last executing test programs: 27m18.341564288s ago: executing program 32 (id=6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100fa090000000000000cd900000000"], 0x48) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000340)={0x0, 0x80006, 0x0, 0x2, '\x00', '\x00', '\x00', 0x7, 0x0, 0x2000100, 0x0, "a900"}) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40044160, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ppoll(&(0x7f0000000340)=[{r6, 0x8}], 0x1, &(0x7f00000003c0), 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x3, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {0x8, 0xfd}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$FUSE(r7, 0x0, 0xbf) socket$netlink(0x10, 0x3, 0x0) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) 25m42.690065102s ago: executing program 33 (id=160): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000a05000100074000"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x7fff]}, 0x0, &(0x7f0000001300), 0x8) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r5], 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5603, &(0x7f0000000100)) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='3', 0x1}, {&(0x7f0000000380)=' ', 0x1}], 0x2) creat(&(0x7f0000000540)='./file0\x00', 0x0) 25m10.28816882s ago: executing program 0 (id=264): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f68821bacf66fdda01270102c200000e00005075d985505b13ac0f28829fb972bacb72537b67e06f59c36784002afea0339cd80163cc0d7378ee516dea082a491f2b6f747d223f675e4c6b357e759a33d42ef91537"], 0x2c}}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) 25m9.164021239s ago: executing program 0 (id=265): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x2, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0x8ff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0xffffffff, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xfffffff7, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0x4, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 25m8.963116381s ago: executing program 0 (id=267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = getpid() r1 = fanotify_init(0x10, 0x101000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x7e, 0x800003a, r2, 0x0) prlimit64(r0, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00'}) sendmsg$nl_route(r5, 0x0, 0x20024080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_getoverrun(r6) ioctl$IMADDTIMER(r7, 0x80044940, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x4, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r9, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/1, 0x1, 0x3, 0x4, 0xffff0001, 0x0, 0xc08}}, 0x120) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r9, &(0x7f0000000200), 0x4) 25m6.492176666s ago: executing program 0 (id=272): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) 25m1.70743292s ago: executing program 0 (id=278): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffe90, &(0x7f0000000200)="3125000600000000a09f9bc289437bc3001400") readv(r1, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x41) 24m57.055224573s ago: executing program 0 (id=286): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 24m41.632191511s ago: executing program 34 (id=286): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 21m8.05952045s ago: executing program 6 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 21m6.959089309s ago: executing program 6 (id=644): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x50) 21m6.571068464s ago: executing program 6 (id=646): r0 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x133d, 0x0, 0x8, 0x0, 0x0) 21m5.768557648s ago: executing program 6 (id=647): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$packet(0x11, 0x3, 0x300) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @broadcast}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 21m5.343781511s ago: executing program 6 (id=649): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000f68821bacf66fdda01270102c200000e00005075d985505b13ac0f28829fb972bacb72537b67e06f59c3"], 0x2c}}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 21m4.022434647s ago: executing program 6 (id=651): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x0, @multicast}, 0x46, {0x2, 0x4e24, @multicast2}, 'vcan0\x00'}) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x1, 0x0, 0x7, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) shutdown(r3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') 20m48.586423151s ago: executing program 35 (id=651): ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @loopback}, {0x0, @multicast}, 0x46, {0x2, 0x4e24, @multicast2}, 'vcan0\x00'}) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388, 0x0, 0x1, 0x0, 0x7, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x3, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf6, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080), 0xc) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) shutdown(r3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') 19m44.712272553s ago: executing program 7 (id=312): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 19m43.491613448s ago: executing program 7 (id=781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000540)={0x0, 0x81}) syz_clone(0x8180411, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 19m40.89947146s ago: executing program 7 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x7ad82179598b3c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) connect$llc(r5, &(0x7f00000000c0)={0x1a, 0x110, 0x1, 0xd, 0x19, 0x5, @broadcast}, 0x10) 19m36.974950144s ago: executing program 7 (id=791): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xd, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8046) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 19m35.401090428s ago: executing program 7 (id=793): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) readahead(r0, 0x4f, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000300)=0xb94116898811b881) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 19m19.943709307s ago: executing program 36 (id=793): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) readahead(r0, 0x4f, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000280), 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000300)=0xb94116898811b881) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 17m44.541657563s ago: executing program 2 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r4 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="1388000023b201002400128009000100626f6e640000000014"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 17m42.95800904s ago: executing program 2 (id=956): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet_tcp_int(r4, 0x6, 0x17, &(0x7f00000006c0)=0x3ff, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 17m39.676037057s ago: executing program 2 (id=961): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000000)="89380755a08cc2cc146beea3425e1aba4ffc65780ffce74987613cb561cf8afa47b3169bb5eab3a9ecfc2787c70ea93f0e3c6bbdd2d4d66cfa126dc28c11baa3e16f78cdd3e8163bf3e56a96267f6a0ebf45e14a689194df817bf43b9bd4fb8a12f1e428faa41a9b1d0c19765dbfbae0b3d35f1e6d1e2b50d9f19ee717"}, {&(0x7f0000001300)="5645ffd3a3a07a6c4ceee3fb390e04aa7c564a215dddae0a10bc705607cd6a2d9bc3b5419b0327bdb569a6909f78904549c8d1351a5408d889d2f8edcc2ddc5cbba0edbdeae9d0dc9ca7a60b1af33dc70c"}, {&(0x7f00000000c0)="255aa126dcd296696a2e5e3e0655e643a3ed6e70de8b3a7bf38bdb953491c5eee2c297ed71c4a14a86a0982982588667c3"}], 0xffffffffffffdad) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x6, 0x3, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r7 = add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000001440)="000b05c1169e1dd6285a68934b8b4cc0ebb00e4f4c93f9bf8effd8a87d8b65289bb4b3a6c1952ef8d6ba08b57fcb3a6859247bc49828de6ace44637ed6d83d152a8dd8e3e475d85dc48919c5a49c20cf176da371da908f877250b5d5b05f11f709fa0a01328b38e2ecd1dacc7a757e5525649f68a82e9addba1dcc1697481154b7989f38040fb68f8449e25d9dd2b621069e05abe57dcebc1b3c796a1bb61d0a27eb6cb984191cf10587678f134750bd01540eae5f9ff583887288e2139306832239c438d9edb307e7a0c20bbbef3ef7d54058847041fc0ca73948e33d06baf7a6df16352f9ba1fb9a", 0xe9, r7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) 17m29.798944025s ago: executing program 2 (id=977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r5, 0x4, 0x42800) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x16, &(0x7f0000000080)={&(0x7f0000000580)={0xa8, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "3785a8ee535d1aea4a8a3d967e50df1601c5df16268c31959013f9a4a37879ed9a"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "22682f26a0d8473a3c1ac7505e5252d42a23ad7a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x88d0}, 0x40480d4) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) 17m28.015525642s ago: executing program 2 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r4 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x118, 0x30, 0xffff, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0x0, 0x4, @random="300b816faae8"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0xfffb}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6d}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x61}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 17m22.688412347s ago: executing program 2 (id=986): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000000)="89380755a08cc2cc146beea3425e1aba4ffc65780ffce74987613cb561cf8afa47b3169bb5eab3a9ecfc2787c70ea93f0e3c6bbdd2d4d66cfa126dc28c11baa3e16f78cdd3e8163bf3e56a96267f6a0ebf45e14a689194df817bf43b9bd4fb8a12f1e428faa41a9b1d0c19765dbfbae0b3d35f1e6d1e2b50d9f19ee717"}, {&(0x7f0000001300)="5645ffd3a3a07a6c4ceee3fb390e04aa7c564a215dddae0a10bc705607cd6a2d9bc3b5419b0327bdb569a6909f78904549c8d1351a5408d889d2f8edcc2ddc5cbba0edbdeae9d0dc9ca7a60b1af33dc70c"}, {&(0x7f00000000c0)="255aa126dcd296696a2e5e3e0655e643a3ed6e70de8b3a7bf38bdb953491c5eee2c297ed71c4a14a86a0982982588667c3"}], 0xffffffffffffdad) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x6, 0x3, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r7 = add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000001440)="000b05c1169e1dd6285a68934b8b4cc0ebb00e4f4c93f9bf8effd8a87d8b65289bb4b3a6c1952ef8d6ba08b57fcb3a6859247bc49828de6ace44637ed6d83d152a8dd8e3e475d85dc48919c5a49c20cf176da371da908f877250b5d5b05f11f709fa0a01328b38e2ecd1dacc7a757e5525649f68a82e9addba1dcc1697481154b7989f38040fb68f8449e25d9dd2b621069e05abe57dcebc1b3c796a1bb61d0a27eb6cb984191cf10587678f134750bd01540eae5f9ff583887288e2139306832239c438d9edb307e7a0c20bbbef3ef7d54058847041fc0ca73948e33d06baf7a6df16352f9ba1fb9a", 0xe9, r7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) 17m6.765323195s ago: executing program 37 (id=986): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000001380)=[{&(0x7f0000000000)="89380755a08cc2cc146beea3425e1aba4ffc65780ffce74987613cb561cf8afa47b3169bb5eab3a9ecfc2787c70ea93f0e3c6bbdd2d4d66cfa126dc28c11baa3e16f78cdd3e8163bf3e56a96267f6a0ebf45e14a689194df817bf43b9bd4fb8a12f1e428faa41a9b1d0c19765dbfbae0b3d35f1e6d1e2b50d9f19ee717"}, {&(0x7f0000001300)="5645ffd3a3a07a6c4ceee3fb390e04aa7c564a215dddae0a10bc705607cd6a2d9bc3b5419b0327bdb569a6909f78904549c8d1351a5408d889d2f8edcc2ddc5cbba0edbdeae9d0dc9ca7a60b1af33dc70c"}, {&(0x7f00000000c0)="255aa126dcd296696a2e5e3e0655e643a3ed6e70de8b3a7bf38bdb953491c5eee2c297ed71c4a14a86a0982982588667c3"}], 0xffffffffffffdad) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x6, 0x3, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) r7 = add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000001440)="000b05c1169e1dd6285a68934b8b4cc0ebb00e4f4c93f9bf8effd8a87d8b65289bb4b3a6c1952ef8d6ba08b57fcb3a6859247bc49828de6ace44637ed6d83d152a8dd8e3e475d85dc48919c5a49c20cf176da371da908f877250b5d5b05f11f709fa0a01328b38e2ecd1dacc7a757e5525649f68a82e9addba1dcc1697481154b7989f38040fb68f8449e25d9dd2b621069e05abe57dcebc1b3c796a1bb61d0a27eb6cb984191cf10587678f134750bd01540eae5f9ff583887288e2139306832239c438d9edb307e7a0c20bbbef3ef7d54058847041fc0ca73948e33d06baf7a6df16352f9ba1fb9a", 0xe9, r7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) 16m34.676542965s ago: executing program 5 (id=1046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r4 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="1388000023b201002400128009000100626f6e640000000014"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x118, 0x30, 0xffff, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0x0, 0x4, @random="300b816faae8"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0xfffb}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6d}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x61}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 16m32.235123817s ago: executing program 5 (id=1048): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sched_getparam(r0, &(0x7f0000000140)) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="1f0000001300090468fe0700200000000000ff3f080000004801001000000000", 0x20}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e2e"], 0x0, 0x5e, 0x0, 0x1}, 0x20) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r6 = signalfd(r5, &(0x7f0000000180)={[0x9]}, 0x8) connect$bt_rfcomm(r6, &(0x7f0000000280)={0x1f, @none, 0x1}, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r6, 0xc0745645, &(0x7f00000005c0)={0x0, [0x90, 0x2, 0x2, 0x1, 0x5, 0x401, 0x81, 0x7, 0x4, 0x8, 0x0, 0x539, 0x5, 0x2000, 0x9, 0x3c0, 0x8b4, 0x1d28, 0xa, 0x18b, 0xfffe, 0xb14, 0x0, 0xc000, 0x70, 0x0, 0x40, 0x81, 0x1000, 0x19d, 0xff, 0xfff, 0x1ff, 0x2, 0x6, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x5, 0x0, 0x400, 0x800, 0x8, 0x101, 0x0, 0x6], 0x5}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 16m23.977529616s ago: executing program 5 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r4 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="1388000023b201002400128009000100626f6e640000000014"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x118, 0x30, 0xffff, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0x0, 0x4, @random="300b816faae8"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0xfffb}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6d}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x61}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 16m22.001736328s ago: executing program 5 (id=1058): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04223d046586cd70e6073194f835a7080003ffffffab43ea6e00000000ffcf0702aaaaaaaaaa12ff035a2246f60700ff0000000000000a0c02db6ae908000900"/73], 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8000, &(0x7f0000006680)) ioprio_get$pid(0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a5a440000000010109023b000101000000090400001202060000052406000005240000000d240f01000000000000000000090582020002000000090503020002040000"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000000c0)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="2804"], &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x1c, 0x0, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x8d}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) 16m16.763515818s ago: executing program 5 (id=1066): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ustat(0x801, &(0x7f0000000300)) r4 = socket$inet(0x2, 0x3, 0x8d) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="1388000023b201002400128009000100626f6e640000000014"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x118, 0x30, 0xffff, 0x0, 0x0, {}, [{0x104, 0x1, [@m_ife={0x100, 0x1, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xe}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0x0, 0x4, @random="300b816faae8"}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0xfffb}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6d}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x61}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x118}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) 16m15.659868741s ago: executing program 5 (id=1067): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00014, 0x0) unshare(0x62000280) 15m59.632422314s ago: executing program 38 (id=1067): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0xc1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x4, 0xf}}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0xa00014, 0x0) unshare(0x62000280) 6m16.267601719s ago: executing program 4 (id=1841): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @random="63f1458526e8", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x8f, 0x0, @opaque="c57e20c441d9c16ac9fd3b01a96626f557cf2b"}}}}}, 0x0) 6m16.054665831s