode [ 1809.841710][ T63] veth0_macvtap: left promiscuous mode [ 1809.854323][ T63] veth1_vlan: left promiscuous mode [ 1809.860159][ T63] veth0_vlan: left promiscuous mode [ 1811.092352][ T5863] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1811.520876][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 1811.582458][ T5863] usb 6-1: config 0 has no interfaces? [ 1811.611447][ T5863] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1811.621126][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1811.629596][ T5863] usb 6-1: SerialNumber: syz [ 1811.740389][ T5863] usb 6-1: config 0 descriptor?? [ 1811.753520][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1811.894026][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1812.056409][ T5863] usb 6-1: USB disconnect, device number 17 [ 1812.266867][T14348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1812.283559][T14348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1812.294220][T14348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1812.312657][T14348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1812.392417][T14348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1813.474858][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.700487][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.800271][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.023133][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.490295][ T63] bridge_slave_1: left allmulticast mode [ 1814.497019][ T63] bridge_slave_1: left promiscuous mode [ 1814.503769][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.566400][T14347] Bluetooth: hci1: command tx timeout [ 1814.636710][ T63] bridge_slave_0: left allmulticast mode [ 1814.642754][ T63] bridge_slave_0: left promiscuous mode [ 1814.649844][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.216938][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.263936][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.291436][ T63] bond0 (unregistering): Released all slaves [ 1816.107770][T15883] chnl_net:caif_netlink_parms(): no params data found [ 1816.184321][ T63] hsr_slave_0: left promiscuous mode [ 1816.193880][ T63] hsr_slave_1: left promiscuous mode [ 1816.204319][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.212281][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.229978][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.240626][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.425515][ T63] veth1_macvtap: left promiscuous mode [ 1816.431372][ T63] veth0_macvtap: left promiscuous mode [ 1816.437591][ T63] veth1_vlan: left promiscuous mode [ 1816.443227][ T63] veth0_vlan: left promiscuous mode [ 1816.553729][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1754'. [ 1816.646088][T14347] Bluetooth: hci1: command tx timeout [ 1817.053909][ T11] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1817.298577][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 1817.373618][ T11] usb 10-1: config 0 has no interfaces? [ 1817.381067][ T11] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1817.391580][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.438987][ T11] usb 10-1: config 0 descriptor?? [ 1817.466130][T14348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1817.595881][T14348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1817.627281][T14348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1817.656240][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1817.688274][ T1889] usb 10-1: USB disconnect, device number 18 [ 1817.711260][T14348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1817.734436][T14348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1817.807662][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1818.425458][ T1889] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1818.637821][ T1889] usb 10-1: Using ep0 maxpacket: 32 [ 1818.734003][ T1889] usb 10-1: config 0 has no interfaces? [ 1818.735445][T14347] Bluetooth: hci1: command tx timeout [ 1818.741042][ T1889] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1818.755284][ T1889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.944364][ T1889] usb 10-1: config 0 descriptor?? [ 1819.352700][ T3999] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.404006][ T5863] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1819.476161][ T3999] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.597177][ T5863] usb 8-1: Using ep0 maxpacket: 16 [ 1819.614596][ T5863] usb 8-1: config 0 has no interfaces? [ 1819.649181][ T5863] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1819.659485][ T5863] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1819.668519][ T5863] usb 8-1: SerialNumber: syz [ 1819.714826][ T3999] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.739213][ T5863] usb 8-1: config 0 descriptor?? [ 1819.846069][T14347] Bluetooth: hci0: command tx timeout [ 1819.984054][ T3999] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.013689][ T5863] usb 8-1: USB disconnect, device number 23 [ 1820.063564][T15912] chnl_net:caif_netlink_parms(): no params data found [ 1820.225560][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1820.233459][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.241579][T15883] bridge_slave_0: entered allmulticast mode [ 1820.253578][T15883] bridge_slave_0: entered promiscuous mode [ 1820.354387][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.362335][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.370328][T15883] bridge_slave_1: entered allmulticast mode [ 1820.380091][T15883] bridge_slave_1: entered promiscuous mode [ 1820.698111][ T1889] usb 10-1: USB disconnect, device number 19 [ 1820.835909][T14347] Bluetooth: hci1: command tx timeout [ 1820.948661][ T3999] bridge_slave_1: left allmulticast mode [ 1820.954607][ T3999] bridge_slave_1: left promiscuous mode [ 1820.961649][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.076106][ T3999] bridge_slave_0: left allmulticast mode [ 1821.082090][ T3999] bridge_slave_0: left promiscuous mode [ 1821.089116][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.659092][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.684660][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.710138][ T3999] bond0 (unregistering): Released all slaves [ 1821.879094][T15883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.930580][T14347] Bluetooth: hci0: command tx timeout [ 1821.965963][T15883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.469315][T15883] team0: Port device team_slave_0 added [ 1822.648577][ T3999] hsr_slave_0: left promiscuous mode [ 1822.659241][ T3999] hsr_slave_1: left promiscuous mode [ 1822.670694][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1822.678643][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.717785][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1822.725853][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.828074][ T3999] veth1_macvtap: left promiscuous mode [ 1822.834084][ T3999] veth0_macvtap: left promiscuous mode [ 1822.840613][ T3999] veth1_vlan: left promiscuous mode [ 1822.846402][ T3999] veth0_vlan: left promiscuous mode [ 1823.545519][T14348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1823.636365][T14348] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1823.652479][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 1823.664088][T14348] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1823.679770][T14348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1823.702865][T14348] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1823.830631][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 1824.005223][T14348] Bluetooth: hci0: command tx timeout [ 1824.186105][T15883] team0: Port device team_slave_1 added [ 1824.454002][T15912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.462937][T15912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.470944][T15912] bridge_slave_0: entered allmulticast mode [ 1824.480683][T15912] bridge_slave_0: entered promiscuous mode [ 1824.651677][T15912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.660814][T15912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.668851][T15912] bridge_slave_1: entered allmulticast mode [ 1824.760879][T15912] bridge_slave_1: entered promiscuous mode [ 