last executing test programs: 8.59699843s ago: executing program 2 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 8.319631996s ago: executing program 2 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="85", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r4}}], 0x1c, 0x2400e044}, 0x24008026) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) close(r5) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f0000000240)={0xc, &(0x7f0000000100)={0x20, 0x8, 0x73, {0x73, 0x8, "99166ea4c08042cf3002b2e167ff97e22e53d3b6043fd9be1152a843daf395c10feeac2f9fdde29c6ed8b85704940f761d57d31d72de14c1f5a139f7a078e8725da660fdbbe98125945a15529cfe9b24971d6d63862401127005a5334b47494dc02efb67f7d9be9309ef1de6e8264b4314"}}, &(0x7f0000000180)={0x0, 0x3, 0x64, @string={0x64, 0x3, "eef99072f7353f01c7aa66e9d81488efe8e44a910c262612c3bd3e05bd1e0273b8e1903f2cd6e66121e26139638b53093e900cc005a4ee3a2572d90d4b9713d9f8634a316c4d67c653b1964a54d76ed1b537b6d4d00e76992165bc79a8c537a4702d"}}}, &(0x7f0000000840)={0x10, &(0x7f00000002c0)={0x40, 0xc, 0x2d, "12b8ad956ffd7f3f444bb34dd833b7ae2bbd2a4bdb3c223f65fb436cf99455f51001d22fc59b20d10c12ed3e5e"}, &(0x7f00000003c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000800)={0x21, 0x0, 0x4, "a9acbf2b"}}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000080)) mprotect(&(0x7f00008f4000/0x1000)=nil, 0x1000, 0x2) syz_usb_control_io$sierra_net(r1, &(0x7f00000009c0)={0xc, &(0x7f0000000300)={0x0, 0x30, 0x6, {0x6, 0xf, 'TCoS'}}, &(0x7f0000000880)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "8ba8517351f9d71b744dadaf33d5beeb282a98b9dadd2ff51683d22efe16a452f03a2bb2c71eb3a69432f5a5b3a627d38634c0cdf5b1a943dd7ef20de220f522b26c433322533f4db84f3fad0fd9bb384aa1f33059db72036df414e231e0209f79690027536832a6ec1cef536d725aaa963ee184e35f64858146903e5937f047a3a9cb3c12798dd8f05526f2332e57a2467fe00015dc5e286b19aee751f7a0245252f7af9f5888d7a2ee118d90bf43cf0783a24afd0715b6af91b93c71dc65"}}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x18, r6, 0x701, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 6.217759158s ago: executing program 0 (id=20): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x3, 0x0, 0x1, 0x3}}, 0x26) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000eed000/0x2000)=nil, 0x2000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r3, 0x541b, 0x0) 5.272119111s ago: executing program 0 (id=22): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 5.059715876s ago: executing program 1 (id=23): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) gettid() getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000004c0)=""/65, &(0x7f0000000600)=0x41) syz_io_uring_setup(0x34b7, &(0x7f0000000540)={0x0, 0x7243, 0xc00, 0x2, 0x12f}, 0x0, &(0x7f0000000080), &(0x7f0000000200)) r3 = add_key(0x0, &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r7, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r7, 0x5) write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000080000005000500000001c001000811223344"], 0x4a) socket$igmp(0x2, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)=@x86={0x2, 0xfb, 0x80, 0x0, 0x4, 0x6, 0x2, 0x0, 0x4, 0x8, 0x10, 0x3, 0x0, 0xfffffff8, 0x8, 0x4, 0x6, 0x8, 0x0, '\x00', 0x0, 0x7}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000140)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x4, 0xfc, 0x38}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) 4.953224369s ago: executing program 0 (id=24): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fstatfs(r8, &(0x7f0000000100)=""/107) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_ublk_setup_queues(r2, r7, &(0x7f0000000540)={0x0, 0x1460, 0x10, 0x3, 0xba, 0x0, r9}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca33, 0x0, 0x6, 0x273, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x102}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r2}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r6, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 4.938241239s ago: executing program 3 (id=25): openat$fb0(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003dc0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r1, 0x0, r3, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x33) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r10 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r10, 0x80085617, &(0x7f0000000080)) 4.435870351s ago: executing program 2 (id=26): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f00000004c0)="be7000d36230c29f14684b4f2adb85ab06c1857c38289bc0948c79b0a57b251d7fa392", 0x23}, {0x0}], 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 4.435650911s ago: executing program 1 (id=27): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e1f, @loopback}}}, 0x118) 3.893429205s ago: executing program 3 (id=28): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.314089509s ago: executing program 0 (id=29): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mbind(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x6, 0x7, 0x0) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000000580)={0x2020}, 0x2020) 2.887633829s ago: executing program 3 (id=30): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x3, 0x0, 0x1, 0x3}}, 0x26) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000eed000/0x2000)=nil, 0x2000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "83594fe93d78b83238556b7ceae6d7f02746767f8d1f912b20e110c4d238fa9b11b3c046654b43ecbb2b5ecf1be0ac07329c3c694ccf87d484a29fc039580cfbbd44440bc9956b884417d3f4862854d9523fc8dcd03960de918f23cddd6a72074fe147cf2ee73d75be28d013d1ee5e0d83b650a59e64fbfb5fc7423d381d6a497c15f03b49ff8242c31af5b538640c9f96f7b18ca0da06aad29f824490056265d0e0d1e8f843cd0e54f0f436382ebd00223188b2a0b49cdcdba0fe68760f55505d6afc0f2749c212118821a35878d62cda26a66ce262ba121aae04c6ff272acf07c57c52224da08fe5c63dabba39df09805cc82ab8051a5ac3a622e7f0795188"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(r3, 0x541b, 0x0) 2.541831628s ago: executing program 1 (id=31): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="140000", @ANYRES8=r0], 0x18, 0xc1}, 0xc410) 2.42513205s ago: