last executing test programs: 6m46.589310733s ago: executing program 0 (id=179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 6m41.525288115s ago: executing program 4 (id=199): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1240000, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2001015, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80001, 0x0) syz_clone(0x84aa4411, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) 6m39.956526362s ago: executing program 4 (id=205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6m38.396211811s ago: executing program 4 (id=211): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) unshare(0x8040480) ppoll(&(0x7f0000000240), 0x0, &(0x7f00000003c0), 0x0, 0x0) 6m35.809141852s ago: executing program 4 (id=217): r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 6m34.772299657s ago: executing program 0 (id=220): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="50040000000000"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendmsg$key(r0, 0x0, 0x44040800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 6m34.42824308s ago: executing program 4 (id=221): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 6m33.645550865s ago: executing program 0 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0xff, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x0, 0x7, 0x3, 0xa14, 0x3, 0x7, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0xb, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x1000, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x6, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x2, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x7, 0x6, 0xfff80000, 0x7ff, 0xfffffffd, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x101, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x74, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x2, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 6m32.72995768s ago: executing program 4 (id=224): syz_open_dev$I2C(0x0, 0x1, 0x200402) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x10000000) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m32.419836048s ago: executing program 0 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e0200000009000100730080300000000008000240000000021400000011"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000) 6m31.542859952s ago: executing program 0 (id=229): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m30.71503502s ago: executing program 0 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 6m13.984347959s ago: executing program 32 (id=224): syz_open_dev$I2C(0x0, 0x1, 0x200402) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x10000000) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x7a, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m13.546820839s ago: executing program 33 (id=230): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 5m29.722343654s ago: executing program 3 (id=314): socket$alg(0x26, 0x5, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000004711070"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x1) 5m27.712205451s ago: executing program 3 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 5m26.766298394s ago: executing program 3 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m23.563595294s ago: executing program 3 (id=323): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000100c000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) 5m21.999851197s ago: executing program 3 (id=325): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 5m21.273986577s ago: executing program 3 (id=327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) 5m5.822022459s ago: executing program 34 (id=327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) 4m11.791112175s ago: executing program 7 (id=345): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x7f, 0x0, 0x100, 0x1, 0x500002}) socket(0x2d, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000084) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e21, @remote}, 0x65, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000a, 0x3, 0xc34}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x140f, 0xee70877cfbc8a0b9, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x41844) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 4m9.742022041s ago: executing program 7 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 4m5.200709891s ago: executing program 7 (id=437): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 4m1.933160705s ago: executing program 7 (id=444): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) pread64(r1, &(0x7f0000001440)=""/123, 0x7b, 0x841) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m59.118399457s ago: executing program 7 (id=447): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0, 0xf5}, {&(0x7f0000000640)="63f646b9d5", 0x5}], 0x2}, 0x20000810) 3m57.346121196s ago: executing program 7 (id=451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3m40.762546907s ago: executing program 35 (id=451): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5800, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 3m2.467070454s ago: executing program 2 (id=501): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffffffff00000000, 0x3, 0x1, 0xa82, 0x81, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x0, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)}}], 0x1, 0x0) 2m50.029741746s ago: executing program 2 (id=508): socket(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m48.717647036s ago: executing program 2 (id=511): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, 0x0, 0x4048043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m47.685515685s ago: executing program 2 (id=513): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000a40)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0}) 2m44.317639537s ago: executing program 2 (id=517): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}}, 0x20}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m41.653216167s ago: executing program 2 (id=519): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, 0x0, 0x24044080) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f041}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@mcast2={0xff, 0x5}, 0x0, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r5, 0x0, 0x0, 0x12c) recvmsg(0xffffffffffffffff, 0x0, 0x11e23) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x800) 2m26.293901766s ago: executing program 36 (id=519): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, 0x0, 0x24044080) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f041}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@mcast2={0xff, 0x5}, 0x0, r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r5, 0x0, 0x0, 0x12c) recvmsg(0xffffffffffffffff, 0x0, 0x11e23) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x800) 14.210157225s ago: executing program 5 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x200040c0}, 0x4040880) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 13.511321666s ago: executing program 6 (id=683): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf25"], 0x24}}, 0x40004040) 12.797365257s ago: executing program 6 (id=685): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r2 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r3, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0xff00) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x3}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 12.533595865s ago: executing program 1 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000040000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f590000000300000000800000ff030000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000010400003a2d285cc980000009c30000f3397cd86d4d928d14d3"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000004c0)={0x2a, 0x4, 0x0, {0x1, 0x2, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 11.759692513s ago: executing program 1 (id=687): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100), 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwrite64(r5, 0x0, 0x0, 0x100000000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') sendmsg$can_j1939(r3, 0x0, 0x24000890) 10.006411873s ago: executing program 6 (id=688): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001740), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 9.923165738s ago: executing program 1 (id=689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff81, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 9.701526642s ago: executing program 5 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 8.352006878s ago: executing program 5 (id=691): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.666643687s ago: executing program 6 (id=692): syz_emit_ethernet(0x52, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 7.03442318s ago: executing program 1 (id=693): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000004711070"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x1}, 0xa) 6.794278015s ago: executing program 5 (id=694): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 6.650816166s ago: executing program 6 (id=695): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) 5.782538495s ago: executing program 1 (id=696): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r2 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x34, r3, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0xff00) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x3}]}, {0x0, [0x0, 0x51]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4.866619014s ago: executing program 5 (id=697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000025c0)=[@in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r6, 0x100, 0x5, 0x80000003, 0x8}, 0x14) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210004000000070009058103"], 0x0) 3.223696736s ago: executing program 6 (id=698): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x20000000) r2 = accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) setsockopt(r3, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b7983beb3470e13d6338b8e1a1e", 0x1e}, {&(0x7f0000000080)}, {0x0}, {&(0x7f0000000540)}, {&(0x7f0000000080)="5c8c4417e7a0b72b728a6dc796687e0825efef9fdcc9650a52ce6a37843531e051bfa638bd9038a4435b37ef", 0x2c}, {&(0x7f0000000500)="ba8195b9b4f8acf200b97d62022eef0db621166c2494f0c40413b10c7010f89fb8a7616625cb341a889be89673fd16fe274fa5c7e54378bae50bfab4152fda3c40c42ded7741823cf5898fded1ac1bc82b9868cebd58", 0x56}], 0x6, &(0x7f0000000700)=[@assoc={0x18, 0x117, 0x4, 0x46208000}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x200040c0}, 0x4040880) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000001040108000000000000000200000001080005400000000105000100010000000800034000002fdb08000440000000030a00020000000fff"], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x90) 907.402125ms ago: executing program 1 (id=699): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x1000}) close(r2) 0s ago: executing program 5 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) kernel console output (not intermixed with test programs): ]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 339.345018][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 339.345186][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 339.351253][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 339.357645][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 347.163616][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.171521][ T6652] batadv_slave_0: entered promiscuous mode [ 347.177864][ T6652] batadv_slave_0: entered allmulticast mode [ 347.323988][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 348.163985][ T6657] loop2: detected capacity change from 0 to 256 [ 348.275717][ T6657] ======================================================= [ 348.275717][ T6657] WARNING: The mand mount option has been deprecated and [ 348.275717][ T6657] and is ignored by this kernel. Remove the mand [ 348.275717][ T6657] option from the mount to silence this warning. [ 348.275717][ T6657] ======================================================= [ 348.425519][ T6657] exfat: Deprecated parameter 'utf8' [ 348.431400][ T6657] exfat: Deprecated parameter 'namecase' [ 348.573898][ T6657] exfat: Deprecated parameter 'utf8' [ 348.962649][ T6657] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001210c, chksum : 0x8db71888, utbl_chksum : 0xe619d30d) [ 352.813469][ T6683] bond0: (slave bond_slave_1): Releasing backup interface [ 357.851836][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.862386][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.681453][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 359.722053][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 359.739619][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 359.767505][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 359.860458][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.138139][ T5082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.154309][ T5082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.167703][ T5082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.192514][ T5082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.302275][ T5082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 361.983715][ T5791] Bluetooth: hci5: command tx timeout [ 362.411963][ T5791] Bluetooth: hci6: command tx timeout [ 364.874329][ T5791] Bluetooth: hci5: command tx timeout [ 364.880195][ T5082] Bluetooth: hci6: command tx timeout [ 366.339825][ T6732] loop3: detected capacity change from 0 to 2048 [ 366.453517][ T6732] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 366.764944][ T6741] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 366.925070][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 366.944862][ T5791] Bluetooth: hci5: command tx timeout [ 366.950579][ T5082] Bluetooth: hci6: command tx timeout [ 367.874420][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 368.063187][ T6744] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.264'. [ 368.261258][ T6747] netlink: 'syz.2.263': attribute type 12 has an invalid length. [ 368.269566][ T6747] netlink: 'syz.2.263': attribute type 29 has an invalid length. [ 368.278210][ T6747] netlink: 148 bytes leftover after parsing attributes in process `syz.2.263'. [ 369.029826][ T5082] Bluetooth: hci6: command tx timeout [ 369.036459][ T5791] Bluetooth: hci5: command tx timeout [ 370.089937][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.696845][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.806906][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.815238][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.886702][ T6704] bridge_slave_0: entered allmulticast mode [ 370.924003][ T6704] bridge_slave_0: entered promiscuous mode [ 371.494175][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.501790][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.534151][ T6704] bridge_slave_1: entered allmulticast mode [ 372.539341][ T6704] bridge_slave_1: entered promiscuous mode [ 373.955790][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.278946][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.286770][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.351728][ T6707] bridge_slave_0: entered allmulticast mode [ 374.423634][ T6707] bridge_slave_0: entered promiscuous mode [ 374.590788][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.972483][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.980383][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.038244][ T6707] bridge_slave_1: entered allmulticast mode [ 375.091764][ T6707] bridge_slave_1: entered promiscuous mode [ 375.186731][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.554092][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.064978][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.195882][ T6785] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.274'. [ 376.231955][ T6704] team0: Port device team_slave_0 added [ 376.361047][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.411843][ T6704] team0: Port device team_slave_1 added [ 377.068394][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.076010][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.106512][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.194744][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.201908][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.234863][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.347039][ T6707] team0: Port device team_slave_0 added [ 377.517526][ T6707] team0: Port device team_slave_1 added [ 377.867884][ T35] bridge_slave_1: left allmulticast mode [ 377.874614][ T35] bridge_slave_1: left promiscuous mode [ 377.881632][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.958150][ T35] bridge_slave_0: left allmulticast mode [ 377.964389][ T35] bridge_slave_0: left promiscuous mode [ 377.971259][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.131393][ T6801] loop2: detected capacity change from 0 to 512 [ 379.945480][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.026399][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.071492][ T35] bond0 (unregistering): Released all slaves [ 380.569000][ T6704] hsr_slave_0: entered promiscuous mode [ 380.601876][ T6704] hsr_slave_1: entered promiscuous mode [ 380.635083][ T6704] debugfs: 'hsr0' already exists in 'hsr' [ 380.641321][ T6704] Cannot create hsr debugfs directory [ 380.662153][ T6807] tipc: Started in network mode [ 380.667574][ T6807] tipc: Node identity 4, cluster identity 4711 [ 380.674055][ T6807] tipc: Node number set to 4 [ 380.924915][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.932090][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.959676][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.324519][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.331716][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.358401][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.655560][ T6812] netlink: 168 bytes leftover after parsing attributes in process `syz.3.282'. [ 382.098226][ T6812] C: renamed from veth0_to_batadv [ 382.767645][ T6707] hsr_slave_0: entered promiscuous mode [ 382.782289][ T6707] hsr_slave_1: entered promiscuous mode [ 382.812276][ T6707] debugfs: 'hsr0' already exists in 'hsr' [ 382.818365][ T6707] Cannot create hsr debugfs directory [ 382.825540][ T6816] tipc: Enabling of bearer rejected, failed to enable media [ 383.142006][ T6817] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.284'. [ 383.337986][ T35] hsr_slave_0: left promiscuous mode [ 383.418882][ T35] hsr_slave_1: left promiscuous mode [ 383.474036][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.481790][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.577388][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.585256][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.714579][ T35] veth1_macvtap: left promiscuous mode [ 383.720366][ T35] veth0_macvtap: left promiscuous mode [ 383.743629][ T35] veth1_vlan: left promiscuous mode [ 383.749234][ T35] veth0_vlan: left promiscuous mode [ 385.037100][ T35] team0 (unregistering): Port device team_slave_1 removed [ 385.107847][ T35] team0 (unregistering): Port device team_slave_0 removed [ 387.544157][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.779232][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.041193][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.438118][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.504064][ T6865] C: renamed from veth0_to_batadv (while UP) [ 388.677813][ T6704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 388.854474][ T6704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 388.996343][ T6704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.121950][ T6704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.119679][ T6877] tipc: Enabling of bearer rejected, failed to enable media [ 390.327100][ T6707] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.498489][ T6707] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.641477][ T35] bridge_slave_1: left allmulticast mode [ 390.647900][ T35] bridge_slave_1: left promiscuous mode [ 390.654856][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.794084][ T35] bridge_slave_0: left allmulticast mode [ 390.799992][ T35] bridge_slave_0: left promiscuous mode [ 390.807325][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.100748][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.133113][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.183835][ T35] bond0 (unregistering): Released all slaves [ 392.218339][ T6707] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.385102][ T6707] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.445374][ T35] hsr_slave_0: left promiscuous mode [ 393.501076][ T35] hsr_slave_1: left promiscuous mode [ 393.525760][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.533653][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.577815][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.586541][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.704595][ T35] veth1_macvtap: left promiscuous mode [ 393.711001][ T35] veth0_macvtap: left promiscuous mode [ 393.725013][ T35] veth1_vlan: left promiscuous mode [ 393.738763][ T35] veth0_vlan: left promiscuous mode [ 395.404933][ T35] team0 (unregistering): Port device team_slave_1 removed [ 395.482609][ T35] team0 (unregistering): Port device team_slave_0 removed [ 396.946431][ T5791] Bluetooth: hci6: command 0x0405 tx timeout [ 397.209924][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.293457][ T6937] x_tables: duplicate underflow at hook 1 [ 398.593115][ T6704] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.002134][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.009835][ T6834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.715648][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.723512][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.185143][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.164248][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.367485][ T6704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.535181][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.542994][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.843787][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.851389][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.747451][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 403.727375][ T6991] C: renamed from veth0_to_batadv (while UP) [ 404.199627][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.453506][ T7010] tipc: Enabling of bearer rejected, failed to enable media [ 405.621461][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.856860][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 410.431045][ T6704] veth0_vlan: entered promiscuous mode [ 410.571052][ T6704] veth1_vlan: entered promiscuous mode [ 411.336002][ T6704] veth0_macvtap: entered promiscuous mode [ 411.534675][ T6704] veth1_macvtap: entered promiscuous mode [ 411.682051][ T7065] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.328'. [ 411.952195][ T6707] veth0_vlan: entered promiscuous mode [ 412.020128][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.118585][ T6707] veth1_vlan: entered promiscuous mode [ 412.208699][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.527504][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.654400][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.709508][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.786282][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.027731][ T6707] veth0_macvtap: entered promiscuous mode [ 413.159072][ T6707] veth1_macvtap: entered promiscuous mode [ 413.559039][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.833030][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.940094][ T7083] tipc: Enabled bearer , priority 0 [ 414.051885][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.129769][ T7083] tipc: Resetting bearer [ 414.182992][ T3461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.229407][ T3461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.244294][ T7082] tipc: Disabling bearer [ 415.226895][ T6071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.669559][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 419.212131][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.219176][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.551676][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.555424][ T7132] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.338'. [ 420.587591][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.603678][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.648898][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.663960][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.955259][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.965248][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.985967][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.008159][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.064188][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.783076][ T5791] Bluetooth: hci1: command tx timeout [ 423.107744][ T5791] Bluetooth: hci4: command tx timeout [ 423.546818][ T7155] tipc: Enabled bearer , priority 0 [ 423.991060][ T7159] tipc: Resetting bearer [ 424.176390][ T7152] tipc: Disabling bearer [ 424.275650][ T3461] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.596101][ T3461] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.737575][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 424.863406][ T5791] Bluetooth: hci1: command tx timeout [ 425.109297][ T3461] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.183184][ T5791] Bluetooth: hci4: command tx timeout [ 425.580579][ T3461] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.810629][ T7134] chnl_net:caif_netlink_parms(): no params data found [ 425.908195][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 426.943343][ T5791] Bluetooth: hci1: command tx timeout [ 427.038759][ T3461] bridge_slave_1: left allmulticast mode [ 427.045631][ T3461] bridge_slave_1: left promiscuous mode [ 427.053094][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.194063][ T3461] bridge_slave_0: left allmulticast mode [ 427.200195][ T3461] bridge_slave_0: left promiscuous mode [ 427.207788][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.253644][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.263827][ T5082] Bluetooth: hci4: command tx timeout [ 427.304560][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.320541][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.335507][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.352331][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.292383][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.373666][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.401190][ T3461] bond0 (unregistering): Released all slaves [ 428.476062][ T7190] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.348'. [ 428.828040][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.836420][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.865288][ T7130] bridge_slave_0: entered allmulticast mode [ 428.886346][ T7130] bridge_slave_0: entered promiscuous mode [ 428.922052][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.936790][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.989661][ T7130] bridge_slave_1: entered allmulticast mode [ 429.017836][ T7130] bridge_slave_1: entered promiscuous mode [ 429.034232][ T5082] Bluetooth: hci1: command tx timeout [ 429.343114][ T5082] Bluetooth: hci4: command tx timeout [ 429.503499][ T5082] Bluetooth: hci5: command tx timeout [ 429.524150][ T3461] hsr_slave_0: left promiscuous mode [ 429.614769][ T3461] hsr_slave_1: left promiscuous mode [ 429.646591][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.654667][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.676977][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.684997][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.770261][ T3461] veth1_macvtap: left promiscuous mode [ 429.783981][ T3461] veth0_macvtap: left promiscuous mode [ 429.799497][ T3461] veth1_vlan: left promiscuous mode [ 429.813268][ T3461] veth0_vlan: left promiscuous mode [ 430.601292][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 431.316113][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 431.399894][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 431.583041][ T5082] Bluetooth: hci5: command tx timeout [ 432.126959][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.394875][ T7215] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.357'. [ 432.491946][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.786878][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.794611][ T7134] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.806745][ T7134] bridge_slave_0: entered allmulticast mode [ 432.825793][ T7134] bridge_slave_0: entered promiscuous mode [ 433.034063][ T7130] team0: Port device team_slave_0 added [ 433.042134][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.050217][ T7134] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.060465][ T7134] bridge_slave_1: entered allmulticast mode [ 433.075239][ T7134] bridge_slave_1: entered promiscuous mode [ 433.191868][ T7130] team0: Port device team_slave_1 added [ 433.489544][ T3461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.592495][ T7134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.663075][ T5082] Bluetooth: hci5: command tx timeout [ 433.933190][ T3461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.033227][ T7134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.087832][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 434.113307][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.120475][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.150666][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.467840][ T3461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.541158][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.549985][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.581407][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.677763][ T3461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.822262][ T7134] team0: Port device team_slave_0 added [ 434.868553][ T7134] team0: Port device team_slave_1 added [ 435.188061][ T7239] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.366'. [ 435.225033][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.232249][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.258908][ T7134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.363361][ T7134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.370523][ T7134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.402035][ T7134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.742954][ T5082] Bluetooth: hci5: command tx timeout [ 436.155989][ T7130] hsr_slave_0: entered promiscuous mode [ 436.180822][ T7130] hsr_slave_1: entered promiscuous mode [ 436.224226][ T7130] debugfs: 'hsr0' already exists in 'hsr' [ 436.230189][ T7130] Cannot create hsr debugfs directory [ 437.318755][ T7134] hsr_slave_0: entered promiscuous mode [ 437.353903][ T7134] hsr_slave_1: entered promiscuous mode [ 437.379180][ T7134] debugfs: 'hsr0' already exists in 'hsr' [ 437.385549][ T7134] Cannot create hsr debugfs directory [ 437.543373][ T3461] bridge_slave_1: left allmulticast mode [ 437.549356][ T3461] bridge_slave_1: left promiscuous mode [ 437.556865][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.579084][ T3461] bridge_slave_0: left allmulticast mode [ 437.585267][ T3461] bridge_slave_0: left promiscuous mode [ 437.592080][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.949517][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 438.879821][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.965097][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.999734][ T3461] bond0 (unregistering): Released all slaves [ 439.039021][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 439.250028][ T7274] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.374'. [ 439.750423][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 439.871575][ T3461] hsr_slave_0: left promiscuous mode [ 439.892302][ T3461] hsr_slave_1: left promiscuous mode [ 439.902968][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.910981][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.927849][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.936518][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.952074][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.963599][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.973853][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.989190][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.999523][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.018970][ T3461] veth1_macvtap: left promiscuous mode [ 440.032392][ T5914] usb 2-1: config 0 descriptor?? [ 440.047148][ T3461] veth0_macvtap: left promiscuous mode [ 440.077779][ T3461] veth1_vlan: left promiscuous mode [ 440.084336][ T3461] veth0_vlan: left promiscuous mode [ 440.551072][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 440.579859][ T5914] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 441.485757][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 441.527279][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 442.158535][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 442.601226][ T5840] usb 2-1: USB disconnect, device number 2 [ 443.692374][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.700783][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.741615][ T7185] bridge_slave_0: entered allmulticast mode [ 443.800603][ T7185] bridge_slave_0: entered promiscuous mode [ 443.846369][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.856994][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.943538][ T7185] bridge_slave_1: entered allmulticast mode [ 443.979829][ T7185] bridge_slave_1: entered promiscuous mode [ 444.337950][ T7308] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 444.346112][ T7308] netlink: 'syz.1.384': attribute type 2 has an invalid length. [ 445.047354][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.280317][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.777995][ T7185] team0: Port device team_slave_0 added [ 445.798916][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'. [ 445.904667][ T7185] team0: Port device team_slave_1 added [ 446.205769][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.213691][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.242573][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.393289][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.400669][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.427331][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.109130][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 447.425190][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 447.471054][ T7185] hsr_slave_0: entered promiscuous mode [ 447.495972][ T7185] hsr_slave_1: entered promiscuous mode [ 447.508104][ T7185] debugfs: 'hsr0' already exists in 'hsr' [ 447.514217][ T7185] Cannot create hsr debugfs directory [ 447.628656][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.641403][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.657986][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 447.671523][ T5840] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.683955][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.777670][ T5840] usb 2-1: config 0 descriptor?? [ 448.402553][ T5840] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 449.021527][ T7130] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.151623][ T7130] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.238099][ T7130] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.313992][ T7130] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 449.574257][ T7134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 449.644028][ T7134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 449.720877][ T7134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 449.868451][ T7134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.398674][ T799] usb 2-1: USB disconnect, device number 3 [ 450.533692][ T7185] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 450.699610][ T7185] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 450.864863][ T7185] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 450.877932][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 450.963439][ T7185] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 451.512513][ T7353] loop2: detected capacity change from 0 to 128 [ 451.534644][ T7353] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 452.146396][ T7355] netlink: 'syz.1.397': attribute type 12 has an invalid length. [ 452.155233][ T7355] netlink: 'syz.1.397': attribute type 29 has an invalid length. [ 452.163445][ T7355] netlink: 148 bytes leftover after parsing attributes in process `syz.1.397'. [ 452.662297][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.858232][ T7134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.186229][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.271181][ T7134] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.360956][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.368628][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.588106][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.595884][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.624826][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.632415][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.761533][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.769472][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.877632][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.436659][ T7185] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.657544][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.665258][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.746041][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.753866][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.552964][ T800] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 456.800743][ T800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.812263][ T800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.823300][ T800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 456.836737][ T800] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 456.846320][ T800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.101282][ T800] usb 3-1: config 0 descriptor?? [ 457.456511][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 457.806397][ T800] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 458.552578][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.917738][ T7134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.123375][ T7185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.764301][ T9] usb 3-1: USB disconnect, device number 2 [ 460.513589][ T7416] netlink: 'syz.2.405': attribute type 12 has an invalid length. [ 460.521566][ T7416] netlink: 'syz.2.405': attribute type 29 has an invalid length. [ 460.529847][ T7416] netlink: 148 bytes leftover after parsing attributes in process `syz.2.405'. [ 462.186671][ T7130] veth0_vlan: entered promiscuous mode [ 462.579766][ T7130] veth1_vlan: entered promiscuous mode [ 463.244114][ T7185] veth0_vlan: entered promiscuous mode [ 463.515343][ T7134] veth0_vlan: entered promiscuous mode [ 463.532027][ T7185] veth1_vlan: entered promiscuous mode [ 463.601139][ T7130] veth0_macvtap: entered promiscuous mode [ 463.640496][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 463.760449][ T7130] veth1_macvtap: entered promiscuous mode [ 464.024063][ T7134] veth1_vlan: entered promiscuous mode [ 464.402267][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.572297][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.626882][ T799] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 464.784848][ T7185] veth0_macvtap: entered promiscuous mode [ 464.804660][ T799] usb 3-1: Using ep0 maxpacket: 32 [ 464.836722][ T799] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 464.846354][ T799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.899891][ T799] usb 3-1: config 0 descriptor?? [ 464.965020][ T55] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.024310][ T7185] veth1_macvtap: entered promiscuous mode [ 465.106515][ T55] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.206163][ T55] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.226181][ T799] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 465.299977][ T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.335747][ T799] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.345802][ T7134] veth0_macvtap: entered promiscuous mode [ 465.397751][ T799] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 465.460076][ T799] usb 3-1: media controller created [ 465.528492][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.605082][ T7134] veth1_macvtap: entered promiscuous mode [ 465.940035][ T7185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.076749][ T799] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.117299][ T1332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.279312][ T1332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.379417][ T1332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.454443][ T1332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.531417][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.757865][ T7134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.979795][ T3494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.068078][ T799] DVB: Unable to find symbol dib7000p_attach() [ 467.073279][ T3494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.074750][ T799] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 467.209422][ T3494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.282592][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.877355][ T799] rc_core: IR keymap rc-dib0700-rc5 not found [ 467.883878][ T799] Registered IR keymap rc-empty [ 467.927391][ T799] dvb-usb: could not initialize remote control. [ 467.936530][ T799] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 468.113761][ T799] usb 3-1: USB disconnect, device number 3 [ 468.867105][ T799] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 471.237517][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 472.329263][ T7518] loop1: detected capacity change from 0 to 512 [ 472.675007][ T7518] ------------[ cut here ]------------ [ 472.680702][ T7518] EA inode 11 i_nlink=2 [ 472.680798][ T7518] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x7ae/0x870, CPU#0: syz.1.422/7518 [ 472.696822][ T7518] Modules linked in: [ 472.701003][ T7518] CPU: 0 UID: 0 PID: 7518 Comm: syz.1.422 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 472.714770][ T7518] Tainted: [L]=SOFTLOCKUP [ 472.719450][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 472.730474][ T7518] RIP: 0010:ext4_xattr_inode_update_ref+0x828/0x870 [ 472.737614][ T7518] Code: 06 00 00 44 89 b3 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 e4 75 38 45 85 ff 75 40 48 8b 7d c0 48 8b 75 d0 8b 55 b8 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 ef e8 76 69 57 ff 45 85 ff 0f [ 472.763967][ T7518] RSP: 0018:ffff888053a9eda8 EFLAGS: 00010246 [ 472.770357][ T7518] RAX: 0000000000000000 RBX: ffff88811469acd0 RCX: 00000000005a0bae [ 472.782319][ T7518] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff9293dc60 [ 472.794561][ T7518] RBP: ffff888053a9ee30 R08: ffffea000000000f R09: 0000000000000000 [ 472.803795][ T7518] R10: ffff88805329ecf0 R11: 00000000abcd0100 R12: 0000000000000000 [ 472.812009][ T7518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 472.820492][ T7518] FS: 00007f650a2cf6c0(0000) GS:ffff8881aaac9000(0000) knlGS:0000000000000000 [ 472.829920][ T7518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.837132][ T7518] CR2: 000000110c331cfa CR3: 0000000065af8000 CR4: 00000000003526f0 [ 472.845542][ T7518] Call Trace: [ 472.849108][ T7518] [ 