1824.808303][T15883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1824.817032][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1824.843170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.854082][T15883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1825.160144][T15883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.168447][T15883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1825.194571][ C0] vkms_vblank_simulate: vblank timer overrun [ 1825.202424][T15883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.361127][T15912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1825.480211][T15912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1825.770765][T14348] Bluetooth: hci2: command tx timeout [ 1825.885796][T10375] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1825.932306][T15883] hsr_slave_0: entered promiscuous mode [ 1825.944683][T15883] hsr_slave_1: entered promiscuous mode [ 1826.085604][T10375] usb 10-1: Using ep0 maxpacket: 32 [ 1826.095654][T14348] Bluetooth: hci0: command tx timeout [ 1826.103553][T10375] usb 10-1: config 0 has no interfaces? [ 1826.111838][T10375] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1826.122040][T10375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.268103][T10375] usb 10-1: config 0 descriptor?? [ 1826.339367][T15912] team0: Port device team_slave_0 added [ 1826.441609][T15912] team0: Port device team_slave_1 added [ 1826.541583][ T1889] usb 10-1: USB disconnect, device number 20 [ 1826.827318][T15912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1826.834593][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.861416][T15912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.920325][T15912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.927848][T15912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.954489][T15912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.005644][T15946] chnl_net:caif_netlink_parms(): no params data found [ 1827.101314][ T1889] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1827.167734][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.175607][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1827.245353][T11217] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1827.315405][ T1889] usb 10-1: Using ep0 maxpacket: 32 [ 1827.342702][ T1889] usb 10-1: config 0 has no interfaces? [ 1827.349555][ T1889] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1827.359235][ T1889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.381942][ T1889] usb 10-1: config 0 descriptor?? [ 1827.422526][T11217] usb 8-1: Using ep0 maxpacket: 16 [ 1827.440642][T11217] usb 8-1: config 0 has no interfaces? [ 1827.476617][T11217] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1827.488830][T11217] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1827.498298][T11217] usb 8-1: SerialNumber: syz [ 1827.545720][T11217] usb 8-1: config 0 descriptor?? [ 1827.606709][T15912] hsr_slave_0: entered promiscuous mode [ 1827.617425][T15912] hsr_slave_1: entered promiscuous mode [ 1827.626609][T15912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1827.634447][T15912] Cannot create hsr debugfs directory [ 1827.833145][T10375] usb 8-1: USB disconnect, device number 24 [ 1827.848946][T14348] Bluetooth: hci2: command tx timeout [ 1828.547071][T15946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.557765][T15946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.565724][T15946] bridge_slave_0: entered allmulticast mode [ 1828.575690][T15946] bridge_slave_0: entered promiscuous mode [ 1828.777030][T15946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.784705][T15946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.792881][T15946] bridge_slave_1: entered allmulticast mode [ 1828.802787][T15946] bridge_slave_1: entered promiscuous mode [ 1828.968167][T10375] usb 10-1: USB disconnect, device number 21 [ 1829.580801][T15946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.642063][T15946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.926369][T14348] Bluetooth: hci2: command tx timeout [ 1830.338224][T15946] team0: Port device team_slave_0 added [ 1830.558618][T15946] team0: Port device team_slave_1 added [ 1830.949994][T15946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.958463][T15946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.986406][T15946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.319072][T15946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.326489][T15946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.352617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.361449][T15946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.533701][T15912] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1831.646978][T15912] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1831.710579][T15912] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1831.769232][T15912] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1831.844647][T15883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1832.005932][T14348] Bluetooth: hci2: command tx timeout [ 1832.192554][T15883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1832.310734][ T3999] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.420374][T15946] hsr_slave_0: entered promiscuous mode [ 1832.431030][T15946] hsr_slave_1: entered promiscuous mode [ 1832.440183][T15946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1832.448169][T15946] Cannot create hsr debugfs directory [ 1832.549536][ T3999] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.592588][T15883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1832.704328][ T3999] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.869927][T15883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1833.000414][ T3999] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.774622][ T3999] bridge_slave_1: left allmulticast mode [ 1833.780910][ T3999] bridge_slave_1: left promiscuous mode [ 1833.787870][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.850356][ T3999] bridge_slave_0: left allmulticast mode [ 1833.856597][ T3999] bridge_slave_0: left promiscuous mode [ 1833.863306][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.328332][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1834.386125][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.409834][ T3999] bond0 (unregistering): Released all slaves [ 1835.340702][T14347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1835.350632][T14347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1835.360632][T14347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1835.393378][T14347] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1835.405987][ T3999] hsr_slave_0: left promiscuous mode [ 1835.415382][T14347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1835.458273][ T3999] hsr_slave_1: left promiscuous mode [ 1835.469274][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.477545][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.496730][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.504561][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.532368][ T3999] veth0_macvtap: left allmulticast mode [ 1835.538642][ T3999] veth1_macvtap: left promiscuous mode [ 1835.544436][ T3999] veth0_macvtap: left promiscuous mode [ 1835.551721][ T3999] veth1_vlan: left promiscuous mode [ 1835.557493][ T3999] veth0_vlan: left promiscuous mode [ 1836.349048][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 1836.400362][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 1837.199630][T15912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.232290][T15883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.530581][T14347] Bluetooth: hci3: command tx timeout [ 1837.796451][T15883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.818962][T15912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.875807][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.883450][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.136182][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.143824][T10693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.309738][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.317647][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.351222][T15946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1838.478573][T15946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1838.560823][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.568601][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.623235][T15946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1838.768713][T15946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1838.926162][T16023] chnl_net:caif_netlink_parms(): no