last executing test programs: 18m5.823565303s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_setup(0x4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x8}, 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 17m58.622943259s ago: executing program 0 (id=16): socket$netlink(0x10, 0x3, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)) 17m58.548210674s ago: executing program 4 (id=5): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() unshare(0x14000000) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) capset(0x0, &(0x7f0000000780)={0xa400, 0x1ff, 0x8, 0x0, 0x1, 0xffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) r7 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x1a1000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000b00)=0x88f) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x63, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4000094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) 17m55.317967573s ago: executing program 0 (id=19): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24a, 0xab3, 0x1, 0x6, 0xfffffffffffffff4, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x7ffd, 0xe, 0x5d, 0x800, 0x3, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xde2, 0xfffffdfffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x6, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0xd, 0x4, 0x0, 0x8000000000000000, 0x0, 0xca7, 0x5, 0x6, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0xf2, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7e, 0x40003, 0xb4000000, 0x0, 0x9, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0x5, 0xfffffffffffff36f, 0x4]}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f0000000480)) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000100)={0x0}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x100) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 17m42.950492125s ago: executing program 32 (id=5): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() unshare(0x14000000) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) capset(0x0, &(0x7f0000000780)={0xa400, 0x1ff, 0x8, 0x0, 0x1, 0xffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x103000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4}) r7 = openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x1a1000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f0000000b00)=0x88f) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x63, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4000094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) 17m37.080578168s ago: executing program 33 (id=19): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r2, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x8, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000004, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0xbcd, 0x5, 0x5, 0x24a, 0xab3, 0x1, 0x6, 0xfffffffffffffff4, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x7ffd, 0xe, 0x5d, 0x800, 0x3, 0x2, 0x3, 0xffffffffffff8000, 0x6, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0xde2, 0xfffffdfffffffb61, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x6, 0x101, 0x0, 0x67c, 0x8000000000000000, 0x1, 0xd, 0x4, 0x0, 0x8000000000000000, 0x0, 0xca7, 0x5, 0x6, 0x100, 0x2da74e41, 0x1, 0x10, 0x80000000080, 0x75, 0x1, 0x2, 0x2, 0x8, 0xc79, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0x7686, 0x1ff, 0xf2, 0xe648, 0x2, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7e, 0x40003, 0xb4000000, 0x0, 0x9, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xe7, 0x5, 0xfffffffffffff36f, 0x4]}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0xfffffffffffffffc, &(0x7f0000000480)) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000100)={0x0}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x100) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) 15m44.077626601s ago: executing program 1 (id=138): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x8b, 0x5, 0x2, 0x0, 0x8, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000effdf6ffff0000ff00", "000003cefd70f14003556000"]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x7, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x68}, {0x0, 0x5, 0xf5, '\x00', 0xd}, {0x7, 0x9, 0xc, '\x00', 0xc}, {0x0, 0x8, 0x54, '\x00', 0xff}, {0x71, 0xd7, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0xff, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0xff}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0x12, 0xee, 0x7, '\x00', 0xff}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0xb, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0xff, '\x00', 0x2}, {0x7, 0x1, 0x7, '\x00', 0x2}, {0x2, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x5, 0x23, 0xf3, '\x00', 0x4}, {0x8, 0x6, 0x4}]}}) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="80fd07", 0x3}], 0x1, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) r4 = syz_open_dev$video(&(0x7f0000000140), 0xb, 0xc80) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000001c0)=0xffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x4050) 15m36.744018573s ago: executing program 1 (id=143): write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 15m32.197662663s ago: executing program 1 (id=145): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000080)={0x150001, 0x0, {[0xffffffffffffffff, 0x1f7, 0xffffffff, 0x4, 0x3, 0xf, 0x4, 0x4]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15m30.914437198s ago: executing program 1 (id=148): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0x5, 0x0, 0x4, 0xefffffffffefffff, 0x1ffffffffffffffd, 0x5, 0x4], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m27.463295427s ago: executing program 1 (id=150): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) 15m22.137812586s ago: executing program 1 (id=154): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 15m2.763217305s ago: executing program 34 (id=154): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) 12m32.315982495s ago: executing program 2 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 12m25.36905943s ago: executing program 3 (id=253): openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x1495c0, 0x0) 12m24.821125133s ago: executing program 3 (id=254): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 12m20.653347355s ago: executing program 3 (id=255): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x2040000, 0x0) socket(0x1, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x5, @pix={0xb78d0f0, 0x27, 0x47425247, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x3, 0x2, 0x7}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x12c, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200000}}}]}, {0xcc, 0x4, "d90300f75efe2ddbc3d652a8526a30c3a8bcf3a1ba0bd1b0e53184b0b68ab1ca011d9bca8b03f9df80ec730321f7fd578a0512d6b7f1093fdfd80b3b1537ecab9dc083fe4eda4fe256617ec8584986207f2ec2c9bfccfb90a5b393a7418b94a3eeb9c14c1c1fcb1a90696de326989e91db090000000623d6baee767ed5da61a102e137bd33192f1f267a5e45694e0c7e35cad99dc2927414ee005d77d11111dec8bf21666fcd0d1d9bcd1640884ecbce282fe87a80f041a86c0ce6fd1f8a00"/200}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x9, 0x0, 0x0, r5}]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 12m19.478590784s ago: executing program 2 (id=256): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x141400, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x200) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3) 12m17.448816932s ago: executing program 2 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) 12m13.983544282s ago: executing program 2 (id=258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r7, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x7, 0x6, 0x6, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7020fddbdf251200000008000300", @ANYRES32, @ANYBLOB="06001a01010000000500e40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 12m13.024275693s ago: executing program 3 (id=259): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x21}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 12m11.77735677s ago: executing program 3 (id=260): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, 0x0, 0x0) 12m10.637073191s ago: executing program 2 (id=261): openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x1495c0, 0x0) 12m10.477588869s ago: executing program 3 (id=262): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 12m10.27212279s ago: executing program 2 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 11m54.89453517s ago: executing program 35 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) 11m54.640505368s ago: executing program 36 (id=262): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = gettid() fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x4, 0x10001, 0x5, r1}) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 10m23.032073693s ago: executing program 9 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, 0x0, 0xe07e872420dfefca) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r8, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x7, 0x6, 0x6, 0x9, 0x0, 0xa, 0xf7f, 0x400}, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7020fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="06001a01010000000500e40000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 10m14.449929974s ago: executing program 9 (id=297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x21}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 10m13.346718158s ago: executing program 9 (id=299): write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 10m9.640859667s ago: executing program 9 (id=301): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/address_bits', 0x202, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{0x0}], 0x1) 10m7.219335219s ago: executing program 9 (id=303): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c) r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f00000002c0)={0x1, &(0x7f0000000440)=[{0x16, '\x00', @buffer={"6cb1e7609e2db060064283a8d78abd1cb4d357cd15ee2f3bcdb25df2903d282b", 0x20}, 0x8}]}) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0xe, 0x2, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 10m6.687260352s ago: executing program 9 (id=304): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @remote}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 9m50.610610773s ago: executing program 37 (id=304): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x2e4, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e22, @remote}, @ib={0x1b, 0xffff, 0x1, {"000037e45bd17505546dd1caff00"}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 5m58.610775549s ago: executing program 7 (id=497): recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x2040000, 0x0) socket(0x1, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100000020008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x22) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x12c, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x118, 0x1, [@m_mpls={0x114, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x200000}}}]}, {0xcc, 0x4, "d90300f75efe2ddbc3d652a8526a30c3a8bcf3a1ba0bd1b0e53184b0b68ab1ca011d9bca8b03f9df80ec730321f7fd578a0512d6b7f1093fdfd80b3b1537ecab9dc083fe4eda4fe256617ec8584986207f2ec2c9bfccfb90a5b393a7418b94a3eeb9c14c1c1fcb1a90696de326989e91db090000000623d6baee767ed5da61a102e137bd33192f1f267a5e45694e0c7e35cad99dc2927414ee005d77d11111dec8bf21666fcd0d1d9bcd1640884ecbce282fe87a80f041a86c0ce6fd1f8a00"/200}, {0xc}, {0xc}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0xeb756673eed151e1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x9, 0x0, 0x0, r4}]) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5m53.910388504s ago: executing program 7 (id=499): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="2011040600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m47.868374531s ago: executing program 7 (id=501): syslog(0x3, &(0x7f0000000080)=""/164, 0xfffffffffffffe74) r0 = syz_open_dev$hiddev(&(0x7f0000000580), 0x4, 0x24040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f00000002c0)=[{0x48, 0x0, 0x0, 0x800c}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0x9ffc) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000005c0)=0x2) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000002082057d004000010203010902600003010680070904000000010100000a2401a80f0a0002010209ea069d27146188f6090401010101020000090501"], 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) listen(r3, 0xfff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @empty, 0x4}, 0x1c) 5m43.935473094s ago: executing program 7 (id=503): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) 5m41.076917334s ago: executing program 7 (id=504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in6=@empty, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x9, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x50, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x20, 0x80, "210466d3"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 5m39.456973444s ago: executing program 7 (id=506): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) epoll_create1(0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r6, 0x4, 0x1) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) 5m23.890187514s ago: executing program 38 (id=506): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) epoll_create1(0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r6, 0x4, 0x1) ioctl$TIOCGDEV(r6, 0x80045432, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) 10.624425474s ago: executing program 8 (id=632): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0xfffffffffffffe04, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480), 0x0, 0x8000e5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x40000002, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x801, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x400, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x3, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x62, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0x40, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x13, 0x200, &(0x7f00000003c0)="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"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r3, 0x22052000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008010) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r7, r8, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.462462362s ago: executing program 8 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 3.712178797s ago: executing program 8 (id=634): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000002c0)={0x130, 0x0, r1, {0x7, 0xc, 0x0, '\x00', {0x86, 0x4af22, 0x6, 0x6, 0x0, r2, 0xa000, '\x00', 0x6, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff3}, {0x203d7f, 0x7, 0xc000000}, {0x4000100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 3.156308575s ago: executing program 8 (id=635): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 805.739856ms ago: executing program 8 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002000)=[@text64={0x40, 0x0}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="650f08f26e2e0fc75c000f2202ba4300b8ca00ef67a7360f72e6d43e0f54eb3e360f20160f65260100", 0x29}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 8 (id=637): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xf730ac4d9e9750df, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.269318][ T9093] bridge_slave_0: entered allmulticast mode [ 973.279041][ T7318] usb 8-1: Product: syz [ 973.294390][ T7318] usb 8-1: Manufacturer: syz [ 973.316254][ T9093] bridge_slave_0: entered promiscuous mode [ 973.327476][ T7318] usb 8-1: SerialNumber: syz [ 973.594960][ T9093] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.632830][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.681175][ T9093] bridge_slave_1: entered allmulticast mode [ 973.731264][ T9093] bridge_slave_1: entered promiscuous mode [ 973.873498][ T9076] team0: Port device team_slave_0 added [ 973.930041][ T7318] usb 8-1: interface 2 not found [ 974.067404][ T7318] usb 8-1: selecting invalid altsetting 0 [ 974.254330][ T7318] usb 8-1: selecting invalid altsetting 0 [ 974.272195][ T7318] usbtest 8-1:1.1: probe with driver usbtest failed with error -22 [ 974.321324][ T7318] usb 8-1: selecting invalid altsetting 0 [ 974.352912][ T7318] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 974.378133][ T9076] team0: Port device team_slave_1 added [ 974.391008][ T7318] usb 8-1: selecting invalid altsetting 0 [ 974.418374][ T7318] snd-ua101 8-1:1.1: probe with driver snd-ua101 failed with error -22 [ 974.506511][ T7318] usb 8-1: USB disconnect, device number 10 [ 974.880265][ T9093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.118908][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.139451][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.228691][ T9076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.313037][ T9093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.554515][ T9232] netlink: 'syz.7.503': attribute type 1 has an invalid length. [ 975.576019][ T9076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.599608][ T9076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 975.737951][ T9076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.166458][ T9239] xt_TPROXY: Can be used only with -p tcp or -p udp [ 977.085001][ T9232] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 977.207006][ T9093] team0: Port device team_slave_0 added [ 977.659576][ T9093] team0: Port device team_slave_1 added [ 978.587508][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.612682][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.729774][ T9093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.878539][ T9076] hsr_slave_0: entered promiscuous mode [ 978.919798][ T9076] hsr_slave_1: entered promiscuous mode [ 978.979085][ T9076] debugfs: 'hsr0' already exists in 'hsr' [ 979.010680][ T9076] Cannot create hsr debugfs directory [ 979.064346][ T9093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.107525][ T9093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.236836][ T9093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.580558][ T5587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 979.591625][ T5587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 979.605817][ T5587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 979.633426][ T5587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 979.664153][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.454964][ T9093] hsr_slave_0: entered promiscuous mode [ 980.523414][ T9093] hsr_slave_1: entered promiscuous mode [ 980.561212][ T9093] debugfs: 'hsr0' already exists in 'hsr' [ 980.587061][ T9093] Cannot create hsr debugfs directory [ 980.776577][ T9269] fuse: fd is not a fuse device [ 982.324538][ T5587] Bluetooth: hci2: command tx timeout [ 985.100662][ T5587] Bluetooth: hci2: command tx timeout [ 988.113511][ T5587] Bluetooth: hci2: command tx timeout [ 990.141479][ T5587] Bluetooth: hci2: command tx timeout [ 991.033728][ T8194] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 991.232091][ T8194] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 991.270022][ T8194] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.303282][ T8194] usb 9-1: config 0 descriptor?? [ 991.341657][ T8194] cp210x 9-1:0.0: cp210x converter detected [ 991.765899][ T8194] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 991.797683][ T8194] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 991.859501][ T8194] usb 9-1: cp210x converter now attached to ttyUSB0 [ 992.003431][ T8194] usb 9-1: USB disconnect, device number 9 [ 992.057512][ T8194] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 992.109291][ T8194] cp210x 9-1:0.0: device disconnected [ 993.871115][ T155] bridge_slave_1: left allmulticast mode [ 993.877900][ T155] bridge_slave_1: left promiscuous mode [ 993.903482][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.953200][ T155] bridge_slave_0: left allmulticast mode [ 993.974416][ T155] bridge_slave_0: left promiscuous mode [ 993.990960][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.824175][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.945315][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 997.043465][ T155] bond0 (unregistering): Released all slaves [ 997.529213][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.666999][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.676776][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 997.719932][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 997.748321][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.830706][ T9] IPVS: starting estimator thread 0... [ 997.859807][ T9308] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 998.060196][ T155] hsr_slave_0: left promiscuous mode [ 998.154129][ T155] hsr_slave_1: left promiscuous mode [ 998.193155][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 998.235509][ T9313] IPVS: using max 192 ests per chain, 9600 per kthread [ 998.285864][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.804698][ T5587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 999.805846][ T8031] Bluetooth: hci3: command tx timeout [ 999.820391][ T8031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 999.834395][ T8031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 999.852599][ T8031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 999.868269][ T8031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1000.207779][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1000.320882][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1001.882553][ T8031] Bluetooth: hci3: command tx timeout [ 1001.963853][ T8031] Bluetooth: hci5: command tx timeout [ 1002.738696][ T155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.997813][ T155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.286906][ T155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.503905][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.525533][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.590704][ T155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.606170][ T5676] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1003.832746][ T5676] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1003.864275][ T5676] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.920220][ T5676] usb 9-1: config 0 descriptor?? [ 1003.962286][ T8031] Bluetooth: hci3: command tx timeout [ 1004.000367][ T5676] cp210x 9-1:0.0: cp210x converter detected [ 1004.042206][ T8031] Bluetooth: hci5: command tx timeout [ 1004.436385][ T5676] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1004.476431][ T5676] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 1004.535303][ T5676] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1004.700313][ T5676] usb 9-1: USB disconnect, device number 10 [ 1004.782962][ T5676] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1004.837050][ T5676] cp210x 9-1:0.0: device disconnected [ 1005.005764][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1005.017279][ T5584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1005.028638][ T5584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1005.057415][ T5584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1005.080761][ T5584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1005.633654][ T155] bridge_slave_1: left allmulticast mode [ 1005.691083][ T155] bridge_slave_1: left promiscuous mode [ 1005.722855][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.800893][ T155] bridge_slave_0: left allmulticast mode [ 1005.831976][ T155] bridge_slave_0: left promiscuous mode [ 1005.873981][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.042336][ T5584] Bluetooth: hci3: command tx timeout [ 1006.128340][ T5584] Bluetooth: hci5: command tx timeout [ 1006.724515][ T155] erspan0 (unregistering): left allmulticast mode [ 1007.110665][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.133417][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1007.149775][ T155] bond0 (unregistering): Released all slaves [ 1007.168255][ T5584] Bluetooth: hci1: command tx timeout [ 1007.864167][ T9255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.872632][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.880617][ T9255] bridge_slave_0: entered allmulticast mode [ 1007.894436][ T9255] bridge_slave_0: entered promiscuous mode [ 1008.202234][ T5584] Bluetooth: hci5: command tx timeout [ 1008.808230][ T9255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.874151][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.899189][ T9255] bridge_slave_1: entered allmulticast mode [ 1008.960180][ T9255] bridge_slave_1: entered promiscuous mode [ 1009.242608][ T5584] Bluetooth: hci1: command tx timeout [ 1011.437338][ T5584] Bluetooth: hci1: command tx timeout [ 1011.988159][ T9255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.066367][ T9255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.360737][ T155] hsr_slave_0: left promiscuous mode [ 1012.397484][ T155] hsr_slave_1: left promiscuous mode [ 1012.431310][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.453675][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.483259][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.505652][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.584974][ T155] veth1_macvtap: left promiscuous mode [ 1012.590907][ T155] veth0_macvtap: left promiscuous mode [ 1012.618970][ T155] veth1_vlan: left promiscuous mode [ 1012.635219][ T155] veth0_vlan: left promiscuous mode [ 1013.485183][ T5584] Bluetooth: hci1: command tx timeout [ 1014.029024][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1014.082375][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1014.613199][ T9255] team0: Port device team_slave_0 added [ 1014.649857][ T9255] team0: Port device team_slave_1 added [ 1015.128722][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.168696][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.206173][ T9255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.209097][ T9461] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1016.947583][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.954899][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.990973][ T9255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.172712][ T9255] hsr_slave_0: entered promiscuous mode [ 1017.185269][ T9255] hsr_slave_1: entered promiscuous mode [ 1021.388521][ T155] bridge_slave_1: left allmulticast mode [ 1021.405744][ T155] bridge_slave_1: left promiscuous mode [ 1021.418106][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.482255][ T155] bridge_slave_0: left allmulticast mode [ 1021.489575][ T155] bridge_slave_0: left promiscuous mode [ 1021.514228][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.558665][ T155] bridge_slave_1: left allmulticast mode [ 1021.565719][ T155] bridge_slave_1: left promiscuous mode [ 1021.587778][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.612604][ T155] bridge_slave_0: left allmulticast mode [ 1021.628861][ T155] bridge_slave_0: left promiscuous mode [ 1021.647166][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.976045][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.004358][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.035101][ T155] bond0 (unregistering): Released all slaves [ 1022.356514][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1022.396320][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.425134][ T155] bond0 (unregistering): Released all slaves [ 1022.830715][ T155] hsr_slave_0: left promiscuous mode [ 1022.841201][ T155] hsr_slave_1: left promiscuous mode [ 1022.862637][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.877530][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.906738][ T155] hsr_slave_0: left promiscuous mode [ 1022.924948][ T155] hsr_slave_1: left promiscuous mode [ 1022.941044][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.953665][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.299860][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1023.371260][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1024.798245][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1024.828033][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1025.251586][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.269809][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.290056][ T9327] bridge_slave_0: entered allmulticast mode [ 1025.320104][ T9327] bridge_slave_0: entered promiscuous mode [ 1025.469380][ T9255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1025.537352][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1025.549314][ T9255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1025.585878][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1025.596532][ T9255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1025.632399][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1025.651175][ T9255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1025.720434][ T9255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1025.752375][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.786433][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.811395][ T9327] bridge_slave_1: entered allmulticast mode [ 1025.834153][ T9327] bridge_slave_1: entered promiscuous mode [ 1026.859641][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.967450][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.978244][ T9309] bridge_slave_0: entered allmulticast mode [ 1027.100472][ T9309] bridge_slave_0: entered promiscuous mode [ 1028.721987][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.742310][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.798838][ T9309] bridge_slave_1: entered allmulticast mode [ 1029.002493][ T9309] bridge_slave_1: entered promiscuous mode [ 1029.917962][ T9327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.268089][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.468358][ T9327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.789725][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.818069][ T9369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.792419][ T9369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.808418][ T9369] bridge_slave_0: entered allmulticast mode [ 1032.841938][ T9369] bridge_slave_0: entered promiscuous mode [ 1033.681573][ T9327] team0: Port device team_slave_0 added [ 1033.799122][ T9369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.807651][ T9369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.819398][ T9369] bridge_slave_1: entered allmulticast mode [ 1033.833921][ T9369] bridge_slave_1: entered promiscuous mode [ 1033.893172][ T9327] team0: Port device team_slave_1 added [ 1034.096111][ T9309] team0: Port device team_slave_0 added [ 1034.151205][ T9369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.256551][ T9309] team0: Port device team_slave_1 added [ 1034.289894][ T9369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.561347][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.598755][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.676936][ T9327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.915970][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.942912][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.993573][ T9327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.140681][ T5234] 8021q: adding VLAN 0 to HW filter on device eth29 [ 1035.168357][ T9369] team0: Port device team_slave_0 added [ 1035.208751][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.226889][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.312641][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.483595][ T9369] team0: Port device team_slave_1 added [ 1035.548350][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.569562][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.653364][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.018016][ T9327] hsr_slave_0: entered promiscuous mode [ 1036.037814][ T9327] hsr_slave_1: entered promiscuous mode [ 1036.066209][ T9327] debugfs: 'hsr0' already exists in 'hsr' [ 1036.072264][ T9327] Cannot create hsr debugfs directory [ 1036.090299][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.098160][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.133604][ T9369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.210659][ T9369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.220049][ T9369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.248382][ T9369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.520976][ T9309] hsr_slave_0: entered promiscuous mode [ 1037.531187][ T9309] hsr_slave_1: entered promiscuous mode [ 1037.541476][ T9309] debugfs: 'hsr0' already exists in 'hsr' [ 1037.561985][ T9309] Cannot create hsr debugfs directory [ 1039.081468][ T9369] hsr_slave_0: entered promiscuous mode [ 1039.117681][ T9369] hsr_slave_1: entered promiscuous mode [ 1039.184108][ T9369] debugfs: 'hsr0' already exists in 'hsr' [ 1039.206902][ T9369] Cannot create hsr debugfs directory [ 1039.993750][ T8031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1040.004280][ T8031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1040.014856][ T8031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1040.029403][ T8031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1040.043870][ T8031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1040.500476][ T5234] 8021q: adding VLAN 0 to HW filter on device eth30 [ 1042.123329][ T8031] Bluetooth: hci0: command tx timeout [ 1043.920392][ T155] bridge_slave_1: left allmulticast mode [ 1043.926929][ T155] bridge_slave_1: left promiscuous mode [ 1043.934825][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.953690][ T155] bridge_slave_0: left allmulticast mode [ 1043.959548][ T155] bridge_slave_0: left promiscuous mode [ 1043.969396][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.207879][ T8031] Bluetooth: hci0: command tx timeout [ 1044.399630][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.428483][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.472145][ T155] bond0 (unregistering): Released all slaves [ 1044.538390][ T5234] 8021q: adding VLAN 0 to HW filter on device eth31 [ 1044.789483][ T155] hsr_slave_0: left promiscuous mode [ 1044.819703][ T155] hsr_slave_1: left promiscuous mode [ 1044.839299][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.850167][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.592627][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1045.629639][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1046.078545][ T9327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1046.168160][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1046.205381][ T9327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1046.275021][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.292328][ T8031] Bluetooth: hci0: command tx timeout [ 1046.416600][ T9327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1046.473038][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.510823][ T9327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1046.553974][ T9327] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.225749][ T5234] 8021q: adding VLAN 0 to HW filter on device eth32 [ 1048.362402][ T8031] Bluetooth: hci0: command tx timeout [ 1051.724459][ T9369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1051.785879][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1051.825434][ T9369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1051.878540][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1051.907198][ T9369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1051.947813][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1052.108421][ T9369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1052.184451][ T9369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1052.711508][ T9309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1052.781030][ T9309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.843621][ T9309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1052.913705][ T9309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1052.969092][ T9309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.026221][ T9309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.117941][ T9309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.184348][ T9309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.531350][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.545280][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.555355][ T9562] bridge_slave_0: entered allmulticast mode [ 1053.566647][ T9562] bridge_slave_0: entered promiscuous mode [ 1053.644352][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.683893][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.708884][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.732610][ T9562] bridge_slave_1: entered allmulticast mode [ 1053.756505][ T9562] bridge_slave_1: entered promiscuous mode [ 1054.120819][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.177673][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.393946][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.571206][ T9562] team0: Port device team_slave_0 added [ 1054.688693][ T9562] team0: Port device team_slave_1 added [ 1054.714759][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.722425][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.884184][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.891960][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.989238][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.998167][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.032750][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.070248][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.077575][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.106124][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.569617][ T9562] hsr_slave_0: entered promiscuous mode [ 1055.607137][ T9562] hsr_slave_1: entered promiscuous mode [ 1056.454053][ T9369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.696400][ T5584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.719056][ T5584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.730425][ T5584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.745908][ T5584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.765793][ T5584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1057.596687][ T9369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.037713][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.045427][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.388086][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.395813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.844736][ T5584] Bluetooth: hci2: command tx timeout [ 1060.118967][ T9562] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1060.215626][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1060.327679][ T9562] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1060.414117][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1060.612518][ T9562] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1060.699443][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1060.858880][ T9562] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1060.923938][ T5584] Bluetooth: hci2: command tx timeout [ 1061.002217][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1061.289911][ T5234] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1062.574646][ T8031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1062.584719][ T8031] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1062.596256][ T8031] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1062.611908][ T8031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1062.625489][ T8031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1063.002608][ T8031] Bluetooth: hci2: command tx timeout [ 1063.747352][ T7766] bridge_slave_1: left allmulticast mode [ 1063.772368][ T7766] bridge_slave_1: left promiscuous mode [ 1063.785979][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.824368][ T7766] bridge_slave_0: left allmulticast mode [ 1063.856646][ T7766] bridge_slave_0: left promiscuous mode [ 1063.877048][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.400328][ T7766] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.430206][ T7766] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.482889][ T7766] bond0 (unregistering): Released all slaves [ 1064.682715][ T8031] Bluetooth: hci3: command tx timeout [ 1064.942118][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.950768][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.972392][ T7766] hsr_slave_0: left promiscuous mode [ 1065.019517][ T7766] hsr_slave_1: left promiscuous mode [ 1065.063843][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.082271][ T8031] Bluetooth: hci2: command tx timeout [ 1065.108904][ T7766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.912583][ T5584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1065.950413][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1065.970053][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1066.027759][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1066.048391][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1066.137866][ T7766] team0 (unregistering): Port device team_slave_1 removed [ 1066.176898][ T7766] team0 (unregistering): Port device team_slave_0 removed [ 1066.442081][ T9713] netlink: 44 bytes leftover after parsing attributes in process `syz.8.543'. [ 1066.772225][ T5584] Bluetooth: hci3: command tx timeout [ 1068.125448][ T5584] Bluetooth: hci4: command tx timeout [ 1068.846143][ T5584] Bluetooth: hci3: command tx timeout [ 1070.202338][ T5584] Bluetooth: hci4: command tx timeout [ 1070.515821][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.925509][ T5584] Bluetooth: hci3: command tx timeout [ 1071.377525][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.408080][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.439250][ T9649] bridge_slave_0: entered allmulticast mode [ 1071.476117][ T9649] bridge_slave_0: entered promiscuous mode [ 1071.526062][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.549305][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.565427][ T9649] bridge_slave_1: entered allmulticast mode [ 1071.601471][ T9649] bridge_slave_1: entered promiscuous mode [ 1071.864649][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.009044][ T9649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.283553][ T5584] Bluetooth: hci4: command tx timeout [ 1072.402537][ T9649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.695645][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.703243][ T5871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.962733][ T9649] team0: Port device team_slave_0 added [ 1073.039714][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.047253][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.162086][ T9649] team0: Port device team_slave_1 added [ 1073.472221][ T7389] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1073.701123][ T7389] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.728831][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.755134][ T7389] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1073.770802][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1073.789682][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1073.822621][ T7389] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.830742][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.845977][ T7389] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1073.862638][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1073.890210][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.901104][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1073.913610][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.949497][ T9649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.966064][ T7389] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1073.976253][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1073.996733][ T7389] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1074.044017][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1074.088648][ T7389] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1074.137585][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.161250][ T7389] usb 9-1: string descriptor 0 read error: -22 [ 1074.169328][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.197917][ T7389] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1074.211568][ T7389] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.248857][ T9649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.289245][ T7389] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1074.362358][ T5584] Bluetooth: hci4: command tx timeout [ 1074.559552][ T7389] usb 9-1: USB disconnect, device number 11 [ 1075.397853][ T9649] hsr_slave_0: entered promiscuous mode [ 1075.453397][ T9649] hsr_slave_1: entered promiscuous mode [ 1075.475797][ T9649] debugfs: 'hsr0' already exists in 'hsr' [ 1075.481666][ T9649] Cannot create hsr debugfs directory [ 1078.710953][ T5870] bridge_slave_1: left allmulticast mode [ 1078.726227][ T5870] bridge_slave_1: left promiscuous mode [ 1079.686012][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.959145][ T5870] bridge_slave_0: left allmulticast mode [ 1083.135858][ T5870] bridge_slave_0: left promiscuous mode [ 1083.170433][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.234969][ T5870] bridge_slave_1: left allmulticast mode [ 1083.259664][ T5870] bridge_slave_1: left promiscuous mode [ 1083.289356][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.319493][ T5870] bridge_slave_0: left allmulticast mode [ 1083.329011][ T5870] bridge_slave_0: left promiscuous mode [ 1083.343305][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.773888][ T9764] xt_hashlimit: size too large, truncated to 1048576 [ 1084.457454][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.502352][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.545570][ T5870] bond0 (unregistering): Released all slaves [ 1084.959125][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.987578][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.041483][ T5870] bond0 (unregistering): Released all slaves [ 1085.776376][ T5870] hsr_slave_0: left promiscuous mode [ 1085.798239][ T5870] hsr_slave_1: left promiscuous mode [ 1085.818555][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.833885][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.883851][ T5870] hsr_slave_0: left promiscuous mode [ 1085.893252][ T5870] hsr_slave_1: left promiscuous mode [ 1085.901359][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.930452][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.603063][ T7433] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1088.071218][ T7433] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1088.167740][ T7433] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1088.536690][ T7433] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1088.655921][ T7433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1088.735570][ T7433] usb 9-1: SerialNumber: syz [ 1089.824776][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 1089.951300][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 1091.432338][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 1091.504012][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 1092.475043][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.499790][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.542671][ T9696] bridge_slave_0: entered allmulticast mode [ 1092.570587][ T9696] bridge_slave_0: entered promiscuous mode [ 1092.824391][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.855054][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.907207][ T9696] bridge_slave_1: entered allmulticast mode [ 1092.968335][ T9696] bridge_slave_1: entered promiscuous mode [ 1093.308139][ T7433] usb 9-1: can't set config #1, error -71 [ 1093.351412][ T7433] usb 9-1: USB disconnect, device number 12 [ 1093.805403][ T9696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.849262][ T9696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.320196][ T9696] team0: Port device team_slave_0 added [ 1094.430527][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.455806][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.492514][ T9707] bridge_slave_0: entered allmulticast mode [ 1094.522723][ T9707] bridge_slave_0: entered promiscuous mode [ 1094.589550][ T9696] team0: Port device team_slave_1 added [ 1094.727445][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.751485][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.781144][ T9707] bridge_slave_1: entered allmulticast mode [ 1094.805457][ T9707] bridge_slave_1: entered promiscuous mode [ 1095.384001][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.419036][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.429521][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.456511][ T9696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.479198][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.488929][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.547726][ T9696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.840275][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.819548][ T9707] team0: Port device team_slave_0 added [ 1096.966506][ T9696] hsr_slave_0: entered promiscuous mode [ 1096.995338][ T9696] hsr_slave_1: entered promiscuous mode [ 1097.011660][ T9696] debugfs: 'hsr0' already exists in 'hsr' [ 1097.026762][ T9696] Cannot create hsr debugfs directory [ 1097.062324][ T9707] team0: Port device team_slave_1 added [ 1097.633367][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.683698][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.761130][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.810564][ T9789] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1097.839053][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.850174][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1097.916999][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.396643][ T8031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1098.407996][ T8031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1098.418586][ T8031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1098.433578][ T8031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1098.448202][ T8031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1098.710027][ T9649] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1098.785425][ T9649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.046157][ T9649] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1099.126888][ T9649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.760410][ T9707] hsr_slave_0: entered promiscuous mode [ 1099.774353][ T9707] hsr_slave_1: entered promiscuous mode [ 1099.785753][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 1099.793537][ T9707] Cannot create hsr debugfs directory [ 1099.811356][ T9649] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1099.862565][ T9649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1100.214706][ T9649] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1100.326102][ T9649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1100.535421][ T8031] Bluetooth: hci1: command tx timeout [ 1102.602677][ T8031] Bluetooth: hci1: command tx timeout [ 1102.783092][ T7435] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1103.016167][ T7435] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.049707][ T7435] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1103.067697][ T7435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.103509][ T7435] usb 9-1: config 0 descriptor?? [ 1103.169386][ T1117] bridge_slave_1: left allmulticast mode [ 1103.188578][ T1117] bridge_slave_1: left promiscuous mode [ 1103.214320][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.280611][ T1117] bridge_slave_0: left allmulticast mode [ 1103.306043][ T1117] bridge_slave_0: left promiscuous mode [ 1103.321386][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.920364][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.031514][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.206059][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.248426][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.279055][ T1117] bond0 (unregistering): Released all slaves [ 1104.644636][ T1117] hsr_slave_0: left promiscuous mode [ 1104.657989][ T1117] hsr_slave_1: left promiscuous mode [ 1104.669321][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.683532][ T8031] Bluetooth: hci1: command tx timeout [ 1104.694111][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.535901][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.618732][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.653226][ T7435] ath6kl: Failed to read usb control message: -110 [ 1105.660619][ T7435] ath6kl: Unable to read the bmi data from the device: -110 [ 1105.688739][ T7435] ath6kl: unable to read target info byte count: -110 [ 1105.706892][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 1105.718561][ T7435] ath6kl: Failed to init ath6kl core: -110 [ 1105.735326][ T7435] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1105.786512][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 1106.182931][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.217812][ T9696] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1106.303870][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.314445][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.338250][ T9696] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1106.407374][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.546636][ T9696] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1106.583565][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.700849][ T9696] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1106.746950][ T9696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.762456][ T8031] Bluetooth: hci1: command tx timeout [ 1107.575446][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.878991][ T5674] usb 9-1: USB disconnect, device number 13 [ 1108.389980][ T9707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1108.464723][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.500195][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.518159][ T9707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.632750][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.721049][ T9707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.821433][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1108.863742][ T9707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.946462][ T9707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1109.071254][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.078978][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.327514][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.335125][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.659663][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.681123][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.710226][ T9791] bridge_slave_0: entered allmulticast mode [ 1109.740765][ T9791] bridge_slave_0: entered promiscuous mode [ 1109.809548][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.817203][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.861052][ T9791] bridge_slave_1: entered allmulticast mode [ 1109.900084][ T9791] bridge_slave_1: entered promiscuous mode [ 1110.343676][ T9791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.517629][ T9791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.001433][ T9791] team0: Port device team_slave_0 added [ 1111.091643][ T9791] team0: Port device team_slave_1 added [ 1111.166784][ T9696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.480547][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.508474][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.582039][ T9791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.631253][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.647696][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.710253][ T9791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.639365][ T9696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.876053][ T9791] hsr_slave_0: entered promiscuous mode [ 1112.907974][ T9791] hsr_slave_1: entered promiscuous mode [ 1113.219940][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.227614][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.354715][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.362338][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.658646][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.006033][ T9707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.406861][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.414839][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.729812][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.737494][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.933036][ T9791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1117.080662][ T9791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1117.180427][ T9791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1117.352189][ T9791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1117.422316][ T9791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1117.585637][ T9791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1117.661556][ T9791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1117.787294][ T9791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.598836][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1118.609533][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1118.622058][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1118.641553][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1118.663296][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.728684][ T9791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.762606][ T8031] Bluetooth: hci0: command tx timeout [ 1121.147099][ T9791] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.347779][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.355452][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.687042][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.694712][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.844454][ T8031] Bluetooth: hci0: command tx timeout [ 1124.217518][ T5584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.232292][ T5584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.248838][ T5584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.285704][ T5584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.307758][ T5584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.925707][ T8031] Bluetooth: hci0: command tx timeout [ 1125.119299][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.238062][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.564'. [ 1126.468211][ T8031] Bluetooth: hci2: command tx timeout [ 1126.492937][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.524827][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.008900][ T8031] Bluetooth: hci0: command tx timeout [ 1127.412030][ T7765] bridge_slave_1: left allmulticast mode [ 1127.473429][ T7765] bridge_slave_1: left promiscuous mode [ 1127.514688][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.587901][ T7765] bridge_slave_0: left allmulticast mode [ 1127.622578][ T7765] bridge_slave_0: left promiscuous mode [ 1127.670238][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.523600][ T8031] Bluetooth: hci2: command tx timeout [ 1128.785634][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1128.798224][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1128.809730][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1128.856910][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1128.873220][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1129.300292][ T7765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.412313][ T7765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.471669][ T7765] bond0 (unregistering): Released all slaves [ 1129.884879][ T7765] hsr_slave_0: left promiscuous mode [ 1129.915837][ T7765] hsr_slave_1: left promiscuous mode [ 1129.945992][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.000153][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.602709][ T8031] Bluetooth: hci2: command tx timeout [ 1131.002569][ T8031] Bluetooth: hci3: command tx timeout [ 1131.192140][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 1131.227916][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 1132.483981][ T5234] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1132.684829][ T8031] Bluetooth: hci2: command tx timeout [ 1133.092733][ T8031] Bluetooth: hci3: command tx timeout [ 1134.813563][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.855660][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.869341][ T9886] bridge_slave_0: entered allmulticast mode [ 1134.880605][ T9886] bridge_slave_0: entered promiscuous mode [ 1135.061562][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.130281][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.169020][ T9886] bridge_slave_1: entered allmulticast mode [ 1135.175830][ T8031] Bluetooth: hci3: command tx timeout [ 1135.228662][ T9886] bridge_slave_1: entered promiscuous mode [ 1135.841125][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.091137][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.465185][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.627089][ T9886] team0: Port device team_slave_0 added [ 1136.709176][ T9886] team0: Port device team_slave_1 added [ 1137.242855][ T8031] Bluetooth: hci3: command tx timeout [ 1137.564416][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.571655][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.643637][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.907506][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.923602][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.002255][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.713884][ T9886] hsr_slave_0: entered promiscuous mode [ 1138.755785][ T9886] hsr_slave_1: entered promiscuous mode [ 1138.809642][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 1138.834521][ T9886] Cannot create hsr debugfs directory [ 1139.438767][ T9924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.454618][ T9924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.469362][ T9924] bridge_slave_0: entered allmulticast mode [ 1139.489815][ T9924] bridge_slave_0: entered promiscuous mode [ 1139.695976][ T9924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.719610][ T9924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.744662][ T9924] bridge_slave_1: entered allmulticast mode [ 1139.771325][ T9924] bridge_slave_1: entered promiscuous mode [ 1140.469079][ T9924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.737678][ T9924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.298469][ T9924] team0: Port device team_slave_0 added [ 1141.628700][ T9924] team0: Port device team_slave_1 added [ 1141.896121][ T7765] bridge_slave_1: left allmulticast mode [ 1141.913550][ T7765] bridge_slave_1: left promiscuous mode [ 1141.944683][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.969547][ T7765] bridge_slave_0: left allmulticast mode [ 1141.984884][ T7765] bridge_slave_0: left promiscuous mode [ 1142.000857][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.074887][ T7765] bridge_slave_1: left allmulticast mode [ 1142.080775][ T7765] bridge_slave_1: left promiscuous mode [ 1142.122827][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.155519][ T7765] bridge_slave_0: left allmulticast mode [ 1142.173624][ T7765] bridge_slave_0: left promiscuous mode [ 1142.180203][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.244720][ T7765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.312252][ T7765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.354791][ T7765] bond0 (unregistering): Released all slaves [ 1143.806221][ T7765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1143.872160][ T7765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.920972][ T7765] bond0 (unregistering): Released all slaves [ 1143.960062][ T9791] veth0_vlan: entered promiscuous mode [ 1144.341104][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1144.366343][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1144.437361][ T9924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.609731][ T7765] hsr_slave_0: left promiscuous mode [ 1144.643586][ T7765] hsr_slave_1: left promiscuous mode [ 1144.675068][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.710334][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.820164][ T7765] hsr_slave_0: left promiscuous mode [ 1144.854726][ T7765] hsr_slave_1: left promiscuous mode [ 1144.870634][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.894589][ T7765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.130055][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 1147.161158][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 1148.043164][ T7765] team0 (unregistering): Port device team_slave_1 removed [ 1148.111293][ T7765] team0 (unregistering): Port device team_slave_0 removed [ 1148.520513][ T9924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.528047][ T9924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.556941][ T9924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.670853][ T5234] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1148.868036][ T9791] veth1_vlan: entered promiscuous mode [ 1149.175621][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.211666][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.229517][ T9957] bridge_slave_0: entered allmulticast mode [ 1149.265037][ T9957] bridge_slave_0: entered promiscuous mode [ 1149.407917][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.430545][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.457789][ T9957] bridge_slave_1: entered allmulticast mode [ 1149.488487][ T9957] bridge_slave_1: entered promiscuous mode [ 1149.936600][ T9924] hsr_slave_0: entered promiscuous mode [ 1149.956850][ T9924] hsr_slave_1: entered promiscuous mode [ 1149.977231][ T9924] debugfs: 'hsr0' already exists in 'hsr' [ 1149.997202][ T9924] Cannot create hsr debugfs directory [ 1150.098998][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.328771][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.750781][ T9957] team0: Port device team_slave_0 added [ 1150.967716][ T9957] team0: Port device team_slave_1 added [ 1151.421671][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1151.448438][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.493705][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.567523][ T9886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1151.600416][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1151.614881][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.626899][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.659809][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.683401][ T5234] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1151.713212][T10097] netlink: 80 bytes leftover after parsing attributes in process `syz.8.578'. [ 1151.743137][ T9886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1151.781586][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1151.825909][ T9791] veth0_macvtap: entered promiscuous mode [ 1151.879464][ T9886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1151.934496][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.076939][ T9886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1152.150378][ T9886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.513214][ T9791] veth1_macvtap: entered promiscuous mode [ 1152.639994][ T9957] hsr_slave_0: entered promiscuous mode [ 1152.657463][ T9957] hsr_slave_1: entered promiscuous mode [ 1152.673778][ T9957] debugfs: 'hsr0' already exists in 'hsr' [ 1152.681631][ T9957] Cannot create hsr debugfs directory [ 1153.777786][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.176421][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.504283][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.529210][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.619963][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.648714][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.028774][ T9924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1156.163083][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.347947][ T9924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1156.489095][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.578953][ T9924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1156.693566][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1156.847756][ T9924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1156.977170][ T9924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.569638][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.195897][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.486421][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.494049][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.728686][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.736339][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.797316][ T9957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1158.904742][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.990105][ T9957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1159.106991][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1159.130620][ T9957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1159.228432][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.317964][ T9957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1159.440883][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.003199][ T5584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1160.013614][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.025208][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.101669][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.137694][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.087761][T10150] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1161.529029][ T9924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.746417][ T147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.065318][ T147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.213443][ T8031] Bluetooth: hci4: command tx timeout [ 1162.358789][ T9924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.519311][ T147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.745470][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.753237][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.927814][ T147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.046739][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.054554][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.293166][ T8031] Bluetooth: hci4: command tx timeout [ 1165.697940][ T9957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.372937][ T8031] Bluetooth: hci4: command tx timeout [ 1167.592195][ T147] bridge_slave_1: left allmulticast mode [ 1167.610312][ T147] bridge_slave_1: left promiscuous mode [ 1167.626247][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.664340][ T147] bridge_slave_0: left allmulticast mode [ 1167.670245][ T147] bridge_slave_0: left promiscuous mode [ 1167.708095][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.442192][ T8031] Bluetooth: hci4: command tx timeout [ 1168.805323][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.861148][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.894296][ T147] bond0 (unregistering): Released all slaves [ 1169.259877][ T9957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.488207][ T147] hsr_slave_0: left promiscuous mode [ 1169.517098][ T147] hsr_slave_1: left promiscuous mode [ 1169.541041][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.588543][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.614843][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.644679][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.687347][ T147] veth1_macvtap: left promiscuous mode [ 1169.712858][ T147] veth0_macvtap: left promiscuous mode [ 1169.724580][ T147] veth1_vlan: left promiscuous mode [ 1169.742132][ T147] veth0_vlan: left promiscuous mode [ 1169.949673][T10207] netlink: 80 bytes leftover after parsing attributes in process `syz.8.585'. [ 1171.341336][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1171.433655][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1172.456098][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.463779][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1172.729826][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.737470][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.358972][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.460195][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1180.472025][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.480527][T10142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.480673][ T5584] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1180.498035][ T5584] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1180.516487][ T5584] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1180.536679][ T5584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1180.567566][T10142] bridge_slave_0: entered allmulticast mode [ 1180.762719][T10142] bridge_slave_0: entered promiscuous mode [ 1181.443070][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.579773][T10142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.810943][T10142] bridge_slave_1: entered allmulticast mode [ 1181.936501][T10142] bridge_slave_1: entered promiscuous mode [ 1182.613792][ T5584] Bluetooth: hci1: command tx timeout [ 1184.682236][ T5584] Bluetooth: hci1: command tx timeout [ 1184.775714][T10142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.832575][T10142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.476517][T10142] team0: Port device team_slave_0 added [ 1185.609139][T10142] team0: Port device team_slave_1 added [ 1186.178479][T10142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.248761][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.405952][T10142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.522633][T10142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.565097][T10142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.686652][T10142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.762871][ T5584] Bluetooth: hci1: command tx timeout [ 1187.794365][T10142] hsr_slave_0: entered promiscuous mode [ 1187.821063][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.827993][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.896452][T10142] hsr_slave_1: entered promiscuous mode [ 1187.961380][ T8031] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1187.974904][ T8031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1187.986380][ T8031] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1188.006457][ T8031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1188.022066][ T8031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1188.852137][ T5584] Bluetooth: hci1: command tx timeout [ 1190.123927][ T5584] Bluetooth: hci0: command tx timeout [ 1190.386721][ T8031] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1190.400817][ T8031] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1190.427097][ T8031] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1190.455893][ T8031] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1190.474331][ T8031] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.851034][ T5871] bridge_slave_1: left allmulticast mode [ 1191.863810][ T5871] bridge_slave_1: left promiscuous mode [ 1191.882968][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.948098][ T5871] bridge_slave_0: left allmulticast mode [ 1191.954696][ T5871] bridge_slave_0: left promiscuous mode [ 1191.978927][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.202607][ T8031] Bluetooth: hci0: command tx timeout [ 1192.602532][ T8031] Bluetooth: hci2: command tx timeout [ 1192.681413][T10341] netlink: 80 bytes leftover after parsing attributes in process `syz.8.592'. [ 1192.866670][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.913708][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.962966][ T5871] bond0 (unregistering): Released all slaves [ 1193.370206][ T5871] hsr_slave_0: left promiscuous mode [ 1193.379691][ T5871] hsr_slave_1: left promiscuous mode [ 1193.398816][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.435518][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.284404][ T8031] Bluetooth: hci0: command tx timeout [ 1194.576642][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1194.622812][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1194.689527][ T8031] Bluetooth: hci2: command tx timeout [ 1196.363196][ T8031] Bluetooth: hci0: command tx timeout [ 1196.768406][ T8031] Bluetooth: hci2: command tx timeout [ 1197.548827][T10142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1197.607223][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.750325][T10142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1197.818409][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.859725][T10142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1197.921064][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1198.233192][T10142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1198.295696][T10142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1198.561960][T10266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.585331][T10266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.609841][T10266] bridge_slave_0: entered allmulticast mode [ 1198.636197][T10266] bridge_slave_0: entered promiscuous mode [ 1198.701177][T10266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.714909][T10266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.730153][T10266] bridge_slave_1: entered allmulticast mode [ 1198.751489][T10266] bridge_slave_1: entered promiscuous mode [ 1198.843594][ T8031] Bluetooth: hci2: command tx timeout [ 1199.545646][T10266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.739891][T10266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.443288][T10266] team0: Port device team_slave_0 added [ 1200.486037][T10266] team0: Port device team_slave_1 added [ 1201.381228][T10266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.401994][T10266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.431179][T10266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.475998][T10300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.490160][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.514311][T10300] bridge_slave_0: entered allmulticast mode [ 1201.536854][T10300] bridge_slave_0: entered promiscuous mode [ 1201.700536][T10266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.745463][T10266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.821187][T10266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.906980][T10300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.932417][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.943812][T10300] bridge_slave_1: entered allmulticast mode [ 1201.974760][T10300] bridge_slave_1: entered promiscuous mode [ 1202.317929][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.651295][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.804115][T10266] hsr_slave_0: entered promiscuous mode [ 1203.837186][T10266] hsr_slave_1: entered promiscuous mode [ 1203.850343][T10266] debugfs: 'hsr0' already exists in 'hsr' [ 1204.630403][T10266] Cannot create hsr debugfs directory [ 1204.681424][T10422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1205.001570][T10300] team0: Port device team_slave_0 added [ 1205.058721][T10300] team0: Port device team_slave_1 added [ 1205.065531][T10319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.110109][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.145886][T10319] bridge_slave_0: entered allmulticast mode [ 1205.166832][T10319] bridge_slave_0: entered promiscuous mode [ 1205.316763][T10319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.338595][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.360249][T10319] bridge_slave_1: entered allmulticast mode [ 1205.380527][T10319] bridge_slave_1: entered promiscuous mode [ 1205.658184][T10428] netlink: 80 bytes leftover after parsing attributes in process `syz.8.599'. [ 1205.687505][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1205.711099][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.739288][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1205.983706][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1205.997202][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.068753][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1206.124783][T10319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.172187][T10319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.738989][T10319] team0: Port device team_slave_0 added [ 1206.831055][ T8022] bridge_slave_1: left allmulticast mode [ 1206.846105][ T8022] bridge_slave_1: left promiscuous mode [ 1206.861347][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.878167][ T8022] bridge_slave_0: left allmulticast mode [ 1206.899710][ T8022] bridge_slave_0: left promiscuous mode [ 1206.912850][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.942861][ T8022] bridge_slave_1: left allmulticast mode [ 1206.948964][ T8022] bridge_slave_1: left promiscuous mode [ 1206.957501][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.990317][ T8022] bridge_slave_0: left allmulticast mode [ 1207.000835][ T8022] bridge_slave_0: left promiscuous mode [ 1207.035161][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.941089][ T8022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1207.970130][ T8022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.001027][ T8022] bond0 (unregistering): Released all slaves [ 1208.310790][ T8022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.346302][ T8022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.364249][ T8022] bond0 (unregistering): Released all slaves [ 1208.421011][T10319] team0: Port device team_slave_1 added [ 1208.953762][ T8022] hsr_slave_0: left promiscuous mode [ 1208.969292][ T8022] hsr_slave_1: left promiscuous mode [ 1208.978098][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.992140][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1209.024683][ T8022] hsr_slave_0: left promiscuous mode [ 1209.035687][ T8022] hsr_slave_1: left promiscuous mode [ 1209.047245][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1209.057657][ T8022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1215.038615][ T8022] team0 (unregistering): Port device team_slave_1 removed [ 1215.068854][ T8022] team0 (unregistering): Port device team_slave_0 removed [ 1215.599444][ T8022] team0 (unregistering): Port device team_slave_1 removed [ 1215.683299][ T8022] team0 (unregistering): Port device team_slave_0 removed [ 1216.134791][T10300] hsr_slave_0: entered promiscuous mode [ 1216.147968][T10300] hsr_slave_1: entered promiscuous mode [ 1216.157487][T10300] debugfs: 'hsr0' already exists in 'hsr' [ 1216.163964][T10300] Cannot create hsr debugfs directory [ 1216.210559][T10448] netlink: 'syz.8.601': attribute type 12 has an invalid length. [ 1216.219213][T10448] netlink: 'syz.8.601': attribute type 29 has an invalid length. [ 1216.227459][T10448] netlink: 148 bytes leftover after parsing attributes in process `syz.8.601'. [ 1216.236671][T10448] netlink: 59 bytes leftover after parsing attributes in process `syz.8.601'. [ 1216.247127][T10450] netlink: 'syz.8.601': attribute type 12 has an invalid length. [ 1216.255164][T10450] netlink: 'syz.8.601': attribute type 29 has an invalid length. [ 1216.263077][T10450] netlink: 148 bytes leftover after parsing attributes in process `syz.8.601'. [ 1216.272236][T10450] netlink: 59 bytes leftover after parsing attributes in process `syz.8.601'. [ 1216.659804][T10319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.675699][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.728416][T10319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.799060][T10319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.843525][T10319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.940909][T10319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.545995][T10142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.005444][T10319] hsr_slave_0: entered promiscuous mode [ 1218.023333][T10319] hsr_slave_1: entered promiscuous mode [ 1218.039944][T10319] debugfs: 'hsr0' already exists in 'hsr' [ 1218.047740][T10319] Cannot create hsr debugfs directory [ 1218.899926][T10142] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.879170][T10266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1219.996510][T10266] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1220.237349][T10266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1220.326785][T10266] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1220.539017][T10266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1220.635155][T10266] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1220.668261][T10266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1220.773164][T10266] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1220.973053][ T5584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1220.990113][ T5584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1221.000814][ T5584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1221.047159][ T5584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1221.065501][ T5584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1223.148830][T10492] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1223.162654][ T5584] Bluetooth: hci3: command tx timeout [ 1223.883785][T10266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.976033][T10502] netlink: 80 bytes leftover after parsing attributes in process `syz.8.606'. [ 1224.093669][T10266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.329930][T10300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1224.387749][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1224.399890][T10300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1224.426508][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1224.469080][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.476775][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.507625][T10300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1224.547270][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1224.648258][T10300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1224.673805][T10300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1224.697891][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.705570][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.742562][ T12] bridge_slave_1: left allmulticast mode [ 1224.758081][ T12] bridge_slave_1: left promiscuous mode [ 1224.776222][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.793627][ T12] bridge_slave_0: left allmulticast mode [ 1224.799719][ T12] bridge_slave_0: left promiscuous mode [ 1224.810436][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.137264][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1225.155397][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.171571][ T12] bond0 (unregistering): Released all slaves [ 1225.242282][ T5584] Bluetooth: hci3: command tx timeout [ 1225.394174][ T12] hsr_slave_0: left promiscuous mode [ 1225.403254][ T12] hsr_slave_1: left promiscuous mode [ 1225.412788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1225.426670][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1225.758288][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1225.781182][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1226.230912][T10319] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1226.255663][T10319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.298239][T10319] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1226.339742][T10319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.351151][T10319] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1226.375924][T10319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.400974][T10319] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1226.424332][T10319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1227.337030][ T5584] Bluetooth: hci3: command tx timeout [ 1229.237292][T10520] netlink: 'syz.8.608': attribute type 3 has an invalid length. [ 1229.582269][ T5584] Bluetooth: hci3: command tx timeout [ 1229.805562][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.941144][T10300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.174144][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.182021][ T8022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.221166][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.228952][ T8022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.201511][T10319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.845944][T10319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.049961][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.057734][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.263250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.270812][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.687862][T10487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.730558][T10487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.752827][T10487] bridge_slave_0: entered allmulticast mode [ 1232.786228][T10487] bridge_slave_0: entered promiscuous mode [ 1232.864457][T10487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.908257][T10487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.933292][T10487] bridge_slave_1: entered allmulticast mode [ 1232.968621][T10487] bridge_slave_1: entered promiscuous mode [ 1233.329281][T10487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.375832][T10487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.549979][T10319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1233.560915][T10319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1234.899936][T10487] team0: Port device team_slave_0 added [ 1235.045415][T10487] team0: Port device team_slave_1 added [ 1235.354560][T10553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1235.632485][T10487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.674910][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.776117][T10487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.844564][T10487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.851975][T10487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.915516][T10487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.247390][T10266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.332718][ T7436] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1236.451560][T10487] hsr_slave_0: entered promiscuous mode [ 1236.486995][T10487] hsr_slave_1: entered promiscuous mode [ 1236.505148][ T7436] usb 9-1: Using ep0 maxpacket: 16 [ 1236.567791][ T7436] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 21, changing to 7 [ 1236.610974][ T7436] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1236.665925][ T7436] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 1024 [ 1236.700950][ T7436] usb 9-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice= 0.40 [ 1236.719830][ T7436] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.732163][ T7436] usb 9-1: Product: syz [ 1236.748853][ T7436] usb 9-1: Manufacturer: syz [ 1236.770274][ T7436] usb 9-1: SerialNumber: syz [ 1237.006308][T10319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.118306][T10557] loop2: detected capacity change from 0 to 7 [ 1237.148560][T10557] Dev loop2: unable to read RDB block 7 [ 1237.159237][T10557] loop2: AHDI p1 p2 p3 [ 1237.174588][T10557] loop2: partition table partially beyond EOD, truncated [ 1237.208442][T10557] loop2: p1 start 1634624559 is beyond EOD, truncated [ 1237.247320][T10557] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1237.750527][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.009222][ T7436] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.061461][ T7436] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1238.122619][ T7436] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.194110][ T7436] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1238.310124][ T7436] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1238.929104][ T7436] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1239.013032][ T7436] usb 9-1: USB disconnect, device number 14 [ 