472.859477][ T7518] ext4_xattr_set_entry+0x1176/0x3430 [ 472.873309][ T7518] ext4_xattr_ibody_set+0x437/0xa40 [ 472.878931][ T7518] ext4_expand_extra_isize_ea+0x29c5/0x3c00 [ 472.887545][ T7518] __ext4_expand_extra_isize+0x571/0x6f0 [ 472.894223][ T7518] __ext4_mark_inode_dirty+0x654/0x960 [ 472.900125][ T7518] ext4_evict_inode+0x167a/0x23c0 [ 472.905868][ T7518] ? __pfx_ext4_evict_inode+0x10/0x10 [ 472.911565][ T7518] evict+0x6a9/0xca0 [ 472.916012][ T7518] ? kmsan_get_metadata+0xf1/0x160 [ 472.921469][ T7518] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 472.928350][ T7518] iput+0xc6b/0x1070 [ 472.932530][ T7518] ext4_process_orphan+0x49a/0x520 [ 472.938668][ T7518] ext4_orphan_cleanup+0x1093/0x1e20 [ 472.945598][ T7518] ext4_fill_super+0xa59b/0xae10 [ 472.950936][ T7518] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 472.964058][ T7518] ? kmsan_get_metadata+0xf1/0x160 [ 472.969563][ T7518] ? sb_set_blocksize+0x24e/0x390 [ 472.976816][ T7518] get_tree_bdev_flags+0x6e6/0x920 [ 472.982283][ T7518] ? __pfx_ext4_fill_super+0x10/0x10 [ 472.988110][ T7518] ? __pfx_ext4_fill_super+0x10/0x10 [ 472.993907][ T7518] ? __pfx_ext4_get_tree+0x10/0x10 [ 472.999355][ T7518] get_tree_bdev+0x38/0x50 [ 473.004255][ T7518] ext4_get_tree+0x35/0x40 [ 473.009003][ T7518] vfs_get_tree+0xb3/0x5c0 [ 473.014001][ T7518] do_new_mount+0x879/0x1700 [ 473.018918][ T7518] ? kmsan_get_metadata+0xf1/0x160 [ 473.027465][ T7518] path_mount+0x777/0x1fe0 [ 473.032218][ T7518] ? user_path_at+0x241/0x3e0 [ 473.038286][ T7518] __se_sys_mount+0x6f7/0x7e0 [ 473.043505][ T7518] ? kmsan_get_metadata+0xf1/0x160 [ 473.048993][ T7518] __x64_sys_mount+0xe4/0x150 [ 473.054226][ T7518] x64_sys_call+0x38cb/0x3e70 [ 473.065346][ T7518] do_syscall_64+0xc9/0xf80 [ 473.070177][ T7518] ? clear_bhb_loop+0x40/0x90 [ 473.077241][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.083734][ T7518] RIP: 0033:0x7f650939bf4a [ 473.088397][ T7518] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.108610][ T7518] RSP: 002b:00007f650a2cee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 473.117621][ T7518] RAX: ffffffffffffffda RBX: 00007f650a2ceee0 RCX: 00007f650939bf4a [ 473.126010][ T7518] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f650a2ceea0 [ 473.134444][ T7518] RBP: 0000200000000180 R08: 00007f650a2ceee0 R09: 0000000000800700 [ 473.142854][ T7518] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 473.151068][ T7518] R13: 00007f650a2ceea0 R14: 000000000000046f R15: 0000200000000400 [ 473.159500][ T7518] [ 473.169666][ T7518] ---[ end trace 0000000000000000 ]--- [ 473.284412][ T7518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.422: iget: bad extra_isize 90 (inode size 256) [ 473.387722][ T7518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.422: error while reading EA inode 18 err=-117 [ 473.480295][ T7518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.422: iget: bad extra_isize 90 (inode size 256) [ 473.601869][ T7518] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.422: error while reading EA inode 18 err=-117 [ 473.656156][ T7518] EXT4-fs (loop1): 1 orphan inode deleted [ 473.705261][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.346339][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.902850][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.911052][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.256658][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.265177][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.241273][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.249966][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.960819][ T6773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.969107][ T6773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.508960][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.517432][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.659448][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.666445][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.617065][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.649923][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.667573][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.682061][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.704003][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.825848][ T5082] Bluetooth: hci2: command tx timeout [ 483.923506][ T7603] syzkaller0: entered promiscuous mode [ 483.929240][ T7603] syzkaller0: entered allmulticast mode [ 485.906420][ T5082] Bluetooth: hci2: command tx timeout [ 486.256099][ T6773] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.507386][ T6773] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.804877][ T6773] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.229168][ T6773] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.983635][ T5082] Bluetooth: hci2: command tx timeout [ 489.323927][ T6773] bridge_slave_1: left allmulticast mode [ 489.330085][ T6773] bridge_slave_1: left promiscuous mode [ 489.337077][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.470757][ T6773] bridge_slave_0: left allmulticast mode [ 489.476929][ T6773] bridge_slave_0: left promiscuous mode [ 489.483949][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.815879][ T7656] x_tables: duplicate underflow at hook 1 [ 490.073983][ T5082] Bluetooth: hci2: command tx timeout [ 493.243217][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.409350][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.530507][ T6773] bond0 (unregistering): Released all slaves [ 493.598453][ T7596] chnl_net:caif_netlink_parms(): no params data found [ 495.244722][ T6773] hsr_slave_0: left promiscuous mode [ 495.294395][ T6773] hsr_slave_1: left promiscuous mode [ 495.335237][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.345663][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.401032][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.409155][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.678628][ T6773] veth1_macvtap: left promiscuous mode [ 495.716624][ T6773] veth0_macvtap: left promiscuous mode [ 495.753783][ T6773] veth1_vlan: left promiscuous mode [ 495.759421][ T6773] veth0_vlan: left promiscuous mode [ 499.065442][ T6773] team0 (unregistering): Port device team_slave_1 removed [ 499.209776][ T6773] team0 (unregistering): Port device team_slave_0 removed [ 506.205607][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.213388][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.268686][ T7596] bridge_slave_0: entered allmulticast mode [ 506.289954][ T7596] bridge_slave_0: entered promiscuous mode [ 506.349714][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.357374][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.435374][ T7596] bridge_slave_1: entered allmulticast mode [ 506.469123][ T7596] bridge_slave_1: entered promiscuous mode [ 507.049133][ T7738] tipc: Started in network mode [ 507.060659][ T7738] tipc: Node identity 5a847ba26561, cluster identity 4711 [ 507.070860][ T7738] tipc: Enabled bearer , priority 0 [ 507.405524][ T7730] tipc: Disabling bearer [ 507.629851][ T7596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.747851][ T7596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.844318][ T7596] team0: Port device team_slave_0 added [ 510.520401][ T7596] team0: Port device team_slave_1 added [ 511.224070][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.231344][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.262275][ T7596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.481861][ T7596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.489360][ T7596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.516804][ T7596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.291319][ T7596] hsr_slave_0: entered promiscuous mode [ 513.377196][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 513.387383][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 513.399957][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 513.498705][ T7596] hsr_slave_1: entered promiscuous mode [ 513.551240][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 513.568829][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.668252][ T7596] debugfs: 'hsr0' already exists in 'hsr' [ 513.674589][ T7596] Cannot create hsr debugfs directory [ 515.664377][ T5791] Bluetooth: hci4: command tx timeout [ 517.748830][ T5082] Bluetooth: hci4: command tx timeout [ 519.827662][ T5082] Bluetooth: hci4: command tx timeout [ 519.987196][ T6834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.539804][ T6834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.050763][ T7822] loop6: detected capacity change from 0 to 16 [ 521.076160][ T7822] erofs (device loop6): mounted with root inode @ nid 36. [ 521.115178][ T7822] x_tables: duplicate underflow at hook 1 [ 521.932305][ T5082] Bluetooth: hci4: command tx timeout [ 524.407022][ T7830] random: crng reseeded on system resumption [ 525.207594][ T6834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.318679][ T6834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.320587][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 529.631278][ T6834] bridge_slave_1: left allmulticast mode [ 529.637532][ T6834] bridge_slave_1: left promiscuous mode [ 529.645221][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.747449][ T6834] bridge_slave_0: left allmulticast mode [ 529.753575][ T6834] bridge_slave_0: left promiscuous mode [ 529.760446][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.323616][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 532.529116][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 532.642805][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 532.660212][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.839220][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.849020][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.857545][ T5844] usb 3-1: Product: syz [ 532.867089][ T5844] usb 3-1: Manufacturer: syz [ 532.871941][ T5844] usb 3-1: SerialNumber: syz [ 532.905753][ T6834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.960692][ T6834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.081994][ T5844] usb 3-1: config 0 descriptor?? [ 533.090054][ T6834] bond0 (unregistering): Released all slaves [ 533.181158][ T5844] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 533.191162][ T5844] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 533.904123][ T5844] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 533.921740][ T7596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 533.980989][ T5844] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 534.115659][ T7596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 534.385465][ T7596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 534.509714][ T5844] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 534.517215][ T5844] em28xx 3-1:0.0: No AC97 audio processor [ 534.848964][ T5844] usb 3-1: USB disconnect, device number 4 [ 534.941366][ T5844] em28xx 3-1:0.0: Disconnecting em28xx [ 535.066033][ T5844] em28xx 3-1:0.0: Freeing device [ 535.535052][ T6834] hsr_slave_0: left promiscuous mode [ 535.554634][ T6834] hsr_slave_1: left promiscuous mode [ 535.609697][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.617474][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.692429][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.700328][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.793494][ T6834] veth1_macvtap: left promiscuous mode [ 535.799282][ T6834] veth0_macvtap: left promiscuous mode [ 535.907020][ T6834] veth1_vlan: left promiscuous mode [ 535.924078][ T6834] veth0_vlan: left promiscuous mode [ 537.651223][ T6834] team0 (unregistering): Port device team_slave_1 removed [ 537.749797][ T6834] team0 (unregistering): Port device team_slave_0 removed [ 538.418888][ T7596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.558939][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.243261][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.250907][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.315767][ T7773] bridge_slave_0: entered allmulticast mode [ 539.356295][ T7773] bridge_slave_0: entered promiscuous mode [ 539.399560][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.407454][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.514084][ T7773] bridge_slave_1: entered allmulticast mode [ 539.545027][ T7773] bridge_slave_1: entered promiscuous mode [ 542.089629][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.096626][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.816127][ T7773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.988946][ T7773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.721612][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 543.746637][ T7773] team0: Port device team_slave_0 added [ 543.881945][ T7773] team0: Port device team_slave_1 added [ 543.956813][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 543.994106][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 544.005597][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 544.016155][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 544.029302][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.043747][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 544.053253][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.153299][ T5082] Bluetooth: hci1: command 0x0406 tx timeout [ 544.389160][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.397033][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.423731][ T7773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.506723][ T10] usb 3-1: usb_control_msg returned -32 [ 544.512766][ T10] usbtmc 3-1:16.0: can't read capabilities [ 544.653167][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.663112][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 544.683186][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.690347][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.717596][ T7773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.734888][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 544.775163][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 544.787926][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 544.959329][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 546.432020][ T7773] hsr_slave_0: entered promiscuous mode [ 546.487964][ T7773] hsr_slave_1: entered promiscuous mode [ 546.521277][ T7773] debugfs: 'hsr0' already exists in 'hsr' [ 546.527437][ T7773] Cannot create hsr debugfs directory [ 546.642085][ T10] usb 3-1: USB disconnect, device number 5 [ 546.864170][ T5082] Bluetooth: hci5: command tx timeout [ 548.973044][ T5082] Bluetooth: hci5: command tx timeout [ 548.988810][ T7928] loop6: detected capacity change from 