last executing test programs: 44m27.189674813s ago: executing program 32 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r3, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 44m13.657111769s ago: executing program 33 (id=26): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3, 0x8, 0x40, 0x42, 0x1}, 0x50) 41m50.639986955s ago: executing program 34 (id=165): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 41m37.823590701s ago: executing program 35 (id=174): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd2(0x6, 0x80800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') r2 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0) 39m3.836067591s ago: executing program 36 (id=254): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(r0, &(0x7f0000019300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) 35m42.456768228s ago: executing program 37 (id=389): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7fffffff, 0x3, 0x1, 0x5, 0xffffffff, 0x200003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008881}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff5, 0x243474f9}}]}}]}, 0x48}}, 0x8000) sendto$packet(r3, &(0x7f00000001c0)="bad33075218151db00316f3a277f", 0xe, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @multicast}, 0x14) 35m20.926996178s ago: executing program 38 (id=398): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000000)=""/127, 0x7f}], 0x1, 0x5, 0xad, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8040, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x141601) ioctl$TCSETSF(r2, 0x5432, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x1f0, 0x288, 0x158, 0x0, 0x98, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'pim6reg0\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x158}}, {{@ip={@rand_addr=0x64010100, @local, 0x0, 0x0, 'pim6reg1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x3, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0xfe, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x33, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'ip6tnl0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x5}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f0000000000), 0x85, 0x0) syz_usb_disconnect(r4) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) 31m30.584069495s ago: executing program 39 (id=508): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_clone(0x0, &(0x7f00000003c0)="2fd82e9957e4b182a7cdec759d7d2386aa4f2ee41d2ee197ec20cba45c41d29563e5b232eb2e0b9da8a6bf5990af72b976e2d31aa88b3c8577978c9470b4bf317b69a57e39a420856f79d876086388cea33a1045d6bbc4a413875cd07bf59ed5295d74fec7c765b82a318fe23dd923caeeb7bc51606e01f2b3a957046c730c3f77c41c857824feb3c307c7151d1fbc4bd9897e", 0x93, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="ec99eb990b5266b1aaafc48898adff3585ce45da1ea04675b4c654c382438a2b3fc1ba92fa77ef8d77ba2b78f087f62d66f92abca8f652dd662e3dfc0fa8048931d33c3bb2f1c7bcc0232ae11495292172b15d5babc821a543b78bb70d4e256233d1b21796083b5ce1e80d843a9c91ac17c5c6608ca677983f98104621029e98007c0f5bd9d44f2154c5210063820be5d8f383eaca9a4ab2d25dfcda295e76480dccf49f8826d44058975768be87044d370e9b9a815c81d3931fa3db2151a3e024f5174fb901c827f9be8f2d3e45647328648938e130c16970cb5b1059e9a295b2f639662891dae659ab") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/rcu_stall_count', 0x20080, 0xa4) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) r3 = syz_io_uring_setup(0x6d14, &(0x7f0000000040)={0x0, 0x65f7, 0x800, 0x2, 0x1fd}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000240)={0x9, r2, 0x4, {0x5cd, 0x10}, 0x40}, 0x1) 30m27.927073413s ago: executing program 40 (id=561): syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0}]) socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x79c02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x18) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000000240)={&(0x7f00000001c0)='/dev/kvm\x00', &(0x7f0000000200)='^)%#\\$*\x91\x00', 0x6}) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a00110001003900050002826aecb5448de442ae08b2465014cfab537c03492048471ca209ec92ca957bfb7f28802e", 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000000c0)={0x3, {{0xa, 0x4e24, 0xf, @local, 0x2}}, {{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x140b, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5000}, 0x8000) 29m36.386153411s ago: executing program 41 (id=597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x120}}, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) msgctl$IPC_STAT(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r3 = accept$alg(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getpriority(0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 25m38.647964199s ago: executing program 42 (id=710): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) 23m22.394826413s ago: executing program 43 (id=778): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r4 = getpid() r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r7, &(0x7f0000000280)={0xffffffffffffffff, r6, 0x7}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl(r9, 0xfffff000, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 20m27.202080627s ago: executing program 44 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000005c0)={0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x8, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000380)=[{0x2, 0x2, 0x0, 0x80000003}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$alg(0x26, 0x5, 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 20m23.711769426s ago: executing program 45 (id=858): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x20000080) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x1a}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl818\x00', [0x5c22, 0x3, 0x1, 0x0, 0xa, 0x7, 0xc, 0x7, 0x5, 0x800, 0x6b5b, 0x2, 0x3d, 0x403, 0x7, 0x1, 0x1, 0x0, 0x7, 0x40400003, 0x8c, 0x1007fff, 0x200006, 0xd, 0x8004, 0x8, 0x2, 0x8, 0x8, 0x1]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 19m29.044778463s ago: executing program 46 (id=861): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) 19m1.815995402s ago: executing program 47 (id=876): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = dup(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'nr0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ed179a3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}]}]}, @NFT_MSG_DELOBJ={0xa0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x7f, 0x8, "b364ba9b724bbc89edb04e0695c8cebec0d1f64dda81b7c75c572e42a51e01c4e63cec1de3b93cee7bd7ae09f6f4bba82692d53ab03ba8eec02801f9dd593d9e3b77972d0242319212f1274ce4ee1314f78863d0f1bcdd59cd92c58b7191edb39101b3d1be59647bd92babd38496049094aba9765840c6b4dcffaf"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x164}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4040) 19m1.219720614s ago: executing program 48 (id=877): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x4, 0x40) fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000001c0)={0x10, 0x0, r6}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000580)=@abs, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17m37.540443408s ago: executing program 49 (id=931): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 11m58.184578713s ago: executing program 50 (id=1112): syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 11m41.831598006s ago: executing program 51 (id=1121): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) 10m19.67358281s ago: executing program 52 (id=1170): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000084) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2f) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0xa890) keyctl$clear(0x7, 0xfffffffffffffffb) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x40800) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000040)={0x1, @raw_data="1eb18523244070c078beb62a4c162c45d1952d0d73e22f96568c47557b6d688f0a361520a193ef0801183afa34b646f2ffe8bad04deff088b335825dad09312a2cb51eeca49b548ebb32442c2940b7a4dd649fb367a56f93bdaa3f9ff6795a31f8544440efa7b601e89aee0d4048ad3d1f40aa44effd75533c56db5d7891f6d22a7f1a8874b78be4a36a9991d46ff5a23ec36849e0f553abb513c296e1b90a8c75f0f84505bf0edb23bf3bed74333eefc0b3e70698dffd1580842ade45472cea0748bf9e0c0e84e4"}) 10m16.139951476s ago: executing program 53 (id=1188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 9m56.624001449s ago: executing program 0 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1a}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}}, 0x0) 9m56.218862226s ago: executing program 0 (id=1211): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x880) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m39.593197228s ago: executing program 54 (id=1211): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x3, 0xf8) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000000), 0x880) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m56.487762132s ago: executing program 55 (id=1282): r0 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000040}], 0x1, 0x85) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x40010126) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000002440)=""/4100, 0x1004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28) fcntl$setlease(r6, 0x400, 0x1) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000100)={0x28, &(0x7f0000000100)}) 7m25.551338151s ago: executing program 56 (id=1301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) syz_io_uring_setup(0xece, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080), &(0x7f0000000000)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FSYNC={0x3, 0x2c, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0xffffffff, 0xa, 0x2, 0x9}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @private1}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000021810", @ANYRES32=r8, @ANYBLOB="000000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'some', 0x20, 0x400000000000000}, 0x2f) 7m14.001630896s ago: executing program 57 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "1bb759fa84db9d57d3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 5m52.587397468s ago: executing program 1 (id=1410): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 5m51.964476337s ago: executing program 1 (id=1412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000c073c0fd18a74a1f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000080) fcntl$getown(r1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5m50.267894767s ago: executing program 1 (id=1416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x8}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) 5m48.252460858s ago: executing program 58 (id=1417): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, 0x0) 5m48.221445083s ago: executing program 1 (id=1421): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 5m47.704863142s ago: executing program 1 (id=1422): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, 0x0) 5m46.882171802s ago: executing program 8 (id=1424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000c073c0fd18a74a1f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000080) fcntl$getown(r1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5m46.774151198s ago: executing program 1 (id=1425): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0614"], 0x9) 5m44.470939193s ago: executing program 59 (id=1425): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0614"], 0x9) 5m44.424341032s ago: executing program 8 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "1bb759fa84db9d57d3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x3, r5, 0xeeeeeeee}) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) 5m41.542035759s ago: executing program 8 (id=1428): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x8}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) 5m40.344046614s ago: executing program 8 (id=1429): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 5m39.612166297s ago: executing program 8 (id=1430): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 5m39.148808773s ago: executing program 8 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 5m37.455758935s ago: executing program 60 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 5m11.719929553s ago: executing program 7 (id=1437): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e21, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48881) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 5m6.035640525s ago: executing program 7 (id=1439): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x18, 0x101000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x20, 0x101000) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) r4 = fanotify_init(0x20, 0x2) fanotify_mark(r4, 0x455, 0x3, r0, 0x0) 5m5.269783733s ago: executing program 7 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000c073c0fd18a74a1f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$rds(0x15, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) sendmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x24000080) fcntl$getown(r1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 5m2.320319157s ago: executing program 7 (id=1443): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x3, 0x30, 0x8}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x800, 0x0) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x108383) 4m58.029733165s ago: executing program 7 (id=1444): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 4m55.228534394s ago: executing program 7 (id=1445): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 4m55.228360162s ago: executing program 0 (id=1426): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x50d65ad7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file5\x00', 0x6000, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000940)={0x840c, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4m49.610884599s ago: executing program 0 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "1bb759fa84db9d57d3"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000240), 0x3, r5, 0xeeeeeeee}) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) 4m45.491753547s ago: executing program 0 (id=1452): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x2) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) 4m40.599986399s ago: executing program 0 (id=1453): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB]) mknodat$loop(0xffffffffffffff9c, 0x0, 0x800, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x52026, &(0x7f0000000200)=ANY=[]) write$FUSE_INIT(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4m35.983887812s ago: executing program 61 (id=1445): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00182b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) 4m21.358759645s ago: executing program 62 (id=1453): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x1000000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000040)={0xfffffffb, 0x80, 0x1, 'queue1\x00', 0x85}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB]) mknodat$loop(0xffffffffffffff9c, 0x0, 0x800, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x52026, &(0x7f0000000200)=ANY=[]) write$FUSE_INIT(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2m12.196014427s ago: executing program 2 (id=1595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x34000}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xffff874a}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={r5, 0x9}, 0x8) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x1}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') syz_usb_connect(0x0, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 2m7.011560628s ago: executing program 2 (id=1599): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10001, @private0}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0) 2m3.830879414s ago: executing program 2 (id=1601): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 2m2.509739951s ago: executing program 2 (id=1604): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x80, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x5, 0x4, 0x7ff, 0x830, 0x8, 0x9, 0x9, 0x800, 0x301, 0x2, 0x8001, 0x7, 0x3, 0x10000004, 0x5, 0x70f]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r3, 0x0, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x8, &(0x7f0000000080), 0x0, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf0, 0x9, 0x89, "c505b8", 0x7f, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x72, 0x9, 0x6, "aecb49", 0x3, 0x4}]}}}, 0x22) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200d1c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x20, 0x30, 0xf, "00abb7277f00070700000080d8897b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x8, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x6, 0x0, 0x3, 0x2, 0x3, 0xb], 0x0, 0x194d40}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m57.832104308s ago: executing program 2 (id=1609): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_io_uring_setup(0xb9a, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x10001, @private0}}, {{0xa, 0x0, 0x0, @loopback, 0x1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0x8}}}, 0x108) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r2, 0x0) 1m55.124597446s ago: executing program 2 (id=1611): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) socket(0xa, 0x3, 0x3a) 1m38.887865224s ago: executing program 63 (id=1611): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) socket(0xa, 0x3, 0x3a) 33.365457554s ago: executing program 9 (id=1658): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe5d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.885369865s ago: executing program 9 (id=1659): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xcbb4, r5, 'id0\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8020000a2110b9991615d72646da1a49ce1c4baade923be55a2c9a683c5aa26aeb08c1f4ffaa5e70c3c3510d95e150a13280fa89152e445de2c6f2f324afcad489284143a2463e1be9f", @ANYRES16=r8, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, r3, r6, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"}) socket$nl_netfilter(0x10, 0x3, 0xc) 31.386637793s ago: executing program 3 (id=1661): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000180)=0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r2, 