ago: executing program 4 (id=1842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000), 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) 6m13.100134249s ago: executing program 4 (id=1845): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) 6m12.7996481s ago: executing program 4 (id=1846): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xb) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) 6m10.730539682s ago: executing program 4 (id=1849): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @broadcast, 0xff000000, 0xff, 0x9, 0x12, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3, 0x3, 0xa90a, 0x6, 0x3ff, 'veth0_vlan\x00', 'wg2\x00', {0xff}, {0xff}, 0x0, 0x71}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@empty, @loopback, 0x0, 0xffffffff, 0xe, 0x2, {@mac=@local, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="8e932bc3db22", {[0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x400, 0x4fd9, 0x0, 0x98dc, 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x280}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @loopback, @multicast1, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r6, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x2003}], 0x1, 0x40010002, 0x0) 6m9.532607358s ago: executing program 4 (id=1850): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x5c, &(0x7f0000000340)={[{@xino_on}, {@redirect_dir_off}, {@index_off}, {@metacopy_off}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002440)=""/4100, 0x1004) setresuid(0x0, 0x0, 0x0) 5m53.966874106s ago: executing program 39 (id=1850): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x5c, &(0x7f0000000340)={[{@xino_on}, {@redirect_dir_off}, {@index_off}, {@metacopy_off}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002440)=""/4100, 0x1004) setresuid(0x0, 0x0, 0x0) 5m13.722468968s ago: executing program 3 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5fffffff7ff220000efff00"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050028bd7000000000000205000005fe80c2205e321ad904c574c14981d80857b744816f15fc230b46"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m9.908979484s ago: executing program 1 (id=1936): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 5m7.158933446s ago: executing program 1 (id=1938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) 5m6.554567723s ago: executing program 3 (id=1941): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') fsopen(0x0, 0x406) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x131}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x58, 0x6000, @fd_index=0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) r6 = socket$kcm(0x11, 0x3, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 5m6.522115811s ago: executing program 1 (id=1942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000e600"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) socket(0x2, 0x3, 0x67) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/50}, 0x20) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 5m5.367139127s ago: executing program 1 (id=1943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000846000/0x4000)=nil) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x8}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0xfe1d, 0x9, @local, 0x2}, 0x29) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c088088f51e72eb2f7e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r5, 0x5412, 0x0) 5m2.948189665s ago: executing program 3 (id=1945): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x3, 0x1ff, @local, 0x3}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x3, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 5m1.795848333s ago: executing program 3 (id=1946): openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x851}, 0x10890) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000000c0)) readv(r0, &(0x7f00000008c0), 0x0) 5m1.473933123s ago: executing program 3 (id=1947): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x44009975, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) r2 = memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) 5m1.246783671s ago: executing program 1 (id=1948): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xb) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) 4m59.487409974s ago: executing program 1 (id=1949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000300)=0x4, 0x12) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xb) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) socketpair(0xa, 0x80000, 0x5acf267b, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m58.773199507s ago: executing program 3 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5fffffff7ff220000efff00"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050028bd7000000000000205000005fe80c2205e321ad904c574c14981d80857b744816f15fc230b46"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m44.261384827s ago: executing program 40 (id=1949): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000300)=0x4, 0x12) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xb) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) socketpair(0xa, 0x80000, 0x5acf267b, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4m43.213003477s ago: executing program 41 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000f5fffffff7ff220000efff00"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), &(0x7f0000000100), 0x40, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050028bd7000000000000205000005fe80c2205e321ad904c574c14981d80857b744816f15fc230b46"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 13.274631604s ago: executing program 8 (id=2360): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.143710462s ago: executing program 8 (id=2361): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800), 0x0) syz_usb_disconnect(r0) 9.987525094s ago: executing program 8 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'hsr0\x00', 0x2}, 0x18) 8.567585845s ago: executing program 8 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'hsr0\x00', 0x2}, 0x18) 6.982544992s ago: executing program 8 (id=2364): socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x20012}, &(0x7f0000000180)=0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2404d800}, 0x4040000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8804) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1, {0x0, r7}}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 6.942484769s ago: executing program 9 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = msgget$private(0x0, 0x1f3) msgsnd(r1, &(0x7f0000000380)={0x1}, 0x8, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000080)={0xa, @output={0x0, 0x1, {0x1be4, 0xff}, 0x6, 0x9}}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000240)={'pimreg0\x00', {0x2, 0x4e22, @multicast1}}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) 6.100956804s ago: executing program 9 (id=2366): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 5.321234808s ago: executing program 9 (id=2367): syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) timer_create(0x9, 0x0, &(0x7f0000bbdffc)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r5, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x2003}], 0x1, 0x40010002, 0x0) 3.586490969s ago: executing program 9 (id=2368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) 3.321340756s ago: executing program 9 (id=2369): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800), 0x0) syz_usb_disconnect(r0) 3.255626867s ago: executing program 8 (id=2370): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'hsr0\x00', 0x2}, 0x18) 0s ago: executing program 9 (id=2371): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'hsr0\x00', 0x2}, 0x18) kernel console output (not intermixed with test programs): g ep0 maxpacket: 16 [ 1345.646937][T11831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.646966][T11831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.649655][T11831] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.649678][T11831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.649693][T11831] usb 5-1: Product: syz [ 1345.649704][T11831] usb 5-1: Manufacturer: syz [ 1345.649714][T11831] usb 5-1: SerialNumber: syz [ 1345.912343][T11831] usb 5-1: 0:2 : does not exist [ 1345.912439][T11831] usb 5-1: unit 0 not found! [ 1346.059595][T11831] usb 5-1: USB disconnect, device number 78 [ 1346.197897][T13783] udevd[13783]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1346.505923][T13752] chnl_net:caif_netlink_parms(): no params data found [ 1347.103846][T10723] Bluetooth: hci4: command tx timeout [ 1348.452157][T13752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.453298][T13752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.453582][T13752] bridge_slave_0: entered allmulticast mode [ 1348.456313][T13752] bridge_slave_0: entered promiscuous mode [ 1348.895377][T13752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.910061][T13752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.919481][T13752] bridge_slave_1: entered allmulticast mode [ 1348.934025][T13752] bridge_slave_1: entered promiscuous mode [ 1349.098041][T13752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.114052][T13752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.152804][T10723] Bluetooth: hci4: command tx timeout [ 1349.362494][T13752] team0: Port device team_slave_0 added [ 1349.781757][T13752] team0: Port device team_slave_1 added [ 1350.423039][T10039] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1350.430852][T10039] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1350.440761][T10039] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1350.459755][T10039] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1350.473593][T10039] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1350.986732][T13752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.986747][T13752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.986767][T13752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.989443][T13752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.989460][T13752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.989491][T13752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.385301][T10723] Bluetooth: hci4: command tx timeout [ 1352.599171][T10723] Bluetooth: hci0: command tx timeout [ 1354.082554][T13752] hsr_slave_0: entered promiscuous mode [ 1354.084416][T13752] hsr_slave_1: entered promiscuous mode [ 1354.085659][T13752] debugfs: 'hsr0' already exists in 'hsr' [ 1354.085872][T13752] Cannot create hsr debugfs directory [ 1354.673045][T10723] Bluetooth: hci0: command tx timeout [ 1355.548053][T10039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1355.566802][T10039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1355.588457][ T13] bridge_slave_1: left allmulticast mode [ 1355.588481][ T13] bridge_slave_1: left promiscuous mode [ 1355.588654][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.595078][T10039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1355.626154][T10039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1355.627467][T10039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1355.731855][ T13] bridge_slave_0: left allmulticast mode [ 1355.731878][ T13] bridge_slave_0: left promiscuous mode [ 1355.732084][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.760590][T10723] Bluetooth: hci0: command tx timeout [ 1357.641260][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.701532][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.710777][T10723] Bluetooth: hci2: command tx timeout [ 1357.747248][ T13] bond0 (unregistering): Released all slaves [ 1358.180738][ T13] hsr_slave_0: left promiscuous mode [ 1358.240763][ T13] hsr_slave_1: left promiscuous mode [ 1358.242342][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1358.265985][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.164603][T10723] Bluetooth: hci0: command tx timeout [ 1360.164641][T10723] Bluetooth: hci2: command tx timeout [ 1362.190543][ T61] Bluetooth: hci2: command tx timeout [ 1363.751980][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1364.052443][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1364.286497][ T61] Bluetooth: hci2: command tx timeout [ 1366.670028][T13821] chnl_net:caif_netlink_parms(): no params data found [ 1366.928134][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.929020][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.677781][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.677874][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.678064][T13821] bridge_slave_0: entered allmulticast mode [ 1368.680017][T13821] bridge_slave_0: entered promiscuous mode [ 1368.774246][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.774378][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.774648][T13821] bridge_slave_1: entered allmulticast mode [ 1368.778890][T13821] bridge_slave_1: entered promiscuous mode [ 1370.157009][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.256989][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.468207][T13821] team0: Port device team_slave_0 added [ 1370.536790][T13821] team0: Port device team_slave_1 added [ 1371.235957][T13821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.235976][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.236007][T13821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.610298][T13821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.610313][T13821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1371.617399][T13821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.767826][T13752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1372.093624][T13752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1372.957047][T13752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1373.033719][T13752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1373.066808][T13852] chnl_net:caif_netlink_parms(): no params data found [ 1373.256620][T13821] hsr_slave_0: entered promiscuous mode [ 1373.258235][T13821] hsr_slave_1: entered promiscuous mode [ 1373.259413][T13821] debugfs: 'hsr0' already exists in 'hsr' [ 1373.259442][T13821] Cannot create hsr debugfs directory [ 1374.744450][T13852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.744654][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.744901][T13852] bridge_slave_0: entered allmulticast mode [ 1374.747697][T13852] bridge_slave_0: entered promiscuous mode [ 1374.808940][T13852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.809093][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.809335][T13852] bridge_slave_1: entered allmulticast mode [ 1374.835428][T13852] bridge_slave_1: entered promiscuous mode [ 1375.026728][T13852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.050449][T13182] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1375.084281][T13852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.200583][T13182] usb 5-1: Using ep0 maxpacket: 8 [ 1375.204241][T13182] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1375.206208][T13182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1375.206252][T13182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1375.206277][T13182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1375.206306][T13182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1375.206332][T13182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1375.206356][T13182] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1375.206384][T13182] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1375.356592][T13182] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1375.356629][T13182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.356645][T13182] usb 5-1: Product: syz [ 1375.356656][T13182] usb 5-1: Manufacturer: syz [ 1375.356666][T13182] usb 5-1: SerialNumber: syz [ 1375.403169][T13182] usb 5-1: config 0 descriptor?? [ 1375.404576][T13974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1375.404810][T13974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1375.436030][T13182] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1376.592621][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 1377.005108][T13852] team0: Port device team_slave_0 added [ 1377.081447][T13852] team0: Port device team_slave_1 added [ 