executing program 0 (id=32): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x1, 0x3}, 0x10) 2.375580032s ago: executing program 1 (id=33): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04280f00000010"], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r3 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) unshare(0x2000400) fsmount(r3, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x40001, 0x100}}) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f00000000c0)={0xa, @sliced={0x25e, [0x28e2, 0x4, 0x8, 0xcc, 0x1, 0xfffb, 0x7, 0x1, 0x8001, 0x6, 0x8, 0x6, 0xf, 0x9, 0x4, 0x5, 0x9, 0x2, 0x7, 0xb8e4, 0x6, 0xb, 0x3, 0xf, 0x104, 0x27, 0x6, 0x63d, 0xa, 0xe, 0x1, 0xa, 0x81be, 0x3, 0x10, 0x8, 0x8001, 0x3, 0x6, 0x0, 0xf9, 0xfff7, 0x4, 0xf, 0xfe00, 0xb, 0x3, 0x7fff], 0x37}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r6) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x48c, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x3c4, 0x2e0, 0x2e0, 0x3c4, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x3}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x0, 0x0, 0x4}, {0xfffe}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4e8) 1.22444882s ago: executing program 2 (id=34): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x120, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.22418574s ago: executing program 3 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x3, 0x401, 0x2, 0x0, 0x5}, 0x7, 0x40, [{0x2, 0xfffffffd, 0x400, 0x6, 0x1, 0x3}]}, [{0x9, 0xa, 0x6, 0x0, 0x6, 0x7}, {0x4, 0x200, 0x10, 0x0, 0x80000000, 0x6}, {0x7, 0x1, 0x7, 0x0, 0xf35, 0x800}, {0x4, 0xf, 0x2, 0x10, 0x4, 0x6}, {0x40, 0x7f, 0x80000000, 0x8, 0x4, 0x7}, {0x5, 0x80000001, 0x10000, 0xf, 0xea, 0x10000}, {0x7, 0x59, 0x3, 0x7fffffff, 0x401, 0xc}, {0x2, 0x1, 0xeb7, 0x2, 0x7, 0x4}, {0xc81, 0xb, 0xfffeffff, 0x7fff, 0x7, 0x5}, {0x1, 0x10, 0x5, 0x18, 0x0, 0x1}, {0xb2, 0x3, 0x1, 0x1, 0x10000, 0x400}, {0x3, 0xffffffc0, 0x4, 0x6, 0x7, 0xb4000000}, {0x800, 0xff, 0xffffff81, 0x10000, 0x7, 0x2}, {0xa7b4, 0x1, 0x8, 0x1, 0x2, 0x8}, {0x80000000, 0x1ff, 0x8, 0x0, 0x2, 0x8ef}, {0x5, 0x3, 0x8, 0xa, 0x1, 0x10}, {0x400, 0x1, 0x1, 0x4, 0xc, 0x1}, {0x7, 0x5, 0x7fffffff, 0x9, 0x5d55, 0x6}, {0xc3, 0x9, 0x5, 0x6, 0x1000, 0x3a}, {0x8000, 0x5, 0x24, 0x9, 0x2, 0x80000001}, {0x6, 0x8d12, 0x5, 0x3, 0x40, 0x1}, {0x5, 0x9, 0x2b17, 0x4, 0xf2, 0x38ae6c5e}, {0x5, 0xffffd1c8, 0x3, 0x0, 0x6, 0x6}, {0xfff, 0xc, 0x4, 0xf1, 0xf1da, 0x7}, {0x200, 0x6, 0x5, 0xb6, 0x5}, {0x80000001, 0xff, 0x2, 0x0, 0x4, 0x9}, {0x0, 0x1484, 0x9, 0x80, 0x80000000, 0x1}, {0x0, 0x9, 0x7, 0x1, 0x89a, 0xce}, {0x0, 0x81, 0x2, 0x5, 0x2, 0x4}, {0x8000, 0xff, 0x3, 0x9, 0x9, 0x9}, {0x401, 0x7, 0x7, 0x5, 0x5, 0x5}, {0x200, 0x7fffffff, 0x8f1b, 0x80000001, 0xbf3, 0xb4f}, {0x3, 0x9, 0x10, 0x6, 0x5, 0x3}, {0x400, 0xfb, 0x1, 0x1, 0x262, 0x473}, {0x5, 0x9, 0x1, 0x10, 0x3, 0x3}, {0x1, 0x6, 0xd432, 0x4, 0x7, 0xd}, {0xfffffffa, 0x5, 0x8, 0x9, 0x2, 0x3}, {0x3, 0x101, 0x3, 0x3, 0x5}, {0xd, 0x81, 0x7ff, 0x5, 0x9, 0x2}, {0x9, 0x5, 0x2, 0x0, 0x5, 0x8c}, {0x5, 0x3, 0xc0000000, 0x4, 0x8, 0x9b18}, {0x2, 0x8, 0xffffffff, 0x8, 0x39b2b5f9, 0x8}, {0xc, 0x0, 0x2, 0xb, 0x9, 0x1}, {0x1, 0x6959, 0x13e, 0x5, 0x2, 0xffffff80}, {0x2, 0x5, 0x5, 0x5, 0x80, 0x8}, {0x1ff, 0x7, 0xd2bc, 0x8000, 0x4, 0x1}, {0xffffffff, 0x1ff, 0x3, 0x0, 0x1, 0x6}, {0xd59, 0x0, 0x81, 0x10001, 0x9, 0x9}, {0x8, 0xc6, 0x1, 0x10, 0x5e08}, {0x9, 0x1e000, 0xffffffff, 0x4800000, 0x0, 0x28}, {0x4, 0x3, 0x64f, 0x4, 0xf}, {0x6, 0x1300, 0x9, 0x4, 0x0, 0x400}, {0x1, 0x0, 0x6, 0x0, 0x5, 0x4}, {0x6, 0x2, 0x4, 0x8, 0xba000000, 0x401}, {0xfffff1b8, 0x3, 0x0, 0x1, 0x6, 0x8}, {0x9c8, 0xfb, 0x10001, 0x7, 0xd, 0xfffffff9}, {0x1000, 0xe, 0xffffe3e9, 0xff, 0xffffffff, 0x771}, {0xd, 0x2, 0x7, 0x1, 0x7fff, 0xd0c}, {0x3, 0x7308, 0x27, 0xa, 0x2, 0xffffff81}, {0x3, 0xabe5, 0x0, 0xf, 0x1, 0xd}, {0x0, 0xb, 0x7, 0x81d8, 0x10, 0x1}, {0x80000000, 0x4, 0xdb, 0x1, 0x7, 0x4}, {0x3, 0x0, 0x9, 0x7, 0x7, 0xa}, {0x8, 0x1, 0x3c, 0x6, 0x3, 0x3}, {0x4, 0xfffffffb, 0x1, 0x4, 0x9}, {0x7, 0x401, 0x1, 0x3, 0x1}, {0xf2e, 0xf4, 0x2, 0x0, 0x10001, 0x8}, {0x9, 0x3, 0x8001, 0x3, 0x4, 0x907d}, {0x10, 0xffffffff, 0x6, 0x9, 0x42, 0xfd6d}, {0x923f, 0x1, 0x8000, 0x4, 0x709, 0x5}, {0x6, 0x8000, 0x9, 0x7fff, 0x6, 0xc63}, {0x5, 0xc4, 0xffffffff, 0x52c, 0x80000000, 0x1}, {0x40, 0x2, 0x47, 0x8, 0xf, 0x90c}, {0x6, 0xef55, 0x88, 0x2, 0x3, 0x2}, {0x1, 0x4, 0x800, 0x5, 0x5, 0x4}, {0x1, 0x8, 0x3ff, 0x1ff, 0xa, 0x4}, {0x5, 0x8, 0xffffa548, 0x7, 0x6, 0x3}, {0x6, 0x40, 0x7, 0x4, 0x0, 0x78}, {0x4, 0x5, 0xff, 0x8, 0x9, 0x1}, {0x8, 0xfffffbff, 0x3, 0x9, 0x8, 0x6}, {0x9, 0x7, 0x9033, 0x1, 0x9, 0x9}, {0xd8fd92f, 0x3, 0x80000001, 0x3, 0x2, 0xc}, {0x3, 0x44, 0x5, 0x53, 0x8, 0x7}, {0x10, 0x59, 0x1, 0xca3b, 0x0, 0xffffffff}, {0x12, 0x9, 0xe, 0x4, 0x9, 0x101}, {0x8, 0x0, 0x3, 0x10008d, 0xe, 0xffffffff}, {0xffffffff, 0x68e2a0bf, 0x4, 0x10000, 0x1, 0x40}, {0x50d, 0x2, 0x0, 0x3, 0x0, 0x8000}, {0x80000, 0x3, 0x8, 0x8, 0x9}, {0x3, 0x4, 0xfffffffa, 0xffff0000, 0x5, 0x7}, {0x1ff, 0x8d, 0x101, 0x7, 0x9e64, 0x5}, {0x7, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x81, 0xa0000, 0x5, 0xfffffffa, 0x1}, {0xbb, 0x164, 0x2, 0xe7, 0x2, 0x7ff}, {0x400, 0x3, 0x7774, 0x2, 0x9, 0x5d}, {0x9, 0x5, 0x4, 0x1, 0xa700, 0x2}, {0x0, 0x7, 0x7fffffff, 0x1, 0x3, 0x5}, {0x4, 0x8, 0x10, 0x100, 0x81, 0x8}, {0x8, 0xfffff434, 0x4, 0x100, 0x7, 0x1}, {0x6, 0x2, 0x0, 0x0, 0x5, 0x4}, {0x63, 0x3ff, 0x4, 0x8000, 0x0, 0x1}, {0x6, 0x9, 0x4bda, 0x8, 0x10, 0x3}, {0x10, 0x5, 0x9, 0x0, 0x2, 0x4}, {0xffffffff, 0x2, 0xfffeffff, 0x5, 0x0, 0x8}, {0x5, 0x527, 0x6, 0x63724abb, 0xb5e, 0xfff}, {0x1, 0x9, 0x9, 0x0, 0xc, 0x9}, {0x1, 0x2, 0x1ff, 0x0, 0x6, 0xd0cc}, {0xfffff319, 0x4, 0x10000, 0x6, 0x1, 0x7}, {0x4, 0x800, 0x9, 0x3ff, 0x1, 0x9}, {0xfffffffd, 0x4, 0x1000, 0x7f, 0xffffff57, 0x8}, {0x0, 0x5, 0x8, 0x80000000, 0xe0a, 0xdea}, {0x7ff, 0x8, 0x6, 0x7fffffff, 0x1, 0x7}, {0x0, 0x40000000, 0x3, 0x20000, 0x2, 0x2219ba8a}, {0x400, 0x100, 0x7fffffff, 0x200, 0x0, 0x8}, {0xe, 0x80, 0x7, 0x400, 0x0, 0x4}, {0x0, 0x7fffffff, 0x3d, 0x7, 0x0, 0xff}, {0xd60, 0x6, 0x8, 0xa2dd, 0x0, 0xe4}, {0x5, 0x7, 0x3, 0x9, 0x5, 0xfff}, {0x3, 