0x402, 0x5) r3 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) syz_emit_ethernet(0x227, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080046000020000000000011fe78ac1414ffac141416"], 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x1050) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = socket$inet_smc(0x2b, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b\\/\\o\\\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 26.923962957s ago: executing program 9 (id=1667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe5d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.354792949s ago: executing program 9 (id=1669): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000010000000000000000000000000000000000000000000000000073d6fbdfd45ee2a900008010000000000000000600040000000000990c0000100000000008000000000000e10200000000000000000000000000000001030200000000c4000500fe800000000000000000000000aa000004d32b00000000000000fc020000000000000000000000000000000000000002ff00070000000000000000000000fc000000000000000000000000000001000000003200000000000000ff020000000000000000000000000001000000000000000000000000ff010000000000007f000001000000000000000000000000000000003c00000002ee0000ac1414aa0000000000000000000000000435000002000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e20, 0x0, @private1}}}, 0x108) 15.702024109s ago: executing program 3 (id=1685): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000070000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 15.309168033s ago: executing program 4 (id=1688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000001100), r4) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x1}], 0x1, 0x5, 0xa, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 14.997129858s ago: executing program 6 (id=1689): process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) sendfile(r0, r0, &(0x7f0000000040)=0x3, 0x100000001) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) 14.992208169s ago: executing program 5 (id=1690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe5d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.796514419s ago: executing program 3 (id=1691): mlock(&(0x7f0000d52000/0x3000)=nil, 0x3000) 10.449342041s ago: executing program 6 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000c073c0fd18a74a1f000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffe5}, 0x0) sendmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x24000080) fcntl$getown(r1, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.280526371s ago: executing program 64 (id=1669): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24008004}, 0x40044) gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e20, 0x0, @private1}}}, 0x108) 7.021960485s ago: executing program 3 (id=1694): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700010400000000000400020006000300000009030000380001"], 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.55521022s ago: executing program 4 (id=1695): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) 6.518324235s ago: executing program 5 (id=1696): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e27, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.702266362s ago: executing program 3 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'vlan0\x00'}) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x3, 0xffe, 0x80, 0xc, 0x2, 0x4, 0x8, 0xffff, 0x5, 0x4, 0x7ff, 0x830, 0x8, 0x9, 0x9, 0x800, 0x301, 0x2, 0x8001, 0x7, 0x3, 0x10000004, 0x5, 0x70f]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x8, &(0x7f0000000080), 0x0, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf0, 0x9, 0x89, "c505b8", 0x7f, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x72, 0x9, 0x6, "aecb49", 0x3, 0x4}]}}}, 0x22) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200d1c"], 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x20, 0x30, 0xf, "00abb7277f00070700000080d8897b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x8, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x6, 0x0, 0x3, 0x2, 0x3, 0xb], 0x0, 0x194d40}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.653004149s ago: executing program 5 (id=1698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000000c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private0, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 5.647739212s ago: executing program 6 (id=1699): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @local}, 0x1c) 5.38266816s ago: executing program 4 (id=1700): r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x1000001, 0x20013, r0, 0xf38ae000) 4.912488759s ago: executing program 6 (id=1701): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x6e, {0x6e, 0x7, "d626601752b65bfa9d16dd4b32c3bceba15195e6598ef8a36e46abb36b801be914a806a2a07c097d57440d4f6ff18140c7735a9a0669a4039089eaa5f5334a6db4706c2b035f551f3b29485dfb4b27953f3f00b5ee01af8d826909f7c572db8aabf9f2b613db26c53e1188aa"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}}, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x15, 0xb5, "2768d837b3777e308795daa5acf7c351585feaa42ef247343128ce50f9c705514722cd4344b83a43f0e449a23beb5c5f9713d44c201afea82f9001735a9aa30db05bb5ac7bd7e5d0a9fc684ce11e3dd77cd2d4ec585aa15ad39b844abcbd388cfbd93317905364aa636aeceae4fcbcdef0c347c92411f6b65c80dae8538599cee1486b4ba17b07e0d1ab7e6bf8af7693ee215d49f30deb396a107f3a840343d6201cae2f95a7634ddb23b330f56ca05661a6325d68"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.557466723s ago: executing program 4 (id=1702): process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) sendfile(r0, r0, &(0x7f0000000040)=0x3, 0x100000001) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) 4.50294367s ago: executing program 5 (id=1703): mlock(&(0x7f0000d52000/0x3000)=nil, 0x3000) 1.462037004s ago: executing program 5 (id=1704): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd27}, 0x12042) 1.228829436s ago: executing program 6 (id=1705): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001400e04600000a60c6eec00be004429fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 911.721025ms ago: executing program 4 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x5}) 350.759305ms ago: executing program 6 (id=1707): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioperm(0xd1df, 0x7, 0x9) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000600)="974501000000000001008cc5ffff", 0x5aa}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050200000000fddbdf25120000001800018014000200626f6e645f73c8b5f3155f66279579c4f7aa6c6176655f31"], 0x34}}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) eventfd(0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000500)={{&(0x7f0000000700)=[{0x1, 0xe0000, 0xba, {0x3, 0x8}, 0x1, 0x9, 0x2}, {0x5, 0x4, 0x80000001, {0x0, 0x4}, 0x3, 0x2, 0xfffffe00}], 0x2, 0x40, 0x1, 0x4}, {&(0x7f0000000380)=[{0xffffffffffffffff, 0x8}, {0x2, 0x401}, {0x9, 0x67}, {0x9, 0x401}, {0xfffffffffffffffc, 0x80000001}, {0x6, 0x81}, {0x263f, 0x1}], 0x7, 0x10, 0x8bf, 0x2}, {&(0x7f0000000400)=[0x8, 0x800, 0x7ff], 0x3, 0x8, 0xfffd, 0x6}, {&(0x7f0000000440)=[{0xd94, 0xffffffffffffffc0, 0x0, 0xb4, 0x80000000}, {0x9d, 0x0, 0x7, 0x3, 0x7f}], 0x2, 0x28, 0x1ff, 0x7}, {&(0x7f00000004c0)=[0x7, 0x9, 0x7fff, 0x1, 0x4, 0x5, 0x600000], 0x7, 0x8, 0x7, 0x4}}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003ac0)=""/247, 0xf7}, {0x0}, {0x0}, {&(0x7f0000003d00)=""/4096, 0x1000}], 0x4}, 0x5}], 0x1, 0x141, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 332.643603ms ago: executing program 5 (id=1708): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x3, 0x40000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x26}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(r0) 67.894306ms ago: executing program 3 (id=1709): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x48, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 4 (id=1710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000002d40)={0x0, [{0x0, 0x28, 0x4, &(0x7f0000000300)="6cbd1bd078"}, {0x2, 0x0, 0x0, 0x0}, {0x5, 0x0, 0x8000, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x600000, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x81, 0x0}, {0x3, 0x0, 0x5c6e, 0x0}, {0x1, 0x0, 0xfff, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x2, 0x0, 0x24, 0x0}, {0x2, 0x0, 0x5ecd, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x4, 0x0, 0xa79, 0x0}]}) kernel console output (not intermixed with test programs): T24] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2462.406865][ T24] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2462.427545][ T24] asix 9-1:0.188: probe with driver asix failed with error -71 [ 2462.540094][ T24] usb 9-1: USB disconnect, device number 18 [ 2463.335728][T16504] tipc: Started in network mode [ 2463.341709][T16504] tipc: Node identity ac14140f, cluster identity 4711 [ 2463.352898][T16504] tipc: New replicast peer: 255.255.255.255 [ 2463.365552][T16504] tipc: Enabled bearer , priority 10 [ 2463.383558][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1326'. [ 2465.640215][ T24] tipc: Node number set to 2886997007 [ 2465.930363][T16518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2465.964329][T16518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2466.157906][T16518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2466.239606][T16518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2468.592782][T16417] bridge0: port 1(bridge_slave_0) entered blocking state [ 2468.661622][T16417] bridge0: port 1(bridge_slave_0) entered disabled state [ 2468.700055][T16417] bridge_slave_0: entered allmulticast mode [ 2468.765266][T16417] bridge_slave_0: entered promiscuous mode [ 2469.681924][T16417] bridge0: port 2(bridge_slave_1) entered blocking state [ 2469.821762][T16417] bridge0: port 2(bridge_slave_1) entered disabled state [ 2469.829743][T16417] bridge_slave_1: entered allmulticast mode [ 2469.945815][T16417] bridge_slave_1: entered promiscuous mode [ 2470.214279][T11959] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2471.431556][T11959] usb 9-1: Using ep0 maxpacket: 32 [ 2471.511979][T11959] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2471.532700][T11959] usb 9-1: config 0 has no interface number 0 [ 2471.542365][T11959] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2471.587457][T11959] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2471.606114][T11959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2471.623128][T11959] usb 9-1: Product: syz [ 2471.628425][T11959] usb 9-1: Manufacturer: syz [ 2471.633206][T11959] usb 9-1: SerialNumber: syz [ 2471.645721][T11959] usb 9-1: config 0 descriptor?? [ 2471.654915][T16543] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2471.880891][T16417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2471.920762][T16543] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2472.299637][T16337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2472.459509][T16417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2473.245051][T16337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2473.892813][T16337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2474.032283][T16563] tipc: Started in network mode [ 2474.037653][T16563] tipc: Node identity ac14140f, cluster identity 4711 [ 2474.045648][T16563] tipc: New replicast peer: 255.255.255.255 [ 2474.055230][T16563] tipc: Enabled bearer , priority 10 [ 2474.062264][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 2474.079169][T16337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2474.185313][T16417] team0: Port device team_slave_0 added [ 2474.253550][T16417] team0: Port device team_slave_1 added [ 2475.814732][ T24] tipc: Node number set to 2886997007 [ 2476.217840][T11959] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2476.289914][T11959] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2476.358828][T11959] asix 9-1:0.188: probe with driver asix failed with error -71 [ 2476.499690][T11959] usb 9-1: USB disconnect, device number 19 [ 2476.899337][T16417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2477.453998][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2478.445188][T16417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2478.462437][T16417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2478.469833][T16417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2479.421750][T16417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2483.336592][ T3422] bridge_slave_1: left allmulticast mode [ 2483.382422][ T3422] bridge_slave_1: left promiscuous mode [ 2483.443105][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2483.498409][ T3422] bridge_slave_0: left allmulticast mode [ 2483.553104][ T3422] bridge_slave_0: left promiscuous mode [ 2483.559797][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2485.936058][T11959] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2486.417583][T11959] usb 9-1: Using ep0 maxpacket: 32 [ 2486.464143][T11959] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2486.474321][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2486.499579][T11959] usb 9-1: config 0 has no interface number 0 [ 2486.564092][T11959] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2486.579161][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2486.618753][T11959] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2486.642232][ T3422] bond0 (unregistering): Released all slaves [ 2486.656261][T11959] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.676303][T11959] usb 9-1: Product: syz [ 2486.681033][T11959] usb 9-1: Manufacturer: syz [ 2486.688104][T11959] usb 9-1: SerialNumber: syz [ 2486.700711][T11959] usb 9-1: config 0 descriptor?? [ 2486.718047][T16625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2486.789926][T16417] hsr_slave_0: entered promiscuous mode [ 2486.841741][T16417] hsr_slave_1: entered promiscuous mode [ 2486.858159][T16417] debugfs: 'hsr0' already exists in 'hsr' [ 2486.864837][T16417] Cannot create hsr debugfs directory [ 2486.885180][T16631] tipc: Enabling of bearer rejected, already enabled [ 2486.895168][T16632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 2487.017363][T16625] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2489.461787][ T3422] hsr_slave_0: left promiscuous mode [ 2489.492527][ T3422] hsr_slave_1: left promiscuous mode [ 2490.364959][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2490.375869][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2490.479839][T11959] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2490.520944][T11959] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2490.532640][T11959] asix 9-1:0.188: probe with driver asix failed with error -71 [ 2490.561356][T11959] usb 9-1: USB disconnect, device number 20 [ 2492.744859][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 2492.874961][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 2493.352045][ T5092] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2493.565115][ T5092] usb 9-1: config 0 has an invalid interface number: 208 but max is 0 [ 2493.596589][ T5092] usb 9-1: config 0 has no interface number 0 [ 2493.604477][ T5092] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2493.658225][ T5092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.753651][ T5092] usb 9-1: config 0 descriptor?? [ 2493.830403][ T5092] cp210x 9-1:0.208: cp210x converter detected [ 2494.152314][T16681] Bluetooth: MGMT ver 1.23 [ 2494.447408][T16337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2494.901872][ T5092] cp210x 9-1:0.208: failed to get vendor val 0x000e size 3: -32 [ 2494.983142][T16687] tipc: Enabling of bearer rejected, already enabled [ 2495.038242][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 2495.070417][T16337] 8021q: adding VLAN 0 to HW filter on device team0 [ 2495.133201][ T5092] cp210x 9-1:0.208: failed to get vendor val 0x370c size 15: -71 [ 2495.146347][ T5092] cp210x 9-1:0.208: GPIO initialisation failed: -71 [ 2495.218212][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2495.225871][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2495.357832][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 2495.365676][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2495.622265][ T5092] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2495.683057][ T5092] usb 9-1: USB disconnect, device number 21 [ 2495.730384][ T5092] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2495.771455][ T5092] cp210x 9-1:0.208: device disconnected [ 2497.119562][T16701] netlink: 'syz.1.1363': attribute type 3 has an invalid length. [ 2498.168042][T16417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2498.427758][T16417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2498.696650][T16417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2498.955625][T16417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2499.164374][ T5092] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2499.445773][ T5092] usb 4-1: Using ep0 maxpacket: 32 [ 2499.506162][ T5092] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 2499.542113][ T5092] usb 4-1: config 0 has no interface number 0 [ 2499.548526][ T5092] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2499.614116][ T5092] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2499.623591][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2499.697396][ T5092] usb 4-1: Product: syz [ 2499.710119][ T5092] usb 4-1: Manufacturer: syz [ 2499.772161][ T5092] usb 4-1: SerialNumber: syz [ 2499.895428][ T5092] usb 4-1: config 0 descriptor?? [ 2500.136403][T16710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2500.804243][T16710] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2501.803495][T16417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2501.981010][T16417] 8021q: adding VLAN 0 to HW filter on device team0 [ 2502.763040][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 2502.770632][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2502.917483][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 2502.925337][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2503.456262][T12447] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2503.495158][T12447] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2503.509499][T12447] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2503.526227][T12447] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2503.783329][T12447] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2504.424725][ T5092] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2504.477110][ T5092] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 2504.498478][ T5092] asix 4-1:0.188: probe with driver asix failed with error -71 [ 2504.574450][ T5092] usb 4-1: USB disconnect, device number 6 [ 2505.320441][T14682] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2505.406245][T11959] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2505.594245][T14682] usb 9-1: config 0 has an invalid interface number: 208 but max is 0 [ 2505.627510][T11959] usb 2-1: config 0 has an invalid interface number: 208 but max is 0 [ 2505.665552][T14682] usb 9-1: config 0 has no interface number 0 [ 2505.687185][T11959] usb 2-1: config 0 has no interface number 0 [ 2505.699232][T14682] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2505.722393][T11959] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2505.740530][T14682] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.764230][T11959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.799062][T14682] usb 9-1: config 0 descriptor?? [ 2505.857151][T11959] usb 2-1: config 0 descriptor?? [ 2505.896764][T14682] cp210x 9-1:0.208: cp210x converter detected [ 2506.057997][T12447] Bluetooth: hci5: command tx timeout [ 2506.101117][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 2506.125557][T11959] usb 2-1: string descriptor 0 read error: -71 [ 2506.155334][T11959] cp210x 2-1:0.208: cp210x converter detected [ 2506.177502][T11959] cp210x 2-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2506.185555][T11959] cp210x 2-1:0.208: querying part number failed [ 2506.231895][T11959] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2506.273550][T11959] usb 2-1: USB disconnect, device number 8 [ 2506.327414][T11959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2506.346541][T14682] cp210x 9-1:0.208: failed to get vendor val 0x000e size 3: -32 [ 2506.383842][T11959] cp210x 2-1:0.208: device disconnected [ 2506.607004][T14682] cp210x 9-1:0.208: failed to get vendor val 0x370c size 15: -71 [ 2506.616700][T14682] cp210x 9-1:0.208: GPIO initialisation failed: -71 [ 2506.643964][T14682] usb 9-1: cp210x converter now attached to ttyUSB0 [ 2506.709922][T14682] usb 9-1: USB disconnect, device number 22 [ 2506.760554][T14682] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2506.819073][T14682] cp210x 9-1:0.208: device disconnected [ 2507.220943][T16417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2507.975356][T16731] chnl_net:caif_netlink_parms(): no params data found [ 2508.194089][ T5994] bridge_slave_1: left allmulticast mode [ 2508.209677][ T5994] bridge_slave_1: left promiscuous mode [ 2508.223102][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.281641][T12447] Bluetooth: hci5: command tx timeout [ 2508.367296][ T5994] bridge_slave_0: left allmulticast mode [ 2508.373161][ T5994] bridge_slave_0: left promiscuous mode [ 2508.396215][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.164360][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2509.255486][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2509.304093][ T5994] bond0 (unregistering): Released all slaves [ 2510.353735][ T5092] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2510.503659][T12447] Bluetooth: hci5: command tx timeout [ 2510.642058][ T5092] usb 9-1: Using ep0 maxpacket: 32 [ 2510.689986][ T5092] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2510.723202][ T5994] hsr_slave_0: left promiscuous mode [ 2510.745453][ T5092] usb 9-1: config 0 has no interface number 0 [ 2510.796401][ T5092] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2510.824145][ T5994] hsr_slave_1: left promiscuous mode [ 2510.878645][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2510.912160][ T5092] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2510.955399][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2510.963629][ T5092] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.012266][ T5092] usb 9-1: Product: syz [ 2511.046363][ T5092] usb 9-1: Manufacturer: syz [ 2511.086277][ T5092] usb 9-1: SerialNumber: syz [ 2511.166239][ T5092] usb 9-1: config 0 descriptor?? [ 2511.176801][T16803] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2511.552882][T16803] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2512.726133][T12447] Bluetooth: hci5: command tx timeout [ 2513.043650][ T8635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2513.054139][ T8635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2513.064807][ T8635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2513.107563][ T8635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2513.119164][ T8635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2513.223317][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 2513.418060][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 2513.976865][T14682] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2514.009512][T12326] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2514.204813][T14682] usb 2-1: config 0 has an invalid interface number: 208 but max is 0 [ 2514.221311][T12326] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 2514.245300][T14682] usb 2-1: config 0 has no interface number 0 [ 2514.273727][T12326] usb 4-1: config 0 has no interface number 0 [ 2514.278821][T14682] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2514.297400][T12326] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2514.329331][T12326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.344370][T14682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.388834][T14682] usb 2-1: config 0 descriptor?? [ 2514.453716][T12326] usb 4-1: config 0 descriptor?? [ 2514.509166][T12326] cp210x 4-1:0.208: cp210x converter detected [ 2514.719142][T14682] usb 2-1: string descriptor 0 read error: -71 [ 2514.763660][T14682] cp210x 2-1:0.208: cp210x converter detected [ 2514.802961][ T5092] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2514.839532][T14682] cp210x 2-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2514.853128][ T5092] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 2514.895065][T14682] cp210x 2-1:0.208: querying part number failed [ 2514.929396][ T5092] asix 9-1:0.188: probe with driver asix failed with error -71 [ 2514.945097][T14682] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2514.983745][T14682] usb 2-1: USB disconnect, device number 9 [ 2514.989135][T12326] cp210x 4-1:0.208: failed to get vendor val 0x000e size 3: -32 [ 2515.064152][ T5092] usb 9-1: USB disconnect, device number 23 [ 2515.068529][T14682] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2515.093196][T14682] cp210x 2-1:0.208: device disconnected [ 2515.286696][T12326] cp210x 4-1:0.208: failed to get vendor val 0x370c size 15: -71 [ 2515.306246][T12326] cp210x 4-1:0.208: GPIO initialisation failed: -71 [ 2515.367574][T12326] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2515.376465][T12447] Bluetooth: hci2: command tx timeout [ 2515.457441][T12326] usb 4-1: USB disconnect, device number 7 [ 2515.509495][T12326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2515.560450][T12326] cp210x 4-1:0.208: device disconnected [ 2515.683637][T16731] bridge0: port 1(bridge_slave_0) entered blocking state [ 2515.722347][T16731] bridge0: port 1(bridge_slave_0) entered disabled state [ 2515.739885][T16731] bridge_slave_0: entered allmulticast mode [ 2515.774875][T16731] bridge_slave_0: entered promiscuous mode [ 2517.524965][T16731] bridge0: port 2(bridge_slave_1) entered blocking state [ 2517.599533][T12447] Bluetooth: hci2: command tx timeout [ 2517.622306][T16731] bridge0: port 2(bridge_slave_1) entered disabled state [ 2517.630116][T16731] bridge_slave_1: entered allmulticast mode [ 2517.718539][T16731] bridge_slave_1: entered promiscuous mode [ 2519.813743][T16731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2519.832374][T12447] Bluetooth: hci2: command tx timeout [ 2519.952201][T16731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2521.369632][T16731] team0: Port device team_slave_0 added [ 2521.441373][T16731] team0: Port device team_slave_1 added [ 2521.666119][ T5994] bridge_slave_1: left allmulticast mode [ 2521.683096][ T5994] bridge_slave_1: left promiscuous mode [ 2521.701168][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.790845][ T5994] bridge_slave_0: left allmulticast mode [ 2521.796860][ T5994] bridge_slave_0: left promiscuous mode [ 2521.822029][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2522.044139][T12447] Bluetooth: hci2: command tx timeout [ 2522.168563][T16893] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1398'. [ 2522.734578][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2522.798134][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2522.838519][ T5994] bond0 (unregistering): Released all slaves [ 2523.782134][T16820] chnl_net:caif_netlink_parms(): no params data found [ 2523.874552][T16731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2523.900873][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2523.989083][T16731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2524.118015][T16731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2524.125492][T16731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2524.213718][T16731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2524.453412][ T5994] hsr_slave_0: left promiscuous mode [ 2524.525106][ T5994] hsr_slave_1: left promiscuous mode [ 2524.532991][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2524.620111][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2524.865249][ T5092] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2525.044481][ T5092] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 2525.069860][ T5092] usb 4-1: config 0 has no interface number 0 [ 2525.076521][ T5092] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2525.088428][ T5092] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.105660][ T5092] usb 4-1: config 0 descriptor?? [ 2525.153865][T12326] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2525.164805][ T5092] cp210x 4-1:0.208: cp210x converter detected [ 2525.295455][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 2525.309891][T16910] Bluetooth: hci3: command 0x0406 tx timeout [ 2525.332420][T12326] usb 9-1: device descriptor read/64, error -71 [ 2525.585973][ T5092] cp210x 4-1:0.208: failed to get vendor val 0x000e size 3: -32 [ 2525.598649][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 2525.613442][T12326] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2525.662940][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 2525.774064][T12326] usb 9-1: device descriptor read/64, error -71 [ 2525.819548][ T5092] cp210x 4-1:0.208: failed to get vendor val 0x370c size 15: -71 [ 2525.859341][ T5092] cp210x 4-1:0.208: GPIO initialisation failed: -71 [ 2525.884457][ T5092] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2525.913796][T12326] usb usb9-port1: attempt power cycle [ 2525.946402][ T5092] usb 4-1: USB disconnect, device number 8 [ 2525.981160][ T5092] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2526.012625][ T5092] cp210x 4-1:0.208: device disconnected [ 2526.319620][T12326] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2526.392369][T12326] usb 9-1: device descriptor read/8, error -71 [ 2526.580783][T16731] hsr_slave_0: entered promiscuous mode [ 2526.640916][T16731] hsr_slave_1: entered promiscuous mode [ 2526.682229][T12326] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2526.735906][T12326] usb 9-1: device descriptor read/8, error -71 [ 2526.865006][T12326] usb usb9-port1: unable to enumerate USB device [ 2527.612616][T16961] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1411'. [ 2527.791951][T16820] bridge0: port 1(bridge_slave_0) entered blocking state [ 2527.815355][T16820] bridge0: port 1(bridge_slave_0) entered disabled state [ 2527.841041][T16820] bridge_slave_0: entered allmulticast mode [ 2527.874462][T16820] bridge_slave_0: entered promiscuous mode [ 2527.986108][T16820] bridge0: port 2(bridge_slave_1) entered blocking state [ 2527.999003][T16820] bridge0: port 2(bridge_slave_1) entered disabled state [ 2528.012142][T16820] bridge_slave_1: entered allmulticast mode [ 2528.054309][T16820] bridge_slave_1: entered promiscuous mode [ 2529.448490][T16820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2529.644893][T16820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2529.895369][ T9860] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2530.138514][ T9860] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2530.207250][T16820] team0: Port device team_slave_0 added [ 2530.305071][T16820] team0: Port device team_slave_1 added [ 2530.476279][ T9860] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2530.767290][ T9860] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2530.890162][T16820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2530.916892][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2530.997859][T16820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2531.014963][T16820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2531.023911][T16820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2531.066561][T16820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2531.671701][T17003] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1421'. [ 2531.685389][T16820] hsr_slave_0: entered promiscuous mode [ 2531.718104][T16820] hsr_slave_1: entered promiscuous mode [ 2531.757930][T16820] debugfs: 'hsr0' already exists in 'hsr' [ 2531.764140][T16820] Cannot create hsr debugfs directory [ 2531.830369][T16731] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2532.059310][T16731] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2532.151671][T16731] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2532.425970][T16731] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2532.497154][T12447] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2532.521190][T12447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2532.530637][T12447] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2532.556286][T12447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2532.579469][T12447] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2532.782168][ T9860] bridge_slave_1: left allmulticast mode [ 2532.794211][ T9860] bridge_slave_1: left promiscuous mode [ 2532.801278][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2532.840371][ T9860] bridge_slave_0: left allmulticast mode [ 2532.858304][ T9860] bridge_slave_0: left promiscuous mode [ 2532.865530][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2534.476635][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2534.536991][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2534.562280][ T9860] bond0 (unregistering): Released all slaves [ 2534.783068][T12447] Bluetooth: hci0: command tx timeout [ 2534.813893][ T9860] tipc: Disabling bearer [ 2534.824629][ T9860] tipc: Left network mode [ 2535.745323][ T9860] hsr_slave_0: left promiscuous mode [ 2535.774419][ T9860] hsr_slave_1: left promiscuous mode [ 2535.812391][ T9860] veth1_macvtap: left promiscuous mode [ 2535.826110][ T9860] veth0_macvtap: left promiscuous mode [ 2535.833903][ T9860] veth1_vlan: left promiscuous mode [ 2535.845581][ T9860] veth0_vlan: left promiscuous mode [ 2536.130353][T16910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2536.154016][T16910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2536.170580][T16910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2536.192019][T16910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2536.212249][T16910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2536.235155][T16910] Bluetooth: hci4: command 0x0406 tx timeout [ 2536.977973][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 2537.004522][ T8635] Bluetooth: hci0: command tx timeout [ 2537.035116][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 2538.457830][ T8635] Bluetooth: hci1: command tx timeout [ 2538.562568][ T9860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2538.859711][ T9860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.026480][ T9860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.185667][T16731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2539.222269][ T9860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2539.237935][ T8635] Bluetooth: hci0: command tx timeout [ 2539.274576][T17011] chnl_net:caif_netlink_parms(): no params data found [ 2539.670702][T17063] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1429'. [ 2540.023583][T16820] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2540.095388][T17037] chnl_net:caif_netlink_parms(): no params data found [ 2540.153490][T16731] 8021q: adding VLAN 0 to HW filter on device team0 [ 2540.192669][T16820] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2540.480671][T16820] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2540.570420][T16820] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2540.683972][ T8635] Bluetooth: hci1: command tx timeout [ 2540.777470][ T9860] bridge_slave_1: left allmulticast mode [ 2540.797964][ T9860] bridge_slave_1: left promiscuous mode [ 2540.804914][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2540.932908][ T9860] bridge_slave_0: left allmulticast mode [ 2540.978703][ T9860] bridge_slave_0: left promiscuous mode [ 2541.015610][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.449968][ T8635] Bluetooth: hci0: command tx timeout [ 2541.730743][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2541.748151][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2541.776385][ T9860] bond0 (unregistering): Released all slaves [ 2541.940535][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.948279][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2542.102041][ T9860] tipc: Disabling bearer [ 2542.109688][ T9860] tipc: Left network mode [ 2542.253203][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.260765][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2542.344778][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 2542.360958][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.373024][T17011] bridge_slave_0: entered allmulticast mode [ 2542.387328][T17011] bridge_slave_0: entered promiscuous mode [ 2542.502176][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.534198][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.555104][T17011] bridge_slave_1: entered allmulticast mode [ 2542.584367][T17011] bridge_slave_1: entered promiscuous mode [ 2542.903137][ T8635] Bluetooth: hci1: command tx timeout [ 2543.015623][T16910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2543.026889][T16910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2543.037184][T16910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2543.045848][T17011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2543.063770][T16910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2543.066035][T17011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2543.089790][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2543.095835][T16910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2543.100266][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2543.125693][T17037] bridge_slave_0: entered allmulticast mode [ 2543.172077][T17037] bridge_slave_0: entered promiscuous mode [ 2543.201349][ T9860] hsr_slave_0: left promiscuous mode [ 2543.216547][ T9860] hsr_slave_1: left promiscuous mode [ 2543.242875][ T9860] veth1_macvtap: left promiscuous mode [ 2543.250721][ T9860] veth0_macvtap: left promiscuous mode [ 2543.262644][ T9860] veth1_vlan: left promiscuous mode [ 2543.273705][ T9860] veth0_vlan: left promiscuous mode [ 2543.719041][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 2543.764784][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 2544.028455][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.047439][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2544.055637][T17037] bridge_slave_1: entered allmulticast mode [ 2544.066637][T17037] bridge_slave_1: entered promiscuous mode [ 2544.214644][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2544.266752][T17011] team0: Port device team_slave_0 added [ 2544.299430][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2544.377324][T17011] team0: Port device team_slave_1 added [ 2544.491122][T17037] team0: Port device team_slave_0 added [ 2544.618600][T17037] team0: Port device team_slave_1 added [ 2544.691566][T17011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2544.702255][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.736336][T17011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2544.766064][T17011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2544.776500][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.806914][T17011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2544.855371][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2544.863060][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.892730][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2544.908900][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2544.916559][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2544.944869][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2545.110513][ T9860] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.132419][ T8635] Bluetooth: hci1: command tx timeout [ 2545.268461][ T9860] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.298726][ T8635] Bluetooth: hci3: command tx timeout [ 2545.502307][T17011] hsr_slave_0: entered promiscuous mode [ 2545.515983][T17011] hsr_slave_1: entered promiscuous mode [ 2545.527012][T17011] debugfs: 'hsr0' already exists in 'hsr' [ 2545.541382][T17011] Cannot create hsr debugfs directory [ 2545.581578][ T9860] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2545.748482][T17037] hsr_slave_0: entered promiscuous mode [ 2545.760091][T17037] hsr_slave_1: entered promiscuous mode [ 2545.770203][T17037] debugfs: 'hsr0' already exists in 'hsr' [ 2545.776997][T17037] Cannot create hsr debugfs directory [ 2545.868250][ T9860] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2546.164189][T16820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2546.991832][T16820] 8021q: adding VLAN 0 to HW filter on device team0 [ 2547.107735][ T9860] bridge_slave_1: left allmulticast mode [ 2547.118330][ T9860] bridge_slave_1: left promiscuous mode [ 2547.126722][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.142125][ T9860] bridge_slave_0: left allmulticast mode [ 2547.150476][ T9860] bridge_slave_0: left promiscuous mode [ 2547.164282][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.520461][ T8635] Bluetooth: hci3: command tx timeout [ 2547.617780][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2547.645668][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2547.660996][ T9860] bond0 (unregistering): Released all slaves [ 2547.705150][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2547.712774][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2547.892023][T17107] chnl_net:caif_netlink_parms(): no params data found [ 2547.919654][ T9860] tipc: Disabling bearer [ 2547.928112][ T9860] tipc: Left network mode [ 2547.980584][T16731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2548.189887][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 2548.198761][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2548.676981][ T9860] hsr_slave_0: left promiscuous mode [ 2548.686807][ T9860] hsr_slave_1: left promiscuous mode [ 2548.713954][ T9860] veth1_macvtap: left promiscuous mode [ 2548.722666][ T9860] veth0_macvtap: left promiscuous mode [ 2548.731819][ T9860] veth1_vlan: left promiscuous mode [ 2548.739708][ T9860] veth0_vlan: left promiscuous mode [ 2549.510383][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 2549.536638][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 2549.743096][ T8635] Bluetooth: hci3: command tx timeout [ 2550.678745][T17107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.708658][T17107] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.723555][T17107] bridge_slave_0: entered allmulticast mode [ 2550.747238][T17107] bridge_slave_0: entered promiscuous mode [ 2550.811058][T17107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.819539][T17107] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.833979][T17107] bridge_slave_1: entered allmulticast mode [ 2550.848798][T17107] bridge_slave_1: entered promiscuous mode [ 2551.087678][T17107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2551.188571][T17107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2551.359062][T17011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2551.406692][T17107] team0: Port device team_slave_0 added [ 2551.445400][T17011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2551.476893][T17011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2551.512330][T16731] veth0_vlan: entered promiscuous mode [ 2551.545124][T17107] team0: Port device team_slave_1 added [ 2551.646147][T17011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2551.684336][T17107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2551.692426][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2551.725144][T17107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2551.816038][T17107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2551.823527][T17107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2551.859423][T17107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2551.921697][T16731] veth1_vlan: entered promiscuous mode [ 2551.980477][ T8635] Bluetooth: hci3: command tx timeout [ 2552.064921][T16820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2552.202838][T17037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2552.247421][T17037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2552.415776][T17107] hsr_slave_0: entered promiscuous mode [ 2552.426638][T17107] hsr_slave_1: entered promiscuous mode [ 2552.439285][T17107] debugfs: 'hsr0' already exists in 'hsr' [ 2552.445328][T17107] Cannot create hsr debugfs directory [ 2552.468890][T17037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2552.502723][T17037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2553.007902][T16731] veth0_macvtap: entered promiscuous mode [ 2553.073695][T16731] veth1_macvtap: entered promiscuous mode [ 2553.443071][T16731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2553.583109][T16731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2553.732732][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.819690][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.836443][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.895576][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2553.965472][T17011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2554.333484][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2554.399663][T17011] 8021q: adding VLAN 0 to HW filter on device team0 [ 2554.548619][T16820] veth0_vlan: entered promiscuous mode [ 2554.570872][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2554.578774][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2554.652756][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2554.660509][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2554.870317][T17107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2554.930330][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 2554.952021][T17107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2555.003994][T16820] veth1_vlan: entered promiscuous mode [ 2555.046284][T17107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2555.156259][T17107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2555.206565][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 2555.214151][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2555.348598][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2555.356194][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2555.670400][T16820] veth0_macvtap: entered promiscuous mode [ 2555.934341][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2555.957121][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2555.974781][T16820] veth1_macvtap: entered promiscuous mode [ 2556.350642][T16820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2556.460276][T16820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2556.617614][ T34] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.640988][ T34] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.716188][ T5997] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.737163][ T5997] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2557.050384][T17107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2557.139242][T17011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2557.398476][T17107] 8021q: adding VLAN 0 to HW filter on device team0 [ 2557.485794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 2557.493385][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2557.634230][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 2557.641872][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2557.892827][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2558.696507][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2558.746683][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.029498][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2559.039126][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2559.075983][T17037] veth0_vlan: entered promiscuous mode [ 2559.185718][T17037] veth1_vlan: entered promiscuous mode [ 2559.762588][T17037] veth0_macvtap: entered promiscuous mode [ 2559.969243][T17037] veth1_macvtap: entered promiscuous mode [ 2560.003561][T17011] veth0_vlan: entered promiscuous mode [ 2560.144301][T17011] veth1_vlan: entered promiscuous mode [ 2561.079839][T17107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2561.166760][T17011] veth0_macvtap: entered promiscuous mode [ 2561.201176][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2561.300968][T17011] veth1_macvtap: entered promiscuous mode [ 2561.342570][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2561.455417][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.474540][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.535390][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.682209][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2561.853728][T17011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2562.036996][T17011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2562.303278][ T142] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2562.353302][ T142] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.552750][ T142] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2563.618453][ T142] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2564.260959][T17107] veth0_vlan: entered promiscuous mode [ 2564.562529][T17107] veth1_vlan: entered promiscuous mode [ 2564.850724][T17332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2564.875263][T17332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2564.908759][T17332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2564.939702][T17332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2565.092501][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2565.150145][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2565.439074][T17107] veth0_macvtap: entered promiscuous mode [ 2565.445803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2565.483442][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2565.588588][T17107] veth1_macvtap: entered promiscuous mode [ 2565.908914][T17107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2566.777178][T17107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2570.077808][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2572.434859][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2572.499633][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2572.681531][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2572.969401][T17368] Bluetooth: MGMT ver 1.23 [ 2573.016650][T11959] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2573.241132][T11959] usb 10-1: Using ep0 maxpacket: 8 [ 2573.295629][T11959] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 2573.326911][T11959] usb 10-1: config 179 has no interface number 0 [ 2573.333585][T11959] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2573.435976][T11959] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2573.508259][T11959] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2573.551836][T11959] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2573.589594][T11959] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2573.651914][T11959] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2573.716709][T11959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.785119][T17372] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2574.144114][T14682] usb 10-1: USB disconnect, device number 28 [ 2574.150661][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2574.150854][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2578.023263][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2578.110781][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2578.340481][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2578.505579][T17424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2578.599510][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2578.615916][T17423] xt_cgroup: path and classid specified [ 2578.732318][T17424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2580.016947][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2580.125223][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.164388][ T8885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.260783][ T8885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.665224][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.681827][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2599.108329][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2599.133049][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2599.366228][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2599.419994][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2600.719968][T11959] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2601.131672][T11959] usb 3-1: device descriptor read/64, error -71 [ 2602.093670][T11959] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2602.829016][T11959] usb 3-1: device descriptor read/64, error -71 [ 2603.285088][T11959] usb usb3-port1: attempt power cycle [ 2611.023732][T16910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2611.055725][T16910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2611.818015][T16910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2612.880681][T16910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2612.892151][T16910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2615.418868][T16910] Bluetooth: hci4: command tx timeout [ 2618.362132][T16910] Bluetooth: hci4: command tx timeout [ 2620.540217][T16910] Bluetooth: hci4: command tx timeout [ 2620.629796][T16910] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 2621.582161][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2621.596289][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2622.751829][ T8635] Bluetooth: hci4: command tx timeout [ 2622.846559][ T8635] Bluetooth: hci3: command 0x0406 tx timeout [ 2623.099255][T12447] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2623.132382][T12447] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2623.142112][T12447] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2623.164977][T12447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2623.178939][T12447] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2624.126508][T17517] chnl_net:caif_netlink_parms(): no params data found [ 2625.400302][T16910] Bluetooth: hci6: command tx timeout [ 2626.958312][T17560] chnl_net:caif_netlink_parms(): no params data found [ 2627.597552][T17592] loop2: detected capacity change from 0 to 128 [ 2627.626597][T16910] Bluetooth: hci6: command tx timeout [ 2628.678083][ T24] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2628.806355][T17517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2628.845039][T17517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2628.870152][T17517] bridge_slave_0: entered allmulticast mode [ 2628.881167][ T24] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2628.897282][T17517] bridge_slave_0: entered promiscuous mode [ 2628.920929][ T24] usb 10-1: config 0 has no interface number 0 [ 2628.947279][ T24] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2628.986566][T17517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2628.989927][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2629.024398][T17517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2629.071061][T17517] bridge_slave_1: entered allmulticast mode [ 2629.076880][ T24] usb 10-1: config 0 descriptor?? [ 2629.145245][T17517] bridge_slave_1: entered promiscuous mode [ 2629.391358][ T24] usb 10-1: string descriptor 0 read error: -71 [ 2629.444436][ T24] cp210x 10-1:0.208: cp210x converter detected [ 2629.522419][ T24] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2629.578713][ T24] cp210x 10-1:0.208: querying part number failed [ 2629.617438][ T24] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2629.706833][ T24] usb 10-1: USB disconnect, device number 29 [ 2629.795140][T17517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2629.815759][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2629.845082][T16910] Bluetooth: hci6: command tx timeout [ 2629.868589][ T24] cp210x 10-1:0.208: device disconnected [ 2629.903942][T17517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2630.615165][T17517] team0: Port device team_slave_0 added [ 2630.850646][T17517] team0: Port device team_slave_1 added [ 2631.035835][T17560] bridge0: port 1(bridge_slave_0) entered blocking state [ 2631.066433][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 2631.089331][T17560] bridge_slave_0: entered allmulticast mode [ 2631.126876][T17560] bridge_slave_0: entered promiscuous mode [ 2631.552165][ T9843] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2631.615577][T17560] bridge0: port 2(bridge_slave_1) entered blocking state [ 2631.657527][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 2631.702600][T17560] bridge_slave_1: entered allmulticast mode [ 2631.739521][T17560] bridge_slave_1: entered promiscuous mode [ 2631.783260][T17517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2631.800430][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2631.939696][T17517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2632.011944][T17517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2632.030787][T17517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2632.082995][T16910] Bluetooth: hci6: command tx timeout [ 2632.146748][T17517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2632.215806][ T9843] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2632.612621][T17626] bond1 (unregistering): Released all slaves [ 2632.863587][ T9843] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.002353][T17560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2633.082365][T17560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2633.221137][ T9843] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2633.628423][T12447] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2634.721740][T12447] Bluetooth: hci5: command 0x0406 tx timeout [ 2635.397109][T17517] hsr_slave_0: entered promiscuous mode [ 2635.427089][T17517] hsr_slave_1: entered promiscuous mode [ 2635.448003][T17517] debugfs: 'hsr0' already exists in 'hsr' [ 2635.454495][T17517] Cannot create hsr debugfs directory [ 2635.484321][T17560] team0: Port device team_slave_0 added [ 2635.613872][T17560] team0: Port device team_slave_1 added [ 2635.841298][T17560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2635.848519][T17560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2635.890518][T17560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2635.975711][T17560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2635.983108][T17560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2636.029137][T17560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2637.627725][T12447] Bluetooth: hci5: command 0x0406 tx timeout [ 2637.850738][T17658] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2638.939056][T17398] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2639.180092][T17398] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2639.185682][T17560] hsr_slave_0: entered promiscuous mode [ 2639.234380][T17398] usb 10-1: config 0 has no interface number 0 [ 2639.286955][T17398] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2639.350557][T17398] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.405472][T17398] usb 10-1: config 0 descriptor?? [ 2639.710358][T17560] hsr_slave_1: entered promiscuous mode [ 2639.762332][T17398] usb 10-1: string descriptor 0 read error: -71 [ 2639.796548][T17560] debugfs: 'hsr0' already exists in 'hsr' [ 2639.802555][T17560] Cannot create hsr debugfs directory [ 2639.818198][T17398] cp210x 10-1:0.208: cp210x converter detected [ 2639.864598][T17398] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2639.882628][ T9843] bridge_slave_1: left allmulticast mode [ 2639.911350][T17398] cp210x 10-1:0.208: querying part number failed [ 2639.936879][ T9843] bridge_slave_1: left promiscuous mode [ 2639.945601][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2639.978829][T17398] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2640.021484][T17398] usb 10-1: USB disconnect, device number 30 [ 2640.046621][ T9843] bridge_slave_0: left allmulticast mode [ 2640.079082][ T9843] bridge_slave_0: left promiscuous mode [ 2640.110086][T17398] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2640.121815][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2640.149123][T17398] cp210x 10-1:0.208: device disconnected [ 2646.345256][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2646.404268][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2646.438196][ T9843] bond0 (unregistering): Released all slaves [ 2647.600937][T16910] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2650.000357][ T9843] hsr_slave_0: left promiscuous mode [ 2650.087206][ T9843] hsr_slave_1: left promiscuous mode [ 2650.707068][ T9843] veth1_macvtap: left promiscuous mode [ 2650.712877][ T9843] veth0_macvtap: left promiscuous mode [ 2650.796655][ T9843] veth1_vlan: left promiscuous mode [ 2650.832520][ T9843] veth0_vlan: left promiscuous mode [ 2653.421751][T17703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2656.168098][T17716] fuse: Bad value for 'fd' [ 2656.569986][T17721] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1499'. [ 2656.717227][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 2656.752428][T12000] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2656.795657][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 2656.952175][T12000] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2656.970946][T12000] usb 3-1: config 0 has no interface number 0 [ 2656.993000][T12000] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2657.023906][T12000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2657.093127][T12000] usb 3-1: config 0 descriptor?? [ 2657.388512][T12000] usb 3-1: string descriptor 0 read error: -71 [ 2657.487612][T12000] cp210x 3-1:0.208: cp210x converter detected [ 2657.514963][T12000] cp210x 3-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2657.537336][T12000] cp210x 3-1:0.208: querying part number failed [ 2657.613674][T12000] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2657.670825][T12000] usb 3-1: USB disconnect, device number 35 [ 2657.739194][T12000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2657.795071][T12000] cp210x 3-1:0.208: device disconnected [ 2658.394117][T17517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2658.597309][T17517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2659.293106][T16910] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2662.726334][T17517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2663.141278][ T9843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2663.286231][T17517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2664.333100][T17757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2664.477523][ T9843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2666.881096][ T9843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2667.253792][T17767] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1508'. [ 2667.322672][ T9843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2667.546011][T12447] Bluetooth: hci0: command 0x0406 tx timeout [ 2668.403410][T17560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2668.422374][T17398] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2668.530989][T17560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2668.617083][ T9843] bridge_slave_1: left allmulticast mode [ 2668.622939][ T9843] bridge_slave_1: left promiscuous mode [ 2668.655832][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2668.672926][T17398] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2668.718628][T17398] usb 3-1: config 0 has no interface number 0 [ 2668.746074][ T9843] bridge_slave_0: left allmulticast mode [ 2668.749445][T17398] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2668.752294][ T9843] bridge_slave_0: left promiscuous mode [ 2668.795595][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2668.796343][T17398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2668.857401][T17398] usb 3-1: config 0 descriptor?? [ 2669.126273][T17398] usb 3-1: string descriptor 0 read error: -71 [ 2669.167622][T17398] cp210x 3-1:0.208: cp210x converter detected [ 2669.233900][T17398] cp210x 3-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2669.266195][T17398] cp210x 3-1:0.208: querying part number failed [ 2669.317846][T17398] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2669.373120][T17398] usb 3-1: USB disconnect, device number 36 [ 2669.436174][T17398] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2669.452453][T17398] cp210x 3-1:0.208: device disconnected [ 2669.636503][T12447] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2669.649586][T12447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2669.661536][T12447] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2669.678340][T12447] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2669.689888][T12447] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2670.119748][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2670.144266][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2670.204926][ T9843] bond0 (unregistering): Released all slaves [ 2670.285884][T17560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2670.455364][T17560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2670.763796][T12447] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2671.905764][T12447] Bluetooth: hci1: command tx timeout [ 2673.920642][T17807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2674.129717][T12447] Bluetooth: hci1: command tx timeout [ 2674.201403][ T9843] hsr_slave_0: left promiscuous mode [ 2674.282252][ T9843] hsr_slave_1: left promiscuous mode [ 2674.302581][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2674.346616][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2674.381759][ T9843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2674.430162][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2674.537221][ T9843] veth1_macvtap: left promiscuous mode [ 2674.562665][ T9843] veth0_macvtap: left promiscuous mode [ 2674.572114][ T9843] veth1_vlan: left promiscuous mode [ 2674.604053][ T9843] veth0_vlan: left promiscuous mode [ 2676.351340][T16910] Bluetooth: hci1: command tx timeout [ 2678.533359][T16910] Bluetooth: hci3: command 0x0406 tx timeout [ 2678.665082][T16910] Bluetooth: hci1: command tx timeout [ 2681.144541][T17148] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2681.330998][T17148] usb 3-1: Using ep0 maxpacket: 8 [ 2681.414635][T17148] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 2681.469085][T17148] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2681.483468][T17148] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2681.484137][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 2681.496300][T17148] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2681.511955][ T24] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2681.558043][T17148] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2681.705341][T17148] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2681.813173][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 2681.828439][T17148] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2681.850050][T17148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2682.121185][T17148] usb 3-1: usb_control_msg returned -32 [ 2682.191961][T17148] usbtmc 3-1:16.0: can't read capabilities [ 2682.315018][T17148] usb 3-1: USB disconnect, device number 37 [ 2684.139079][ T24] usb 10-1: device descriptor read/all, error -71 [ 2684.334128][T12447] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 2687.241331][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2687.255198][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2687.315964][T16910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2687.330329][T16910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2687.350726][T16910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2687.364486][T16910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2687.383915][T16910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2687.650495][T17855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2687.756021][T17794] chnl_net:caif_netlink_parms(): no params data found [ 2689.687323][T12447] Bluetooth: hci2: command tx timeout [ 2691.845524][T17148] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2691.914251][T12447] Bluetooth: hci2: command tx timeout [ 2692.456802][ T9843] bridge_slave_1: left allmulticast mode [ 2692.462939][ T9843] bridge_slave_1: left promiscuous mode [ 2692.488580][T17148] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2692.499916][T17148] usb 3-1: config 0 has no interface number 0 [ 2692.506255][T17148] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2692.517050][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2692.533382][ T9843] bridge_slave_0: left allmulticast mode [ 2692.544769][T17148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2692.554766][ T9843] bridge_slave_0: left promiscuous mode [ 2692.571334][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2692.600813][T17148] usb 3-1: config 0 descriptor?? [ 2692.889865][T17148] usb 3-1: string descriptor 0 read error: -71 [ 2692.943420][T17148] cp210x 3-1:0.208: cp210x converter detected [ 2693.005972][T17148] cp210x 3-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2693.040656][T17148] cp210x 3-1:0.208: querying part number failed [ 2693.133107][T17148] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2693.263551][T17148] usb 3-1: USB disconnect, device number 38 [ 2693.329397][T17148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2693.398276][T17148] cp210x 3-1:0.208: device disconnected [ 2693.682422][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2693.733847][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2693.816570][ T9843] bond0 (unregistering): Released all slaves [ 2694.132181][T12447] Bluetooth: hci2: command tx timeout [ 2694.185659][ T9843] hsr_slave_0: left promiscuous mode [ 2694.238911][ T9843] hsr_slave_1: left promiscuous mode [ 2694.246620][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2694.293846][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2695.118424][T12447] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2696.355310][T12447] Bluetooth: hci2: command tx timeout [ 2697.910260][T17894] xt_cgroup: path and classid specified [ 2700.957590][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 2701.092912][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 2701.213370][T17898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2701.537615][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2701.760272][ T24] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2701.794424][ T24] usb 3-1: config 0 has no interface number 0 [ 2701.815833][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2701.857347][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.931154][ T24] usb 3-1: config 0 descriptor?? [ 2701.972942][T17851] chnl_net:caif_netlink_parms(): no params data found [ 2702.701702][ T24] usb 3-1: string descriptor 0 read error: -71 [ 2703.758823][ T24] cp210x 3-1:0.208: cp210x converter detected [ 2704.170390][ T24] cp210x 3-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2704.190751][ T24] cp210x 3-1:0.208: querying part number failed [ 2704.211580][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2704.252907][ T24] usb 3-1: USB disconnect, device number 39 [ 2704.302179][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2704.329034][ T24] cp210x 3-1:0.208: device disconnected [ 2704.487018][ T7535] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2704.617319][T17794] bridge0: port 1(bridge_slave_0) entered blocking state [ 2704.631691][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 2704.641495][T17794] bridge_slave_0: entered allmulticast mode [ 2705.201299][ T7535] usb 10-1: Using ep0 maxpacket: 8 [ 2705.220157][ T7535] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 2705.228983][T17794] bridge_slave_0: entered promiscuous mode [ 2705.240885][ T7535] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2705.256378][ T7535] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2705.267073][ T7535] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2706.265501][ T7535] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2706.279252][ T7535] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2706.304674][ T7535] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2706.839021][T17794] bridge0: port 2(bridge_slave_1) entered blocking state [ 2706.846766][T17794] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.207511][T12447] Bluetooth: hci0: unexpected event 0x08 length: 9 > 4 [ 2707.261892][T17794] bridge_slave_1: entered allmulticast mode [ 2707.879737][T17794] bridge_slave_1: entered promiscuous mode [ 2708.201135][ T7535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2709.960213][ T7535] usb 10-1: can't set config #16, error -71 [ 2709.971907][ T7535] usb 10-1: USB disconnect, device number 33 [ 2710.030323][T17930] xt_cgroup: path and classid specified [ 2710.395463][T12447] Bluetooth: hci0: command 0x0406 tx timeout [ 2710.397830][T17794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2710.442337][T17794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2710.804543][T17938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2711.487021][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2711.500365][T17851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2711.534687][T17851] bridge_slave_0: entered allmulticast mode [ 2711.641192][T17943] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1557'. [ 2712.893756][T17851] bridge_slave_0: entered promiscuous mode [ 2713.084372][T17794] team0: Port device team_slave_0 added [ 2713.186164][T17794] team0: Port device team_slave_1 added [ 2713.199580][T17851] bridge0: port 2(bridge_slave_1) entered blocking state [ 2713.224211][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2713.236055][T17851] bridge_slave_1: entered allmulticast mode [ 2713.247522][T17851] bridge_slave_1: entered promiscuous mode [ 2713.435353][T17148] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2713.547934][T17794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2713.561111][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2713.590187][T17794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2713.607091][ T9843] bridge_slave_1: left allmulticast mode [ 2713.618864][ T9843] bridge_slave_1: left promiscuous mode [ 2713.631497][T17148] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2713.641102][T17148] usb 3-1: config 0 has no interface number 0 [ 2713.648883][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 2713.657854][T17148] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2713.668562][T17148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2713.681151][ T9843] bridge_slave_0: left allmulticast mode [ 2713.687240][ T9843] bridge_slave_0: left promiscuous mode [ 2713.701716][T17148] usb 3-1: config 0 descriptor?? [ 2713.720637][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2713.988513][T17148] usb 3-1: string descriptor 0 read error: -71 [ 2714.017225][T17148] cp210x 3-1:0.208: cp210x converter detected [ 2714.027293][T17148] cp210x 3-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2714.040917][T17148] cp210x 3-1:0.208: querying part number failed [ 2714.078969][T17148] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2714.150655][T17148] usb 3-1: USB disconnect, device number 40 [ 2714.206768][T17148] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2714.234469][T17148] cp210x 3-1:0.208: device disconnected [ 2714.266872][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2714.306455][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2714.362779][ T9843] bond0 (unregistering): Released all slaves [ 2714.449808][T17794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2714.495796][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2714.534737][T17794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2714.561339][T17851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2714.646245][T17851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2714.874322][ T9843] hsr_slave_0: left promiscuous mode [ 2714.955287][ T9843] hsr_slave_1: left promiscuous mode [ 2714.989780][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2715.060458][ T9843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2717.204399][T12447] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 2717.613214][ T9843] team0 (unregistering): Port device team_slave_1 removed [ 2718.181691][ T9843] team0 (unregistering): Port device team_slave_0 removed [ 2719.814508][T17851] team0: Port device team_slave_0 added [ 2719.933559][T17851] team0: Port device team_slave_1 added [ 2720.139808][T17794] hsr_slave_0: entered promiscuous mode [ 2720.186391][T17794] hsr_slave_1: entered promiscuous mode [ 2720.230074][T17794] debugfs: 'hsr0' already exists in 'hsr' [ 2720.235995][T17794] Cannot create hsr debugfs directory [ 2720.439584][T17851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2720.457541][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2720.549074][T17851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2720.704556][T17851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2720.734840][T17975] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2720.772765][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2720.911523][T17977] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1566'. [ 2721.816453][T17851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2722.601052][T17851] hsr_slave_0: entered promiscuous mode [ 2722.677548][T17851] hsr_slave_1: entered promiscuous mode [ 2722.699155][T17851] debugfs: 'hsr0' already exists in 'hsr' [ 2722.705256][T17851] Cannot create hsr debugfs directory [ 2723.155602][ T7535] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2723.178886][T17990] hfsplus: unable to find HFS+ superblock [ 2723.381838][ T7535] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2723.401196][ T7535] usb 10-1: config 0 has no interface number 0 [ 2723.408333][ T7535] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2723.424689][ T7535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2723.443552][ T7535] usb 10-1: config 0 descriptor?? [ 2723.444022][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2723.625737][ T24] usb 3-1: device descriptor read/64, error -71 [ 2723.704162][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 2723.715670][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 2723.735412][ T7535] usb 10-1: string descriptor 0 read error: -32 [ 2723.763458][ T7535] cp210x 10-1:0.208: cp210x converter detected [ 2723.780527][ T7535] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2723.825363][ T7535] cp210x 10-1:0.208: querying part number failed [ 2723.866492][ T7535] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2723.893306][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2723.922464][ T7535] usb 10-1: USB disconnect, device number 34 [ 2724.087762][ T24] usb 3-1: device descriptor read/64, error -71 [ 2724.236182][ T24] usb usb3-port1: attempt power cycle [ 2724.348323][T17794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2724.401943][T17794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2724.467156][T17794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2724.552076][T17794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2724.615604][ T7535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2724.626698][ T7535] cp210x 10-1:0.208: device disconnected [ 2724.641103][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2724.931909][ T24] usb 3-1: device descriptor read/8, error -71 [ 2725.228884][ T24] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2725.317468][ T24] usb 3-1: device descriptor read/8, error -71 [ 2725.448562][ T24] usb usb3-port1: unable to enumerate USB device [ 2726.681841][T12447] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2728.967412][T17851] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2729.056124][T17851] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2729.144477][T17851] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2729.370735][T17851] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2730.188245][T17794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2730.440280][T18016] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1577'. [ 2731.322327][T17794] 8021q: adding VLAN 0 to HW filter on device team0 [ 2731.407364][T18018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2731.421651][T16849] bridge0: port 1(bridge_slave_0) entered blocking state [ 2731.429519][T16849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2732.061433][T16849] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.068903][T16849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2732.484980][T17851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2732.743903][T17851] 8021q: adding VLAN 0 to HW filter on device team0 [ 2732.831929][T16849] bridge0: port 1(bridge_slave_0) entered blocking state [ 2732.839863][T16849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2732.917795][T16849] bridge0: port 2(bridge_slave_1) entered blocking state [ 2732.925718][T16849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2733.050939][ T7535] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2733.257008][ T7535] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2733.279473][ T7535] usb 10-1: config 0 has no interface number 0 [ 2733.317018][ T7535] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2733.361068][ T7535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2733.414946][ T7535] usb 10-1: config 0 descriptor?? [ 2733.766901][ T7535] usb 10-1: string descriptor 0 read error: -71 [ 2733.805971][ T7535] cp210x 10-1:0.208: cp210x converter detected [ 2733.959286][ T7535] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2733.967533][ T7535] cp210x 10-1:0.208: querying part number failed [ 2734.154446][ T7535] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2734.387889][ T7535] usb 10-1: USB disconnect, device number 35 [ 2734.585989][ T7535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2734.649558][ T7535] cp210x 10-1:0.208: device disconnected [ 2734.711360][T18040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2735.246898][T18041] hfsplus: unable to find HFS+ superblock [ 2735.530443][T17148] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2735.775902][T17148] usb 3-1: device descriptor read/64, error -71 [ 2736.075231][T17148] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2736.303484][T17148] usb 3-1: device descriptor read/64, error -71 [ 2737.115217][T17148] usb usb3-port1: attempt power cycle [ 2737.169620][T12447] Bluetooth: hci5: unexpected event 0x08 length: 9 > 4 [ 2737.690824][T17148] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2740.052328][T16910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2740.085128][T16910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2740.099883][T16910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2740.123294][T16910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2740.163301][T16910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2740.268952][T17148] usb 3-1: device descriptor read/8, error -71 [ 2740.752142][T17851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2741.440514][T18067] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1588'. [ 2742.433260][T12447] Bluetooth: hci4: command tx timeout [ 2744.084326][T18074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2744.656812][T12447] Bluetooth: hci4: command tx timeout [ 2745.936478][T18054] chnl_net:caif_netlink_parms(): no params data found [ 2746.409657][ T9860] bridge_slave_1: left allmulticast mode [ 2746.415526][ T9860] bridge_slave_1: left promiscuous mode [ 2746.487743][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2746.595348][ T9860] bridge_slave_0: left allmulticast mode [ 2746.631025][ T9860] bridge_slave_0: left promiscuous mode [ 2746.656655][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2746.771717][T12000] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2746.878558][T12447] Bluetooth: hci4: command tx timeout [ 2746.961478][T12000] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2746.976422][T12000] usb 10-1: config 0 has no interface number 0 [ 2746.996867][T12000] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2747.017644][T12000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.045229][T12000] usb 10-1: config 0 descriptor?? [ 2747.497636][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2747.628640][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2747.769807][ T9860] bond0 (unregistering): Released all slaves [ 2747.940548][T12000] usb 10-1: string descriptor 0 read error: -71 [ 2747.971224][T12000] cp210x 10-1:0.208: cp210x converter detected [ 2748.071868][T18106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2748.595505][T18109] hfsplus: unable to find HFS+ superblock [ 2748.872926][T11959] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2749.017305][T12000] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2749.025280][T12000] cp210x 10-1:0.208: querying part number failed [ 2749.038995][T12000] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2749.055642][T12000] usb 10-1: USB disconnect, device number 36 [ 2749.070422][T11959] usb 3-1: device descriptor read/64, error -71 [ 2749.123291][T12447] Bluetooth: hci4: command tx timeout [ 2749.365474][T11959] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2749.524047][ T9860] hsr_slave_0: left promiscuous mode [ 2749.614290][T11959] usb 3-1: device descriptor read/64, error -71 [ 2749.718562][ T9860] hsr_slave_1: left promiscuous mode [ 2749.765201][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2749.829400][T11959] usb usb3-port1: attempt power cycle [ 2749.900423][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2749.991003][T12000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2750.035104][T12000] cp210x 10-1:0.208: device disconnected [ 2750.251847][T16910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2750.274279][T16910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2750.284166][T16910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2750.287374][T11959] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2750.327601][T16910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2750.339676][T16910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2750.827859][T11959] usb 3-1: device descriptor read/8, error -71 [ 2751.015875][T18121] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1597'. [ 2752.354939][T11959] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2752.644541][T11959] usb 3-1: device descriptor read/8, error -71 [ 2752.691824][T16910] Bluetooth: hci1: command tx timeout [ 2752.776352][T11959] usb usb3-port1: unable to enumerate USB device [ 2752.892155][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2752.899757][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2753.487785][T18129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2754.925273][T16910] Bluetooth: hci1: command tx timeout [ 2756.391213][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 2756.557607][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 2757.156673][T16910] Bluetooth: hci1: command tx timeout [ 2757.896606][T18054] bridge0: port 1(bridge_slave_0) entered blocking state [ 2757.904183][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 2757.926882][T11959] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2758.014090][T18054] bridge_slave_0: entered allmulticast mode [ 2758.080588][T18054] bridge_slave_0: entered promiscuous mode [ 2758.198384][T11959] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 2758.257651][T11959] usb 3-1: config 0 has no interface number 0 [ 2758.324844][T18054] bridge0: port 2(bridge_slave_1) entered blocking state [ 2758.333435][T11959] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2758.386067][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 2758.415587][T18054] bridge_slave_1: entered allmulticast mode [ 2759.419408][T16910] Bluetooth: hci1: command tx timeout [ 2759.456026][T18171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2759.467131][T18054] bridge_slave_1: entered promiscuous mode [ 2760.024231][T18175] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1606'. [ 2760.086930][T11959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2760.128576][T11959] usb 3-1: config 0 descriptor?? [ 2761.655730][T11959] usb 3-1: can't set config #0, error -71 [ 2761.704118][T11959] usb 3-1: USB disconnect, device number 53 [ 2761.791768][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1608'. [ 2762.570103][T18195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2762.728911][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2763.501787][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2764.728395][T18209] hfsplus: unable to find HFS+ superblock [ 2765.414431][T11959] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2765.449890][T18214] 9pnet_virtio: no channels available for device syz [ 2765.471454][T18054] team0: Port device team_slave_0 added [ 2765.589867][T11959] usb 10-1: device descriptor read/64, error -71 [ 2765.670165][T18054] team0: Port device team_slave_1 added [ 2765.884872][T11959] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2765.942666][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2765.949777][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2766.081588][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2766.135230][T11959] usb 10-1: device descriptor read/64, error -71 [ 2766.253297][T11959] usb usb10-port1: attempt power cycle [ 2766.584715][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2766.598425][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2766.695539][T11959] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2766.712471][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2768.519618][T18054] hsr_slave_0: entered promiscuous mode [ 2768.562362][T18054] hsr_slave_1: entered promiscuous mode [ 2768.593352][T18054] debugfs: 'hsr0' already exists in 'hsr' [ 2768.599311][T18054] Cannot create hsr debugfs directory [ 2769.562571][T18236] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2771.907541][ T9860] bridge_slave_1: left allmulticast mode [ 2771.913487][ T9860] bridge_slave_1: left promiscuous mode [ 2771.949490][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.992788][ T9860] bridge_slave_0: left allmulticast mode [ 2771.998813][ T9860] bridge_slave_0: left promiscuous mode [ 2772.027928][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 2772.098680][T11959] usb 10-1: device descriptor read/8, error -110 [ 2772.385963][T11959] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2772.430136][T11959] usb 10-1: device descriptor read/8, error -32 [ 2772.563169][T11959] usb usb10-port1: unable to enumerate USB device [ 2773.063650][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2773.144415][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2773.190298][ T9860] bond0 (unregistering): Released all slaves [ 2773.400234][T18115] chnl_net:caif_netlink_parms(): no params data found [ 2773.583362][ T9860] hsr_slave_0: left promiscuous mode [ 2773.592357][ T9860] hsr_slave_1: left promiscuous mode [ 2773.613884][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2773.639363][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2774.501448][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 2774.541104][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 2776.995728][T18255] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2781.543253][T18115] bridge0: port 1(bridge_slave_0) entered blocking state [ 2781.604962][T18115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2781.632376][T18115] bridge_slave_0: entered allmulticast mode [ 2781.691137][T18115] bridge_slave_0: entered promiscuous mode [ 2781.890599][T18115] bridge0: port 2(bridge_slave_1) entered blocking state [ 2781.958502][T18115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2782.031533][T18115] bridge_slave_1: entered allmulticast mode [ 2782.112932][T18115] bridge_slave_1: entered promiscuous mode [ 2782.803939][T18280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2783.985661][T18293] hfsplus: unable to find HFS+ superblock [ 2784.131100][T12447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2784.141473][T12447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2784.152204][T12447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2784.166867][T12447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2784.180526][T12447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2784.357870][T18115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2784.500437][T18115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2784.896438][T18115] team0: Port device team_slave_0 added [ 2784.938998][T18115] team0: Port device team_slave_1 added [ 2784.974607][ T24] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2785.194561][ T24] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2785.204878][ T24] usb 10-1: config 0 has no interface number 0 [ 2785.242011][ T24] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2785.258963][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2785.307569][ T24] usb 10-1: config 0 descriptor?? [ 2785.487669][T18115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2785.496991][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2785.575557][ T24] usb 10-1: string descriptor 0 read error: -71 [ 2785.594357][T18115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2785.621541][ T24] cp210x 10-1:0.208: cp210x converter detected [ 2785.666400][ T24] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2785.676112][ T24] cp210x 10-1:0.208: querying part number failed [ 2785.715484][ T24] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2785.736723][T18054] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2785.772758][ T24] usb 10-1: USB disconnect, device number 41 [ 2785.796010][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2785.800085][T18054] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2785.834235][ T24] cp210x 10-1:0.208: device disconnected [ 2785.861472][T18115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2785.868945][T18115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2785.946927][T18115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2785.984925][ T3422] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2786.054259][T18054] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2786.206262][ T3422] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2786.236031][T18054] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2786.376679][T16910] Bluetooth: hci2: command tx timeout [ 2786.582005][ T3422] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2786.787678][T18115] hsr_slave_0: entered promiscuous mode [ 2786.868869][T18115] hsr_slave_1: entered promiscuous mode [ 2786.997713][T18115] debugfs: 'hsr0' already exists in 'hsr' [ 2787.021090][T18115] Cannot create hsr debugfs directory [ 2787.557300][ T3422] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2788.618287][T12447] Bluetooth: hci2: command tx timeout [ 2789.914087][T18283] chnl_net:caif_netlink_parms(): no params data found [ 2790.041839][ T3422] bridge_slave_1: left allmulticast mode [ 2790.047692][ T3422] bridge_slave_1: left promiscuous mode [ 2790.072599][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2790.098227][ T3422] bridge_slave_0: left allmulticast mode [ 2790.115182][ T3422] bridge_slave_0: left promiscuous mode [ 2790.121861][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2790.819706][T12447] Bluetooth: hci2: command tx timeout [ 2791.005447][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2791.049337][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2791.080384][ T3422] bond0 (unregistering): Released all slaves [ 2791.699185][T18336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1631'. [ 2792.093483][ T3422] hsr_slave_0: left promiscuous mode [ 2792.129988][ T3422] hsr_slave_1: left promiscuous mode [ 2792.137990][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2792.165155][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2792.186664][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2792.206431][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2792.259926][ T3422] veth1_macvtap: left promiscuous mode [ 2792.270499][ T3422] veth0_macvtap: left promiscuous mode [ 2792.292427][ T3422] veth1_vlan: left promiscuous mode [ 2792.303304][ T3422] veth0_vlan: left promiscuous mode [ 2793.043747][T12447] Bluetooth: hci2: command tx timeout [ 2793.470433][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 2793.499757][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 2794.196768][T18283] bridge0: port 1(bridge_slave_0) entered blocking state [ 2794.204320][T18283] bridge0: port 1(bridge_slave_0) entered disabled state [ 2794.257670][T18283] bridge_slave_0: entered allmulticast mode [ 2794.279940][T18283] bridge_slave_0: entered promiscuous mode [ 2794.408066][T18283] bridge0: port 2(bridge_slave_1) entered blocking state [ 2794.446485][T18283] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.465341][T18283] bridge_slave_1: entered allmulticast mode [ 2794.485729][T18283] bridge_slave_1: entered promiscuous mode [ 2794.732137][T18054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2794.955890][T18283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2795.027079][T18283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2795.202286][T18362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2795.892226][T18283] team0: Port device team_slave_0 added [ 2795.955652][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 2796.010151][T18283] team0: Port device team_slave_1 added [ 2796.250100][T18283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2796.285913][T18283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2796.358889][T18283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2796.418213][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2796.425878][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2796.509259][T18283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2796.537027][T18283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2796.622306][T18283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2796.858382][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 2796.866385][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2796.940666][T18115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2797.023171][T18115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2797.169170][T18115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2797.288731][T18115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2797.555047][T18283] hsr_slave_0: entered promiscuous mode [ 2797.581013][T18283] hsr_slave_1: entered promiscuous mode [ 2797.594685][ T7535] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2797.618582][T18283] debugfs: 'hsr0' already exists in 'hsr' [ 2797.624649][T18283] Cannot create hsr debugfs directory [ 2797.812436][ T7535] usb 10-1: config 0 has an invalid interface number: 208 but max is 0 [ 2797.836954][ T7535] usb 10-1: config 0 has no interface number 0 [ 2797.867358][ T7535] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2797.890025][ T7535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2797.941829][ T7535] usb 10-1: config 0 descriptor?? [ 2798.204565][ T7535] usb 10-1: string descriptor 0 read error: -71 [ 2798.240022][ T7535] cp210x 10-1:0.208: cp210x converter detected [ 2798.278866][ T7535] cp210x 10-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2798.314262][ T7535] cp210x 10-1:0.208: querying part number failed [ 2798.365256][ T7535] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2798.435635][ T7535] usb 10-1: USB disconnect, device number 42 [ 2798.476637][ T7535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2798.523698][ T7535] cp210x 10-1:0.208: device disconnected [ 2800.045664][T16910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2800.127967][T16910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2800.164179][T16910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2800.346912][T16910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2800.379157][T16910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2802.722572][T12447] Bluetooth: hci3: command tx timeout [ 2803.474349][T18115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2803.990265][T18396] hfsplus: unable to find HFS+ superblock [ 2804.897890][T18115] 8021q: adding VLAN 0 to HW filter on device team0 [ 2804.937022][T12447] Bluetooth: hci3: command tx timeout [ 2805.218807][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2805.226344][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2805.300708][T18283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2805.484713][T18283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2805.621493][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 2805.629135][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2805.716541][T18283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2805.775371][T18283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2807.148361][T12447] Bluetooth: hci3: command tx timeout [ 2807.167772][ T56] bridge_slave_1: left allmulticast mode [ 2807.201599][ T56] bridge_slave_1: left promiscuous mode [ 2807.207820][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 2807.260539][ T56] bridge_slave_0: left allmulticast mode [ 2807.270733][ T56] bridge_slave_0: left promiscuous mode [ 2807.288489][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 2807.952967][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2807.999472][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2808.029198][ T56] bond0 (unregistering): Released all slaves [ 2808.124939][T18389] chnl_net:caif_netlink_parms(): no params data found [ 2808.440010][ T56] hsr_slave_0: left promiscuous mode [ 2808.466462][ T56] hsr_slave_1: left promiscuous mode [ 2808.496811][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2808.528651][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2809.372416][T12447] Bluetooth: hci3: command tx timeout [ 2809.535662][ T56] team0 (unregistering): Port device team_slave_1 removed [ 2809.575868][ T56] team0 (unregistering): Port device team_slave_0 removed [ 2810.751421][T17398] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2810.883071][T18283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2810.946996][T17398] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 2810.967391][T17398] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2811.018679][T17398] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2811.052325][T17398] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2811.084723][T17398] usb 10-1: Manufacturer: syz [ 2811.110910][T17398] usb 10-1: config 0 descriptor?? [ 2811.142479][T18283] 8021q: adding VLAN 0 to HW filter on device team0 [ 2811.267134][T18115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2811.308061][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.315863][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2811.347684][T17398] rc_core: IR keymap rc-hauppauge not found [ 2811.353766][T17398] Registered IR keymap rc-empty [ 2811.403206][T17398] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 2811.453692][T17398] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input11 [ 2811.545012][T17398] usb 10-1: USB disconnect, device number 43 [ 2811.676575][T18389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.695827][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2811.720870][T18389] bridge_slave_0: entered allmulticast mode [ 2811.740323][T18389] bridge_slave_0: entered promiscuous mode [ 2811.815625][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.823186][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2811.867596][T18389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.877886][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2811.886746][T18389] bridge_slave_1: entered allmulticast mode [ 2811.901083][T18389] bridge_slave_1: entered promiscuous mode [ 2812.182046][T18389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2812.273976][T18389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2812.515825][T18389] team0: Port device team_slave_0 added [ 2812.536923][T18389] team0: Port device team_slave_1 added [ 2812.613646][T18389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2812.621733][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2812.653291][T18389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2812.671663][T18389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2812.680247][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2812.729488][T18389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2812.857589][T18463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2813.970925][T18389] hsr_slave_0: entered promiscuous mode [ 2814.094916][T18389] hsr_slave_1: entered promiscuous mode [ 2814.159081][T18389] debugfs: 'hsr0' already exists in 'hsr' [ 2814.210759][T18389] Cannot create hsr debugfs directory [ 2815.466479][T16910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2815.483774][T16910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2815.493710][T16910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2815.511642][T16910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2815.531699][T16910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2816.343822][T18495] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2817.759386][T12447] Bluetooth: hci4: command tx timeout [ 2817.838804][T18283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2818.083318][T18483] chnl_net:caif_netlink_parms(): no params data found [ 2818.124632][T18389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2818.270925][T18389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2818.326775][T18389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2818.442659][T18389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2818.563377][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2818.570083][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2819.358621][T17556] bridge_slave_1: left allmulticast mode [ 2819.378636][T17556] bridge_slave_1: left promiscuous mode [ 2819.406344][T17556] bridge0: port 2(bridge_slave_1) entered disabled state [ 2819.456192][T17556] bridge_slave_0: left allmulticast mode [ 2819.475936][T17556] bridge_slave_0: left promiscuous mode [ 2819.529542][T17556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2819.972964][T12447] Bluetooth: hci4: command tx timeout [ 2820.358250][T17556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2820.432142][T17556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2820.475814][T17556] bond0 (unregistering): Released all slaves [ 2820.885379][T17556] hsr_slave_0: left promiscuous mode [ 2820.912333][T17556] hsr_slave_1: left promiscuous mode [ 2820.920707][T17556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2820.976204][T17556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2822.104768][T17556] team0 (unregistering): Port device team_slave_1 removed [ 2822.190645][T17556] team0 (unregistering): Port device team_slave_0 removed [ 2822.194081][T12447] Bluetooth: hci4: command tx timeout [ 2822.956472][T18283] veth0_vlan: entered promiscuous mode [ 2823.229177][T18283] veth1_vlan: entered promiscuous mode [ 2823.748344][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 2823.775858][T18483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2823.783492][T18483] bridge_slave_0: entered allmulticast mode [ 2823.853399][T18483] bridge_slave_0: entered promiscuous mode [ 2823.939117][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 2823.949683][T18483] bridge0: port 2(bridge_slave_1) entered disabled state [ 2823.963092][T18483] bridge_slave_1: entered allmulticast mode [ 2823.987201][T18483] bridge_slave_1: entered promiscuous mode [ 2824.028138][T18283] veth0_macvtap: entered promiscuous mode [ 2824.268504][T18283] veth1_macvtap: entered promiscuous mode [ 2824.330220][T18483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2824.376503][T18483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2824.426131][T12447] Bluetooth: hci4: command tx timeout [ 2824.622650][T18389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2824.817269][T18483] team0: Port device team_slave_0 added [ 2824.932053][T18483] team0: Port device team_slave_1 added [ 2825.076352][T18283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2825.419374][T18389] 8021q: adding VLAN 0 to HW filter on device team0 [ 2825.440685][T18283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2825.468959][T18483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2825.915056][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2825.949017][T18483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2826.124370][T18483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2826.154029][T18483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2826.202891][T18483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2826.231701][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.260403][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 