1239.387571][T10527] udevd[10527]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.509820][T10487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1240.618226][T10487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1240.770645][T10487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1240.860620][T10487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1240.979977][T10487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1241.072492][T10487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1241.134646][T10487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1241.258487][T10487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1241.280880][ T8031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1241.293310][ T8031] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1241.303506][ T8031] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1241.318007][ T8031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1241.337029][ T8031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1241.820123][T10319] veth0_vlan: entered promiscuous mode [ 1242.175729][T10319] veth1_vlan: entered promiscuous mode [ 1242.789086][T10300] veth0_vlan: entered promiscuous mode [ 1243.301796][T10300] veth1_vlan: entered promiscuous mode [ 1243.403562][ T5584] Bluetooth: hci4: command tx timeout [ 1243.907385][T10319] veth0_macvtap: entered promiscuous mode [ 1244.177621][T10319] veth1_macvtap: entered promiscuous mode [ 1244.863999][T10319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1244.887456][T10300] veth0_macvtap: entered promiscuous mode [ 1245.074235][T10487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.170548][T10300] veth1_macvtap: entered promiscuous mode [ 1245.306411][T10319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.463727][ T5871] bridge_slave_1: left allmulticast mode [ 1245.483752][ T5584] Bluetooth: hci4: command tx timeout [ 1245.499955][ T5871] bridge_slave_1: left promiscuous mode [ 1245.514671][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.552416][ T5871] bridge_slave_0: left allmulticast mode [ 1245.558596][ T5871] bridge_slave_0: left promiscuous mode [ 1245.572551][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.308636][ T5871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.363726][ T5871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.395625][ T5871] bond0 (unregistering): Released all slaves [ 1246.767753][ T5871] hsr_slave_0: left promiscuous mode [ 1246.778266][ T5871] hsr_slave_1: left promiscuous mode [ 1246.799287][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.813032][ T5871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.563224][ T5584] Bluetooth: hci4: command tx timeout [ 1248.049694][ T5871] team0 (unregistering): Port device team_slave_1 removed [ 1248.118541][ T5871] team0 (unregistering): Port device team_slave_0 removed [ 1248.845989][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.888194][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.000242][T10487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.186510][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.199219][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.285710][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.295705][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1249.463553][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.471151][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.642169][ T5584] Bluetooth: hci4: command tx timeout [ 1250.059753][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.067270][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.534995][ T8031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1250.548332][ T8031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1250.567190][ T8031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1250.599142][ T8031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1250.619021][ T8031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1252.682672][ T5584] Bluetooth: hci1: command tx timeout [ 1253.813305][ T8031] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1253.823424][ T8031] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1253.833156][ T8031] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1253.848701][ T8031] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1253.862496][ T8031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1254.065765][T10634] netlink: 36 bytes leftover after parsing attributes in process `syz.8.615'. [ 1254.764591][ T8031] Bluetooth: hci1: command tx timeout [ 1255.712913][ T29] audit: type=1326 audit(1781258647.003:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10649 comm="syz.8.616" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ebb9ce59 code=0x0 [ 1255.884017][ T8031] Bluetooth: hci5: command tx timeout [ 1256.588579][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.630570][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.675188][T10591] bridge_slave_0: entered allmulticast mode [ 1256.719452][T10591] bridge_slave_0: entered promiscuous mode [ 1256.799149][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.828877][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.845709][ T8031] Bluetooth: hci1: command tx timeout [ 1256.896900][T10591] bridge_slave_1: entered allmulticast mode [ 1256.973773][T10591] bridge_slave_1: entered promiscuous mode [ 1257.916617][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.962381][ T8031] Bluetooth: hci5: command tx timeout [ 1257.996938][ T1117] bridge_slave_1: left allmulticast mode [ 1258.010650][ T1117] bridge_slave_1: left promiscuous mode [ 1258.029223][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.079674][ T1117] bridge_slave_0: left allmulticast mode [ 1258.097836][ T1117] bridge_slave_0: left promiscuous mode [ 1258.115709][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.918919][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.924924][ T8031] Bluetooth: hci1: command tx timeout [ 1258.997558][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.043049][ T1117] bond0 (unregistering): Released all slaves [ 1259.144318][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.476203][T10487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.548795][ T1117] hsr_slave_0: left promiscuous mode [ 1259.590129][ T1117] hsr_slave_1: left promiscuous mode [ 1259.600718][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.637247][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.687746][ T1117] veth1_macvtap: left promiscuous mode [ 1259.713556][ T1117] veth0_macvtap: left promiscuous mode [ 1259.729713][ T1117] veth1_vlan: left promiscuous mode [ 1259.744800][ T1117] veth0_vlan: left promiscuous mode [ 1260.043185][ T8031] Bluetooth: hci5: command tx timeout [ 1261.215685][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 1261.291556][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 1261.817533][T10591] team0: Port device team_slave_0 added [ 1262.122931][ T8031] Bluetooth: hci5: command tx timeout [ 1262.168412][T10591] team0: Port device team_slave_1 added [ 1262.710851][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.764649][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.825075][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.906233][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.922901][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.992578][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.577865][ T1117] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.923099][ T1117] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.059823][T10591] hsr_slave_0: entered promiscuous mode [ 1264.079135][T10591] hsr_slave_1: entered promiscuous mode [ 1264.090910][T10591] debugfs: 'hsr0' already exists in 'hsr' [ 1264.109936][T10591] Cannot create hsr debugfs directory [ 1264.261587][ T1117] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.550079][ T1117] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.707089][ T1117] bridge_slave_1: left allmulticast mode [ 1266.716740][ T1117] bridge_slave_1: left promiscuous mode [ 1266.734296][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.753420][ T1117] bridge_slave_0: left allmulticast mode [ 1266.759463][ T1117] bridge_slave_0: left promiscuous mode [ 1266.777017][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.582348][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.623947][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.663520][ T1117] bond0 (unregistering): Released all slaves [ 1268.268330][ T1117] hsr_slave_0: left promiscuous mode [ 1268.326344][ T1117] hsr_slave_1: left promiscuous mode [ 1268.348868][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.357317][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.384134][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.403503][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.518308][ T1117] veth1_macvtap: left promiscuous mode [ 1268.530288][ T1117] veth0_macvtap: left promiscuous mode [ 1268.556371][ T1117] veth1_vlan: left promiscuous mode [ 1268.562899][ T1117] veth0_vlan: left promiscuous mode [ 1270.875615][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 1270.938383][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 1271.785145][T10487] veth0_vlan: entered promiscuous mode [ 1271.886775][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.887172][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.887782][T10610] bridge_slave_0: entered allmulticast mode [ 1271.893725][T10610] bridge_slave_0: entered promiscuous mode [ 1271.960065][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.960439][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.961028][T10610] bridge_slave_1: entered allmulticast mode [ 1271.974456][T10610] bridge_slave_1: entered promiscuous mode [ 1272.595466][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.650412][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.736782][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.761308][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.797439][T10629] bridge_slave_0: entered allmulticast mode [ 1272.836839][T10629] bridge_slave_0: entered promiscuous mode [ 1273.116280][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.153070][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.197485][T10629] bridge_slave_1: entered allmulticast mode [ 1273.234963][T10629] bridge_slave_1: entered promiscuous mode [ 1273.289671][T10487] veth1_vlan: entered promiscuous mode [ 1273.323952][T10610] team0: Port device team_slave_0 added [ 1273.505097][T10754] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1273.513730][T10610] team0: Port device team_slave_1 added [ 1273.805520][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.995664][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.025517][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.052207][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.113687][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.325563][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.343677][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.412182][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.548529][T10629] team0: Port device team_slave_0 added [ 1274.666690][T10629] team0: Port device team_slave_1 added [ 1275.114127][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.143269][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.223794][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.279675][T10591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1275.373891][T10591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1275.508345][T10610] hsr_slave_0: entered promiscuous mode [ 1275.530222][T10610] hsr_slave_1: entered promiscuous mode [ 1275.541414][T10610] debugfs: 'hsr0' already exists in 'hsr' [ 1275.549218][T10610] Cannot create hsr debugfs directory [ 1275.561579][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.577109][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1275.610949][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.644208][T10591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1275.680871][T10591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1275.698814][T10591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1275.729708][T10591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.753890][T10591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1275.781070][T10591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.337633][T10629] hsr_slave_0: entered promiscuous mode [ 1276.349062][T10629] hsr_slave_1: entered promiscuous mode [ 1276.360550][T10629] debugfs: 'hsr0' already exists in 'hsr' [ 1276.366894][T10629] Cannot create hsr debugfs directory [ 1276.392737][T10487] veth0_macvtap: entered promiscuous mode [ 1276.702638][T10487] veth1_macvtap: entered promiscuous mode [ 1277.607506][T10487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.088130][T10487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.653829][ T1117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.694737][ T1117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.222588][ T1117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.245808][ T1117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.890768][T10610] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1280.118316][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1280.386044][T10610] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1281.455936][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1281.511652][T10610] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1281.723729][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1281.788187][T10610] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1282.563179][T10610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1283.483717][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.870215][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.042256][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.063945][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.075768][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.084903][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.8.622'. [ 1284.110282][ T5584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.128986][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1284.465822][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.473552][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.947908][T10629] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1285.063175][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1285.118891][T10629] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1285.197787][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1285.280444][ T29] audit: type=1326 audit(1781258676.563:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10805 comm="syz.8.623" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ebb9ce59 code=0x0 [ 1285.405616][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.413301][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.478394][T10629] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1285.549545][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1285.739336][T10629] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1285.798526][T10629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1286.006564][ T5872] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.203367][ T5584] Bluetooth: hci0: command tx timeout [ 1286.272513][ T5872] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.646993][ T5872] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.827475][ T5872] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.992150][ T5584] Bluetooth: hci0: command tx timeout [ 1290.420729][ T5872] bridge_slave_1: left allmulticast mode [ 