1377.489254][T13852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.489268][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.489289][T13852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.552256][T13852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1377.552648][T13852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1377.552671][T13852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1377.906912][T13182] usb 5-1: USB disconnect, device number 79 [ 1378.188499][T13852] hsr_slave_0: entered promiscuous mode [ 1378.204812][T13852] hsr_slave_1: entered promiscuous mode [ 1378.205887][T13852] debugfs: 'hsr0' already exists in 'hsr' [ 1378.205906][T13852] Cannot create hsr debugfs directory [ 1378.616626][ T13] bridge_slave_1: left allmulticast mode [ 1378.616659][ T13] bridge_slave_1: left promiscuous mode [ 1378.616925][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.688745][ T13] bridge_slave_0: left allmulticast mode [ 1378.688780][ T13] bridge_slave_0: left promiscuous mode [ 1378.689096][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.755985][ T13] bridge_slave_1: left allmulticast mode [ 1378.756020][ T13] bridge_slave_1: left promiscuous mode [ 1378.756272][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.842326][ T13] bridge_slave_0: left allmulticast mode [ 1378.842350][ T13] bridge_slave_0: left promiscuous mode [ 1378.842538][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.812600][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.891508][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.962620][ T13] bond0 (unregistering): Released all slaves [ 1381.331638][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.422013][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.485371][ T13] bond0 (unregistering): Released all slaves [ 1381.793987][T13752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.906189][T13752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1381.931674][ T1469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.931887][ T1469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.023261][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.023489][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.101093][T13752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1383.058216][ T13] hsr_slave_0: left promiscuous mode [ 1383.152491][ T13] hsr_slave_1: left promiscuous mode [ 1383.155756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.213401][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.442654][ T13] hsr_slave_0: left promiscuous mode [ 1383.503179][ T13] hsr_slave_1: left promiscuous mode [ 1383.504293][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.642949][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.740561][ T808] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1384.920493][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 1384.925329][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1384.926609][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1384.926644][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1384.926669][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1384.926698][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1384.926726][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1384.926750][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1384.926779][ T808] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1384.929228][ T808] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1384.929259][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.929281][ T808] usb 5-1: Product: syz [ 1384.929297][ T808] usb 5-1: Manufacturer: syz [ 1384.929312][ T808] usb 5-1: SerialNumber: syz [ 1385.057268][ T808] usb 5-1: config 0 descriptor?? [ 1385.058368][T14049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1385.058624][T14049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1385.064994][ T808] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1386.611347][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1386.871971][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1387.770770][ T5940] usb 5-1: USB disconnect, device number 80 [ 1390.401901][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1390.521412][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1391.322359][T13821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1391.483261][T13821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1391.563639][T13821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1391.629860][T13752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.638094][T13821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1392.831713][T13752] veth0_vlan: entered promiscuous mode [ 1392.937229][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.948326][T13752] veth1_vlan: entered promiscuous mode [ 1393.081447][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.178734][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.178889][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.242410][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.242560][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.376266][T13752] veth0_macvtap: entered promiscuous mode [ 1394.417100][T13852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1394.457153][ T10] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1394.642268][T13752] veth1_macvtap: entered promiscuous mode [ 1394.647339][T13852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1394.660600][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1394.670876][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1394.675522][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1394.675559][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1394.675584][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1394.675612][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1394.675639][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1394.675662][ T10] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1394.696640][ T10] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1394.696760][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.696815][ T10] usb 9-1: Product: syz [ 1394.696851][ T10] usb 9-1: Manufacturer: syz [ 1394.696892][ T10] usb 9-1: SerialNumber: syz [ 1394.729540][ T10] usb 9-1: config 0 descriptor?? [ 1394.741569][T14129] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1394.814714][T13852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1394.898882][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1395.250530][T13852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1396.293539][ T10] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1396.405817][T13752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.452200][T14161] udevd[14161]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1396.526848][T13752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.578362][ T68] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.579725][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.598197][ T68] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.611822][ T68] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.137587][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.137611][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.376423][ T808] usb 9-1: USB disconnect, device number 90 [ 1397.544064][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.551338][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.551385][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.727430][T13852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.501362][T13852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.630279][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.639676][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.654342][T13821] veth0_vlan: entered promiscuous mode [ 1398.669912][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.670188][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.776779][T13821] veth1_vlan: entered promiscuous mode [ 1400.106502][T13821] veth0_macvtap: entered promiscuous mode [ 1400.128873][T13821] veth1_macvtap: entered promiscuous mode [ 1400.215965][T13821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.244556][T13821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.290286][T13500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.298924][T13500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.298979][T13500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.299018][T13500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.850445][T13500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.850468][T13500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.114528][ T4493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.114553][ T4493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.296261][T13852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.016444][T13852] veth0_vlan: entered promiscuous mode [ 1402.094930][T13852] veth1_vlan: entered promiscuous mode [ 1402.454938][T13852] veth0_macvtap: entered promiscuous mode [ 1402.502943][T13852] veth1_macvtap: entered promiscuous mode [ 1402.610548][T13182] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1402.618042][T13852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1402.647780][T13852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1402.742455][T13500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.762640][T13182] usb 10-1: Using ep0 maxpacket: 8 [ 1402.765675][T13182] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1402.766936][T13182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1402.766973][T13182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1402.766989][T13182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1402.767009][T13182] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1402.767026][T13182] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1402.767043][T13182] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1402.799524][T13500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.865011][T13182] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1402.865047][T13182] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.865062][T13182] usb 10-1: Product: syz [ 1402.865073][T13182] usb 10-1: Manufacturer: syz [ 1402.865083][T13182] usb 10-1: SerialNumber: syz [ 1402.945008][T13182] usb 10-1: config 0 descriptor?? [ 1402.945953][ T4298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.946113][T14214] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1402.949100][ T4298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.018237][T13182] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1403.325168][T13182] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1405.189574][T14161] udevd[14161]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.726505][ T5940] usb 10-1: USB disconnect, device number 2 [ 1405.870185][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.870202][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.060015][T13557] IPVS: starting estimator thread 0... [ 1406.160696][T14239] IPVS: using max 9 ests per chain, 21600 per kthread [ 1406.251667][ T8165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.251690][ T8165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.700518][T13182] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1410.853565][T13182] usb 2-1: Using ep0 maxpacket: 8 [ 1410.857113][T13182] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1410.861420][T13182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1410.861455][T13182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1410.861481][T13182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1410.861511][T13182] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1410.861536][T13182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1410.861559][T13182] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1410.879036][T13182] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1410.879115][T13182] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.879183][T13182] usb 2-1: Product: syz [ 1410.879230][T13182] usb 2-1: Manufacturer: syz [ 1410.879258][T13182] usb 2-1: SerialNumber: syz [ 1410.991330][T13182] usb 2-1: config 0 descriptor?? [ 1410.995749][T14275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1411.019375][T13182] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1412.793244][T10723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1412.818566][T10723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1412.836688][T10723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1412.860657][T10723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1412.863500][T10723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1412.960525][T13182] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1413.799522][ T5940] usb 2-1: USB disconnect, device number 2 [ 1415.118484][T10723] Bluetooth: hci3: command tx timeout [ 1415.632987][T14161] udevd[14161]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1417.151141][T10723] Bluetooth: hci3: command tx timeout [ 1419.231398][T10723] Bluetooth: hci3: command tx timeout [ 1420.110650][T11831] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1420.450610][T11831] usb 9-1: Using ep0 maxpacket: 8 [ 1420.457009][T11831] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1420.458898][T11831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1420.458934][T11831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1420.458950][T11831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1420.458970][T11831] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1420.458987][T11831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1420.459003][T11831] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1420.459021][T11831] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1421.300488][T11831] usb 9-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1421.300512][T11831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.300527][T11831] usb 9-1: Product: syz [ 1421.300537][T11831] usb 9-1: Manufacturer: syz [ 1421.300548][T11831] usb 9-1: SerialNumber: syz [ 1421.311937][T10723] Bluetooth: hci3: command tx timeout [ 1421.334735][T11831] usb 9-1: config 0 descriptor?? [ 1421.363326][T14337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1421.363675][T14337] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1421.490959][T11831] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1421.970463][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1422.481792][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 1424.024537][T11831] usb 9-1: USB disconnect, device number 91 [ 1424.247145][T13500] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.274482][T11831] IPVS: starting estimator thread 0... [ 1426.407240][T14365] IPVS: using max 8 ests per chain, 19200 per kthread [ 1426.538267][T13500] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.644841][T14298] chnl_net:caif_netlink_parms(): no params data found [ 1428.404450][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.404533][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.571138][T13500] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.129034][T13500] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.620960][T14298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.621145][T14298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.621314][T14298] bridge_slave_0: entered allmulticast mode [ 1434.659534][T14298] bridge_slave_0: entered promiscuous mode [ 1434.681551][T14298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.685439][T14298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.688626][T14298] bridge_slave_1: entered allmulticast mode [ 1434.718051][T14298] bridge_slave_1: entered promiscuous mode [ 1435.799122][T14298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.836636][T14298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.928556][T14298] team0: Port device team_slave_0 added [ 1435.969792][T14298] team0: Port device team_slave_1 added [ 1436.046323][T14298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1436.046342][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.046373][T14298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1436.052408][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1911'. [ 1436.144106][T14298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1436.144120][T14298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1436.144141][T14298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.456375][T14298] hsr_slave_0: entered promiscuous mode [ 1438.459667][T14298] hsr_slave_1: entered promiscuous mode [ 1438.673622][T13500] bridge_slave_1: left allmulticast mode [ 