0x8, 0x5, 0x9, 0x2, 0x8000}, {0x100, 0x8, 0x9, 0x9, 0x7, 0xfffffdb7}, {0xc00000, 0x6, 0x80, 0xcf4, 0x5}, {0x2, 0x8, 0x1, 0x4, 0x0, 0x3}, {0x3, 0x8e, 0x8000, 0xfffffffc, 0xf2b, 0x7}, {0x6, 0xd7d, 0x769, 0x9, 0x1, 0x3}, {0x9, 0xaa4e, 0x938, 0x8, 0xffffff7c, 0x8e90}, {0xaa, 0x400, 0x200, 0x200, 0x7, 0x5}, {0x7, 0x3816c528, 0x4, 0x5, 0xc0000000, 0x6fb1}, {0xffffff01, 0x5, 0x10000, 0x8, 0xfffffffb, 0xff}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x2}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x4}, {0x4, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0xe422f9593938532}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x5, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.21214324s ago: executing program 0 (id=42): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) writev(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f00000004c0)="be7000d36230c29f14684b4f2adb85ab06c1857c38289bc0948c79b0a57b251d7fa392", 0x23}, {0x0}], 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 1.21149598s ago: executing program 1 (id=36): openat$fb0(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x80000005, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0xa, 0x2000, 0x300e, 0x0, 0xa, 0x4, 0x1, 0x1993012db91ab52e}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003dc0)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r1, 0x0, r3, 0x0, 0xd9d7, 0x5) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x10000, 0xa79, 0x0, 0x0, 0x100}}, 0xffffffed) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x33) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) r10 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_STD(r10, 0x80085617, &(0x7f0000000080)) 1.045506604s ago: executing program 2 (id=37): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x35, 0x800000, 0x8, 0x7, 0x0, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 983.653346ms ago: executing program 3 (id=38): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002bc0)={0xa0, 0x0, r1, {{0x3, 0x0, 0x5, 0x6, 0x8ca9, 0x4, {0x3, 0x6, 0x5, 0x2, 0xa065, 0xfffffffffffffffa, 0x519e, 0x7ff, 0xfffffffd, 0x4000, 0x80, 0xee00, 0xffffffffffffffff, 0x0, 0xf35a}}, {0x0, 0x1}}}, 0xa0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='}', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000a5847f16d1f1941a05db2c9a7f1173adbf7fd7a67a150364b1f157b24ae4bae3d48ad0cce5eb930b8356", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0x30, 0x4048080}}], 0x1, 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r7, 0x40045567, 0x0) write$uinput_user_dev(r7, &(0x7f0000000300)={'syz0\x00', {0xb, 0x5f93, 0x8, 0x671}, 0x3, [0x2955, 0x2, 0x1000, 0x80000001, 0x8, 0xfa5, 0x6, 0x0, 0x2d, 0x7, 0x6, 0x7, 0x2, 0x1, 0x6, 0x5, 0xe, 0xe93, 0x3, 0xe, 0x12, 0x9, 0x2, 0x3, 0x40000, 0xff, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffe, 0x10, 0x13d, 0x5, 0xfffffff8, 0x4, 0xb, 0x9, 0x3, 0x4, 0x9, 0x6, 0x3, 0x2a12, 0x2, 0x8, 0x7, 0x2, 0x7, 0x2, 0x3, 0x4, 0x8, 0x1, 0x1, 0x3325, 0x51, 0x28ba, 0x2, 0xaa, 0x9, 0xfffffffd, 0x2, 0x6], [0xf, 0x1, 0x5fd, 0x0, 0x5, 0x2f3, 0x8000, 0x5000, 0x85, 0x0, 0x1fda, 0x1, 0x7fffffff, 0x0, 0xa, 0x80000000, 0x4, 0x1ff, 0x8, 0x300000, 0x9, 0x84d, 0x5fdb3133, 0x40, 0x3, 0x8, 0x6, 0x9, 0x9ef, 0x2, 0x0, 0x401, 0x3, 0x1, 0x2, 0x7, 0x8, 0x9, 0x3, 0x35, 0x8001, 0x80009, 0x4, 0x0, 0x0, 0x101, 0x1, 0x0, 0x412, 0x3, 0xfffffffc, 0x8, 0x27bb, 0x3, 0xfff, 0x7, 0x36, 0x20009, 0x7, 0x8, 0x312, 0x5, 0x7, 0x1], [0x58a4, 0x80000000, 0x10, 0xffff, 0x3, 0x9, 0x3, 0x0, 0x9e, 0x4e0aea88, 0x4bea, 0xfff, 0x6, 0x3, 0x10, 0xa0c2, 0xfff, 0xc, 0x1, 0x8, 0x7fff, 0x4, 0x7, 0x3, 0x7f, 0x1, 0x80000001, 0x7, 0x8001, 0x3, 0x6, 0x3, 0x9, 0x3, 0x5a7, 0x44, 0x1, 0x27, 0x2, 0x7, 0x1, 0x10100, 0xe6c, 0x2, 0x4, 0x7, 0x76, 0x2, 0xe7a5, 0x1, 0x7, 0x694e1c44, 0x3, 0x800, 0x7, 0x401, 0xdee, 0x1, 0x7, 0x4, 0x2, 0xd9, 0x1, 0x7fff], [0x3, 0x9, 0x400003, 0x3, 0xfffff800, 0x0, 0x0, 0x627, 0x7, 0xa6ea7521, 0x3, 0x8, 0xeeb6, 0xf, 0x0, 0x100, 0x5, 0x800, 0x9, 0x6, 0x800, 0xcb8a, 0x1, 0x3, 0x8, 0x4, 0x8, 0xf, 0xfffffffd, 0xfffffff3, 0x3ff, 0x7, 0xfffffffc, 0x336, 0x4, 0x4d, 0x0, 0x7623d9cc, 0xf8, 0x1, 0x100, 0x7, 0xfffffff9, 0x17b8, 0xea2, 0x81, 0x1000, 0x3, 0x7f95, 0x7, 0x7fffffff, 0x4, 0x7fffffff, 0x6, 0x8, 0x6, 0x1, 0x200, 0x8, 0xfffffff7, 0x4, 0xc, 0x2, 0x9]}, 0x45c) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) 863.808979ms ago: executing program 2 (id=39): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d0240"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0xfffffffe, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e1f, @loopback}}}, 0x118) 71.258788ms ago: executing program 3 (id=40): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mbind(&(0x7f00003e1000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0x6, 0x7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, 0x0, 0x0) 0s ago: executing program 1 (id=41): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) socket$inet_icmp_raw(0x2, 0x3, 0x1) timerfd_create(0x0, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x40) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) recvmsg(r6, 0x0, 0x40000000) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 59.346417][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.375086][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. syzkaller login: [ 83.502265][ T5763] cgroup: Unknown subsys name 'net' [ 