last executing test programs: 9m27.789429771s ago: executing program 2 (id=3): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xd, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 9m27.665763008s ago: executing program 3 (id=4): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x9, 0x5, 0xfffffffc) 9m26.802464009s ago: executing program 2 (id=6): r0 = socket(0x15, 0x5, 0x0) inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x64) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x83515, 0xc2de, 0x8, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x12ba82) ioctl$BLKIOOPT(r7, 0x1279, 0xffffffffffffffff) 9m24.545251566s ago: executing program 3 (id=8): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x8, 0x3, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 9m23.704116279s ago: executing program 3 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) acct(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = fanotify_init(0x2, 0x101000) fanotify_mark(r7, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 9m18.674408873s ago: executing program 3 (id=14): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) r2 = syz_pidfd_open(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff04) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x4001, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="290326bd700000dcdf25160000000800030049efdfe6e081120855115e37224255f3e28ef3e35f38d1d3", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10000860}, 0x2400c004) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 9m6.256649304s ago: executing program 32 (id=9): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) fsetxattr(r0, 0x0, &(0x7f0000000d00)='\x00', 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) 9m5.688115802s ago: executing program 33 (id=6): r0 = socket(0x15, 0x5, 0x0) inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x64) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[], 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x83515, 0xc2de, 0x8, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x12ba82) ioctl$BLKIOOPT(r7, 0x1279, 0xffffffffffffffff) 9m5.626748571s ago: executing program 3 (id=19): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000000180)) 9m3.784413803s ago: executing program 3 (id=23): ftruncate(0xffffffffffffffff, 0xc17a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 8m47.958624213s ago: executing program 34 (id=23): ftruncate(0xffffffffffffffff, 0xc17a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x12, r5, 0x0, 0x0, 0x0, 0x2000, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 7m27.983397874s ago: executing program 1 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x10, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m27.096134997s ago: executing program 1 (id=125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$inet6(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/97, 0x61) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x200000) 7m21.924274297s ago: executing program 1 (id=128): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r1, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000200)={@my=0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x8000, 0x14, @local, @private1, 0x7, 0x80, 0xf63, 0xbf2}}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 7m19.760958641s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 7m19.147907322s ago: executing program 1 (id=133): epoll_create1(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue0\x00', 0x6}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7m18.732392007s ago: executing program 1 (id=135): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbbdfd02573c92"], 0x14}}, 0x43) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ftruncate(0xffffffffffffffff, 0x6) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000100), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 7m3.3940633s ago: executing program 35 (id=135): openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f029, 0x4}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbbdfd02573c92"], 0x14}}, 0x43) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7f, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [0x0, 0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x290, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x80}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x7, 0x0, 0x41, 0x0, 0xb10f, 0x1000, 0x6, 0x3, 0x20}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x16, 0x7f, 0x4, 0x1, '\x00', 'syz0\x00', {0xa6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4b0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x18, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ftruncate(0xffffffffffffffff, 0x6) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat$cgroup_freezer_state(r5, &(0x7f00000002c0), 0x2, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000100), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 6m4.775258104s ago: executing program 5 (id=17): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000140)={0x980000, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6m1.054183457s ago: executing program 5 (id=172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20008040) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r2, 0xe6e964277ae08d57, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendto$inet(r0, &(0x7f00000000c0)="8b", 0x1, 0x0, 0x0, 0x0) 5m59.779678564s ago: executing program 5 (id=174): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x40, 0x9, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x102e0c1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) gettid() r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) semget$private(0x0, 0x4, 0x96) 5m43.308851442s ago: executing program 36 (id=174): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x40, 0x9, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x2, "bc3e098e0000f403040000000000000000000000000000ffffffffffffffec00"}) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x102e0c1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) gettid() r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) semget$private(0x0, 0x4, 0x96) 3m26.163747124s ago: executing program 4 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x2, 0x0, @pic={0x0, 0x6, 0x4, 0x9, 0x5, 0x0, 0x18, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x6, 