params data found [ 1838.971483][T15883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1839.605338][T14347] Bluetooth: hci3: command tx timeout [ 1839.704419][ T1147] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.901035][ T1147] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.091659][ T1147] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.290793][ T1147] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.077711][ T1147] bridge_slave_1: left allmulticast mode [ 1841.083674][ T1147] bridge_slave_1: left promiscuous mode [ 1841.090607][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.179900][ T1147] bridge_slave_0: left allmulticast mode [ 1841.186742][ T1147] bridge_slave_0: left promiscuous mode [ 1841.193455][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.519890][ T1147] dvmrp1 (unregistering): left allmulticast mode [ 1841.707930][T14347] Bluetooth: hci3: command tx timeout [ 1841.746682][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1841.832845][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1841.862968][ T1147] bond0 (unregistering): Released all slaves [ 1841.986596][T15883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.330440][T16023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.339852][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.348059][T16023] bridge_slave_0: entered allmulticast mode [ 1842.358095][T16023] bridge_slave_0: entered promiscuous mode [ 1842.425557][T15946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.583655][T16023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.591676][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.599711][T16023] bridge_slave_1: entered allmulticast mode [ 1842.609646][T16023] bridge_slave_1: entered promiscuous mode [ 1842.666174][T15912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.742787][ T1147] hsr_slave_0: left promiscuous mode [ 1842.759912][ T1147] hsr_slave_1: left promiscuous mode [ 1842.768059][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.776064][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.838745][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.847830][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.928415][ T1147] veth1_macvtap: left promiscuous mode [ 1842.934265][ T1147] veth0_macvtap: left promiscuous mode [ 1842.942218][ T1147] veth1_vlan: left promiscuous mode [ 1842.948174][ T1147] veth0_vlan: left promiscuous mode [ 1843.506624][T14348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1843.517532][T14348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1843.588525][T14348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1843.602364][T14348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1843.630574][T14348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1843.681344][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 1843.742974][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 1843.807190][T14348] Bluetooth: hci3: command tx timeout [ 1844.253569][T16023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.318800][T16023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1844.373542][T15946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1844.859502][T16023] team0: Port device team_slave_0 added [ 1844.920337][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.928064][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.964003][T15883] veth0_vlan: entered promiscuous mode [ 1844.994287][T16023] team0: Port device team_slave_1 added [ 1845.059201][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.066905][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.181216][T15883] veth1_vlan: entered promiscuous mode [ 1845.403688][T16023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.411177][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.438664][T16023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.592325][T15946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1845.703878][T16023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.711865][T16023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1845.739426][T16023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1845.774197][T14348] Bluetooth: hci4: command tx timeout [ 1846.031546][T16023] hsr_slave_0: entered promiscuous mode [ 1846.046879][T16023] hsr_slave_1: entered promiscuous mode [ 1846.057138][T16023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1846.065163][T16023] Cannot create hsr debugfs directory [ 1846.086468][T15883] veth0_macvtap: entered promiscuous mode [ 1846.177402][T15883] veth1_macvtap: entered promiscuous mode [ 1846.398927][T16076] chnl_net:caif_netlink_parms(): no params data found [ 1846.603781][T15883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.731189][T15912] veth0_vlan: entered promiscuous mode [ 1846.800065][T15883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.897149][T15883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.906432][T15883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.915958][T15883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.925201][T15883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.024340][T15912] veth1_vlan: entered promiscuous mode [ 1847.808308][T15912] veth0_macvtap: entered promiscuous mode [ 1847.845787][T14348] Bluetooth: hci4: command tx timeout [ 1847.931538][T15912] veth1_macvtap: entered promiscuous mode [ 1847.969433][T15946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1848.477635][T15912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1848.663545][T16076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.672614][T16076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1848.681542][T16076] bridge_slave_0: entered allmulticast mode [ 1848.692729][T16076] bridge_slave_0: entered promiscuous mode [ 1848.778364][T16076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.787071][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1848.795437][T16076] bridge_slave_1: entered allmulticast mode [ 1848.808192][T16076] bridge_slave_1: entered promiscuous mode [ 1848.847389][T15912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1848.970594][T15912] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.980272][T15912] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1848.989571][T15912] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.000311][T15912] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.220371][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1849.231435][T16023] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1849.314659][T16023] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1849.371666][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.406687][T16023] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1849.441260][T15946] veth0_vlan: entered promiscuous mode [ 1849.649161][T16076] team0: Port device team_slave_0 added [ 1849.666267][T16023] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1849.744465][T16076] team0: Port device team_slave_1 added [ 1849.946341][T14348] Bluetooth: hci4: command tx timeout [ 1850.025854][T15946] veth1_vlan: entered promiscuous mode [ 1850.104663][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.112334][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.139290][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.322937][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.332645][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.360265][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1850.610354][T15946] veth0_macvtap: entered promiscuous mode [ 1850.692459][T15946] veth1_macvtap: entered promiscuous mode [ 1850.944093][T16076] hsr_slave_0: entered promiscuous mode [ 1850.955278][T16076] hsr_slave_1: entered promiscuous mode [ 1850.964289][T16076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1850.972344][T16076] Cannot create hsr debugfs directory [ 