0 to 256 [ 549.111193][ T7928] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 549.179484][ T7928] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 551.033725][ T5082] Bluetooth: hci5: command tx timeout [ 553.294365][ T5082] Bluetooth: hci5: command tx timeout [ 560.014576][ T7967] IPVS: fo: FWM 3 0x00000003 - no destination available [ 560.022024][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 560.068447][ T800] IPVS: starting estimator thread 0... [ 560.177556][ T7968] IPVS: using max 144 ests per chain, 7200 per kthread [ 562.479590][ T7773] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 562.718949][ T7773] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 562.940154][ T7773] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 563.188502][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 563.485764][ T7773] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 564.335410][ T13] bridge_slave_1: left allmulticast mode [ 564.341329][ T13] bridge_slave_1: left promiscuous mode [ 564.352135][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.424111][ T13] bridge_slave_0: left allmulticast mode [ 564.430369][ T13] bridge_slave_0: left promiscuous mode [ 564.437458][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.588293][ T5844] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 564.788105][ T5844] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 564.797687][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.895670][ T5844] usb 3-1: config 0 descriptor?? [ 565.273211][ T5844] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 565.676929][ T5844] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 565.684537][ T5844] [drm] Initialized udl on minor 2 [ 565.741307][ T5844] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 565.795626][ T5844] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 566.112270][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 566.174224][ T5844] usb 3-1: USB disconnect, device number 6 [ 566.254918][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 567.803338][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.823798][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.841693][ T13] bond0 (unregistering): Released all slaves [ 569.415244][ T13] hsr_slave_0: left promiscuous mode [ 569.486887][ T13] hsr_slave_1: left promiscuous mode [ 569.636562][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.656544][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.771967][ T8046] vivid-004: disconnect [ 570.881339][ T13] team0 (unregistering): Port device team_slave_1 removed [ 571.037591][ T13] team0 (unregistering): Port device team_slave_0 removed [ 571.289990][ T8042] vivid-004: reconnect [ 576.002423][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 576.019556][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 576.030306][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 576.084015][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 576.108715][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 576.409193][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.417242][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.514970][ T7904] bridge_slave_0: entered allmulticast mode [ 576.561846][ T7904] bridge_slave_0: entered promiscuous mode [ 576.670542][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.678476][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.783614][ T7904] bridge_slave_1: entered allmulticast mode [ 576.859024][ T7904] bridge_slave_1: entered promiscuous mode [ 577.023284][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 577.258100][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 577.326711][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 577.340694][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 577.350466][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.497627][ T9] usb 2-1: config 0 descriptor?? [ 577.740906][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.834235][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 577.840970][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 577.925054][ T9] usb 2-1: USB disconnect, device number 4 [ 578.000067][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.143818][ T5791] Bluetooth: hci2: command tx timeout [ 580.223003][ T5791] Bluetooth: hci2: command tx timeout [ 581.126582][ T7904] team0: Port device team_slave_0 added [ 581.150914][ T7904] team0: Port device team_slave_1 added [ 582.304650][ T5791] Bluetooth: hci2: command tx timeout [ 582.520362][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.531786][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.562116][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.678482][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.686418][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.714530][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.383137][ T5791] Bluetooth: hci2: command tx timeout [ 585.194645][ T7904] hsr_slave_0: entered promiscuous mode [ 585.245183][ T7904] hsr_slave_1: entered promiscuous mode [ 585.297426][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 585.303913][ T7904] Cannot create hsr debugfs directory [ 586.413056][ T800] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 586.625987][ T800] usb 2-1: Using ep0 maxpacket: 8 [ 586.703407][ T800] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 586.715452][ T800] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.729890][ T800] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.741583][ T800] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.755173][ T800] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.764847][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.890793][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 586.902437][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 586.916281][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 586.937151][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 586.949387][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.192008][ T800] usb 2-1: usb_control_msg returned -32 [ 587.198326][ T800] usbtmc 2-1:16.0: can't read capabilities [ 587.204797][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 587.373467][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 587.387936][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 587.424365][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 587.436939][ T5840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 587.516607][ T5840] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 587.526366][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.535981][ T5840] usb 7-1: Product: syz [ 587.545968][ T5840] usb 7-1: Manufacturer: syz [ 587.550794][ T5840] usb 7-1: SerialNumber: syz [ 587.733274][ T5840] usb 7-1: config 0 descriptor?? [ 587.800987][ T5840] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 587.811340][ T5840] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 588.456309][ T5840] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 588.504446][ T5840] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 588.753435][ T5840] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 588.760746][ T5840] em28xx 7-1:0.0: No AC97 audio processor [ 588.785561][ T3442] bridge_slave_1: left allmulticast mode [ 588.791574][ T3442] bridge_slave_1: left promiscuous mode [ 588.798642][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.870787][ T5840] usb 7-1: USB disconnect, device number 2 [ 588.921614][ T5840] em28xx 7-1:0.0: Disconnecting em28xx [ 588.922826][ T3442] bridge_slave_0: left allmulticast mode [ 588.933919][ T3442] bridge_slave_0: left promiscuous mode [ 588.940659][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.023002][ T5082] Bluetooth: hci4: command tx timeout [ 589.035207][ T5840] em28xx 7-1:0.0: Freeing device [ 589.288276][ T5914] usb 2-1: USB disconnect, device number 5 [ 589.825868][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.916166][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.971236][ T3442] bond0 (unregistering): Released all slaves [ 590.289920][ T3442] hsr_slave_0: left promiscuous mode [ 590.371406][ T3442] hsr_slave_1: left promiscuous mode [ 590.386797][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.419038][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.106069][ T5082] Bluetooth: hci4: command tx timeout [ 591.225713][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 591.273239][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 591.482094][ T8165] loop6: detected capacity change from 0 to 64 [ 593.159754][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.167710][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.184353][ T5082] Bluetooth: hci4: command tx timeout [ 593.219091][ T8073] bridge_slave_0: entered allmulticast mode [ 593.231597][ T8073] bridge_slave_0: entered promiscuous mode [ 593.258942][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.274800][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.323486][ T8073] bridge_slave_1: entered allmulticast mode [ 593.353636][ T8073] bridge_slave_1: entered promiscuous mode [ 593.882836][ T5840] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 593.935505][ T6834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.970522][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.069265][ T5840] usb 7-1: Using ep0 maxpacket: 8 [ 594.092077][ T5840] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 594.106951][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.118698][ T5840] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.129214][ T5840] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.142990][ T5840] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.152296][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.220272][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.323786][ T6834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.430069][ T5840] usb 7-1: usb_control_msg returned -32 [ 594.437471][ T5840] usbtmc 7-1:16.0: can't read capabilities [ 594.646414][ T6834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.825796][ T6834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.857455][ T8073] team0: Port device team_slave_0 added [ 594.992787][ T8073] team0: Port device team_slave_1 added [ 595.263075][ T5082] Bluetooth: hci4: command tx timeout [ 595.381422][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.388838][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.415501][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.486713][ T7904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 595.534416][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.541589][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.568380][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.646994][ T7904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.845067][ T7904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 596.081547][ T7904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 596.563310][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 596.768543][ T8073] hsr_slave_0: entered promiscuous mode [ 596.789853][ T8073] hsr_slave_1: entered promiscuous mode [ 596.800753][ T8073] debugfs: 'hsr0' already exists in 'hsr' [ 596.807373][ T8073] Cannot create hsr debugfs directory [ 596.827178][ T6834] bridge_slave_1: left allmulticast mode [ 596.833832][ T6834] bridge_slave_1: left promiscuous mode [ 596.840124][ T5840] usb 7-1: USB disconnect, device number 3 [ 596.840577][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.910423][ T6834] bridge_slave_0: left allmulticast mode [ 596.916666][ T6834] bridge_slave_0: left promiscuous mode [ 596.923681][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.358779][ T6834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.467827][ T6834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.521981][ T6834] bond0 (unregistering): Released all slaves [ 599.561810][ T6834] tipc: Left network mode [ 601.494304][ T6834] hsr_slave_0: left promiscuous mode [ 601.529376][ T6834] hsr_slave_1: left promiscuous mode [ 601.556489][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.564974][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.633331][ T6834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.641007][ T6834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.719909][ T6834] veth1_macvtap: left promiscuous mode [ 601.818283][ T6834] veth0_macvtap: left promiscuous mode [ 601.828620][ T6834] veth1_vlan: left promiscuous mode [ 601.834525][ T6834] veth0_vlan: left promiscuous mode [ 603.529478][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.536881][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 603.685522][ T6834] team0 (unregistering): Port device team_slave_1 removed [ 603.788360][ T6834] team0 (unregistering): Port device team_slave_0 removed [ 604.448489][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.458671][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.474327][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 604.503727][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 604.520586][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.684176][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.691799][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.733461][ T8133] bridge_slave_0: entered allmulticast mode [ 605.793891][ T8133] bridge_slave_0: entered promiscuous mode [ 605.940359][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.948228][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.443343][ T5082] Bluetooth: hci0: command tx timeout [ 607.443362][ T8133] bridge_slave_1: entered allmulticast mode [ 607.447191][ T8133] bridge_slave_1: entered promiscuous mode [ 608.987338][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.181534][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.503644][ T5082] Bluetooth: hci0: command tx timeout [ 609.755663][ T8133] team0: Port device team_slave_0 added [ 609.883219][ T8133] team0: Port device team_slave_1 added [ 610.548497][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.555950][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.586022][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.762257][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.770000][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.799901][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.346356][ T8278] syzkaller0: entered promiscuous mode [ 611.353199][ T8278] syzkaller0: entered allmulticast mode [ 611.517345][ T8133] hsr_slave_0: entered promiscuous mode [ 611.529260][ T8133] hsr_slave_1: entered promiscuous mode [ 611.541488][ T8133] debugfs: 'hsr0' already exists in 'hsr' [ 611.547588][ T8133] Cannot create hsr debugfs