1438.673646][T13500] bridge_slave_1: left promiscuous mode [ 1438.673823][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.770472][T13500] bridge_slave_0: left allmulticast mode [ 1438.770504][T13500] bridge_slave_0: left promiscuous mode [ 1438.771940][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.806150][T14442] fuse: Bad value for 'rootmode' [ 1443.030942][T13785] usb 9-1: new high-speed USB device number 92 using dummy_hcd [ 1443.250090][T13785] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1443.563258][T13785] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1443.563293][T13785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1443.563315][T13785] usb 9-1: SerialNumber: syz [ 1448.991491][T14481] fuse: Unknown parameter 'use00000000000000000000' [ 1449.223292][T14486] comedi comedi3: das16m1: I/O port conflict (0x20,16) [ 1449.551778][T11831] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1449.740502][T11831] usb 10-1: Using ep0 maxpacket: 16 [ 1449.743270][T11831] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.743324][T11831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1449.743345][T11831] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1449.744763][T11831] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1449.744785][T11831] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1449.744799][T11831] usb 10-1: Manufacturer: syz [ 1449.771769][T11831] usb 10-1: config 0 descriptor?? [ 1452.231052][ T808] usb 10-1: USB disconnect, device number 3 [ 1452.508070][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1931'. [ 1453.510627][ T808] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1453.785266][ T808] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1453.787018][ T808] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1453.787040][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1453.787054][ T808] usb 10-1: SerialNumber: syz [ 1453.839367][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.935246][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.967382][T13500] bond0 (unregistering): Released all slaves [ 1454.186383][T13500] bond1 (unregistering): Released all slaves [ 1454.361798][T13500] bond2 (unregistering): Released all slaves [ 1455.271446][T13785] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1455.290950][T13785] usb 9-1: USB disconnect, device number 92 [ 1455.298663][T13785] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 1455.333827][ T808] cdc_ether 10-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1457.312447][ T808] usb 10-1: USB disconnect, device number 4 [ 1457.317666][ T808] cdc_ether 10-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 1457.789745][T14521] fuse: Unknown parameter 'use00000000000000000000' [ 1460.899235][ T12] Bluetooth: hci1: Frame reassembly failed (-90) [ 1462.670605][T10723] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1464.649917][T13500] hsr_slave_0: left promiscuous mode [ 1464.681239][T13500] hsr_slave_1: left promiscuous mode [ 1464.682005][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.682025][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.932908][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.932932][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.600888][T13500] veth1_macvtap: left promiscuous mode [ 1465.601032][T13500] veth0_macvtap: left promiscuous mode [ 1465.601306][T13500] veth1_vlan: left promiscuous mode [ 1465.612639][T13500] veth0_vlan: left promiscuous mode [ 1466.590661][T10723] Bluetooth: hci4: command 0x0406 tx timeout [ 1466.724483][T10723] Bluetooth: hci2: link tx timeout [ 1466.724948][T10723] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1470.570648][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.501883][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1471.508730][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1471.543492][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1471.627332][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1471.632008][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1473.209585][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1473.209975][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1473.209999][T14584] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1473.210014][T14584] UDF-fs: Scanning with blocksize 512 failed [ 1474.305152][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1474.305286][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1474.305301][T14584] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1474.305310][T14584] UDF-fs: Scanning with blocksize 1024 failed [ 1474.305978][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1474.306128][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1474.306142][T14584] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1474.306151][T14584] UDF-fs: Scanning with blocksize 2048 failed [ 1474.351311][T10039] Bluetooth: hci1: command tx timeout [ 1474.405233][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1474.405327][T14584] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1474.405341][T14584] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1474.405351][T14584] UDF-fs: Scanning with blocksize 4096 failed [ 1474.405358][T14584] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1476.430568][ T61] Bluetooth: hci1: command tx timeout [ 1476.516493][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 1477.632180][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1477.911421][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1478.510565][T10039] Bluetooth: hci1: command tx timeout [ 1479.987213][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1480.006987][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1480.009221][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1480.076029][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1480.078857][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1480.622172][T10039] Bluetooth: hci1: command tx timeout [ 1480.875395][T14555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1949'. [ 1481.149357][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1481.180749][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1481.183553][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1481.220738][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1481.249570][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1482.204549][T10039] Bluetooth: hci6: command tx timeout [ 1483.390880][T10039] Bluetooth: hci7: command tx timeout [ 1484.257556][T14641] block nbd8: shutting down sockets [ 1484.270742][T10039] Bluetooth: hci6: command tx timeout [ 1485.500548][T10039] Bluetooth: hci7: command tx timeout [ 1486.810885][T10039] Bluetooth: hci6: command tx timeout [ 1488.049766][T10039] Bluetooth: hci7: command tx timeout [ 1488.658600][T13500] IPVS: stop unused estimator thread 0... [ 1488.838797][T10039] Bluetooth: hci6: command tx timeout [ 1490.540119][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.540223][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.563003][T10039] Bluetooth: hci7: command tx timeout [ 1496.185988][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1496.186352][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1496.186375][T14717] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1496.186390][T14717] UDF-fs: Scanning with blocksize 512 failed [ 1496.187595][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1496.187837][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1496.187859][T14717] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1496.187874][T14717] UDF-fs: Scanning with blocksize 1024 failed [ 1496.189401][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1496.189574][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1496.189595][T14717] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1496.189610][T14717] UDF-fs: Scanning with blocksize 2048 failed [ 1496.310621][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1496.310780][T14717] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1496.310803][T14717] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1496.310818][T14717] UDF-fs: Scanning with blocksize 4096 failed [ 1496.310829][T14717] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1497.212437][T13500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.524449][T14579] chnl_net:caif_netlink_parms(): no params data found [ 1498.558174][T14606] chnl_net:caif_netlink_parms(): no params data found [ 1500.639195][T13500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.931466][T14615] chnl_net:caif_netlink_parms(): no params data found [ 1501.723706][T13500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.817083][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.817288][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.817500][T14579] bridge_slave_0: entered allmulticast mode [ 1501.841233][T14579] bridge_slave_0: entered promiscuous mode [ 1501.868077][ T5813] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1501.906953][ T5813] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1502.018325][T14606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.018462][T14606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.018733][T14606] bridge_slave_0: entered allmulticast mode [ 1502.035845][T14606] bridge_slave_0: entered promiscuous mode [ 1502.056895][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.057030][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.057289][T14579] bridge_slave_1: entered allmulticast mode [ 1502.059997][T14579] bridge_slave_1: entered promiscuous mode [ 1502.171954][T14767] fido_id[14767]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1504.502840][T13500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.696132][T14606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.696271][T14606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.696521][T14606] bridge_slave_1: entered allmulticast mode [ 1504.699657][T14606] bridge_slave_1: entered promiscuous mode [ 1504.882896][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.915581][T14606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.928609][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.992314][T14606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.330696][T14615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.330880][T14615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.331431][T14615] bridge_slave_0: entered allmulticast mode [ 1506.334171][T14615] bridge_slave_0: entered promiscuous mode [ 1506.852309][T14615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.853042][T14615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.853286][T14615] bridge_slave_1: entered allmulticast mode [ 1507.686758][T14615] bridge_slave_1: entered promiscuous mode [ 1507.731032][T14579] team0: Port device team_slave_0 added [ 1507.878958][T14606] team0: Port device team_slave_0 added [ 1507.937183][T14579] team0: Port device team_slave_1 added [ 1507.972337][T14606] team0: Port device team_slave_1 added [ 1508.101110][T14615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.149946][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.149966][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.149997][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.203351][T14615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.257180][T14606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1508.257295][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.257329][T14606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1508.308181][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.308200][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.308231][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1508.383886][T14606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1508.383915][T14606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1508.383947][T14606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.124058][T14615] team0: Port device team_slave_0 added [ 1509.157787][T14615] team0: Port device team_slave_1 added [ 1510.575253][T14579] hsr_slave_0: entered promiscuous mode [ 1510.588188][T14579] hsr_slave_1: entered promiscuous mode [ 1510.589194][T14579] debugfs: 'hsr0' already exists in 'hsr' [ 1510.589220][T14579] Cannot create hsr debugfs directory [ 1510.611432][T14615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.611451][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.611482][T14615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.738978][T14606] hsr_slave_0: entered promiscuous mode [ 1510.740007][T14606] hsr_slave_1: entered promiscuous mode [ 1510.781730][T14606] debugfs: 'hsr0' already exists in 'hsr' [ 1510.781753][T14606] Cannot create hsr debugfs directory [ 1510.799727][T14615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1510.799785][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1510.799859][T14615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1511.761282][T13500] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.903208][T14852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.903241][T14852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.949455][T14852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1511.949488][T14852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1513.607724][T13500] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.144721][T13500] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.320105][T14615] hsr_slave_0: entered promiscuous mode [ 1514.331786][T14615] hsr_slave_1: entered promiscuous mode [ 1514.335060][T14615] debugfs: 'hsr0' already exists in 'hsr' [ 1514.335088][T14615] Cannot create hsr debugfs directory [ 1514.976876][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1514.977097][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1514.977114][T14874] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1514.977124][T14874] UDF-fs: Scanning with blocksize 512 failed [ 1514.978024][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1514.978166][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1514.978181][T14874] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1514.978190][T14874] UDF-fs: Scanning with blocksize 1024 failed [ 1514.978751][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1514.978847][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1514.978861][T14874] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1514.978870][T14874] UDF-fs: Scanning with blocksize 2048 failed [ 1514.979307][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1514.979430][T14874] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1514.979445][T14874] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1514.979454][T14874] UDF-fs: Scanning with blocksize 4096 failed [ 1514.979461][T14874] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1515.760188][T13500] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.621834][ T8455] usb 9-1: new high-speed USB device number 93 using dummy_hcd [ 1517.751419][ T8455] usb 9-1: device descriptor read/64, error -71 [ 1517.877596][T13500] bridge_slave_1: left allmulticast mode [ 1517.877624][T13500] bridge_slave_1: left promiscuous mode [ 1517.878686][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.962198][T13500] bridge_slave_0: left allmulticast mode [ 1517.962223][T13500] bridge_slave_0: left promiscuous mode [ 1517.962421][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.000549][ T8455] usb 9-1: new high-speed USB device number 94 using dummy_hcd [ 1518.026445][T13500] bridge_slave_1: left allmulticast mode [ 1518.026478][T13500] bridge_slave_1: left promiscuous mode [ 1518.026729][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.130465][ T8455] usb 9-1: device descriptor read/64, error -71 [ 1518.240848][ T8455] usb usb9-port1: attempt power cycle [ 1518.292468][T13500] bridge_slave_0: left allmulticast mode [ 1518.292502][T13500] bridge_slave_0: left promiscuous mode [ 1518.292765][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.594247][ T8455] usb 9-1: new high-speed USB device number 95 using dummy_hcd [ 1518.611486][ T8455] usb 9-1: device descriptor read/8, error -71 [ 1518.870556][ T8455] usb 9-1: new high-speed USB device number 96 using dummy_hcd [ 1518.932092][ T8455] usb 9-1: device descriptor read/8, error -71 [ 1519.007179][T13182] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1519.041333][ T8455] usb usb9-port1: unable to enumerate USB device [ 