1851.178192][T15946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.424522][T15946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.673633][T16023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1851.710345][T15946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.720548][T15946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.730179][T15946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.739558][T15946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.960166][T16023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.022555][T14348] Bluetooth: hci4: command tx timeout [ 1852.106531][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.114245][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.197530][ T3743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.205399][ T3743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1852.891958][T16023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1852.904393][T16023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1853.990781][T16076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1854.129082][T16076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1854.213367][T16076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1854.331380][T16076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1855.230201][ T8179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.239791][ T8179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.539807][T16023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.569768][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.578087][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.055997][T16076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1856.326773][T16076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1856.394350][T16023] veth0_vlan: entered promiscuous mode [ 1856.436910][ T3999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1856.444577][ T3999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.553110][T16023] veth1_vlan: entered promiscuous mode [ 1856.607209][ T3999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.615113][ T3999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1857.240547][T16023] veth0_macvtap: entered promiscuous mode [ 1857.312942][T16023] veth1_macvtap: entered promiscuous mode [ 1857.622337][T16023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1857.765868][T16023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1857.959141][T16023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.968582][T16023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.979250][T16023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1857.988817][T16023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1858.708480][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1858.717160][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.053951][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1859.065373][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1859.737727][T16076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1860.392788][T16076] veth0_vlan: entered promiscuous mode [ 1860.549740][T16076] veth1_vlan: entered promiscuous mode [ 1861.002899][T16076] veth0_macvtap: entered promiscuous mode [ 1861.113753][T16076] veth1_macvtap: entered promiscuous mode [ 1861.415041][T16076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1861.700562][T16076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1861.772320][T16076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.798912][T16076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.814567][T16076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.831532][T16076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1861.960036][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1861.975588][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.381409][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.396300][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1863.855691][T16219] syz_tun: entered promiscuous mode [ 1863.868104][T16219] batadv_slave_0: entered promiscuous mode [ 1863.878359][T16219] hsr1: entered allmulticast mode [ 1863.883704][T16219] syz_tun: entered allmulticast mode [ 1863.889471][T16219] batadv_slave_0: entered allmulticast mode [ 1868.182930][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.191113][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1868.594796][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1868.604729][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.345326][T10564] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1870.529981][T10564] usb 2-1: Using ep0 maxpacket: 16 [ 1870.585506][T10564] usb 2-1: config 0 has no interfaces? [ 1870.641988][T10564] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1870.658379][T10564] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1870.669663][T10564] usb 2-1: SerialNumber: syz [ 1870.701209][T16305] loop6: detected capacity change from 0 to 524287999 [ 1870.818681][T10564] usb 2-1: config 0 descriptor?? [ 1871.063050][T10564] usb 2-1: USB disconnect, device number 17 [ 1871.485729][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.493872][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1871.984827][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1871.993636][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.677383][T16350] loop6: detected capacity change from 0 to 524287999 [ 1875.566975][T16358] 9pnet_virtio: no channels available for device syz [ 1875.727281][T11727] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1875.960848][T11727] usb 4-1: Using ep0 maxpacket: 16 [ 1875.984273][T11727] usb 4-1: config 0 has no interfaces? [ 1876.000282][T11727] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1876.010134][T11727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1876.027939][T11727] usb 4-1: SerialNumber: syz [ 1876.148869][T11727] usb 4-1: config 0 descriptor?? [ 1876.392346][T11727] usb 4-1: USB disconnect, device number 15 [ 1879.098712][T16396] loop6: detected capacity change from 0 to 524287999 [ 1879.796327][T10564] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1880.035451][T10564] usb 4-1: Using ep0 maxpacket: 32 [ 1880.077239][T10564] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1880.092127][T10564] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1880.103459][T10564] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1880.118547][T10564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1880.130708][T10564] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1880.141318][T10564] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1880.155333][T10564] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1880.164859][T10564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.494081][T10564] usb 4-1: config 0 descriptor?? [ 1880.572497][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1880.738855][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1880.837747][T10564] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1880.871093][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 1880.988094][T10564] usb 4-1: USB disconnect, device number 16 [ 1881.031525][T10564] usblp0: removed [ 1881.465884][T10564] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1881.697081][T10564] usb 4-1: Using ep0 maxpacket: 32 [ 1881.765655][T10564] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1881.775935][T10564] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1881.786953][T10564] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1881.799263][T10564] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1881.810445][T10564] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1881.823832][T10564] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1881.838529][T10564] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1881.851433][T10564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.989332][T10564] usb 4-1: config 0 descriptor?? [ 1883.994605][T10564] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1884.252085][T10564] usb 4-1: USB disconnect, device number 17 [ 1884.271785][T16128] udevd[16128]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 1884.320276][T10564] usblp0: removed [ 1884.360983][T16128] udevd[16128]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 1886.578440][T16473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1886.586274][T16473] IPv6: NLM_F_CREATE should be set when creating new route [ 1886.594061][T16473] IPv6: NLM_F_CREATE should be set when creating new route [ 