83.674491][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.367384][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.552800][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.565834][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.574278][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.582513][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.590849][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.598603][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.704657][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.719823][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.727701][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.764534][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.774710][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.782067][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.856305][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.865039][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.874566][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.904482][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.912502][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.920253][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.034816][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.054338][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.062110][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.071275][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.080157][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.087641][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.350649][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 88.552925][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.561102][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.568631][ T5774] bridge_slave_0: entered allmulticast mode [ 88.576186][ T5774] bridge_slave_0: entered promiscuous mode [ 88.590140][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.597459][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.604870][ T5774] bridge_slave_1: entered allmulticast mode [ 88.611919][ T5774] bridge_slave_1: entered promiscuous mode [ 88.620168][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 88.729784][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.745705][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.772299][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.821656][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 88.885862][ T5774] team0: Port device team_slave_0 added [ 88.910046][ T5774] team0: Port device team_slave_1 added [ 88.928206][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.938566][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.945920][ T5779] bridge_slave_0: entered allmulticast mode [ 88.952983][ T5779] bridge_slave_0: entered promiscuous mode [ 88.962293][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.969742][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.977136][ T5779] bridge_slave_1: entered allmulticast mode [ 88.984374][ T5779] bridge_slave_1: entered promiscuous mode [ 89.030119][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.037406][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.064337][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.113288][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.120435][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.146614][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.170273][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.177697][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.185008][ T5785] bridge_slave_0: entered allmulticast mode [ 89.192438][ T5785] bridge_slave_0: entered promiscuous mode [ 89.222430][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.232754][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.240360][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.247777][ T5785] bridge_slave_1: entered allmulticast mode [ 89.255363][ T5785] bridge_slave_1: entered promiscuous mode [ 89.276619][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.309413][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.316742][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.323926][ T5781] bridge_slave_0: entered allmulticast mode [ 89.331793][ T5781] bridge_slave_0: entered promiscuous mode [ 89.380606][ T5779] team0: Port device team_slave_0 added [ 89.400389][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.407721][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.415164][ T5781] bridge_slave_1: entered allmulticast mode [ 89.422864][ T5781] bridge_slave_1: entered promiscuous mode [ 89.437504][ T5774] hsr_slave_0: entered promiscuous mode [ 89.444364][ T5774] hsr_slave_1: entered promiscuous mode [ 89.453447][ T5779] team0: Port device team_slave_1 added [ 89.475483][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.519714][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.526917][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.553044][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.569467][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.581082][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.592377][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.601808][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.628194][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.662621][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.695011][ T5087] Bluetooth: hci0: command tx timeout [ 89.766074][ T5785] team0: Port device team_slave_0 added [ 89.786067][ T5781] team0: Port device team_slave_0 added [ 89.799451][ T5779] hsr_slave_0: entered promiscuous mode [ 89.806409][ T5779] hsr_slave_1: entered promiscuous mode [ 89.812758][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.821825][ T5779] Cannot create hsr debugfs directory [ 89.836589][ T5785] team0: Port device team_slave_1 added [ 89.845271][ T5781] team0: Port device team_slave_1 added [ 89.854601][ T51] Bluetooth: hci1: command tx timeout [ 89.918108][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.925233][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.952588][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.975673][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.982710][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.009261][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.020030][ T51] Bluetooth: hci2: command tx timeout [ 90.028148][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.035492][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.061744][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.087004][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.094651][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.121178][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.174180][ T51] Bluetooth: hci3: command tx timeout [ 90.290255][ T5781] hsr_slave_0: entered promiscuous mode [ 90.297590][ T5781] hsr_slave_1: entered promiscuous mode [ 90.304165][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.311943][ T5781] Cannot create hsr debugfs directory [ 90.339564][ T5785] hsr_slave_0: entered promiscuous mode [ 90.346792][ T5785] hsr_slave_1: entered promiscuous mode [ 90.353245][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.361095][ T5785] Cannot create hsr debugfs directory [ 90.604807][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.619326][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.629994][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.671369][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.792795][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.810246][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.835347][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.847137][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.933188][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.943514][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.955406][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.967510][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.052565][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.067297][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.099109][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.110984][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.162232][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.263180][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.283418][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.322937][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.330320][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.359752][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.367024][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.429551][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.460561][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.467804][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.521715][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.528946][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.570115][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.590486][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.626633][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.658671][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.665894][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.683370][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.749810][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.757127][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.776043][ T51] Bluetooth: hci0: command tx timeout [ 91.828840][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.901231][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.908517][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.934270][ T51] Bluetooth: hci1: command tx timeout [ 91.948797][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.956100][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.094852][ T51] Bluetooth: hci2: command tx timeout [ 92.233746][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.259355][ T51] Bluetooth: hci3: command tx timeout [ 92.269642][ T175] cfg80211: failed to load regulatory.db [ 92.320057][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.375274][ T5774] veth0_vlan: entered promiscuous mode [ 92.445919][ T5774] veth1_vlan: entered promiscuous mode [ 92.557723][ T5779] veth0_vlan: entered promiscuous mode [ 92.593408][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.613350][ T5779] veth1_vlan: entered promiscuous mode [ 92.623344][ T5774] veth0_macvtap: entered promiscuous mode [ 92.646306][ T5774] veth1_macvtap: entered promiscuous mode [ 92.703669][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.740557][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.775901][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.790732][ T5781] veth0_vlan: entered promiscuous mode [ 92.806186][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.819417][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.828522][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.837490][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.862207][ T5781] veth1_vlan: entered promiscuous mode [ 92.891815][ T5779] veth0_macvtap: entered promiscuous mode [ 92.905169][ T5779] veth1_macvtap: entered promiscuous mode [ 92.991829][ T5781] veth0_macvtap: entered promiscuous mode [ 93.002162][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.015647][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.028808][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.068767][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.077564][ T5781] veth1_macvtap: entered promiscuous mode [ 93.096507][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.108949][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.117398][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.131508][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.176644][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.193506][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.202879][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.211195][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.221619][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.231002][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253577][ T5785] veth0_vlan: entered promiscuous mode [ 93.268545][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.282383][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.293385][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.304836][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.326342][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.369229][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.390472][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.400417][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.414172][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.429337][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.456228][ T5785] veth1_vlan: entered promiscuous mode [ 93.511364][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.537445][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.553193][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562443][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.652456][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.666571][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.752596][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.760629][ T5785] veth0_macvtap: entered promiscuous mode [ 93.780009][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.794266][ T5785] veth1_macvtap: entered promiscuous mode [ 93.855163][ T51] Bluetooth: hci0: command tx timeout [ 93.858592][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.895408][ T175] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.926840][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.960451][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.980002][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.990423][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.001239][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.012010][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.023505][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.024374][ T51] Bluetooth: hci1: command tx timeout [ 94.047253][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.096267][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.109737][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 94.114589][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.130647][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.131127][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 94.169320][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 94.170172][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.179562][ T51] Bluetooth: hci2: command tx timeout [ 94.184210][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 94.224548][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 94.243660][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.281421][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.299897][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.311214][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.319440][ T175] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 94.333756][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.341395][ T175] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 94.341427][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 94.341449][ T175] usb 2-1: Product: syz [ 94.341465][ T175] usb 2-1: Manufacturer: syz [ 94.344593][ T51] Bluetooth: hci3: command tx timeout [ 94.384826][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.392447][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.401172][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.408810][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.416748][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.424228][ T5837] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.441051][ T175] usb 2-1: USB2VGA dongle found at address 2 [ 94.455045][ T175] usb 2-1: Allocated 8 output buffers [ 94.468253][ T175] usb 2-1: Failed to early initialize device [ 94.488470][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515938][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545264][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565567][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.747929][ T5837] usb 2-1: Failed to initialize device [ 94.766944][ T8] usb 2-1: USB disconnect, device number 2 [ 94.819812][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.843447][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.957429][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.982464][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.944882][ T51] Bluetooth: hci0: command tx timeout [ 96.095407][ T51] Bluetooth: hci1: command tx timeout [ 96.254916][ T51] Bluetooth: hci2: command tx timeout [ 96.415841][ T51] Bluetooth: hci3: command tx timeout [ 96.844284][ T175] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.057132][ T175] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.077609][ T175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.125340][ T175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.146495][ T175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.170214][ T175] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.182933][ T175] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.197678][ T175] usb 4-1: Product: syz [ 97.203390][ T175] usb 4-1: Manufacturer: syz [ 97.229222][ T175] cdc_wdm 4-1:1.0: skipping garbage [ 97.244317][ T175] cdc_wdm 4-1:1.0: skipping garbage [ 97.257704][ T175] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 97.290643][ T175] cdc_wdm 4-1:1.0: Unknown control protocol [ 97.451781][ T175] usb 4-1: USB disconnect, device number 2 [ 97.923804][ T5877] libceph: resolve '0.0.0.00[' (ret=-3): failed [ 98.077252][ T175] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.310275][ T175] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 98.331488][ T175] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.344895][ T175] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 98.353946][ T175] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.402752][ T175] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 98.404704][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.423853][ T175] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 98.443324][ T175] usb 4-1: Product: syz [ 98.447961][ T175] usb 4-1: Manufacturer: syz [ 98.464435][ T175] cdc_wdm 4-1:1.0: skipping garbage [ 98.469727][ T175] cdc_wdm 4-1:1.0: skipping garbage [ 98.478344][ T175] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 98.484815][ T175] cdc_wdm 