1519.182599][T13182] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.182629][T13182] usb 10-1: config 0 has no interfaces? [ 1519.185115][T13182] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1519.185148][T13182] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.185174][T13182] usb 10-1: Product: syz [ 1519.185184][T13182] usb 10-1: Manufacturer: syz [ 1519.185195][T13182] usb 10-1: SerialNumber: syz [ 1519.189064][T13182] usb 10-1: config 0 descriptor?? [ 1520.352133][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.411495][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.632854][T13500] bond0 (unregistering): Released all slaves [ 1521.781120][T11622] usb 10-1: USB disconnect, device number 5 [ 1524.881228][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1524.961395][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.009613][T13500] bond0 (unregistering): Released all slaves [ 1525.145018][T14945] geneve2: entered promiscuous mode [ 1525.170613][T14579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1525.246739][T14579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1527.368042][T14579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1528.034534][T14579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1530.791553][T14579] kthread_run failed with err -4 [ 1533.117246][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1533.122857][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1533.139044][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1533.147995][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1533.149482][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1535.230490][T10039] Bluetooth: hci0: command tx timeout [ 1537.317686][T10039] Bluetooth: hci0: command tx timeout [ 1539.390402][T10039] Bluetooth: hci0: command tx timeout [ 1540.800377][T13500] hsr_slave_0: left promiscuous mode [ 1540.853199][T13500] hsr_slave_1: left promiscuous mode [ 1540.854516][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.854608][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.926551][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.926581][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.011325][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1541.014226][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1541.016425][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1541.055364][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1541.059822][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1541.234708][T13500] hsr_slave_0: left promiscuous mode [ 1541.271330][T13500] hsr_slave_1: left promiscuous mode [ 1541.272577][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.272606][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.340130][T13500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.340165][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.470503][ T61] Bluetooth: hci0: command tx timeout [ 1542.667786][T13500] veth1_macvtap: left promiscuous mode [ 1542.667897][T13500] veth0_macvtap: left promiscuous mode [ 1542.668161][T13500] veth1_vlan: left promiscuous mode [ 1542.668335][T13500] veth0_vlan: left promiscuous mode [ 1542.728761][T10039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1542.744155][T10039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1542.747311][T10039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1542.761165][T10039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1542.771585][T10039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1542.881561][T13500] veth1_macvtap: left promiscuous mode [ 1542.881670][T13500] veth0_macvtap: left promiscuous mode [ 1542.881923][T13500] veth1_vlan: left promiscuous mode [ 1542.882110][T13500] veth0_vlan: left promiscuous mode [ 1543.160428][ T61] Bluetooth: hci1: command tx timeout [ 1544.830881][ T61] Bluetooth: hci2: command tx timeout [ 1545.230492][ T61] Bluetooth: hci1: command tx timeout [ 1545.970041][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2096'. [ 1547.197766][T10039] Bluetooth: hci2: command tx timeout [ 1547.310693][T10039] Bluetooth: hci1: command tx timeout [ 1549.230983][T10039] Bluetooth: hci2: command tx timeout [ 1549.390546][T10039] Bluetooth: hci1: command tx timeout [ 1550.201882][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1550.481468][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1551.245477][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.245552][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.310971][T10039] Bluetooth: hci2: command tx timeout [ 1556.012841][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1556.291327][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1565.526199][T15011] chnl_net:caif_netlink_parms(): no params data found [ 1566.795726][T15062] chnl_net:caif_netlink_parms(): no params data found [ 1566.903076][T15053] chnl_net:caif_netlink_parms(): no params data found [ 1566.935382][T13500] IPVS: stop unused estimator thread 0... [ 1567.127037][T15164] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2114'. [ 1567.607385][T15011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.607523][T15011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.607795][T15011] bridge_slave_0: entered allmulticast mode [ 1567.637023][T15011] bridge_slave_0: entered promiscuous mode [ 1567.699826][T15011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.700046][T15011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.720192][T15011] bridge_slave_1: entered allmulticast mode [ 1567.734464][T15011] bridge_slave_1: entered promiscuous mode [ 1568.244263][T15011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.130698][T15062] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.130841][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.131232][T15062] bridge_slave_0: entered allmulticast mode [ 1570.134117][T15062] bridge_slave_0: entered promiscuous mode [ 1570.214836][T15011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.393449][T15062] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.393567][T15062] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.393796][T15062] bridge_slave_1: entered allmulticast mode [ 1570.400171][T15062] bridge_slave_1: entered promiscuous mode [ 1570.422777][T15053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.423178][T15053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.423891][T15053] bridge_slave_0: entered allmulticast mode [ 1570.460791][T15053] bridge_slave_0: entered promiscuous mode [ 1570.533390][T15053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.533525][T15053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.533751][T15053] bridge_slave_1: entered allmulticast mode [ 1570.536562][T15053] bridge_slave_1: entered promiscuous mode [ 1570.732212][T15011] team0: Port device team_slave_0 added [ 1570.737105][T15062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.795457][T15011] team0: Port device team_slave_1 added [ 1570.809067][T15062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.823855][T15053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.006188][T15053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.145755][T15011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.145774][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.145804][T15011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.149923][T15062] team0: Port device team_slave_0 added [ 1571.312091][T15011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.312111][T15011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.312163][T15011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.318481][T15062] team0: Port device team_slave_1 added [ 1573.341835][T15053] team0: Port device team_slave_0 added [ 1573.402197][T15053] team0: Port device team_slave_1 added [ 1576.943243][T15062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1576.943261][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.943291][T15062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.059478][T15062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.059496][T15062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.059527][T15062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.072629][T15053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.072680][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.072755][T15053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.162109][T15053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.162128][T15053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1577.162157][T15053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1577.207399][T15011] hsr_slave_0: entered promiscuous mode [ 1577.227621][T15011] hsr_slave_1: entered promiscuous mode [ 1577.228645][T15011] debugfs: 'hsr0' already exists in 'hsr' [ 1577.228673][T15011] Cannot create hsr debugfs directory [ 1578.657916][T15062] hsr_slave_0: entered promiscuous mode [ 1578.659470][T15062] hsr_slave_1: entered promiscuous mode [ 1578.675132][T15062] debugfs: 'hsr0' already exists in 'hsr' [ 1578.675161][T15062] Cannot create hsr debugfs directory [ 1578.753531][T15053] hsr_slave_0: entered promiscuous mode [ 1578.761549][T15053] hsr_slave_1: entered promiscuous mode [ 1578.763021][T15053] debugfs: 'hsr0' already exists in 'hsr' [ 1578.763048][T15053] Cannot create hsr debugfs directory [ 1579.000767][T11831] libceph: connect (1)[c::]:6789 error -101 [ 1579.001440][T11831] libceph: mon0 (1)[c::]:6789 connect error [ 1579.043223][T11831] libceph: connect (1)[c::]:6789 error -101 [ 1579.043404][T11831] libceph: mon0 (1)[c::]:6789 connect error [ 1579.086587][T15230] ceph: No mds server is up or the cluster is laggy [ 1579.371915][T11831] libceph: connect (1)[c::]:6789 error -101 [ 1579.372130][T11831] libceph: mon0 (1)[c::]:6789 connect error [ 1579.467709][T15237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2135'. [ 1583.102197][T15257] orangefs_mount: mount request failed with -4 [ 1584.783663][T15271] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2144'. [ 1586.555159][T13500] bridge_slave_1: left allmulticast mode [ 1586.555194][T13500] bridge_slave_1: left promiscuous mode [ 1586.555478][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.682815][T13500] bridge_slave_0: left allmulticast mode [ 1586.682848][T13500] bridge_slave_0: left promiscuous mode [ 1586.683138][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.795380][T13500] bridge_slave_1: left allmulticast mode [ 1586.795416][T13500] bridge_slave_1: left promiscuous mode [ 1586.795778][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.893882][T13500] bridge_slave_0: left allmulticast mode [ 1586.893915][T13500] bridge_slave_0: left promiscuous mode [ 1586.897273][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.980733][T13500] bridge_slave_1: left allmulticast mode [ 1586.980765][T13500] bridge_slave_1: left promiscuous mode [ 1586.981032][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.043386][T13500] bridge_slave_0: left allmulticast mode [ 1587.043419][T13500] bridge_slave_0: left promiscuous mode [ 1587.043688][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.136817][T13500] bridge_slave_1: left allmulticast mode [ 1587.136852][T13500] bridge_slave_1: left promiscuous mode [ 1587.137117][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.204620][T13500] bridge_slave_0: left allmulticast mode [ 1587.204654][T13500] bridge_slave_0: left promiscuous mode [ 1587.204952][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.771884][T15299] orangefs_mount: mount request failed with -4 [ 1588.811559][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.941119][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.065955][T13500] bond0 (unregistering): Released all slaves [ 1589.453128][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.532068][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.606872][T13500] bond0 (unregistering): Released all slaves [ 1590.971853][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.381264][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.442554][T13500] bond0 (unregistering): Released all slaves [ 1591.893364][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.942239][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1591.947115][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1592.137454][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.895329][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1592.971834][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1592.972631][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1593.016863][T13500] bond0 (unregistering): Released all slaves [ 1593.158434][T15319] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2157'. [ 1594.500342][T15341] orangefs_mount: mount request failed with -4 [ 1595.981856][ T61] Bluetooth: hci3: command tx timeout [ 1598.330754][T15324] chnl_net:caif_netlink_parms(): no params data found [ 1598.380593][ T61] Bluetooth: hci3: command tx timeout [ 1599.148826][T15368] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2167'. [ 1600.433155][ T61] Bluetooth: hci3: command tx timeout [ 1600.502968][T10039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1600.508724][T15376] orangefs_mount: mount request failed with -4 [ 1600.598110][T10039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1600.628816][T10039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1600.654633][T10039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1600.675719][T10039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1602.106487][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1602.119154][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1602.140826][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1602.144511][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1602.145908][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1602.510861][T10039] Bluetooth: hci3: command tx timeout [ 1602.611468][T13500] hsr_slave_0: left promiscuous mode [ 1602.823599][T10039] Bluetooth: hci6: command tx timeout [ 1603.570855][T13500] hsr_slave_1: left promiscuous mode [ 1603.571906][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.645237][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1603.830532][T13500] hsr_slave_0: left promiscuous mode [ 1603.870605][T13500] hsr_slave_1: left promiscuous mode [ 1603.871470][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1603.921278][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.325780][T10039] Bluetooth: hci0: command tx timeout [ 1604.910471][ T61] Bluetooth: hci6: command tx timeout [ 1604.970377][T13500] hsr_slave_0: left promiscuous mode [ 1604.990575][T13500] hsr_slave_1: left promiscuous mode [ 1604.991379][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.014234][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.130426][T13500] hsr_slave_0: left promiscuous mode [ 1605.152301][T13500] hsr_slave_1: left promiscuous mode [ 1605.153069][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1605.174649][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1605.881117][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1606.021269][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1607.012747][T10039] Bluetooth: hci0: command tx timeout [ 1607.020433][T10039] Bluetooth: hci6: command tx timeout [ 1607.231254][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1607.371088][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1608.551243][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1608.671275][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1609.071090][T10039] Bluetooth: hci6: command tx timeout [ 1609.071125][T10039] Bluetooth: hci0: command tx timeout [ 1609.831999][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1610.001574][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1611.261489][T15324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.261641][T15324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.261862][T15324] bridge_slave_0: entered allmulticast mode [ 1611.665019][T15324] bridge_slave_0: entered promiscuous mode [ 1611.667036][T15426] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2177'. [ 1611.810633][ T61] Bluetooth: hci0: command tx timeout [ 1611.984242][T15324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.984380][T15324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.984632][T15324] bridge_slave_1: entered allmulticast mode [ 1611.987352][T15324] bridge_slave_1: entered promiscuous mode [ 