1888.617627][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.636747][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1891.758313][T16539] input: syz0 as /devices/virtual/input/input17 [ 1892.328768][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 1893.043780][T14348] Bluetooth: hci4: hardware error 0x08 [ 1893.106901][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1888'. [ 1893.845682][T14347] Bluetooth: hci1: command 0x0c1a tx timeout [ 1893.901106][T10564] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1893.908032][T10564] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1894.745737][T16110] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1894.935425][T16110] usb 3-1: device descriptor read/64, error -71 [ 1895.205319][T14348] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1895.211679][T16110] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1895.385450][T16110] usb 3-1: device descriptor read/64, error -71 [ 1895.501457][T16110] usb usb3-port1: attempt power cycle [ 1895.932142][T16110] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1896.006005][T14348] Bluetooth: hci0: command 0x0c1a tx timeout [ 1896.009360][T16110] usb 3-1: device descriptor read/8, error -71 [ 1896.020970][T10564] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1896.028007][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1899'. [ 1896.038566][T10564] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1896.285724][T16110] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1896.383637][T16110] usb 3-1: device descriptor read/8, error -71 [ 1896.520805][T16110] usb usb3-port1: unable to enumerate USB device [ 1897.069811][T16608] 9pnet_virtio: no channels available for device syz [ 1898.187577][T16621] nbd: couldn't find device at index -1140850688 [ 1898.253244][T14348] Bluetooth: hci2: command 0x0c1a tx timeout [ 1898.275710][T10564] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1898.282124][T10564] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1900.489121][T14348] Bluetooth: hci3: command 0x0c1a tx timeout [ 1900.504797][T10564] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1900.512381][T10564] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1901.385279][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1901.575318][ T24] usb 1-1: device descriptor read/64, error -71 [ 1901.865212][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1902.062821][ T24] usb 1-1: device descriptor read/64, error -71 [ 1902.196796][ T24] usb usb1-port1: attempt power cycle [ 1902.588337][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1902.644543][ T24] usb 1-1: device descriptor read/8, error -71 [ 1902.895463][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1902.978171][ T24] usb 1-1: device descriptor read/8, error -71 [ 1903.052197][T16686] fuse: Bad value for 'group_id' [ 1903.058645][T16686] fuse: Bad value for 'group_id' [ 1903.097688][ T24] usb usb1-port1: unable to enumerate USB device [ 1905.997979][T16725] fuse: Bad value for 'group_id' [ 1906.003272][T16725] fuse: Bad value for 'group_id' [ 1906.664301][ T5153] udevd[5153]: worker [16320] terminated by signal 33 (Unknown signal 33) [ 1906.705721][ T5153] udevd[5153]: worker [16320] failed while handling '/devices/virtual/block/loop2' [ 1907.405631][T11727] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1907.565717][T11727] usb 2-1: device descriptor read/64, error -71 [ 1907.830889][T11727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1908.029070][T11727] usb 2-1: device descriptor read/64, error -71 [ 1908.200155][T11727] usb usb2-port1: attempt power cycle [ 1908.596353][T11727] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1908.637363][T11727] usb 2-1: device descriptor read/8, error -71 [ 1908.895803][T11727] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1908.953090][T11727] usb 2-1: device descriptor read/8, error -71 [ 1909.083077][T11727] usb usb2-port1: unable to enumerate USB device [ 1911.150000][T15883] syz_tun (unregistering): left promiscuous mode [ 1911.470705][ T1147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.703462][ T1147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1911.785418][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1911.969570][ T1147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.005269][ T24] usb 2-1: device descriptor read/64, error -71 [ 1912.086334][ T1147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.286110][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1912.495699][ T24] usb 2-1: device descriptor read/64, error -71 [ 1912.618445][ T24] usb usb2-port1: attempt power cycle [ 1912.702682][ T1147] bridge_slave_1: left allmulticast mode [ 1912.708980][ T1147] bridge_slave_1: left promiscuous mode [ 1912.715873][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1912.839953][ T1147] bridge_slave_0: left allmulticast mode [ 1912.846695][ T1147] bridge_slave_0: left promiscuous mode [ 1912.853414][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.055539][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1913.132068][ T24] usb 2-1: device descriptor read/8, error -71 [ 1913.385179][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1913.404653][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1913.433382][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1913.457664][ T24] usb 2-1: device descriptor read/8, error -71 [ 1913.478812][ T1147] bond0 (unregistering): Released all slaves [ 1913.585627][ T24] usb usb2-port1: unable to enumerate USB device [ 1913.899113][ T1147] batadv_slave_0: left promiscuous mode [ 1913.962386][ T1147] hsr_slave_0: left promiscuous mode [ 1914.017218][ T1147] hsr_slave_1: left promiscuous mode [ 1914.030403][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1914.038745][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1914.096547][ T1147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1914.104355][ T1147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1914.227174][ T1147] veth1_macvtap: left promiscuous mode [ 1914.233260][ T1147] veth0_macvtap: left promiscuous mode [ 1914.239647][ T1147] veth1_vlan: left promiscuous mode [ 1914.245631][ T1147] veth0_vlan: left promiscuous mode [ 1914.827283][T11727] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1915.055278][T11727] usb 4-1: device descriptor read/64, error -71 [ 1915.346097][T11727] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1915.377376][ T1147] team0 (unregistering): Port device team_slave_1 removed [ 1915.511270][T14347] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1915.539928][T11727] usb 4-1: device descriptor read/64, error -71 [ 1915.552258][T14347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1915.565906][T14347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1915.580937][ T1147] team0 (unregistering): Port device team_slave_0 removed [ 1915.676381][T11727] usb usb4-port1: attempt power cycle [ 1915.848228][T14347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1915.918882][T14347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1916.117418][T11727] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1916.180730][T11727] usb 4-1: device descriptor read/8, error -71 [ 1916.221944][T14348] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1916.232433][T14348] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1916.242776][T14348] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1916.262046][T14348] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1916.274244][T14348] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1916.451978][T11727] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1916.556601][T11727] usb 4-1: device descriptor read/8, error -71 [ 1916.670335][T11727] usb usb4-port1: unable to enumerate USB device [ 1917.173693][ T7318] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.341040][ T7318] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.531439][ T7318] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1917.764535][ T7318] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.183555][ T7318] bridge_slave_1: left allmulticast mode [ 1918.189874][ T7318] bridge_slave_1: left promiscuous mode [ 1918.196811][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.242141][ T7318] bridge_slave_0: left allmulticast mode [ 1918.248475][ T7318] bridge_slave_0: left promiscuous mode [ 