4-1:1.0: Unknown control protocol [ 98.636781][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 98.648189][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 98.661541][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.672497][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 98.682622][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 98.692959][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.700720][ T5815] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 98.714589][ T5815] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 98.724282][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.732417][ T5815] usb 2-1: Product: syz [ 98.737943][ T5815] usb 2-1: Manufacturer: syz [ 98.748621][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.764547][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.770157][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.771852][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.785120][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.791785][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.798140][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.804790][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.811136][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.817792][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.824456][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.826648][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.838290][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.844516][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.851505][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 98.858161][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 98.860035][ T5845] usb 4-1: USB disconnect, device number 3 [ 98.864260][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 98.884299][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.891674][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.909491][ T5882] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.914499][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 98.929786][ T23] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 98.940823][ T5815] usb 2-1: USB2VGA dongle found at address 3 [ 98.952188][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 98.965836][ T23] usb 3-1: Product: syz [ 98.970071][ T23] usb 3-1: Manufacturer: syz [ 98.984601][ T5815] usb 2-1: Allocated 8 output buffers [ 98.990264][ T23] usb 3-1: SerialNumber: syz [ 99.002133][ T23] usb 3-1: config 0 descriptor?? [ 99.011345][ T5815] usb 2-1: Failed to early initialize device [ 99.020274][ T23] gspca_main: sq905-2.14.0 probing 2770:9120 [ 99.142872][ T5882] usb 2-1: Failed to initialize device [ 99.152539][ T5815] usb 2-1: USB disconnect, device number 3 [ 100.029859][ T23] gspca_sq905: bulk read fail (-22) len 0/4 [ 100.059310][ T23] sq905: probe of 3-1:0.0 failed with error -5 [ 101.661349][ T5913] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.081941][ T23] usb 3-1: USB disconnect, device number 2 [ 102.496594][ T5778] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.694347][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.706265][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 102.743391][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 102.787642][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 102.800335][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 102.829132][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 102.847463][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 102.861824][ T5778] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 102.878961][ T5778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.887465][ T5778] usb 2-1: Product: syz [ 102.891679][ T5778] usb 2-1: Manufacturer: syz [ 102.898006][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 102.919233][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.924174][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.937073][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.956656][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.964393][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 102.973709][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.004734][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.014478][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.042639][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.064765][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.074514][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.081552][ T5778] usb 2-1: USB2VGA dongle found at address 4 [ 103.082553][ T23] usb 3-1: Product: syz [ 103.113494][ T23] usb 3-1: Manufacturer: syz [ 103.141914][ T5778] usb 2-1: Allocated 8 output buffers [ 103.157494][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 103.162372][ T5778] usb 2-1: Failed to early initialize device [ 103.182325][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 103.218650][ T23] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 103.238822][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 103.319790][ T5926] ucma_write: process 27 (syz.1.27) changed security contexts after opening file descriptor, this is not allowed. [ 103.380684][ T5778] usb 2-1: USB disconnect, device number 4 [ 103.394690][ T23] usb 3-1: USB disconnect, device number 3 [ 104.024476][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.247024][ T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.264867][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.280568][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.290296][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.316287][ T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.341568][ T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.364699][ T23] usb 3-1: Product: syz [ 104.377674][ T23] usb 3-1: Manufacturer: syz [ 104.393924][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 104.412156][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 104.432297][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 