1612.819013][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1612.844913][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1612.845241][T15434] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1612.845318][T15434] UDF-fs: Scanning with blocksize 512 failed [ 1612.950271][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1612.965846][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1612.965998][T15434] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1612.966107][T15434] UDF-fs: Scanning with blocksize 1024 failed [ 1613.018976][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1613.037805][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1613.037836][T15434] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1613.037971][T15434] UDF-fs: Scanning with blocksize 2048 failed [ 1613.156130][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.156616][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.164630][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1613.173500][T15434] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1613.173689][T15434] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1613.173978][T15434] UDF-fs: Scanning with blocksize 4096 failed [ 1613.174126][T15434] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1613.392025][T15324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1613.417522][T15324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1615.403042][T15324] team0: Port device team_slave_0 added [ 1615.729870][T15324] team0: Port device team_slave_1 added [ 1616.209515][T15324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1616.209536][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.209578][T15324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1616.365882][T15324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1616.365897][T15324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1616.365919][T15324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1617.798252][T15465] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2187'. [ 1618.168751][T15324] hsr_slave_0: entered promiscuous mode [ 1618.170132][T15324] hsr_slave_1: entered promiscuous mode [ 1621.740106][T15384] chnl_net:caif_netlink_parms(): no params data found [ 1621.774177][T15396] chnl_net:caif_netlink_parms(): no params data found [ 1622.949728][T15527] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2196'. [ 1624.256758][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.256947][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.257166][T15384] bridge_slave_0: entered allmulticast mode [ 1624.291509][T15384] bridge_slave_0: entered promiscuous mode [ 1624.294037][T15396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1624.294191][T15396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.294383][T15396] bridge_slave_0: entered allmulticast mode [ 1624.297079][T15396] bridge_slave_0: entered promiscuous mode [ 1624.343402][T15396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.343543][T15396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.343821][T15396] bridge_slave_1: entered allmulticast mode [ 1624.395991][T15396] bridge_slave_1: entered promiscuous mode [ 1624.785818][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.785958][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.786237][T15384] bridge_slave_1: entered allmulticast mode [ 1624.788969][T15384] bridge_slave_1: entered promiscuous mode [ 1625.594414][T15396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.683208][T15396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.723494][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1625.759087][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1625.951870][T15396] team0: Port device team_slave_0 added [ 1625.955688][T15396] team0: Port device team_slave_1 added [ 1626.223680][T15324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1627.803944][T15324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1627.918775][T15384] team0: Port device team_slave_0 added [ 1627.926045][T15396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1627.926110][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1627.926141][T15396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1627.928549][T15324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1628.012189][T15384] team0: Port device team_slave_1 added [ 1628.017492][T15396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.017511][T15396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.017553][T15396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1628.018674][T15324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1628.581263][T15581] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2205'. [ 1629.286062][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.286084][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.286116][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.471252][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.471274][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.471307][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.702491][T15396] hsr_slave_0: entered promiscuous mode [ 1629.704057][T15396] hsr_slave_1: entered promiscuous mode [ 1629.705207][T15396] debugfs: 'hsr0' already exists in 'hsr' [ 1629.705236][T15396] Cannot create hsr debugfs directory [ 1630.195645][T15384] hsr_slave_0: entered promiscuous mode [ 1630.196809][T15384] hsr_slave_1: entered promiscuous mode [ 1630.197731][T15384] debugfs: 'hsr0' already exists in 'hsr' [ 1630.197758][T15384] Cannot create hsr debugfs directory [ 1634.444181][T15640] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2213'. [ 1636.103884][T15324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.296071][T15324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.343923][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.344070][ T8165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.391120][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.391279][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.551562][ T10] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 1636.702909][ T10] usb 9-1: config 0 has no interfaces? [ 1636.705144][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1636.705176][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1636.705198][ T10] usb 9-1: Product: syz [ 1636.705214][ T10] usb 9-1: Manufacturer: syz [ 1636.748355][ T10] usb 9-1: config 0 descriptor?? [ 1637.058070][T11622] usb 9-1: USB disconnect, device number 97 [ 1637.473853][T13500] bridge_slave_1: left allmulticast mode [ 1637.473887][T13500] bridge_slave_1: left promiscuous mode [ 1637.474177][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.623418][T13500] bridge_slave_0: left allmulticast mode [ 1637.623453][T13500] bridge_slave_0: left promiscuous mode [ 1637.623730][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.883611][T13500] bridge_slave_1: left allmulticast mode [ 1637.883645][T13500] bridge_slave_1: left promiscuous mode [ 1637.883905][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.992086][T13500] bridge_slave_0: left allmulticast mode [ 1637.992119][T13500] bridge_slave_0: left promiscuous mode [ 1637.992465][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.085269][T13500] bridge_slave_1: left allmulticast mode [ 1638.085302][T13500] bridge_slave_1: left promiscuous mode [ 1638.085561][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.172516][T13500] bridge_slave_0: left allmulticast mode [ 1638.172549][T13500] bridge_slave_0: left promiscuous mode [ 1638.172838][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.422319][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.386039][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.471496][T13500] bond0 (unregistering): Released all slaves [ 1641.991060][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.271270][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.337750][T13500] bond0 (unregistering): Released all slaves [ 1642.591477][T13500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.671390][T13500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.733668][T13500] bond0 (unregistering): Released all slaves [ 1642.751739][T15743] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2223'. [ 1643.463903][T15324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1643.560752][T15324] veth0_vlan: entered promiscuous mode [ 1643.582942][T15324] veth1_vlan: entered promiscuous mode [ 1643.634716][T15324] veth0_macvtap: entered promiscuous mode [ 1643.648349][T15324] veth1_macvtap: entered promiscuous mode [ 1643.678072][T15324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1643.706398][T15324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.734243][T12792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.735094][T12792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.735139][T12792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.735187][T12792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.910962][T13500] hsr_slave_0: left promiscuous mode [ 1645.950556][T13500] hsr_slave_1: left promiscuous mode [ 1645.951491][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.422728][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.900429][T13500] hsr_slave_0: left promiscuous mode [ 1647.940440][T13500] hsr_slave_1: left promiscuous mode [ 1647.941543][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1647.983807][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.180428][T13500] hsr_slave_0: left promiscuous mode [ 1648.231204][T13500] hsr_slave_1: left promiscuous mode [ 1648.232287][T13500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.271328][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.921167][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1651.051008][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1652.496829][T10039] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1652.544795][T10039] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1652.600565][T10039] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1652.605972][T10039] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1652.607862][T10039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1652.711370][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1652.903706][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1654.121170][T13500] team0 (unregistering): Port device team_slave_1 removed [ 1654.293256][T13500] team0 (unregistering): Port device team_slave_0 removed [ 1654.700582][ T61] Bluetooth: hci1: command tx timeout [ 1654.901790][T15815] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2235'. [ 1656.588652][T15384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1656.756543][ T61] Bluetooth: hci1: command tx timeout [ 1656.800761][T15384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1656.985674][T15384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1657.282218][T15384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1658.830679][ T61] Bluetooth: hci1: command tx timeout [ 1660.920471][ T61] Bluetooth: hci1: command tx timeout [ 1663.306365][T10039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1663.337558][T10039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1663.339339][T15840] chnl_net:caif_netlink_parms(): no params data found [ 1663.340045][T10039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1663.466198][T10723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1663.466898][T10723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1663.488316][T15929] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1663.488512][T15929] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1663.594332][T15929] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1663.595705][T15929] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1663.596564][T15929] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1665.665036][T10039] Bluetooth: hci2: command tx timeout [ 1665.790766][T10039] Bluetooth: hci3: command tx timeout [ 1666.867690][T15840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.867785][T15840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.867935][T15840] bridge_slave_0: entered allmulticast mode [ 1666.869874][T15840] bridge_slave_0: entered promiscuous mode [ 1667.247252][T15840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.247343][T15840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.247527][T15840] bridge_slave_1: entered allmulticast mode [ 1667.249721][T15840] bridge_slave_1: entered promiscuous mode [ 1667.711861][T10039] Bluetooth: hci2: command tx timeout [ 1667.838732][T15840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.882049][T10039] Bluetooth: hci3: command tx timeout [ 1668.125991][T15840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.122662][T15840] team0: Port device team_slave_0 added [ 1669.167502][T15840] team0: Port device team_slave_1 added [ 1669.543051][T15840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.543065][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.543087][T15840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.729323][T15840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.729337][T15840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.729359][T15840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.790479][T10039] Bluetooth: hci2: command tx timeout [ 1669.950551][T10039] Bluetooth: hci3: command tx timeout [ 1671.881300][T10039] Bluetooth: hci2: command tx timeout [ 1672.031859][T10039] Bluetooth: hci3: command tx timeout [ 1672.266456][T16001] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1672.760758][T15921] chnl_net:caif_netlink_parms(): no params data found [ 1672.946050][T15840] hsr_slave_0: entered promiscuous mode [ 1672.947538][T15840] hsr_slave_1: entered promiscuous mode [ 1672.956857][T15840] debugfs: 'hsr0' already exists in 'hsr' [ 1672.956939][T15840] Cannot create hsr debugfs directory [ 1673.084948][T15926] chnl_net:caif_netlink_parms(): no params data found [ 1674.116081][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.116177][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.937410][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.937561][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.937832][T15921] bridge_slave_0: entered allmulticast mode [ 1674.952797][T15921] bridge_slave_0: entered promiscuous mode [ 1675.261373][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.261561][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.262222][T15921] bridge_slave_1: entered allmulticast mode [ 1675.264994][T15921] bridge_slave_1: entered promiscuous mode [ 1676.337832][T15926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.338965][T15926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.339181][T15926] bridge_slave_0: entered allmulticast mode [ 1676.375302][T15926] bridge_slave_0: entered promiscuous mode [ 1676.734565][T15926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.735385][T15926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.735591][T15926] bridge_slave_1: entered allmulticast mode [ 1676.801897][T15926] bridge_slave_1: entered promiscuous mode [ 1677.168440][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.523073][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.742900][T15926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.816401][T16078] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2273'. [ 1677.999451][T15926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.082628][T15921] team0: Port device team_slave_0 added [ 1678.204712][T15921] team0: Port device team_slave_1 added [ 1679.299487][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1679.310233][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1679.311155][T16098] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1679.311172][T16098] UDF-fs: Scanning with blocksize 512 failed [ 1679.440238][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1679.452457][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1679.452511][T16098] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1679.452548][T16098] UDF-fs: Scanning with blocksize 1024 failed [ 1679.459631][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1679.459774][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1679.459794][T16098] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1679.459806][T16098] UDF-fs: Scanning with blocksize 2048 failed [ 1679.460442][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1679.460552][T16098] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1679.460570][T16098] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 