1918.255362][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.325273][T14348] Bluetooth: hci1: command tx timeout [ 1918.876803][ T7318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1918.927175][ T7318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1918.954660][ T7318] bond0 (unregistering): Released all slaves [ 1919.080647][T16825] chnl_net:caif_netlink_parms(): no params data found [ 1919.570510][ T7318] hsr_slave_0: left promiscuous mode [ 1919.592903][ T7318] hsr_slave_1: left promiscuous mode [ 1919.601108][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1919.609328][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1919.629575][ T7318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1919.638480][ T7318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1919.701774][ T7318] veth1_macvtap: left promiscuous mode [ 1919.707750][ T7318] veth0_macvtap: left promiscuous mode [ 1919.713720][ T7318] veth1_vlan: left promiscuous mode [ 1919.719558][ T7318] veth0_vlan: left promiscuous mode [ 1920.415795][T14348] Bluetooth: hci1: command tx timeout [ 1920.606660][ T7318] team0 (unregistering): Port device team_slave_1 removed [ 1920.767837][ T7318] team0 (unregistering): Port device team_slave_0 removed [ 1921.509912][T14347] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1921.513797][T11727] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1921.520876][T14347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1921.535745][T14347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1921.627883][T14347] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1921.640140][T14347] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1921.773881][T11727] usb 4-1: device descriptor read/64, error -71 [ 1922.065730][T11727] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1922.346300][T11727] usb 4-1: device descriptor read/64, error -71 [ 1922.472473][T11727] usb usb4-port1: attempt power cycle [ 1922.489111][T14347] Bluetooth: hci1: command tx timeout [ 1922.610208][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1922.618310][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.626299][T16825] bridge_slave_0: entered allmulticast mode [ 1922.636145][T16825] bridge_slave_0: entered promiscuous mode [ 1922.738172][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1922.746801][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1922.754618][T16825] bridge_slave_1: entered allmulticast mode [ 1922.764642][T16825] bridge_slave_1: entered promiscuous mode [ 1922.935383][T11727] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1922.995880][T11727] usb 4-1: device descriptor read/8, error -71 [ 1923.020500][ T3999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.248687][ T3999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.264413][T11727] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1923.309133][T11727] usb 4-1: device descriptor read/8, error -71 [ 1923.348328][T16825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1923.358333][T16868] chnl_net:caif_netlink_parms(): no params data found [ 1923.402303][ T3999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.429030][T11727] usb usb4-port1: unable to enumerate USB device [ 1923.522989][T16825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1923.635686][ T3999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.685257][T14347] Bluetooth: hci0: command tx timeout [ 1924.050299][T16825] team0: Port device team_slave_0 added [ 1924.133030][T16825] team0: Port device team_slave_1 added [ 1924.565560][T14347] Bluetooth: hci1: command tx timeout [ 1924.578428][ T3999] bridge_slave_1: left allmulticast mode [ 1924.584532][ T3999] bridge_slave_1: left promiscuous mode [ 1924.591567][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1924.727286][ T3999] bridge_slave_0: left allmulticast mode [ 1924.733265][ T3999] bridge_slave_0: left promiscuous mode [ 1924.741387][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.266712][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1925.306363][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1925.330119][ T3999] bond0 (unregistering): Released all slaves [ 1925.366024][T16825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1925.373256][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.400242][T16825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1925.520763][T16825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1925.528388][T16825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1925.555483][T16825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1925.764233][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.772166][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.780214][T16868] bridge_slave_0: entered allmulticast mode [ 1925.785670][T14347] Bluetooth: hci0: command tx timeout [ 1925.790566][T16868] bridge_slave_0: entered promiscuous mode [ 1925.884132][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.895826][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1925.906240][T16868] bridge_slave_1: entered allmulticast mode [ 1925.917073][T16868] bridge_slave_1: entered promiscuous mode [ 1926.425636][T14455] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1926.547336][ T3999] hsr_slave_0: left promiscuous mode [ 1926.575505][ T3999] hsr_slave_1: left promiscuous mode [ 1926.576090][T14455] usb 2-1: device descriptor read/64, error -71 [ 1926.584307][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1926.595481][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1926.648772][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1926.656745][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1926.700478][T14348] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1926.730706][ T3999] veth1_macvtap: left promiscuous mode [ 1926.738565][ T3999] veth0_macvtap: left promiscuous mode [ 1926.744691][ T3999] veth1_vlan: left promiscuous mode [ 1926.750541][ T3999] veth0_vlan: left promiscuous mode [ 1926.758704][T14348] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1926.768274][T14348] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1926.927026][T14348] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1927.013028][T14348] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1927.209506][T14455] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1927.361462][T14455] usb 2-1: device descriptor read/64, error -71 [ 1927.499683][T14455] usb usb2-port1: attempt power cycle [ 1927.703609][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 1927.773755][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 1927.848989][T14348] Bluetooth: hci0: command tx timeout [ 1927.878021][T14455] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1927.920441][T14455] usb 2-1: device descriptor read/8, error -71 [ 1928.168984][T14455] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1928.218239][T14455] usb 2-1: device descriptor read/8, error -71 [ 1928.314281][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1928.331581][T14455] usb usb2-port1: unable to enumerate USB device [ 1928.380481][T16825] hsr_slave_0: entered promiscuous mode [ 1928.390939][T16825] hsr_slave_1: entered promiscuous mode [ 1928.468207][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1928.907402][T16868] team0: Port device team_slave_0 added [ 1929.127455][T14348] Bluetooth: hci4: command tx timeout [ 1929.160324][T16868] team0: Port device team_slave_1 added [ 1929.522843][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.530503][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1929.557282][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.745332][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.752591][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1929.779517][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.946550][T14348] Bluetooth: hci0: command tx timeout [ 1929.973053][ T3999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.034431][T16929] bridge_slave_0: default FDB implementation only supports local addresses [ 1930.284374][ T3999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.565911][ T3999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.760100][ T3999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.950450][T16868] hsr_slave_0: entered promiscuous mode [ 1930.961405][T16868] hsr_slave_1: entered promiscuous mode [ 