directory [ 611.583031][ T5082] Bluetooth: hci0: command tx timeout [ 611.753689][ T8073] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 611.938144][ T8073] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 612.038349][ T8073] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 612.205756][ T8073] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 612.552430][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 613.666044][ T5082] Bluetooth: hci0: command tx timeout [ 613.865297][ T5985] bridge_slave_1: left allmulticast mode [ 613.871289][ T5985] bridge_slave_1: left promiscuous mode [ 613.878566][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.991048][ T5985] bridge_slave_0: left allmulticast mode [ 613.998332][ T5985] bridge_slave_0: left promiscuous mode [ 614.005483][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.897760][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.049011][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.146792][ T5985] bond0 (unregistering): Released all slaves [ 615.225250][ T8297] netlink: 'syz.1.571': attribute type 12 has an invalid length. [ 615.687233][ T5985] hsr_slave_0: left promiscuous mode [ 615.723508][ T5985] hsr_slave_1: left promiscuous mode [ 615.763295][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.823833][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.868962][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 616.994417][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 617.973628][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.981361][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.011406][ T8255] bridge_slave_0: entered allmulticast mode [ 618.038871][ T8255] bridge_slave_0: entered promiscuous mode [ 618.174171][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.181963][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.190789][ T8255] bridge_slave_1: entered allmulticast mode [ 618.204213][ T8255] bridge_slave_1: entered promiscuous mode [ 618.546320][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.648859][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.149465][ T8133] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 619.302193][ T8255] team0: Port device team_slave_0 added [ 619.385976][ T8133] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 619.469820][ T8133] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 619.575456][ T8255] team0: Port device team_slave_1 added [ 619.587218][ T8133] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 619.941585][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.949050][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.975681][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.196522][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.204282][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.236065][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.725194][ T5840] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 620.896305][ T8255] hsr_slave_0: entered promiscuous mode [ 620.917436][ T8255] hsr_slave_1: entered promiscuous mode [ 620.950682][ T5840] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 620.960312][ T5840] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 620.967627][ T8255] debugfs: 'hsr0' already exists in 'hsr' [ 620.969055][ T5840] usb 7-1: Product: syz [ 620.975005][ T8255] Cannot create hsr debugfs directory [ 620.979178][ T5840] usb 7-1: Manufacturer: syz [ 620.989502][ T5840] usb 7-1: SerialNumber: syz [ 621.120392][ T5840] usb 7-1: config 0 descriptor?? [ 621.159669][ T5840] ch341 7-1:0.0: ch341-uart converter detected [ 621.521702][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.222457][ T5840] ch341-uart ttyUSB0: break control not supported, using simulated break [ 622.287625][ T5840] usb 7-1: ch341-uart converter now attached to ttyUSB0 [ 622.323576][ T5840] usb 7-1: USB disconnect, device number 4 [ 622.400136][ T5840] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 622.451527][ T5840] ch341 7-1:0.0: device disconnected [ 622.574535][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.600288][ T8360] netlink: 'syz.1.583': attribute type 12 has an invalid length. [ 622.806508][ T8362] netlink: 'syz.1.583': attribute type 4 has an invalid length. [ 623.027037][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.034732][ T6834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.459360][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.467100][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.453768][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.081033][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.335293][ T8255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 625.460565][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.468565][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.568708][ T8255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 625.676046][ T8255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 625.768553][ T8255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 625.863955][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.871673][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.222243][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.257306][ T8409] netlink: 'syz.1.592': attribute type 12 has an invalid length. [ 628.381537][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.447099][ T8414] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 628.553306][ T8033] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 628.744759][ T8033] usb 7-1: Using ep0 maxpacket: 8 [ 628.779373][ T8255] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.798676][ T8033] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 628.810469][ T8033] usb 7-1: config 0 has no interface number 0 [ 628.870650][ T8033] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 628.882931][ T8033] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 628.895115][ T8033] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.906607][ T8033] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 628.923161][ T8033] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 628.932481][ T8033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.128210][ T8033] usb 7-1: config 0 descriptor?? [ 629.164144][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.171761][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.269338][ T8033] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 629.296195][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.303917][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.837941][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 630.101971][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 630.145573][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 630.157843][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 630.425623][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.435351][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.443947][ T10] usb 2-1: Product: syz [ 630.451220][ T10] usb 2-1: Manufacturer: syz [ 630.457047][ T10] usb 2-1: SerialNumber: syz [ 630.745778][ T10] usb 2-1: config 0 descriptor?? [ 630.786728][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.851225][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 630.866074][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 631.186747][ T8142] usb 7-1: USB disconnect, device number 5 [ 631.309641][ T8142] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 631.624506][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 631.687794][ T10] em28xx 2-1:0.0: Config register raw data: 0x00 [ 633.406503][ T8086] usb 2-1: USB disconnect, device number 6 [ 633.478997][ T8086] em28xx 2-1:0.0: Disconnecting em28xx [ 633.551285][ T8086] em28xx 2-1:0.0: Freeing device [ 634.163296][ T8086] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 634.239202][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.250385][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.262087][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.284090][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.317455][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.363240][ T8086] usb 2-1: device descriptor read/64, error -71 [ 634.514683][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.631443][ T8086] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 634.832812][ T8086] usb 2-1: device descriptor read/64, error -71 [ 634.961229][ T8086] usb usb2-port1: attempt power cycle [ 635.375503][ T8086] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 635.426191][ T8086] usb 2-1: device descriptor read/8, error -71 [ 635.682929][ T8086] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 635.733461][ T8086] usb 2-1: device descriptor read/8, error -71 [ 635.854680][ T8086] usb usb2-port1: unable to enumerate USB device [ 636.382878][ T5791] Bluetooth: hci5: command tx timeout [ 636.403465][ T8133] veth0_vlan: entered promiscuous mode [ 636.949406][ T8133] veth1_vlan: entered promiscuous mode [ 637.770693][ T8451] chnl_net:caif_netlink_parms(): no params data found [ 638.465723][ T5791] Bluetooth: hci5: command tx timeout [ 638.530461][ T8486] netlink: 'syz.6.601': attribute type 12 has an invalid length. [ 638.625224][ T8492] netlink: 'syz.6.601': attribute type 4 has an invalid length. [ 638.889428][ T8133] veth0_macvtap: entered promiscuous mode [ 639.327089][ T8133] veth1_macvtap: entered promiscuous mode [ 639.542808][ T8255] veth0_vlan: entered promiscuous mode [ 639.718889][ T799] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 639.917653][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 639.998016][ T799] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 640.010601][ T799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 640.101179][ T8255] veth1_vlan: entered promiscuous mode [ 640.113134][ T799] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 640.122870][ T799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.131213][ T799] usb 2-1: Product: syz [ 640.135760][ T799] usb 2-1: Manufacturer: syz [ 640.140673][ T799] usb 2-1: SerialNumber: syz [ 640.306646][ T799] usb 2-1: config 0 descriptor?? [ 640.397727][ T799] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 640.408431][ T799] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 640.421746][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.501695][ T5985] bridge_slave_1: left allmulticast mode [ 640.508514][ T5985] bridge_slave_1: left promiscuous mode [ 640.516607][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.544846][ T5791] Bluetooth: hci5: command tx timeout [ 640.559640][ T5985] bridge_slave_0: left allmulticast mode [ 640.568070][ T5985] bridge_slave_0: left promiscuous mode [ 640.575922][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.034881][ T799] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 641.056547][ T799] em28xx 2-1:0.0: Config register raw data: 0x00 [ 641.350228][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.373625][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.389881][ T5985] bond0 (unregistering): Released all slaves [ 641.543238][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.654559][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.662193][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.671884][ T8451] bridge_slave_0: entered allmulticast mode [ 641.681980][ T8451] bridge_slave_0: entered promiscuous mode [ 641.736327][ T5985] hsr_slave_0: left promiscuous mode [ 641.746564][ T5985] hsr_slave_1: left promiscuous mode [ 641.764300][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.775565][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.421418][ T5844] usb 2-1: USB disconnect, device number 11 [ 642.465695][ T5844] em28xx 2-1:0.0: Disconnecting em28xx [ 642.514502][ T799] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 642.544963][ T5844] em28xx 2-1:0.0: Freeing device [ 642.622856][ T5791] Bluetooth: hci5: command tx timeout [ 642.688295][ T799] usb 7-1: device descriptor read/64, error -71 [ 642.830015][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 642.901562][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 642.944789][ T799] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 643.143452][ T799] usb 7-1: device descriptor read/64, error -71 [ 643.266828][ T799] usb usb7-port1: attempt power cycle [ 643.326433][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.334988][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.353604][ T8451] bridge_slave_1: entered allmulticast mode [ 643.364898][ T8451] bridge_slave_1: entered promiscuous mode [ 643.519407][ T8512] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.644616][ T155] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.666328][ T799] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 643.710729][ T799] usb 7-1: device descriptor read/8, error -71 [ 643.738415][ T8512] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.817374][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.882620][ T155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.892199][ T155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.911921][ T155] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.949577][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.966694][ T799] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 644.008105][ T799] usb 7-1: device descriptor read/8, error -71 [ 644.013669][ T8512] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.124560][ T799] usb usb7-port1: unable to enumerate USB device [ 644.279323][ T8512] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.340724][ T8451] team0: Port device team_slave_0 added [ 644.462377][ T8451] team0: Port device team_slave_1 added [ 644.601934][ T8255] veth0_macvtap: entered promiscuous mode [ 644.691459][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.698925][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.725807][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.771394][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.779058][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.809248][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.891785][ T142] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.938093][ T8255] veth1_macvtap: entered promiscuous mode [ 645.123990][ T5985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.408523][ T8451] hsr_slave_0: entered promiscuous mode [ 645.470892][ T8451] hsr_slave_1: entered promiscuous mode [ 645.515404][ T8451] debugfs: 'hsr0' already exists in 'hsr' [ 645.521398][ T8451] Cannot create hsr debugfs directory [ 645.531873][ T142] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.650047][ T142] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.731698][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.243274][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.793314][ T3442] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.001372][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 647.055744][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 647.065757][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 647.082730][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 647.095272][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 647.179428][ T3442] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.287586][ T3461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.301420][ T8535] netlink: 'syz.1.612': attribute type 12 has an invalid length. [ 647.433248][ T8537] netlink: 'syz.1.612': attribute type 4 has an invalid length. [ 647.450742][ T3461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.189392][ T5082] Bluetooth: hci2: command tx timeout [ 649.329368][ T8540] mmap: syz.6.613 (8540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 650.075335][ T8142] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 650.303954][ T8142] usb 2-1: Using ep0 maxpacket: 16 [ 650.397910][ T8142] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 650.410199][ T8142] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 650.591215][ T8142] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 650.600909][ T8142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.610572][ T8142] usb 2-1: Product: syz [ 650.615274][ T8142] usb 2-1: Manufacturer: syz [ 650.623624][ T8142] usb 2-1: SerialNumber: syz [ 650.739757][ T8142] usb 2-1: config 0 descriptor?? [ 650.819279][ T8142] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 650.833657][ T8142] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 651.116519][ T6773] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.272954][ T5082] Bluetooth: hci2: command tx timeout [ 651.296509][ T6773] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.409963][ T8142] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 651.426670][ T8142] em28xx 2-1:0.0: Config register raw data: 0x00 [ 651.493343][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 651.675056][ T6773] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.820027][ T8451] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 651.935144][ T6773] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.127427][ T8451] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 652.319845][ T8451] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 652.460792][ T8451] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 653.202395][ T8142] usb 2-1: USB disconnect, device number 12 [ 653.226730][ T8142] em28xx 2-1:0.0: Disconnecting em28xx [ 653.269042][ T8142] em28xx 2-1:0.0: Freeing device [ 653.343169][ T5082] Bluetooth: hci2: command tx timeout [ 653.506047][ T6773] bridge_slave_1: left allmulticast mode [ 653.511940][ T6773] bridge_slave_1: left promiscuous mode [ 653.519596][ T6773] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.618559][ T6773] bridge_slave_0: left allmulticast mode [ 653.628919][ T6773] bridge_slave_0: left promiscuous mode [ 653.635973][ T6773] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.107896][ T8142] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 654.323113][ T8142] usb 2-1: Using ep0 maxpacket: 8 [ 654.366542][ T8142] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 654.378581][ T8142] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 654.389053][ T8142] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.399400][ T8142] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.414624][ T8142] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.424972][ T8142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.744519][ T8142] usb 2-1: usb_control_msg returned -32 [ 654.750309][ T8142] usbtmc 2-1:16.0: can't read capabilities [ 655.066104][ T6773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.116014][ T6773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.153730][ T6773] bond0 (unregistering): Released all slaves [ 655.423926][ T5082] Bluetooth: hci2: command tx timeout [ 655.512424][ T6773] hsr_slave_0: left promiscuous mode [ 655.569793][ T6773] hsr_slave_1: left promiscuous mode [ 655.579617][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.587639][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.694257][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.701972][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.809855][ T6773] veth1_macvtap: left promiscuous mode [ 655.824436][ T6773] veth0_macvtap: left promiscuous mode [ 655.831080][ T6773] veth1_vlan: left promiscuous mode [ 655.859522][ T6773] veth0_vlan: left promiscuous mode [ 656.848350][ T5914] usb 2-1: USB disconnect, device number 13 [ 657.170225][ T6773] team0 (unregistering): Port device team_slave_1 removed [ 657.218259][ T6773] team0 (unregistering): Port device team_slave_0 removed [ 657.820452][ T8573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.969935][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.981133][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.026578][ T8530] bridge_slave_0: entered allmulticast mode [ 658.039217][ T8530] bridge_slave_0: entered promiscuous mode [ 658.083212][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.090934][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.109376][ T8530] bridge_slave_1: entered allmulticast mode [ 658.131092][ T8530] bridge_slave_1: entered promiscuous mode [ 658.247194][ T8573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.418868][ T8573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.647605][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.832395][ T8573] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.878870][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.085906][ T8586] netlink: 'syz.1.621': attribute type 12 has an invalid length. [ 659.114760][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.125932][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.151703][ T8530] team0: Port device team_slave_0 added [ 659.266233][ T8530] team0: Port device team_slave_1 added [ 659.271183][ T8588] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 659.321278][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.497844][ T5986] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.510579][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.518577][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.549660][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.570536][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.577926][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.605919][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.618482][ T5986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.627006][ T5986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.728969][ T5986] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.073253][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.157957][ T8530] hsr_slave_0: entered promiscuous mode [ 660.178318][ T8530] hsr_slave_1: entered promiscuous mode [ 660.209155][ T8530] debugfs: 'hsr0' already exists in 'hsr' [ 660.215413][ T8530] Cannot create hsr debugfs directory [ 660.878378][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.194307][ T30] audit: type=1326 audit(1769066208.252:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef7d9acb9 code=0x7ffc0000 [ 661.217340][ T30] audit: type=1326 audit(1769066208.262:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbef7d9acb9 code=0x7ffc0000 [ 661.340270][ T8600] netlink: 'syz.6.624': attribute type 6 has an invalid length. [ 661.452300][ T30] audit: type=1326 audit(1769066208.432:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef7d9acb9 code=0x7ffc0000 [ 661.479347][ T30] audit: type=1326 audit(1769066208.432:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.6.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbef7d9acb9 code=0x7ffc0000 [ 662.849810][ T8451] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.923388][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.931343][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.178310][ T8613] netlink: 'syz.1.629': attribute type 12 has an invalid length. [ 664.247031][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.254786][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.429132][ T8613] netlink: 'syz.1.629': attribute type 4 has an invalid length. [ 664.968300][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.975252][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 665.538362][ T8616] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.847522][ T8616] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.114571][ T8616] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.159536][ T8530] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 666.422915][ T8616] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.483950][ T8530] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 666.623273][ T8530] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 666.715125][ T8530] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 667.350612][ T3494] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.511225][ T3461] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.736669][ T6071] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.847973][ T6773] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.390484][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.047606][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.430642][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.594482][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.602150][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.893561][ T8632] syzkaller0: entered promiscuous mode [ 669.899300][ T8632] syzkaller0: entered allmulticast mode [ 669.960281][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.967998][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.444122][ T8649] FAT-fs (loop11): unable to read boot sector [ 672.562384][ T8650] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 674.370095][ T8451] veth0_vlan: entered promiscuous mode [ 674.622066][ T8451] veth1_vlan: entered promiscuous mode [ 674.721689][ T8658] netlink: 'syz.6.639': attribute type 12 has an invalid length. [ 674.950976][ T8658] netlink: 'syz.6.639': attribute type 4 has an invalid length. [ 675.559490][ T8451] veth0_macvtap: entered promiscuous mode [ 675.743531][ T8451] veth1_macvtap: entered promiscuous mode [ 675.887060][ T8662] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.231873][ T8669] netlink: 72 bytes leftover after parsing attributes in process `syz.6.642'. [ 676.318400][ T8662] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.531475][ T8669] netlink: 64 bytes leftover after parsing attributes in process `syz.6.642'. [ 676.624378][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.729420][ T8662] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.075731][ T8662] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.193624][ T8676] syzkaller0: entered promiscuous mode [ 677.199359][ T8676] syzkaller0: entered allmulticast mode [ 677.302410][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.561678][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.739903][ T3442] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.929396][ T3442] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.026613][ T3442] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.128114][ T3442] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.299856][ T55] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.457394][ T6071] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.507013][ T6071] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.525853][ T6071] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.574227][ T799] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 679.794017][ T799] usb 2-1: Using ep0 maxpacket: 8 [ 679.858832][ T799] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 679.871098][ T799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 679.881588][ T799] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.892214][ T799] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.910104][ T799] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 679.920548][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.000167][ T8530] veth0_vlan: entered promiscuous mode [ 680.344083][ T8530] veth1_vlan: entered promiscuous mode [ 680.454777][ T799] usb 2-1: usb_control_msg returned -32 [ 680.460888][ T799] usbtmc 2-1:16.0: can't read capabilities [ 680.723873][ T799] usb 2-1: USB disconnect, device number 14 [ 681.152203][ T8530] veth0_macvtap: entered promiscuous mode [ 681.424534][ T8530] veth1_macvtap: entered promiscuous mode [ 681.836931][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.053590][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.330939][ T3494] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.376508][ T8709] netlink: 'syz.1.650': attribute type 12 has an invalid length. [ 682.507177][ T3494] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.563741][ T8709] netlink: 'syz.1.650': attribute type 4 has an invalid length. [ 682.607073][ T3494] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.662074][ T3494] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.184073][ T8728] syzkaller0: entered promiscuous mode [ 686.189767][ T8728] syzkaller0: entered allmulticast mode [ 687.270394][ T8741] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.611259][ T8741] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.121079][ T8741] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.692021][ T8741] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.824921][ T8763] FAT-fs (loop13): unable to read boot sector [ 695.523237][ T8765] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 698.700336][ T155] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.858773][ T155] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.071926][ T35] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.234157][ T3461] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.890238][ T8786] netlink: 'syz.1.661': attribute type 12 has an invalid length. [ 700.009892][ T8786] netlink: 'syz.1.661': attribute type 4 has an invalid length. [ 700.246009][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 700.256580][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 700.267435][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 700.282385][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 700.315429][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 700.904818][ T8794] syzkaller0: entered promiscuous mode [ 700.910630][ T8794] syzkaller0: entered