1679.460582][T16098] UDF-fs: Scanning with blocksize 4096 failed [ 1679.460592][T16098] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1679.966777][T15840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.817907][T15926] team0: Port device team_slave_0 added [ 1682.851409][T15926] team0: Port device team_slave_1 added [ 1682.889609][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.889624][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.889646][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.353099][T15840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.413011][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.413030][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.413071][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1683.815790][T15926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.815812][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1683.815844][T15926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.067226][T15840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.168029][T15926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.168043][T15926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.168066][T15926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.762368][T15840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.825553][T15921] hsr_slave_0: entered promiscuous mode [ 1684.827265][T15921] hsr_slave_1: entered promiscuous mode [ 1684.828417][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 1684.828446][T15921] Cannot create hsr debugfs directory [ 1685.617267][T15926] hsr_slave_0: entered promiscuous mode [ 1685.619595][T15926] hsr_slave_1: entered promiscuous mode [ 1685.629481][T15926] debugfs: 'hsr0' already exists in 'hsr' [ 1685.629558][T15926] Cannot create hsr debugfs directory [ 1689.241395][ T8165] bridge_slave_1: left allmulticast mode [ 1689.241426][ T8165] bridge_slave_1: left promiscuous mode [ 1689.241670][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.357992][ T8165] bridge_slave_0: left allmulticast mode [ 1689.358016][ T8165] bridge_slave_0: left promiscuous mode [ 1689.407909][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.525465][ T8165] bridge_slave_1: left allmulticast mode [ 1689.525490][ T8165] bridge_slave_1: left promiscuous mode [ 1689.525670][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.724319][ T8165] bridge_slave_0: left allmulticast mode [ 1689.724353][ T8165] bridge_slave_0: left promiscuous mode [ 1689.724614][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.885504][ T8165] bridge_slave_1: left allmulticast mode [ 1689.885538][ T8165] bridge_slave_1: left promiscuous mode [ 1689.885795][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.981500][ T8165] bridge_slave_0: left allmulticast mode [ 1689.981524][ T8165] bridge_slave_0: left promiscuous mode [ 1689.981714][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.964254][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.123565][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.760517][ T8165] bond0 (unregistering): Released all slaves [ 1694.662864][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.322385][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.939660][ T8165] bond0 (unregistering): Released all slaves [ 1696.700496][T11622] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1696.923268][T11622] usb 10-1: Using ep0 maxpacket: 32 [ 1696.936715][T11622] usb 10-1: config index 0 descriptor too short (expected 539, got 27) [ 1696.936750][T11622] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.936888][T11622] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1696.963674][T11622] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1696.963800][T11622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.963876][T11622] usb 10-1: Product: syz [ 1696.963920][T11622] usb 10-1: Manufacturer: syz [ 1696.963963][T11622] usb 10-1: SerialNumber: syz [ 1697.019545][T11622] usb 10-1: config 0 descriptor?? [ 1697.037364][T11622] hub 10-1:0.0: bad descriptor, ignoring hub [ 1697.037409][T11622] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1697.351590][T13182] usb 10-1: USB disconnect, device number 6 [ 1698.652679][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.711158][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.761105][ T8165] bond0 (unregistering): Released all slaves [ 1698.863350][T15840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1699.706239][T15840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1699.819807][T15840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1699.923965][T15840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1701.707571][T16254] syz.9.2311 (16254): drop_caches: 2 [ 1703.540108][T15840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.598698][T15840] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.617339][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.617631][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.660998][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.661658][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1705.870487][ T8165] hsr_slave_0: left promiscuous mode [ 1705.892408][ T8165] hsr_slave_1: left promiscuous mode [ 1705.893199][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.001738][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.441283][ T8165] hsr_slave_0: left promiscuous mode [ 1706.632325][ T8165] hsr_slave_1: left promiscuous mode [ 1706.633146][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.681407][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.891131][ T8165] hsr_slave_0: left promiscuous mode [ 1706.930492][ T8165] hsr_slave_1: left promiscuous mode [ 1706.932964][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.932985][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.991595][ T8165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.991738][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.129513][ T8165] veth1_macvtap: left promiscuous mode [ 1707.129593][ T8165] veth0_macvtap: left promiscuous mode [ 1707.129997][ T8165] veth1_vlan: left promiscuous mode [ 1707.130121][ T8165] veth0_vlan: left promiscuous mode [ 1708.100364][T13557] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1708.250356][T13557] usb 10-1: Using ep0 maxpacket: 32 [ 1708.253537][T13557] usb 10-1: config index 0 descriptor too short (expected 539, got 27) [ 1708.253568][T13557] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.253619][T13557] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1708.256193][T13557] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1708.256244][T13557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.256259][T13557] usb 10-1: Product: syz [ 1708.256271][T13557] usb 10-1: Manufacturer: syz [ 1708.256281][T13557] usb 10-1: SerialNumber: syz [ 1708.260037][T13557] usb 10-1: config 0 descriptor?? [ 1708.338545][T13557] hub 10-1:0.0: bad descriptor, ignoring hub [ 1708.338666][T13557] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1708.532396][T13557] usb 10-1: USB disconnect, device number 7 [ 1708.815667][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1709.091277][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1711.990295][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1712.152321][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1713.474275][T15930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1713.491394][T15930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1713.496972][T15930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1713.498163][T15930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1713.525185][T15930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1715.630616][T10039] Bluetooth: hci0: command tx timeout [ 1716.434973][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1716.435190][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1716.435205][T16360] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1716.435215][T16360] UDF-fs: Scanning with blocksize 512 failed [ 1716.436085][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1716.436216][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1716.436231][T16360] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1716.436241][T16360] UDF-fs: Scanning with blocksize 1024 failed [ 1716.436802][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1716.436902][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1716.436917][T16360] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1716.436927][T16360] UDF-fs: Scanning with blocksize 2048 failed [ 1716.437370][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1716.437454][T16360] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1716.437468][T16360] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1716.437478][T16360] UDF-fs: Scanning with blocksize 4096 failed [ 1716.437486][T16360] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1716.621670][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1716.860996][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1717.716080][T10039] Bluetooth: hci0: command tx timeout [ 1719.790739][T10039] Bluetooth: hci0: command tx timeout [ 1721.871646][T10039] Bluetooth: hci0: command tx timeout [ 1722.714717][T15930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1722.750635][T15930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1722.753012][T15930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1722.759695][T15930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1722.760525][T15930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1723.874756][T15930] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1723.879568][T15930] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1723.891323][T15930] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1723.923898][T16349] chnl_net:caif_netlink_parms(): no params data found [ 1723.935410][T15930] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1723.945616][T15930] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1724.832536][T10039] Bluetooth: hci1: command tx timeout [ 1725.348607][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.348695][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.348859][T16349] bridge_slave_0: entered allmulticast mode [ 1725.378391][T16349] bridge_slave_0: entered promiscuous mode [ 1725.584340][T16349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.600551][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.604505][T16349] bridge_slave_1: entered allmulticast mode [ 1725.633507][T16349] bridge_slave_1: entered promiscuous mode [ 1726.114273][T10039] Bluetooth: hci6: command tx timeout [ 1726.797361][T16349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1726.834880][T16349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.910878][T15930] Bluetooth: hci1: command tx timeout [ 1727.191972][T16349] team0: Port device team_slave_0 added [ 1727.247462][T16349] team0: Port device team_slave_1 added [ 1727.419447][T16403] chnl_net:caif_netlink_parms(): no params data found [ 1727.499742][T16349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.499763][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.499796][T16349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.573393][T16349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.573414][T16349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1727.573447][T16349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1728.505530][T15930] Bluetooth: hci6: command tx timeout [ 1729.018306][T15930] Bluetooth: hci1: command tx timeout [ 1730.368497][T16349] hsr_slave_0: entered promiscuous mode [ 1730.376864][T16349] hsr_slave_1: entered promiscuous mode [ 1730.380024][T16416] chnl_net:caif_netlink_parms(): no params data found [ 1730.421924][ T5813] usb 9-1: new high-speed USB device number 98 using dummy_hcd [ 1730.510321][T15930] Bluetooth: hci6: command tx timeout [ 1730.570336][ T5813] usb 9-1: Using ep0 maxpacket: 32 [ 1730.573292][ T5813] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.573353][ T5813] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1730.573383][ T5813] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1730.573412][ T5813] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1730.578349][ T5813] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1730.578380][ T5813] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.578409][ T5813] usb 9-1: Product: syz [ 1730.578421][ T5813] usb 9-1: Manufacturer: syz [ 1730.578433][ T5813] usb 9-1: SerialNumber: syz [ 1730.703234][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1730.729032][ T5813] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input16 [ 1730.923020][ T5813] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1730.923044][ T5813] (id 0x00) [ 1731.040431][ T5813] rc_core: IR keymap rc-imon-pad not found [ 1731.040453][ T5813] Registered IR keymap rc-empty [ 1731.040537][ T5813] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1731.040564][ T5813] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1731.070806][T15930] Bluetooth: hci1: command tx timeout [ 1731.117792][T16403] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.118000][T16403] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.118192][T16403] bridge_slave_0: entered allmulticast mode [ 1731.145273][T16403] bridge_slave_0: entered promiscuous mode [ 1731.177108][ T5813] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1731.179288][ T5813] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input17 [ 1731.220731][ T5813] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:98> initialized [ 1731.364502][T16403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.364820][T16403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.365049][T16403] bridge_slave_1: entered allmulticast mode [ 1731.393670][T16403] bridge_slave_1: entered promiscuous mode [ 1731.711531][T16482] imon:vfd_write: invalid payload size [ 1731.915117][T16403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.984593][T16403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.189077][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.190149][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.206106][T16416] bridge_slave_0: entered allmulticast mode [ 1732.218248][T16416] bridge_slave_0: entered promiscuous mode [ 1732.324097][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.324351][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.324551][T16416] bridge_slave_1: entered allmulticast mode [ 1732.329853][T16416] bridge_slave_1: entered promiscuous mode [ 1732.368752][T16403] team0: Port device team_slave_0 added [ 1732.625759][T15930] Bluetooth: hci6: command tx timeout [ 1732.767806][T16403] team0: Port device team_slave_1 added [ 1732.999191][T16416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.074134][T16416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.077217][T16403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.077230][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.077252][T16403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.200472][ T5813] usb 9-1: USB disconnect, device number 98 [ 1733.347900][T16403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.347914][T16403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.347937][T16403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.839135][T16416] team0: Port device team_slave_0 added [ 1734.523372][T16416] team0: Port device team_slave_1 added [ 1735.078435][T16403] hsr_slave_0: entered promiscuous mode [ 1735.079827][T16403] hsr_slave_1: entered promiscuous mode [ 1735.148416][T16403] debugfs: 'hsr0' already exists in 'hsr' [ 1735.148449][T16403] Cannot create hsr debugfs directory [ 1736.394753][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.394828][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.241895][T16416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.241916][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.241945][T16416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.248995][T16416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.249015][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.249047][T16416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.422244][T16416] hsr_slave_0: entered promiscuous mode [ 1739.423236][T16416] hsr_slave_1: entered promiscuous mode [ 1739.423856][T16416] debugfs: 'hsr0' already exists in 'hsr' [ 1739.423874][T16416] Cannot create hsr