2826.267936][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2826.477478][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.486012][T18536] hfsplus: unable to find HFS+ superblock [ 2826.520132][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.777950][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2826.841722][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 2826.849403][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2827.271451][T18483] hsr_slave_0: entered promiscuous mode [ 2827.316072][T18483] hsr_slave_1: entered promiscuous mode [ 2827.378297][T18483] debugfs: 'hsr0' already exists in 'hsr' [ 2827.384208][T18483] Cannot create hsr debugfs directory [ 2830.634584][T18483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2830.768388][T18483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2830.886887][T18483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2831.008193][T18389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2831.085005][T18483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2831.452020][T18576] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2832.357106][T18483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2832.564761][T18483] 8021q: adding VLAN 0 to HW filter on device team0 [ 2832.678399][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.685874][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2832.800717][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.808289][T18197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2833.784359][T18606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2834.417814][T18483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2834.496502][T18483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2835.217384][T18389] veth0_vlan: entered promiscuous mode [ 2835.644904][T18389] veth1_vlan: entered promiscuous mode [ 2835.931271][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2836.006119][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2836.547894][ T9860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2836.582853][ T9860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2836.873393][T18389] veth0_macvtap: entered promiscuous mode [ 2837.625747][T18389] veth1_macvtap: entered promiscuous mode [ 2837.754512][T18633] netlink: 'syz.3.1623': attribute type 39 has an invalid length. [ 2837.960101][T18633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2838.025082][T18633] bridge_slave_0 (unregistering): left allmulticast mode [ 2838.033340][T18633] bridge_slave_0 (unregistering): left promiscuous mode [ 2838.042821][T18633] bridge0: port 1(bridge_slave_0) entered disabled state [ 2839.161542][T18483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2839.272176][T18389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2839.453437][T18389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2839.569694][T17556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2839.589339][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2839.644246][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2839.683892][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2841.446418][T18483] veth0_vlan: entered promiscuous mode [ 2841.734260][T18483] veth1_vlan: entered promiscuous mode [ 2842.182981][T18483] veth0_macvtap: entered promiscuous mode [ 2842.248590][T18483] veth1_macvtap: entered promiscuous mode [ 2842.493967][T18483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2842.599192][T18483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2842.707588][ T3422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.738625][ T3422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.792603][ T3422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2842.844020][ T3422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2847.005475][T17556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2847.064632][T17556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2847.856523][T18708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2848.265379][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2848.401260][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2849.566776][T18716] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.1662'. [ 2849.683237][T18719] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.1662'. [ 2850.869903][T18736] netlink: 'syz.9.1665': attribute type 1 has an invalid length. [ 2852.398743][T18736] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2853.354558][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2853.362641][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2853.660524][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2853.695423][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2856.318260][T18766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2857.158772][T16910] Bluetooth: hci4: command 0x0406 tx timeout [ 2860.488773][T12447] Bluetooth: hci3: unexpected event 0x08 length: 9 > 4 [ 2862.112355][ T7535] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2862.379550][ T7535] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 2862.454714][ T7535] usb 6-1: config 0 has no interface number 0 [ 2862.475200][ T7535] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2862.512168][ T7535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2862.632876][T16910] Bluetooth: hci3: command 0x0406 tx timeout [ 2862.822896][ T7535] usb 6-1: config 0 descriptor?? [ 2863.103697][ T7535] usb 6-1: string descriptor 0 read error: -71 [ 2863.146204][ T7535] cp210x 6-1:0.208: cp210x converter detected [ 2863.235926][ T7535] cp210x 6-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2863.289368][ T7535] cp210x 6-1:0.208: querying part number failed [ 2863.377345][ T7535] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2863.451779][ T7535] usb 6-1: USB disconnect, device number 16 [ 2863.582390][ T7535] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2863.641742][ T7535] cp210x 6-1:0.208: device disconnected [ 2864.278744][T18810] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1686'. [ 2864.335758][T18810] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1686'. [ 2864.458971][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 2865.569997][T18823] 9pnet_virtio: no channels available for device syz [ 2866.229938][T18823] syz.4.1688 (18823) used greatest stack depth: 1936 bytes left [ 2874.472721][T18850] tipc: Started in network mode [ 2874.477952][T18850] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 2874.536064][T18850] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 2874.578613][T18850] tipc: Enabled bearer , priority 10 [ 2874.689005][T16910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2874.706972][T16910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2874.731225][T16910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2874.759244][T16910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2874.791396][T16910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2875.068372][T12000] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2875.310940][T12000] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 2875.357977][T12000] usb 4-1: config 0 has no interface number 0 [ 2875.364354][T12000] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2875.458603][T12000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2875.528156][T12000] usb 4-1: config 0 descriptor?? [ 2876.219263][ T24] tipc: Node number set to 1 [ 2877.077452][T16910] Bluetooth: hci1: command tx timeout [ 2878.452240][T12000] usb 4-1: string descriptor 0 read error: -71 [ 2878.652141][T12000] cp210x 4-1:0.208: cp210x converter detected [ 2878.706145][T12000] cp210x 4-1:0.208: failed to get vendor val 0x370b size 1: -71 [ 2878.800239][T12000] cp210x 4-1:0.208: querying part number failed [ 2878.843316][T12000] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2878.929365][T12000] usb 4-1: USB disconnect, device number 9 [ 2878.982455][T12000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2879.043251][T12000] cp210x 4-1:0.208: device disconnected [ 2879.305946][T16910] Bluetooth: hci1: command tx timeout [ 2880.013051][ C0] ===================================================== [ 2880.020991][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 2880.028481][ C0] eth_type_trans+0x7d5/0x9b0 [ 2880.033364][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 2880.038823][ C0] gre_rcv+0x1ca4/0x20f0 [ 2880.043333][ C0] gre_rcv+0x285/0x380 [ 2880.047605][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 2880.054045][ C0] ip_local_deliver_finish+0x409/0x720 [ 2880.059994][ C0] ip_local_deliver+0x228/0x4a0 [ 2880.065469][ C0] ip_rcv_finish+0x4d7/0x560 [ 2880.070609][ C0] ip_rcv+0xcb/0x370 [ 2880.074685][ C0] process_backlog+0x8d7/0x1500 [ 2880.080100][ C0] __napi_poll+0xdc/0x950 [ 2880.084614][ C0] net_rx_action+0xa5b/0x1c70 [ 2880.089538][ C0] handle_softirqs+0x171/0x7e0 [ 2880.095007][ C0] __do_softirq+0x14/0x1b [ 2880.100210][ C0] do_softirq+0x58/0x90 [ 2880.104763][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 2880.110124][ C0] __dev_queue_xmit+0x384a/0x5980 [ 2880.115652][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 2880.121139][ C0] ip_finish_output2+0x1afd/0x1e00 [ 2880.126772][ C0] ip_finish_output+0x288/0x860 [ 2880.131817][ C0] ip_mc_output+0x58a/0x8c0 [ 2880.137232][ C0] NF_HOOK+0x16b/0x340 [ 2880.141689][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 2880.147086][ C0] raw_sendmsg+0x2280/0x27f0 [ 2880.151881][ C0] inet_sendmsg+0x265/0x290 [ 2880.156820][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 2880.161942][ C0] ___sys_sendmsg+0x271/0x3b0 [ 2880.166891][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 2880.172108][ C0] x64_sys_call+0x1e20/0x3ea0 [ 2880.177111][ C0] do_syscall_64+0x134/0xf80 [ 2880.182211][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2880.188628][ C0] [ 2880.191214][ C0] Uninit was created at: [ 2880.195796][ C0] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 2880.202763][ C0] __alloc_skb+0x90d/0x1190 [ 2880.208346][ C0] alloc_skb_with_frags+0xc5/0xa60 [ 2880.213831][ C0] sock_alloc_send_pskb+0xacb/0xc60 [ 2880.219749][ C0] raw_send_hdrinc+0x34d/0x1f40 [ 2880.225123][ C0] raw_sendmsg+0x2280/0x27f0 [ 2880.230020][ C0] inet_sendmsg+0x265/0x290 [ 2880.234717][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 2880.239700][ C0] ___sys_sendmsg+0x271/0x3b0 [ 2880.244915][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 2880.250038][ C0] x64_sys_call+0x1e20/0x3ea0 [ 2880.255090][ C0] do_syscall_64+0x134/0xf80 [ 2880.259862][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2880.266038][ C0] [ 2880.268618][ C0] CPU: 0 UID: 0 PID: 18890 Comm: syz.6.1707 Tainted: G L syzkaller #0 PREEMPT(full) [ 2880.280012][ C0] Tainted: [L]=SOFTLOCKUP [ 2880.284517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2880.285941][T18853] chnl_net:caif_netlink_parms(): no params data found [ 2880.295339][ C0] ===================================================== [ 2880.295387][ C0] Disabling lock debugging due to kernel taint [ 2880.295439][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 2880.295520][ C0] CPU: 0 UID: 0 PID: 18890 Comm: syz.6.1707 Tainted: G B L syzkaller #0 PREEMPT(full) [ 2880.295666][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2880.295713][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2880.295781][ C0] Call Trace: [ 2880.295825][ C0] [ 2880.295863][ C0] __dump_stack+0x26/0x30 [ 2880.295999][ C0] dump_stack_lvl+0x50/0x1c0 [ 2880.296124][ C0] ? dump_stack+0x12/0x25 [ 2880.296250][ C0] dump_stack+0x1e/0x25 [ 2880.296375][ C0] vpanic+0x7b4/0x1430 [ 2880.296532][ C0] panic+0x15d/0x160 [ 2880.296699][ C0] kmsan_report+0x31a/0x320 [ 2880.296859][ C0] ? __msan_warning+0x1b/0x30 [ 2880.296997][ C0] ? eth_type_trans+0x7d5/0x9b0 [ 2880.297131][ C0] ? ip_tunnel_rcv+0x215f/0x29c0 [ 2880.297236][ C0] ? gre_rcv+0x1ca4/0x20f0 [ 2880.297390][ C0] ? gre_rcv+0x285/0x380 [ 2880.297517][ C0] ? ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 2880.297652][ C0] ? ip_local_deliver_finish+0x409/0x720 [ 2880.297782][ C0] ? ip_local_deliver+0x228/0x4a0 [ 2880.297904][ C0] ? ip_rcv_finish+0x4d7/0x560 [ 2880.298023][ C0] ? ip_rcv+0xcb/0x370 [ 2880.298134][ C0] ? process_backlog+0x8d7/0x1500 [ 2880.298282][ C0] ? __napi_poll+0xdc/0x950 [ 2880.298418][ C0] ? net_rx_action+0xa5b/0x1c70 [ 2880.298564][ C0] ? handle_softirqs+0x171/0x7e0 [ 2880.298701][ C0] ? __do_softirq+0x14/0x1b [ 2880.298827][ C0] ? do_softirq+0x58/0x90 [ 2880.298952][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 2880.299087][ C0] ? __dev_queue_xmit+0x384a/0x5980 [ 2880.299215][ C0] ? neigh_resolve_output+0x9c3/0xaf0 [ 2880.299368][ C0] ? ip_finish_output2+0x1afd/0x1e00 [ 2880.299524][ C0] ? ip_finish_output+0x288/0x860 [ 2880.299667][ C0] ? ip_mc_output+0x58a/0x8c0 [ 2880.299803][ C0] ? NF_HOOK+0x16b/0x340 [ 2880.299923][ C0] ? raw_send_hdrinc+0x18c5/0x1f40 [ 2880.300052][ C0] ? raw_sendmsg+0x2280/0x27f0 [ 2880.300174][ C0] ? inet_sendmsg+0x265/0x290 [ 2880.300305][ C0] ? ____sys_sendmsg+0xd27/0xfd0 [ 2880.300440][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 2880.300567][ C0] ? __x64_sys_sendmsg+0x211/0x3e0 [ 2880.300699][ C0] ? x64_sys_call+0x1e20/0x3ea0 [ 2880.300837][ C0] ? do_syscall_64+0x134/0xf80 [ 2880.300972][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2880.301095][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.301210][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.301318][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2880.301478][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.301586][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2880.301743][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.301857][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.301976][ C0] __msan_warning+0x1b/0x30 [ 2880.302120][ C0] eth_type_trans+0x7d5/0x9b0 [ 2880.302301][ C0] ip_tunnel_rcv+0x215f/0x29c0 [ 2880.302522][ C0] gre_rcv+0x1ca4/0x20f0 [ 2880.602411][ C0] ? __rcu_read_unlock+0x46/0xd0 [ 2880.607731][ C0] ? raw_local_deliver+0x368/0x15b0 [ 2880.613328][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 2880.618097][ C0] gre_rcv+0x285/0x380 [ 2880.622330][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 2880.627091][ C0] ip_protocol_deliver_rcu+0xb3d/0x13d0 [ 2880.632822][ C0] ip_local_deliver_finish+0x409/0x720 [ 2880.638449][ C0] ip_local_deliver+0x228/0x4a0 [ 2880.643449][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2880.649607][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 2880.655232][ C0] ip_rcv_finish+0x4d7/0x560 [ 2880.660001][ C0] ip_rcv+0xcb/0x370 [ 2880.664039][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2880.669387][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2880.674122][ C0] process_backlog+0x8d7/0x1500 [ 2880.679153][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.685195][ C0] ? filter_irq_stacks+0x49/0x190 [ 2880.690521][ C0] ? __pfx_process_backlog+0x10/0x10 [ 2880.696023][ C0] __napi_poll+0xdc/0x950 [ 2880.700552][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.706557][ C0] net_rx_action+0xa5b/0x1c70 [ 2880.711415][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.717549][ C0] ? sched_clock_cpu+0x59/0xa70 [ 2880.722856][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2880.729161][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2880.734467][ C0] handle_softirqs+0x171/0x7e0 [ 2880.739595][ C0] __do_softirq+0x14/0x1b [ 2880.744157][ C0] do_softirq+0x58/0x90 [ 2880.748463][ C0] [ 2880.751471][ C0] [ 2880.754469][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 2880.759708][ C0] __dev_queue_xmit+0x384a/0x5980 [ 2880.764886][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 2880.770250][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 2880.775559][ C0] ? ___neigh_create+0x3511/0x3bf0 [ 2880.780858][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.786119][ C0] ? __dev_queue_xmit+0x27a/0x5980 [ 2880.791424][ C0] neigh_resolve_output+0x9c3/0xaf0 [ 2880.796824][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 2880.802990][ C0] ip_finish_output2+0x1afd/0x1e00 [ 2880.808345][ C0] ip_finish_output+0x288/0x860 [ 2880.813454][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.819424][ C0] ip_mc_output+0x58a/0x8c0 [ 2880.824097][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 2880.829653][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 2880.834843][ C0] NF_HOOK+0x16b/0x340 [ 2880.839322][ C0] ? __pfx_dst_output+0x10/0x10 [ 2880.844391][ C0] raw_send_hdrinc+0x18c5/0x1f40 [ 2880.849635][ C0] raw_sendmsg+0x2280/0x27f0 [ 2880.854404][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2880.860984][ C0] ? __pfx_raw_sendmsg+0x10/0x10 [ 2880.866085][ C0] inet_sendmsg+0x265/0x290 [ 2880.870745][ C0] ? __pfx_inet_sendmsg+0x10/0x10 [ 2880.875930][ C0] ____sys_sendmsg+0xd27/0xfd0 [ 2880.880894][ C0] ___sys_sendmsg+0x271/0x3b0 [ 2880.885804][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.891156][ C0] ? __rcu_read_unlock+0x6c/0xd0 [ 2880.896270][ C0] ? __fget_files+0x3b4/0x4a0 [ 2880.901251][ C0] ? __fget_files+0x3b9/0x4a0 [ 2880.906076][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.911329][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2880.917292][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 2880.922408][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 2880.927658][ C0] x64_sys_call+0x1e20/0x3ea0 [ 2880.932514][ C0] do_syscall_64+0x134/0xf80 [ 2880.937268][ C0] ? clear_bhb_loop+0x50/0xa0 [ 2880.942116][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2880.948171][ C0] RIP: 0033:0x7f881e39c819 [ 2880.952700][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2880.972643][ C0] RSP: 002b:00007f881f2a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2880.981211][ C0] RAX: ffffffffffffffda RBX: 00007f881e615fa0 RCX: 00007f881e39c819 [ 2880.989573][ C0] RDX: 000000000400c804 RSI: 0000200000000900 RDI: 0000000000000008 [ 2880.997768][ C0] RBP: 00007f881e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 2881.005843][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2881.013994][ C0] R13: 00007f881e616038 R14: 00007f881e615fa0 R15: 00007ffdcfae35f8 [ 2881.022127][ C0] [ 2881.025737][ C0] Kernel Offset: disabled [ 2881.030105][ C0] Rebooting in 86400 seconds..