1290.452281][ T5872] bridge_slave_1: left promiscuous mode [ 1290.489483][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.555081][ T5872] bridge_slave_0: left allmulticast mode [ 1290.576836][ T5872] bridge_slave_0: left promiscuous mode [ 1290.607726][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.013056][ T8031] Bluetooth: hci0: command tx timeout [ 1291.690443][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.790350][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.831372][ T5872] bond0 (unregistering): Released all slaves [ 1292.118252][T10610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.205673][T10848] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1292.315018][ T5872] hsr_slave_0: left promiscuous mode [ 1292.339693][ T5872] hsr_slave_1: left promiscuous mode [ 1292.360479][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.394437][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.424261][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.441963][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.507239][ T5872] veth1_macvtap: left promiscuous mode [ 1292.529632][ T5872] veth0_macvtap: left promiscuous mode [ 1292.539500][ T5872] veth1_vlan: left promiscuous mode [ 1292.551588][ T5872] veth0_vlan: left promiscuous mode [ 1293.084860][ T8031] Bluetooth: hci0: command tx timeout [ 1294.049105][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 1294.142757][ T5872] team0 (unregistering): Port device team_slave_0 removed [ 1295.439514][T10610] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.708276][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.716130][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.883265][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.890855][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.546151][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.059207][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.473941][ T7765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.481607][ T7765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.686689][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.694449][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.721227][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.232145][T10441] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1299.261645][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.291565][T10798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.323559][T10798] bridge_slave_0: entered allmulticast mode [ 1299.357933][T10798] bridge_slave_0: entered promiscuous mode [ 1299.416267][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.476441][T10798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.484509][T10441] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1299.505644][T10798] bridge_slave_1: entered allmulticast mode [ 1299.512455][T10441] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1299.529933][T10798] bridge_slave_1: entered promiscuous mode [ 1299.538021][T10441] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1299.599464][T10441] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1299.644457][T10441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.668112][T10441] usb 9-1: config 0 descriptor?? [ 1299.677735][T10896] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1299.977359][T10798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1300.071536][T10798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1300.321829][T10798] team0: Port device team_slave_0 added [ 1300.329953][T10441] hid-multitouch 0003:1FD2:6007.0001: ignoring exceeding usage max [ 1300.376304][T10798] team0: Port device team_slave_1 added [ 1300.415258][T10441] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x2 [ 1300.499584][T10441] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 1300.595056][T10441] usb 9-1: USB disconnect, device number 15 [ 1300.967488][T10798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.001365][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.070498][T10798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.176674][T10798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.232161][T10798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.371124][T10798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.539821][T10909] fido_id[10909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1302.767145][T10924] tmpfs: Bad value for 'mpol' [ 1302.889669][T10798] hsr_slave_0: entered promiscuous mode [ 1303.372690][T10798] hsr_slave_1: entered promiscuous mode [ 1304.723041][T10930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1304.732633][T10930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1304.742646][T10930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1304.761605][T10930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1304.778062][T10930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1305.925792][ T29] audit: type=1326 audit(1781258697.223:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.8.630" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ebb9ce59 code=0x0 [ 1306.819416][T10610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.082631][T10930] Bluetooth: hci2: command tx timeout [ 1307.330520][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.213313][T10930] Bluetooth: hci2: command tx timeout [ 1309.476750][T10798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1310.720247][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.753547][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.028530][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1311.141015][T10798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1311.210172][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1311.282132][T10930] Bluetooth: hci2: command tx timeout [ 1311.296975][T10798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1311.385870][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1311.410928][T10798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1311.530483][T10798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1312.632581][ T1117] bridge_slave_1: left allmulticast mode [ 1312.655019][ T1117] bridge_slave_1: left promiscuous mode [ 1312.679926][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.762358][ T1117] bridge_slave_0: left allmulticast mode [ 1312.801510][ T1117] bridge_slave_0: left promiscuous mode [ 1312.858005][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.322552][T10930] Bluetooth: hci2: command tx timeout [ 1313.796399][ T8031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1313.808056][ T8031] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1313.828717][ T8031] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1313.856660][ T8031] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1313.888335][ T8031] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1314.315950][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.381221][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.440412][ T1117] bond0 (unregistering): Released all slaves [ 1314.889716][T10998] netlink: 4 bytes leftover after parsing attributes in process `syz.8.633'. [ 1315.289489][ T1117] hsr_slave_0: left promiscuous mode [ 1315.338557][ T1117] hsr_slave_1: left promiscuous mode [ 1315.375314][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.441007][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.962657][ T8031] Bluetooth: hci3: command tx timeout [ 1316.072267][T10930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1316.082708][T10930] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1316.095555][T10930] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1316.120142][T10930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1316.132924][T10930] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.469183][ T8194] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1316.666925][ T8194] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1316.687638][ T8194] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.712033][ T8194] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.739181][ T8194] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1316.772657][ T8194] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.809776][ T8194] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.869990][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 1316.879378][ T8194] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1316.893297][ T8194] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1316.921826][ T8194] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1316.942756][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 1316.967958][ T8194] usb 9-1: string descriptor 0 read error: -22 [ 1316.996343][ T8194] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1317.021969][ T8194] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.112225][ T8194] adutux 9-1:168.0: interrupt endpoints not found [ 1317.301014][T10719] usb 9-1: USB disconnect, device number 16 [ 1318.043539][T10930] Bluetooth: hci3: command tx timeout [ 1318.204076][T10930] Bluetooth: hci1: command tx timeout [ 1320.123130][T10930] Bluetooth: hci3: command tx timeout [ 1320.285645][T10930] Bluetooth: hci1: command tx timeout [ 1320.799240][T10798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.518113][ T147] ===================================================== [ 1321.527835][ T147] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 1321.537625][ T147] n_tty_receive_buf_standard+0xd32/0xc780 [ 1321.544690][ T147] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1321.551423][ T147] n_tty_receive_buf2+0x4c/0x60 [ 1321.557427][ T147] tty_ldisc_receive_buf+0xc6/0x2c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1321.567016][ T147] tty_port_default_receive_buf+0xd7/0x1a0 [ 1321.588578][ T147] flush_to_ldisc+0x43e/0xe40 [ 1321.595628][ T147] process_scheduled_works+0xb65/0x1e40 [ 1321.603433][ T147] worker_thread+0xee4/0x1590 [ 1321.609146][ T147] kthread+0x53a/0x5f0 [ 1321.614451][ T147] ret_from_fork+0x20f/0x8d0 [ 1321.620163][ T147] ret_from_fork_asm+0x1a/0x30 [ 1321.626502][ T147] [ 1321.629713][ T147] Uninit was stored to memory at: [ 1321.635973][ T147] n_tty_receive_buf_standard+0xd2b/0xc780 [ 1321.643064][ T147] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1321.649825][ T147] n_tty_receive_buf2+0x4c/0x60 [ 1321.656202][ T147] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1321.663552][ T147] tty_port_default_receive_buf+0xd7/0x1a0 [ 1321.670555][ T147] flush_to_ldisc+0x43e/0xe40 [ 1321.677956][ T147] process_scheduled_works+0xb65/0x1e40 [ 1321.684986][ T147] worker_thread+0xee4/0x1590 [ 1321.690817][ T147] kthread+0x53a/0x5f0 [ 1321.696044][ T147] ret_from_fork+0x20f/0x8d0 [ 1321.701567][ T147] ret_from_fork_asm+0x1a/0x30 [ 1321.707451][ T147] [ 1321.710621][ T147] Uninit was created at: [ 1321.716116][ T147] __kmalloc_noprof+0x482/0x1660 [ 1321.722209][ T147] __tty_buffer_request_room+0x3d4/0x7a0 [ 1321.729054][ T147] __tty_insert_flip_string_flags+0x157/0x6e0 [ 1321.736303][ T147] uart_insert_char+0x368/0x930 [ 1321.743839][ T147] serial8250_read_char+0x1ba/0x670 [ 1321.750176][ T147] serial8250_handle_irq_locked+0x6d4/0xa40 [ 1321.757278][ T147] serial8250_handle_irq+0x189/0x710 [ 1321.763757][ T147] serial8250_default_handle_irq+0x116/0x350 [ 1321.770843][ T147] serial8250_interrupt+0xcb/0x3f0 [ 1321.778959][ T147] __handle_irq_event_percpu+0x118/0xf30 [ 1321.786321][ T147] handle_irq_event+0xe0/0x2a0 [ 1321.791280][ T147] handle_edge_irq+0x2a9/0xaf0 [ 1321.796454][ T147] __common_interrupt+0x9d/0x180 [ 1321.801589][ T147] common_interrupt+0x94/0xb0 [ 1321.807080][ T147] asm_common_interrupt+0x2b/0x40 [ 1321.812431][ T147] [ 1321.814914][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1321.826319][ T147] Tainted: [L]=SOFTLOCKUP [ 1321.830763][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1321.841597][ T147] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 1321.848048][ T147] ===================================================== [ 1321.855211][ T147] Disabling lock debugging due to kernel taint [ 1322.079478][T10929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.112591][ T147] Kernel panic - not syncing: kmsan.panic set ... [ 1322.119238][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:6 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1322.130413][ T147] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1322.136077][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1322.146338][ T147] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 1322.152590][ T147] Call Trace: [ 1322.155991][ T147] [ 1322.159084][ T147] __dump_stack+0x26/0x30 [ 1322.163623][ T147] dump_stack_lvl+0x50/0x1c0 [ 1322.168438][ T147] ? dump_stack+0x12/0x25 [ 1322.172988][ T147] dump_stack+0x1e/0x25 [ 1322.177342][ T147] vpanic+0x7b4/0x1430 [ 1322.181657][ T147] panic+0x15d/0x160 [ 1322.185824][ T147] kmsan_report+0x31a/0x320 [ 1322.190571][ T147] ? __msan_warning+0x1b/0x30 [ 1322.195555][ T147] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 1322.201754][ T147] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 1322.207885][ T147] ? n_tty_receive_buf2+0x4c/0x60 [ 1322.213150][ T147] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1322.218859][ T147] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1322.225125][ T147] ? flush_to_ldisc+0x43e/0xe40 [ 1322.230234][ T147] ? process_scheduled_works+0xb65/0x1e40 [ 1322.236177][ T147] ? worker_thread+0xee4/0x1590 [ 1322.241244][ T147] ? kthread+0x53a/0x5f0 [ 1322.245718][ T147] ? ret_from_fork+0x20f/0x8d0 [ 1322.250686][ T147] ? ret_from_fork_asm+0x1a/0x30 [ 1322.255851][ T147] ? ret_from_fork_asm+0x1a/0x30 [ 1322.261052][ T147] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 1322.267125][ T147] ? kmsan_get_metadata+0x146/0x160 [ 1322.272573][ T147] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1322.279145][ T147] ? kmsan_get_metadata+0x146/0x160 [ 1322.284589][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1322.290647][ T147] ? n_tty_receive_char+0xf83/0x14a0 [ 1322.296197][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1322.301577][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1322.306949][ T147] __msan_warning+0x1b/0x30 [ 1322.311675][ T147] n_tty_receive_buf_standard+0xd32/0xc780 [ 1322.317783][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1322.323269][ T147] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1322.329849][ T147] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1322.336195][ T147] n_tty_receive_buf_common+0x1a63/0x25a0 [ 1322.342246][ T147] n_tty_receive_buf2+0x4c/0x60 [ 1322.347350][ T147] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1322.353116][ T147] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1322.358583][ T147] tty_port_default_receive_buf+0xd7/0x1a0 [ 1322.364680][ T147] flush_to_ldisc+0x43e/0xe40 [ 1322.369634][ T147] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1322.376335][ T147] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1322.381789][ T147] process_scheduled_works+0xb65/0x1e40 [ 1322.387642][ T147] worker_thread+0xee4/0x1590 [ 1322.392608][ T147] kthread+0x53a/0x5f0 [ 1322.397107][ T147] ? __pfx_worker_thread+0x10/0x10 [ 1322.402442][ T147] ? __pfx_kthread+0x10/0x10 [ 1322.407269][ T147] ret_from_fork+0x20f/0x8d0 [ 1322.412093][ T147] ? __switch_to+0x573/0x7a0 [ 1322.416943][ T147] ? __pfx_kthread+0x10/0x10 [ 1322.421782][ T147] ret_from_fork_asm+0x1a/0x30 [ 1322.426813][ T147] [ 1322.430589][ T147] Kernel Offset: disabled [ 1322.435000][ T147] Rebooting in 86400 seconds..