allmulticast mode [ 703.062050][ T5082] Bluetooth: hci4: command tx timeout [ 705.126372][ T5082] Bluetooth: hci4: command tx timeout [ 705.353043][ T8142] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 705.583849][ T8142] usb 2-1: Using ep0 maxpacket: 8 [ 705.682804][ T8142] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 705.691408][ T8142] usb 2-1: config 0 has no interface number 0 [ 705.839407][ T8142] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 705.850874][ T8142] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 705.863018][ T8142] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.874433][ T8142] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 705.887900][ T8142] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 705.897321][ T8142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.188412][ T5791] Bluetooth: hci4: command tx timeout [ 708.387445][ T8142] usb 2-1: config 0 descriptor?? [ 709.406278][ T5082] Bluetooth: hci4: command tx timeout [ 709.620426][ T8142] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 709.829936][ T8142] usb 2-1: USB disconnect, device number 15 [ 709.947398][ T8142] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 710.353144][ T5840] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 710.589392][ T5840] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.663095][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 710.675315][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 710.686872][ T5840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 710.697097][ T5840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 710.958450][ T3442] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.980786][ T8835] netlink: 76 bytes leftover after parsing attributes in process `syz.6.672'. [ 711.013829][ T5840] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 711.026769][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 711.036874][ T5840] usb 6-1: Product: syz [ 711.041268][ T5840] usb 6-1: Manufacturer: syz [ 711.050420][ T5840] usb 6-1: SerialNumber: syz [ 711.084720][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 711.220380][ T5840] usb 6-1: config 0 descriptor?? [ 711.318976][ T3442] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.563726][ T5840] radio-si470x 6-1:0.0: DeviceID=0xd589 ChipID=0xc948 [ 711.786181][ T5840] radio-si470x 6-1:0.0: software version 213, hardware version 137 [ 711.885033][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 711.889269][ T3442] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.904861][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 711.916799][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 711.937451][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 711.963782][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 711.999793][ T5840] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 712.519616][ T3442] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.638351][ T8846] netlink: 'syz.6.674': attribute type 12 has an invalid length. [ 712.825030][ T8846] netlink: 'syz.6.674': attribute type 4 has an invalid length. [ 713.255554][ T5840] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 713.308131][ T5840] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 713.433593][ T5840] usb 6-1: USB disconnect, device number 2 [ 713.953324][ T41] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 713.973051][ T3442] bridge_slave_1: left allmulticast mode [ 713.979040][ T3442] bridge_slave_1: left promiscuous mode [ 713.986043][ T3442] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.080837][ T5791] Bluetooth: hci5: command tx timeout [ 714.143450][ T41] usb 2-1: device descriptor read/64, error -71 [ 714.204032][ T3442] bridge_slave_0: left allmulticast mode [ 714.216213][ T3442] bridge_slave_0: left promiscuous mode [ 714.223188][ T3442] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.410830][ T41] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 714.653412][ T41] usb 2-1: device descriptor read/64, error -71 [ 714.764633][ T41] usb usb2-port1: attempt power cycle [ 715.204873][ T41] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 715.308745][ T41] usb 2-1: device descriptor read/8, error -71 [ 715.594525][ T41] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 715.777695][ T41] usb 2-1: device descriptor read/8, error -71 [ 715.907892][ T41] usb usb2-port1: unable to enumerate USB device [ 716.146692][ T5791] Bluetooth: hci5: command tx timeout [ 716.454387][ T3442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.521809][ T3442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.540610][ T3442] bond0 (unregistering): Released all slaves [ 717.140987][ T3442] hsr_slave_0: left promiscuous mode [ 717.175367][ T3442] hsr_slave_1: left promiscuous mode [ 717.210177][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.218219][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.278190][ T3442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.291516][ T3442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.299455][ T30] audit: type=1326 audit(1769066264.382:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8881 comm="syz.1.680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f650939acb9 code=0x0 [ 717.455099][ T3442] veth1_macvtap: left promiscuous mode [ 717.460873][ T3442] veth0_macvtap: left promiscuous mode [ 717.503340][ T3442] veth1_vlan: left promiscuous mode [ 717.508967][ T3442] veth0_vlan: left promiscuous mode [ 717.873926][ T5791] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 718.085694][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 718.234326][ T5791] Bluetooth: hci5: command tx timeout [ 719.674700][ T8910] netlink: 'syz.6.685': attribute type 4 has an invalid length. [ 720.005930][ T3442] team0 (unregistering): Port device team_slave_1 removed [ 720.100305][ T3442] team0 (unregistering): Port device team_slave_0 removed [ 720.310687][ T5791] Bluetooth: hci5: command tx timeout [ 721.064358][ T8905] netlink: 'syz.6.685': attribute type 12 has an invalid length. [ 721.112862][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.120609][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.148022][ T8892] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 721.158050][ T8892] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 721.168136][ T8892] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 721.184254][ T30] audit: type=1800 audit(1769066268.212:7): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.681" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 721.229785][ T8788] bridge_slave_0: entered allmulticast mode [ 721.241458][ T8788] bridge_slave_0: entered promiscuous mode [ 721.261235][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.285370][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.333533][ T8788] bridge_slave_1: entered allmulticast mode [ 721.373791][ T8788] bridge_slave_1: entered promiscuous mode [ 721.642405][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.678479][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.905268][ T5791] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 721.914696][ T5791] Bluetooth: hci1: Injecting HCI hardware error event [ 721.922746][ T5082] Bluetooth: hci1: hardware error 0x00 [ 722.496824][ T8788] team0: Port device team_slave_0 added [ 722.628872][ T3442] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.247552][ T10] IPVS: starting estimator thread 0... [ 723.373613][ T8937] IPVS: using max 144 ests per chain, 7200 per kthread [ 723.760226][ T8788] team0: Port device team_slave_1 added [ 723.983105][ T5082] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 724.001020][ T3442] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.388603][ T3442] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.743975][ T3442] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.735522][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.743165][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.769830][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.800537][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.813427][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.840449][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.893986][ T8839] chnl_net:caif_netlink_parms(): no params data found [ 726.431225][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.438367][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.937941][ T8965] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 726.953230][ T8533] Bluetooth: hci5: command 0x0405 tx timeout [ 727.175073][ T8964] netlink: 'syz.1.696': attribute type 12 has an invalid length. [ 728.273734][ T8970] xt_policy: too many policy elements [ 728.327256][ T8970] rdma_op ffff88803def3580 conn xmit_rdma 0000000000000000 [ 728.543300][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 728.773393][ T5914] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 729.168519][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.180104][ T5914] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 729.189746][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.715761][ T5914] usb 6-1: config 0 descriptor?? [ 730.151917][ T5914] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 730.161781][ T5914] usbhid 6-1:0.0: can't add hid device: -22 [ 730.168764][ T5914] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 730.636559][ T8788] hsr_slave_0: entered promiscuous mode [ 730.720508][ T8788] hsr_slave_1: entered promiscuous mode [ 730.741874][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.698'. [ 730.861988][ T8788] debugfs: 'hsr0' already exists in 'hsr' [ 730.870159][ T8788] Cannot create hsr debugfs directory [ 731.451139][ T10] usb 6-1: USB disconnect, device number 3 [ 731.635580][ T8980] ===================================================== [ 731.643125][ T8980] BUG: KMSAN: uninit-value in iopt_pages_unfill_xarray+0xfe3/0x1660 [ 731.651618][ T8980] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 731.657848][ T8980] iopt_area_remove_access+0x508/0x650 [ 731.663880][ T8980] iommufd_access_unpin_pages+0x637/0xa50 [ 731.669851][ T8980] iommufd_test_access_unmap+0x423/0x6b0 [ 731.676023][ T8980] iommufd_test_staccess_release+0x7f/0x140 [ 731.682140][ T8980] __fput+0x60e/0x1050 [ 731.686685][ T8980] fput_close_sync+0xbc/0x210 [ 731.691562][ T8980] __x64_sys_close+0xef/0x2c0 [ 731.696740][ T8980] x64_sys_call+0x379f/0x3e70 [ 731.701646][ T8980] do_syscall_64+0xc9/0xf80 [ 731.706746][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.713061][ T8980] [ 731.715484][ T8980] Local variable batch created at: [ 731.725172][ T8980] iopt_pages_unfill_xarray+0x86/0x1660 [ 731.730978][ T8980] iopt_area_remove_access+0x508/0x650 [ 731.738173][ T8980] [ 731.740651][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.1.699 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 731.752363][ T8980] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 731.757819][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 731.768174][ T8980] ===================================================== [ 731.775732][ T8980] Disabling lock debugging due to kernel taint [ 731.782012][ T8980] Kernel panic - not syncing: kmsan.panic set ... [ 731.788594][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.1.699 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 731.800060][ T8980] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 731.806614][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 731.817201][ T8980] Call Trace: [ 731.820612][ T8980] [ 731.823662][ T8980] __dump_stack+0x26/0x30 [ 731.828306][ T8980] dump_stack_lvl+0x50/0x1c0 [ 731.833187][ T8980] ? dump_stack+0x12/0x25 [ 731.837736][ T8980] dump_stack+0x1e/0x25 [ 731.842095][ T8980] vpanic+0x435/0xd40 [ 731.846363][ T8980] panic+0x15d/0x160 [ 731.850540][ T8980] kmsan_report+0x31a/0x320 [ 731.855304][ T8980] ? kmsan_get_metadata+0xf1/0x160 [ 731.860667][ T8980] ? __msan_warning+0x1b/0x30 [ 731.865597][ T8980] ? iopt_pages_unfill_xarray+0xfe3/0x1660 [ 731.871691][ T8980] ? iopt_area_remove_access+0x508/0x650 [ 731.877575][ T8980] ? iommufd_access_unpin_pages+0x637/0xa50 [ 731.883738][ T8980] ? iommufd_test_access_unmap+0x423/0x6b0 [ 731.889751][ T8980] ? iommufd_test_staccess_release+0x7f/0x140 [ 731.896028][ T8980] ? __fput+0x60e/0x1050 [ 731.900479][ T8980] ? fput_close_sync+0xbc/0x210 [ 731.905544][ T8980] ? __x64_sys_close+0xef/0x2c0 [ 731.910600][ T8980] ? x64_sys_call+0x379f/0x3e70 [ 731.915702][ T8980] ? do_syscall_64+0xc9/0xf80 [ 731.920597][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.926879][ T8980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 731.932973][ T8980] ? kmsan_get_metadata+0xf1/0x160 [ 731.938371][ T8980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 731.944496][ T8980] ? xas_load+0xcda/0xd70 [ 731.949076][ T8980] ? kmsan_get_metadata+0xf1/0x160 [ 731.954484][ T8980] ? __xas_next+0x142/0x7a0 [ 731.959227][ T8980] ? kmsan_get_metadata+0xf1/0x160 [ 731.964627][ T8980] __msan_warning+0x1b/0x30 [ 731.969392][ T8980] iopt_pages_unfill_xarray+0xfe3/0x1660 [ 731.975476][ T8980] ? kmsan_report+0x2b0/0x320 [ 731.980485][ T8980] ? __set_next_task_fair+0x29b/0x6d0 [ 731.986111][ T8980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 731.992224][ T8980] ? interval_tree_remove+0x158e/0x1730 [ 731.998067][ T8980] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 732.004257][ T8980] iopt_area_remove_access+0x508/0x650 [ 732.010017][ T8980] iommufd_access_unpin_pages+0x637/0xa50 [ 732.016060][ T8980] iommufd_test_access_unmap+0x423/0x6b0 [ 732.021942][ T8980] iommufd_test_staccess_release+0x7f/0x140 [ 732.028052][ T8980] ? __pfx_iommufd_test_staccess_release+0x10/0x10 [ 732.034769][ T8980] __fput+0x60e/0x1050 [ 732.039069][ T8980] fput_close_sync+0xbc/0x210 [ 732.043950][ T8980] __x64_sys_close+0xef/0x2c0 [ 732.048838][ T8980] x64_sys_call+0x379f/0x3e70 [ 732.053747][ T8980] do_syscall_64+0xc9/0xf80 [ 732.058462][ T8980] ? clear_bhb_loop+0x40/0x90 [ 732.063333][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.069423][ T8980] RIP: 0033:0x7f650939acb9 [ 732.073980][ T8980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.093782][ T8980] RSP: 002b:00007f650a2cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 732.102392][ T8980] RAX: ffffffffffffffda RBX: 00007f6509615fa0 RCX: 00007f650939acb9 [ 732.110523][ T8980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 732.119058][ T8980] RBP: 00007f6509408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 732.127259][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.135422][ T8980] R13: 00007f6509616038 R14: 00007f6509615fa0 R15: 00007ffd34005e18 [ 732.143588][ T8980] [ 732.146913][ T8980] Kernel Offset: disabled [ 732.151398][ T8980] Rebooting in 86400 seconds..