debugfs directory [ 1739.605886][ T8165] bridge_slave_1: left allmulticast mode [ 1739.605911][ T8165] bridge_slave_1: left promiscuous mode [ 1739.606141][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.701758][ T8165] bridge_slave_0: left allmulticast mode [ 1739.701789][ T8165] bridge_slave_0: left promiscuous mode [ 1739.702079][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.796378][ T8165] bridge_slave_1: left allmulticast mode [ 1739.796411][ T8165] bridge_slave_1: left promiscuous mode [ 1739.796683][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.874686][ T8165] bridge_slave_0: left allmulticast mode [ 1739.874719][ T8165] bridge_slave_0: left promiscuous mode [ 1739.874983][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.973085][ T8165] bridge_slave_1: left allmulticast mode [ 1739.973116][ T8165] bridge_slave_1: left promiscuous mode [ 1739.973402][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.053797][ T8165] bridge_slave_0: left allmulticast mode [ 1740.053830][ T8165] bridge_slave_0: left promiscuous mode [ 1740.054085][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.830358][T13182] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1740.980544][T13182] usb 10-1: Using ep0 maxpacket: 32 [ 1740.983959][T13182] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.984019][T13182] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1740.984049][T13182] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1740.984080][T13182] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1740.988832][T13182] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1740.988864][T13182] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.988887][T13182] usb 10-1: Product: syz [ 1740.988903][T13182] usb 10-1: Manufacturer: syz [ 1740.988920][T13182] usb 10-1: SerialNumber: syz [ 1741.165668][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1741.207097][T13182] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input18 [ 1741.400453][T13182] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1741.400477][T13182] (id 0x00) [ 1741.441429][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.490333][T13182] rc_core: IR keymap rc-imon-pad not found [ 1741.490358][T13182] Registered IR keymap rc-empty [ 1741.490461][T13182] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1741.490481][T13182] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1741.592149][T13182] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1741.595516][T13182] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input19 [ 1741.631289][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.713416][T13182] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:8> initialized [ 1741.742447][ T8165] bond0 (unregistering): Released all slaves [ 1742.131837][T16596] imon:vfd_write: invalid payload size [ 1742.651601][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.771431][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.853897][ T8165] bond0 (unregistering): Released all slaves [ 1743.575637][T13182] usb 10-1: USB disconnect, device number 8 [ 1745.263210][ T8165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1745.365021][ T8165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1745.445938][ T8165] bond0 (unregistering): Released all slaves [ 1747.021659][ T8165] hsr_slave_0: left promiscuous mode [ 1747.639169][ T8165] hsr_slave_1: left promiscuous mode [ 1747.769472][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.023588][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.360736][ T8165] hsr_slave_0: left promiscuous mode [ 1749.395707][ T8165] hsr_slave_1: left promiscuous mode [ 1749.441607][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.482737][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1749.762361][ T8165] hsr_slave_0: left promiscuous mode [ 1749.800691][ T8165] hsr_slave_1: left promiscuous mode [ 1749.801685][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.823871][ T8165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.184356][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1751.190765][T13557] usb 9-1: new high-speed USB device number 99 using dummy_hcd [ 1751.350448][T13557] usb 9-1: Using ep0 maxpacket: 32 [ 1751.353466][T13557] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.353529][T13557] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1751.353550][T13557] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1751.353571][T13557] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1751.356049][T13557] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1751.356082][T13557] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.356097][T13557] usb 9-1: Product: syz [ 1751.356108][T13557] usb 9-1: Manufacturer: syz [ 1751.356121][T13557] usb 9-1: SerialNumber: syz [ 1751.451902][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1751.454286][T13557] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input20 [ 1751.481607][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1751.670357][T13557] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1751.670380][T13557] (id 0x00) [ 1751.771532][T13557] rc_core: IR keymap rc-imon-pad not found [ 1751.771556][T13557] Registered IR keymap rc-empty [ 1751.773785][T13557] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1751.773810][T13557] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1751.875502][T13557] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1751.892100][T13557] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input21 [ 1751.914986][T13557] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:99> initialized [ 1752.426024][T16684] imon:vfd_write: invalid payload size [ 1753.053128][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1753.231120][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1753.947868][ T10] usb 9-1: USB disconnect, device number 99 [ 1754.675737][ T8165] team0 (unregistering): Port device team_slave_1 removed [ 1754.861978][ T8165] team0 (unregistering): Port device team_slave_0 removed [ 1757.280999][T16349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1757.284033][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1757.284310][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1757.284332][T16697] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1757.284346][T16697] UDF-fs: Scanning with blocksize 512 failed [ 1757.422609][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1757.423395][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1757.423474][T16697] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1757.423488][T16697] UDF-fs: Scanning with blocksize 1024 failed [ 1757.424220][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1757.424344][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1757.424362][T16697] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1757.424374][T16697] UDF-fs: Scanning with blocksize 2048 failed [ 1757.424926][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1757.425028][T16697] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1757.425045][T16697] UDF-fs: warning (device nbd9): udf_load_vrs: No anchor found [ 1757.425057][T16697] UDF-fs: Scanning with blocksize 4096 failed [ 1757.425067][T16697] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1757.853665][T16349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1759.141608][T16349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1759.227477][T16349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1760.960567][T13557] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1761.054487][T16349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.130406][T13557] usb 10-1: Using ep0 maxpacket: 32 [ 1761.158127][T13557] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.158191][T13557] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1761.158222][T13557] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1761.158252][T13557] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1761.163101][T13557] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1761.163134][T13557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.163157][T13557] usb 10-1: Product: syz [ 1761.163173][T13557] usb 10-1: Manufacturer: syz [ 1761.163189][T13557] usb 10-1: SerialNumber: syz [ 1761.337187][T16349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.383472][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.383570][ T6382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.408428][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.408568][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.494105][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1761.780778][T13557] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input22 [ 1761.948647][T16403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1762.089627][T16403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1762.163311][T13557] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1762.163336][T13557] (id 0x00) [ 1762.222967][T16403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1762.370465][T13557] rc_core: IR keymap rc-imon-pad not found [ 1762.370488][T13557] Registered IR keymap rc-empty [ 1762.370573][T13557] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1762.370592][T13557] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1762.413758][T13557] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1762.419140][T16403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1762.450679][T13557] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input23 [ 1762.693449][T13557] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:9> initialized [ 1762.902050][T16416] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1763.125664][T16416] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1763.217459][T16416] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1763.293762][T16416] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1763.911231][ T10] usb 10-1: USB disconnect, device number 9 [ 1764.084231][T16349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1764.407829][T16403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.574822][T16403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.608130][T16416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.706038][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.718124][T16667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.826416][ T1469] ------------[ cut here ]------------ [ 1764.826432][ T1469] in_task() && kcov_mode_enabled(mode) [ 1764.826449][ T1469] WARNING: kernel/kcov.c:872 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:7/1469 [ 1764.826621][ T1469] Modules linked in: [ 1764.826662][ T1469] CPU: 1 UID: 0 PID: 1469 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1764.826688][ T1469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1764.826703][ T1469] Workqueue: events_unbound cfg80211_wiphy_work [ 1764.826844][ T1469] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1764.826881][ T1469] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 1764.826903][ T1469] RSP: 0018:ffffc900054a7978 EFLAGS: 00010202 [ 1764.826923][ T1469] RAX: 0000000000000002 RBX: ffff888028779e40 RCX: 0000000000000000 [ 1764.826939][ T1469] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 1764.826955][ T1469] RBP: ffff8880305d88c0 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 1764.826972][ T1469] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff88805c219d08 [ 1764.826990][ T1469] R13: ffff88803ddc07c0 R14: 0000000000000000 R15: ffff88805c219d20 [ 1764.827006][ T1469] FS: 0000000000000000(0000) GS:ffff8881266c9000(0000) knlGS:0000000000000000 [ 1764.827024][ T1469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1764.827040][ T1469] CR2: 000020000002f000 CR3: 00000000b43fc000 CR4: 00000000003526f0 [ 1764.827060][ T1469] Call Trace: [ 1764.827069][ T1469] [ 1764.827091][ T1469] ieee80211_iface_work+0x211/0x12b0 [ 1764.827202][ T1469] cfg80211_wiphy_work+0x2ab/0x450 [ 1764.827240][ T1469] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.827288][ T1469] process_scheduled_works+0xaec/0x17a0 [ 1764.827347][ T1469] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.827369][ T1469] ? do_raw_spin_lock+0x12b/0x2f0 [ 1764.827420][ T1469] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1764.827454][ T1469] ? schedule+0x90/0x360 [ 1764.827562][ T1469] worker_thread+0xda6/0x1360 [ 1764.827619][ T1469] kthread+0x726/0x8b0 [ 1764.827653][ T1469] ? __pfx_worker_thread+0x10/0x10 [ 1764.827677][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.827703][ T1469] ? rt_spin_unlock+0x14f/0x200 [ 1764.827734][ T1469] ? rt_spin_unlock+0x160/0x200 [ 1764.827756][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.827788][ T1469] ret_from_fork+0x51b/0xa40 [ 1764.827857][ T1469] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.827881][ T1469] ? __switch_to+0xc82/0x1410 [ 1764.827946][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.827977][ T1469] ret_from_fork_asm+0x1a/0x30 [ 1764.828046][ T1469] [ 1764.828063][ T1469] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1764.828083][ T1469] CPU: 1 UID: 0 PID: 1469 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1764.828110][ T1469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1764.828126][ T1469] Workqueue: events_unbound cfg80211_wiphy_work [ 1764.828156][ T1469] Call Trace: [ 1764.828166][ T1469] [ 1764.828176][ T1469] vpanic+0x1e0/0x670 [ 1764.828226][ T1469] panic+0xc5/0xd0 [ 1764.828258][ T1469] ? __pfx_panic+0x10/0x10 [ 1764.828301][ T1469] ? ret_from_fork_asm+0x1a/0x30 [ 1764.828341][ T1469] __warn+0x315/0x4a0 [ 1764.828370][ T1469] ? kcov_remote_start+0x5d8/0x710 [ 1764.828403][ T1469] ? kcov_remote_start+0x5d8/0x710 [ 1764.828437][ T1469] __report_bug+0x29a/0x540 [ 1764.828537][ T1469] ? kcov_remote_start+0x5d8/0x710 [ 1764.828569][ T1469] ? __pfx___report_bug+0x10/0x10 [ 1764.828602][ T1469] ? do_raw_spin_lock+0x12b/0x2f0 [ 1764.828638][ T1469] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1764.828670][ T1469] ? rt_spin_lock+0x1e0/0x400 [ 1764.828697][ T1469] ? rt_spin_lock+0x1e0/0x400 [ 1764.828723][ T1469] ? kcov_remote_start+0x5d8/0x710 [ 1764.828755][ T1469] report_bug+0x16a/0x220 [ 1764.828786][ T1469] ? kcov_remote_start+0x5d8/0x710 [ 1764.828814][ T1469] ? kcov_remote_start+0x5da/0x710 [ 1764.828844][ T1469] handle_bug+0x98/0x200 [ 1764.828910][ T1469] exc_invalid_op+0x1a/0x50 [ 1764.828944][ T1469] asm_exc_invalid_op+0x1a/0x20 [ 1764.828986][ T1469] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 1764.829019][ T1469] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 22 2e cd 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 80 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 4a 52 4a 09 89 c0 48 c7 c7 a0 03 26 [ 1764.829040][ T1469] RSP: 0018:ffffc900054a7978 EFLAGS: 00010202 [ 1764.829059][ T1469] RAX: 0000000000000002 RBX: ffff888028779e40 RCX: 0000000000000000 [ 1764.829075][ T1469] RDX: 0000000000000000 RSI: ffffffff8b85e960 RDI: ffffffff8b85e920 [ 1764.829092][ T1469] RBP: ffff8880305d88c0 R08: ffffffff8b0fcd50 R09: ffffffff8dbc77c0 [ 1764.829109][ T1469] R10: dffffc0000000000 R11: fffffbfff1e8fcaf R12: ffff88805c219d08 [ 1764.829127][ T1469] R13: ffff88803ddc07c0 R14: 0000000000000000 R15: ffff88805c219d20 [ 1764.829153][ T1469] ? rt_spin_lock+0x1e0/0x400 [ 1764.829186][ T1469] ? kcov_remote_start+0xe0/0x710 [ 1764.829227][ T1469] ieee80211_iface_work+0x211/0x12b0 [ 1764.829265][ T1469] cfg80211_wiphy_work+0x2ab/0x450 [ 1764.829296][ T1469] ? process_scheduled_works+0xa0f/0x17a0 [ 1764.829322][ T1469] process_scheduled_works+0xaec/0x17a0 [ 1764.829378][ T1469] ? __pfx_process_scheduled_works+0x10/0x10 [ 1764.829399][ T1469] ? do_raw_spin_lock+0x12b/0x2f0 [ 1764.829437][ T1469] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1764.829469][ T1469] ? schedule+0x90/0x360 [ 1764.829508][ T1469] worker_thread+0xda6/0x1360 [ 1764.829561][ T1469] kthread+0x726/0x8b0 [ 1764.829594][ T1469] ? __pfx_worker_thread+0x10/0x10 [ 1764.829618][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.829645][ T1469] ? rt_spin_unlock+0x14f/0x200 [ 1764.829676][ T1469] ? rt_spin_unlock+0x160/0x200 [ 1764.829699][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.829729][ T1469] ret_from_fork+0x51b/0xa40 [ 1764.829757][ T1469] ? __pfx_ret_from_fork+0x10/0x10 [ 1764.829780][ T1469] ? __switch_to+0xc82/0x1410 [ 1764.829819][ T1469] ? __pfx_kthread+0x10/0x10 [ 1764.829849][ T1469] ret_from_fork_asm+0x1a/0x30 [ 1764.829902][ T1469] [ 1764.830621][ T1469] Kernel Offset: disabled