1930.970502][T16868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1930.978420][T16868] Cannot create hsr debugfs directory [ 1931.196654][T16907] chnl_net:caif_netlink_parms(): no params data found [ 1931.208485][T14348] Bluetooth: hci4: command tx timeout [ 1931.921327][ T3999] bridge_slave_1: left allmulticast mode [ 1931.927738][ T3999] bridge_slave_1: left promiscuous mode [ 1931.934381][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.980123][ T3999] bridge_slave_0: left allmulticast mode [ 1931.986243][ T3999] bridge_slave_0: left promiscuous mode [ 1931.992977][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.634397][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1932.705556][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1932.742934][ T3999] bond0 (unregistering): Released all slaves [ 1933.291414][T14348] Bluetooth: hci4: command tx timeout [ 1933.380911][T14347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1933.391224][T14347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1933.401440][T14347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1933.454791][T14347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1933.467217][T14347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1934.136434][ T3999] hsr_slave_0: left promiscuous mode [ 1934.157915][ T3999] hsr_slave_1: left promiscuous mode [ 1934.166477][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1934.174319][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1934.197334][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1934.205230][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1934.275927][ T3999] veth1_macvtap: left promiscuous mode [ 1934.281846][ T3999] veth0_macvtap: left promiscuous mode [ 1934.289882][ T3999] veth1_vlan: left promiscuous mode [ 1934.295719][ T3999] veth0_vlan: left promiscuous mode [ 1934.916252][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 1934.943630][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 1935.286433][T16907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.296813][T16907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.305955][T16907] bridge_slave_0: entered allmulticast mode [ 1935.319834][T16907] bridge_slave_0: entered promiscuous mode [ 1935.385582][T14347] Bluetooth: hci4: command tx timeout [ 1935.565169][T16907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.572827][T16907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.580819][T16907] bridge_slave_1: entered allmulticast mode [ 1935.586156][T14347] Bluetooth: hci2: command tx timeout [ 1935.591086][T16907] bridge_slave_1: entered promiscuous mode [ 1935.871596][T16907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1935.939781][T16907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.231881][ T3999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.415142][T16825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1936.466913][T16825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1936.572087][ T3999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.634535][T16907] team0: Port device team_slave_0 added [ 1936.701203][T16825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1936.815432][T16907] team0: Port device team_slave_1 added [ 1936.882457][ T3999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.019629][T16825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1937.206457][ T3999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.527804][T16907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1937.535169][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1937.561812][T16907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1937.673738][T14348] Bluetooth: hci2: command tx timeout [ 1937.835857][T16868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1937.870971][T16907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1937.878551][T16907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1937.905408][T16907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1938.001977][T16868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1938.045584][T16952] chnl_net:caif_netlink_parms(): no params data found [ 1938.170828][T16868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1938.213640][T16868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1938.328726][ T3999] bridge_slave_1: left allmulticast mode [ 1938.334704][ T3999] bridge_slave_1: left promiscuous mode [ 1938.341860][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1938.414618][ T3999] bridge_slave_0: left allmulticast mode [ 1938.422250][ T3999] bridge_slave_0: left promiscuous mode [ 1938.431187][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1938.994266][T14347] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1939.007282][T14347] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1939.018889][T14347] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1939.043547][T14347] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1939.059134][T14347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1939.074050][ T3999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1939.168426][ T3999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1939.189009][ T3999] bond0 (unregistering): Released all slaves [ 1939.685327][T14348] Bluetooth: hci2: command tx timeout [ 1939.882236][T16907] hsr_slave_0: entered promiscuous mode [ 1939.902089][T16907] hsr_slave_1: entered promiscuous mode [ 1939.911380][T16907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1939.919380][T16907] Cannot create hsr debugfs directory [ 1940.097346][ T3999] hsr_slave_0: left promiscuous mode [ 1940.114401][ T3999] hsr_slave_1: left promiscuous mode [ 1940.122838][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1940.130951][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1940.143152][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1940.152389][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.183218][ T3999] veth1_macvtap: left promiscuous mode [ 1940.189306][ T3999] veth0_macvtap: left promiscuous mode [ 1940.195871][ T3999] veth1_vlan: left promiscuous mode [ 1940.201520][ T3999] veth0_vlan: left promiscuous mode [ 1940.732061][ T3999] team0 (unregistering): Port device team_slave_1 removed [ 1940.799718][ T3999] team0 (unregistering): Port device team_slave_0 removed [ 1941.256329][T14348] Bluetooth: hci3: command tx timeout [ 1941.505279][T16952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1941.512954][T16952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1941.520966][T16952] bridge_slave_0: entered allmulticast mode [ 1941.530901][T16952] bridge_slave_0: entered promiscuous mode [ 1941.585317][T16952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1941.592970][T16952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.601070][T16952] bridge_slave_1: entered allmulticast mode [ 1941.610993][T16952] bridge_slave_1: entered promiscuous mode [ 1941.682302][T16825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1941.773226][T14348] Bluetooth: hci2: command tx timeout [ 1942.058160][T16952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1942.091924][T16952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1942.353927][T16952] team0: Port device team_slave_0 added [ 1942.389114][T16825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1942.427962][T16952] team0: Port device team_slave_1 added [ 1942.509158][T16988] chnl_net:caif_netlink_parms(): no params data found [ 1942.626358][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1942.634106][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1942.763351][T16952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1942.772059][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1942.798931][T16952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1942.845663][T16952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1942.852888][T16952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1942.879883][T16952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1942.914196][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1942.921963][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1943.236045][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1943.290217][T14348] Bluetooth: hci3: command tx timeout [ 1943.660759][T16952] hsr_slave_0: entered promiscuous mode [ 1943.678573][T16952] hsr_slave_1: entered promiscuous mode [ 