104.445823][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 104.617327][ T23] usb 3-1: USB disconnect, device number 4 [ 105.714151][ T5815] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.775269][ T5961] ceph: No mds server is up or the cluster is laggy [ 105.806745][ T5782] libceph: connect (1)[c::]:6789 error -101 [ 105.889318][ T5782] libceph: mon0 (1)[c::]:6789 connect error [ 106.666406][ T5815] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.684225][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.703900][ T5970] netlink: 'syz.1.41': attribute type 2 has an invalid length. [ 106.705640][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.740993][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.754862][ T5815] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.764208][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.772159][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.781770][ T5815] usb 1-1: Product: syz [ 106.786392][ T5815] usb 1-1: Manufacturer: syz [ 106.799468][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 106.814078][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 106.827922][ T5815] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 106.843102][ T5815] cdc_wdm 1-1:1.0: Unknown control protocol [ 106.870623][ T5970] ------------[ cut here ]------------ [ 106.876572][ T5970] kernel BUG at net/phonet/socket.c:213! [ 106.907636][ T5970] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 106.913828][ T5970] CPU: 1 PID: 5970 Comm: syz.1.41 Not tainted syzkaller #0 [ 106.921096][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.931313][ T5970] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 106.937114][ T5970] Code: 41 5f 5d c3 e8 bc dd ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 05 1e f8 e9 02 ff ff ff e8 3b 88 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 106.957342][ T5970] RSP: 0018:ffffc900050c7c20 EFLAGS: 00010287 [ 106.963469][ T5970] RAX: ffffffff89c1e6e5 RBX: 0000000000000000 RCX: 0000000000080000 [ 106.971581][ T5970] RDX: ffffc9000c819000 RSI: 0000000000000a17 RDI: 0000000000000a18 [ 106.979779][ T5970] RBP: ffffc900050c7cd0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 106.987984][ T5970] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 106.996064][ T5970] R13: ffff88805ed65a00 R14: ffff88805d9a8000 R15: 1ffff92000a18f88 [ 107.004132][ T5970] FS: 00007f3fc8b3a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 107.013120][ T5970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.019761][ T5970] CR2: 00007feafb6244e8 CR3: 000000002d53d000 CR4: 00000000003506e0 [ 107.027798][ T5970] Call Trace: [ 107.031150][ T5970] [ 107.034130][ T5970] ? pn_socket_ioctl+0x350/0x350 [ 107.039145][ T5970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.044582][ T5970] ? security_socket_sendmsg+0x80/0xa0 [ 107.050088][ T5970] __sys_sendto+0x4a9/0x6b0 [ 107.054634][ T5970] ? __ia32_sys_getpeername+0x90/0x90 [ 107.060073][ T5970] ? __lock_acquire+0x7d80/0x7d80 [ 107.065201][ T5970] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 107.071246][ T5970] ? lock_chain_count+0x20/0x20 [ 107.076258][ T5970] ? lock_chain_count+0x20/0x20 [ 107.081168][ T5970] __x64_sys_sendto+0xde/0xf0 [ 107.086106][ T5970] do_syscall_64+0x55/0xb0 [ 107.090566][ T5970] ? clear_bhb_loop+0x40/0x90 [ 107.095289][ T5970] ? clear_bhb_loop+0x40/0x90 [ 107.100011][ T5970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.105939][ T5970] RIP: 0033:0x7f3fc7b5e84e [ 107.110399][ T5970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 107.130028][ T5970] RSP: 002b:00007f3fc8b38e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.138478][ T5970] RAX: ffffffffffffffda RBX: 00007f3fc8b3a6c0 RCX: 00007f3fc7b5e84e [ 107.146488][ T5970] RDX: 0000000000000020 RSI: 00007f3fc8b39000 RDI: 0000000000000009 [ 107.154518][ T5970] RBP: 0000000000000000 R08: 00007f3fc8b38f04 R09: 000000000000000c [ 107.162519][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 107.170531][ T5970] R13: 00007f3fc8b38f58 R14: 00007f3fc8b39000 R15: 0000000000000000 [ 107.178570][ T5970] [ 107.181713][ T5970] Modules linked in: [ 107.204525][ T5970] ---[ end trace 0000000000000000 ]--- [ 107.210703][ T5845] usb 1-1: USB disconnect, device number 2 [ 107.218637][ T5970] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 107.231122][ T5970] Code: 41 5f 5d c3 e8 bc dd ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 55 05 1e f8 e9 02 ff ff ff e8 3b 88 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 107.259725][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 107.269783][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 107.281923][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 107.292673][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 107.308040][ T5970] RSP: 0018:ffffc900050c7c20 EFLAGS: 00010287 [ 107.315191][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 107.326548][ T5970] RAX: ffffffff89c1e6e5 RBX: 0000000000000000 RCX: 0000000000080000 [ 107.335315][ T23] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 107.349464][ T5970] RDX: ffffc9000c819000 RSI: 0000000000000a17 RDI: 0000000000000a18 [ 107.359048][ T5970] RBP: ffffc900050c7cd0 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 107.367392][ T5970] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 107.369541][ T23] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 107.375708][ T5970] R13: ffff88805ed65a00 R14: ffff88805d9a8000 R15: 1ffff92000a18f88 [ 107.391730][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 107.401218][ T23] usb 3-1: Product: syz [ 107.407476][ T23] usb 3-1: Manufacturer: syz [ 107.413527][ T5970] FS: 00007f3fc8b3a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 107.422826][ T5970] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.429860][ T5970] CR2: 00007f4a81beb700 CR3: 000000002d53d000 CR4: 00000000003506f0 [ 107.437999][ T5970] Kernel panic - not syncing: Fatal exception [ 107.444663][ T5970] Kernel Offset: disabled [ 107.449007][ T5970] Rebooting in 86400 seconds..