1943.687879][T16952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1943.695954][T16952] Cannot create hsr debugfs directory [ 1943.716460][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1943.825894][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.833565][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1943.994718][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.002490][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1944.237000][T16907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1944.267359][T16907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1944.537698][T16907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1944.608058][T16988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.616153][T16988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.635473][T16988] bridge_slave_0: entered allmulticast mode [ 1944.645963][T16988] bridge_slave_0: entered promiscuous mode [ 1944.706985][T16907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1944.794129][T16988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.802200][T16988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.810267][T16988] bridge_slave_1: entered allmulticast mode [ 1944.820304][T16988] bridge_slave_1: entered promiscuous mode [ 1945.360441][T16988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1945.371625][T14348] Bluetooth: hci3: command tx timeout [ 1945.479749][ T5447] ===================================================== [ 1945.487379][ T5447] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 1945.495587][ T5447] _copy_to_iter+0xf0e/0x33f0 [ 1945.500514][ T5447] __skb_datagram_iter+0x196/0x12c0 [ 1945.506076][ T5447] skb_copy_datagram_iter+0x5b/0x1e0 [ 1945.511597][ T5447] netlink_recvmsg+0x4bb/0xfe0 [ 1945.516685][ T5447] sock_recvmsg+0x2df/0x390 [ 1945.521456][ T5447] sock_read_iter+0x2c8/0x360 [ 1945.527318][ T5447] vfs_read+0x85a/0xf00 [ 1945.531744][ T5447] __x64_sys_read+0x1fb/0x4d0 [ 1945.536834][ T5447] x64_sys_call+0x39db/0x3db0 [ 1945.541784][ T5447] do_syscall_64+0xd9/0x210 [ 1945.546609][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.552751][ T5447] [ 1945.555329][ T5447] Uninit was stored to memory at: [ 1945.560703][ T5447] pskb_expand_head+0x310/0x1610 [ 1945.566056][ T5447] netlink_trim+0x496/0x500 [ 1945.570796][ T5447] netlink_broadcast_filtered+0x80/0x2370 [ 1945.576923][ T5447] nlmsg_notify+0x15b/0x2f0 [ 1945.581666][ T5447] rtnl_notify+0xba/0x100 [ 1945.586284][ T5447] wireless_nlevent_process+0xfe/0x290 [ 1945.592030][ T5447] process_scheduled_works+0xb91/0x1d80 [ 1945.598064][ T5447] worker_thread+0xedf/0x1590 [ 1945.603019][ T5447] kthread+0xd5c/0xf00 [ 1945.607457][ T5447] ret_from_fork+0x1e0/0x310 [ 1945.612276][ T5447] ret_from_fork_asm+0x1a/0x30 [ 1945.617424][ T5447] [ 1945.619893][ T5447] Uninit was stored to memory at: [ 1945.625389][ T5447] wireless_send_event+0x67f/0x1530 [ 1945.630856][ T5447] ioctl_standard_iw_point+0x12b0/0x13f0 [ 1945.637537][ T5447] compat_standard_call+0x188/0x4c0 [ 1945.643012][ T5447] wext_ioctl_dispatch+0x192/0x7a0 [ 1945.648517][ T5447] compat_wext_handle_ioctl+0x1a1/0x300 [ 1945.654349][ T5447] compat_sock_ioctl+0x20c/0xff0 [ 1945.660143][ T5447] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1945.666060][ T5447] ia32_sys_call+0x2d07/0x42c0 [ 1945.671054][ T5447] __do_fast_syscall_32+0xb0/0x150 [ 1945.676514][ T5447] do_fast_syscall_32+0x38/0x80 [ 1945.681603][ T5447] do_SYSENTER_32+0x1f/0x30 [ 1945.686563][ T5447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1945.693170][ T5447] [ 1945.695730][ T5447] Local variable iwp created at: [ 1945.700813][ T5447] compat_standard_call+0x4a/0x4c0 [ 1945.706292][ T5447] wext_ioctl_dispatch+0x192/0x7a0 [ 1945.711658][ T5447] [ 1945.714102][ T5447] Bytes 60-63 of 64 are uninitialized [ 1945.719749][ T5447] Memory access of size 64 starts at ffff88806835c580 [ 1945.726813][ T5447] Data copied to user address 00007ffe8447cc10 [ 1945.733134][ T5447] [ 1945.735695][ T5447] CPU: 0 UID: 101 PID: 5447 Comm: dhcpcd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(undef) [ 1945.746863][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1945.757231][ T5447] ===================================================== [ 1945.764333][ T5447] Disabling lock debugging due to kernel taint [ 1945.770800][ T5447] Kernel panic - not syncing: kmsan.panic set ... [ 1945.777452][ T5447] CPU: 0 UID: 101 PID: 5447 Comm: dhcpcd Tainted: G B 6.16.0-rc2-syzkaller #0 PREEMPT(undef) [ 1945.789444][ T5447] Tainted: [B]=BAD_PAGE [ 1945.793745][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1945.803988][ T5447] Call Trace: [ 1945.807408][ T5447] [ 1945.810471][ T5447] __dump_stack+0x26/0x30 [ 1945.815034][ T5447] dump_stack_lvl+0x53/0x270 [ 1945.819905][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1945.825981][ T5447] dump_stack+0x1e/0x25 [ 1945.830349][ T5447] panic+0x4bd/0xd50 [ 1945.834528][ T5447] kmsan_report+0x31c/0x320 [ 1945.839278][ T5447] ? kmsan_internal_check_memory+0x1e1/0x230 [ 1945.845502][ T5447] ? kmsan_copy_to_user+0xf1/0x190 [ 1945.850945][ T5447] ? _copy_to_iter+0xf0e/0x33f0 [ 1945.855999][ T5447] ? __skb_datagram_iter+0x196/0x12c0 [ 1945.861589][ T5447] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1945.867275][ T5447] ? netlink_recvmsg+0x4bb/0xfe0 [ 1945.872466][ T5447] ? sock_recvmsg+0x2df/0x390 [ 1945.877404][ T5447] ? sock_read_iter+0x2c8/0x360 [ 1945.882482][ T5447] ? vfs_read+0x85a/0xf00 [ 1945.887057][ T5447] ? __x64_sys_read+0x1fb/0x4d0 [ 1945.892147][ T5447] ? x64_sys_call+0x39db/0x3db0 [ 1945.897250][ T5447] ? do_syscall_64+0xd9/0x210 [ 1945.902129][ T5447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1945.908411][ T5447] ? kernel_text_address+0x10e/0x1a0 [ 1945.913932][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1945.919305][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1945.925376][ T5447] ? do_syscall_64+0x1/0x210 [ 1945.930206][ T5447] ? filter_irq_stacks+0x49/0x190 [ 1945.935443][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1945.940815][ T5447] ? __slab_free+0x6fb/0x9e0 [ 1945.945638][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1945.951000][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1945.957108][ T5447] kmsan_internal_check_memory+0x1e1/0x230 [ 1945.963179][ T5447] kmsan_copy_to_user+0xf1/0x190 [ 1945.968366][ T5447] _copy_to_iter+0xf0e/0x33f0 [ 1945.973246][ T5447] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1945.979824][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1945.985214][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1945.991282][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1945.996632][ T5447] ? kmsan_internal_set_shadow_origin+0x31/0x110 [ 1946.003215][ T5447] ? kmsan_get_metadata+0xfb/0x160 [ 1946.008592][ T5447] __skb_datagram_iter+0x196/0x12c0 [ 1946.014025][ T5447] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1946.019903][ T5447] skb_copy_datagram_iter+0x5b/0x1e0 [ 1946.025422][ T5447] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1946.031495][ T5447] netlink_recvmsg+0x4bb/0xfe0 [ 1946.036540][ T5447] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1946.042048][ T5447] sock_recvmsg+0x2df/0x390 [ 1946.046811][ T5447] sock_read_iter+0x2c8/0x360 [ 1946.051762][ T5447] vfs_read+0x85a/0xf00 [ 1946.056174][ T5447] ? __pfx_sock_read_iter+0x10/0x10 [ 1946.061633][ T5447] __x64_sys_read+0x1fb/0x4d0 [ 1946.066582][ T5447] x64_sys_call+0x39db/0x3db0 [ 1946.071499][ T5447] do_syscall_64+0xd9/0x210 [ 1946.076212][ T5447] ? clear_bhb_loop+0x40/0x90 [ 1946.081112][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1946.087241][ T5447] RIP: 0033:0x7f825bce2407 [ 1946.091832][ T5447] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1946.111679][ T5447] RSP: 002b:00007ffe8447cbb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1946.120318][ T5447] RAX: ffffffffffffffda RBX: 00007f825bc58740 RCX: 00007f825bce2407 [ 1946.128471][ T5447] RDX: 0000000000000800 RSI: 00007ffe8447cc10 RDI: 0000000000000009 [ 1946.136790][ T5447] RBP: 00007ffe8447d500 R08: 0000000000000000 R09: 0000000000000000 [ 1946.144948][ T5447] R10: 0000000000000000 R11: 0000000000000202 R12: 20c49ba5e353f7cf [ 1946.153099][ T5447] R13: 00007ffe8447cc10 R14: 0000000000000058 R15: 000000000000001a [ 1946.161272][ T5447] [ 1946.164828][ T5447] Kernel Offset: disabled [ 1946.169271][ T5447] Rebooting in 86400 seconds..