0x2}}) 3m25.085959237s ago: executing program 4 (id=288): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60004, 0xc8) lseek(r3, 0xc3, 0x0) 3m21.255170628s ago: executing program 4 (id=294): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x80000000, 0x6, 0x3, 0x2, 0x9e, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x401, 0x91}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 3m19.278305024s ago: executing program 4 (id=300): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0xd6, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000100)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) setgroups(0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) listen(r5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4(r5, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 3m15.751725407s ago: executing program 4 (id=306): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 3m14.332535072s ago: executing program 4 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40a042, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000000000/0x3000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000e994) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) 3m7.500844524s ago: executing program 8 (id=312): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x141880) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="53e37fd239fa", 0x6}, {0x0}], 0x2) 3m6.784946419s ago: executing program 8 (id=314): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 3m5.026223449s ago: executing program 8 (id=318): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9, 0x5, 0x20, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r6, &(0x7f00000004c0)}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) 3m3.325173763s ago: executing program 8 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 2m58.551370781s ago: executing program 37 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x40a042, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000000000/0x3000)=nil) shmat(r3, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000e994) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x11) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) 1m5.510327194s ago: executing program 7 (id=384): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x800) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000280)={@my=0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m4.410727297s ago: executing program 7 (id=385): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0xfdef) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') exit(0xf) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 41.429214942s ago: executing program 9 (id=390): r0 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x1000000, "3c9121f2a0ebf068c0841065a160c5c1b9a559523edd51cd99bfaf53b66698fe", 0x2}) 41.175007411s ago: executing program 9 (id=391): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000140)='&', 0x1, 0x80c4, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, r1, 0x0) 40.744449364s ago: executing program 9 (id=392): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xffffffffffffffe3}, {0x9, 0xc9, "828931a95efcf797"}}}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}}, 0x0) 40.314822475s ago: executing program 9 (id=393): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 39.205910497s ago: executing program 9 (id=394): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x2) 36.424492773s ago: executing program 9 (id=395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x69) 13.819047543s ago: executing program 6 (id=396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 12.896209505s ago: executing program 6 (id=397): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12.087392348s ago: executing program 6 (id=398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1, &(0x7f0000019440)=@raw=[@call={0x85, 0x0, 0x0, 0x68}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x1, 0x5}, &(0x7f0000000200)) getrlimit(0x7, &(0x7f0000019300)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, 0x0) sendto(r6, 0x0, 0x0, 0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000019380)='./file0\x00', 0x3) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.007863896s ago: executing program 7 (id=385): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0xfdef) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') exit(0xf) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 10.932138345s ago: executing program 0 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 8.596596612s ago: executing program 0 (id=401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x30}}, 0x40840) 8.524322937s ago: executing program 7 (id=402): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xffffffffffffffe3}, {0x9, 0xc9, "828931a95efcf797"}}}, 0xe) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0], 0x54}}, 0x0) 5.967518122s ago: executing program 6 (id=403): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2e5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 5.366374713s ago: executing program 0 (id=404): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f0000000180)}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x81, 0xffffffffffffffff, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002}) 5.250963295s ago: executing program 7 (id=405): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.441714496s ago: executing program 6 (id=406): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 4.435524391s ago: executing program 0 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000100)={0x710, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa}, [{{0x254, 0x1, {{0x1, 0x4}, 0x75, 0x7f, 0x2, 0x9, 0x14, 'syz0\x00', "0dc8c957e3a0354f1d556ca93a4f50e038f7d97fc2e1b11003f06d4c32fa400d", "3559a5860fe073b810f002afe1e5e01c98de66447358791e672ed3fbb5506dcc", [{0xfffc, 0xbd75, {0x3, 0x3b2e}}, {0x800, 0x2, {0x3, 0x3}}, {0x4, 0x2, {0x1, 0x6e4}}, {0x3ff, 0x2, {0x0, 0x1ff}}, {0x1, 0x8, {0x2, 0x7}}, {0x3, 0x7, {0x0, 0x80000000}}, {0x3, 0x0, {0x3, 0x1}}, {0x9, 0x74b, {0x1, 0x5}}, {0x9, 0x3, {0x2, 0x9}}, {0x800, 0x88e, {0x0, 0x1}}, {0x7, 0xea8d, {0x0, 0x5}}, {0x0, 0x6, {0xa7678e7f685eda2b, 0x48e}}, {0x5, 0x1, {0x0, 0xaf1b}}, {0x8, 0x3, {0x0, 0x2}}, {0x1, 0x37, {0x2, 0xffffffb5}}, {0x2fe4, 0xf41, {0x2, 0x530}}, {0xdd9, 0x6, {0x3, 0x8}}, {0x5eb, 0x7, {0x3, 0x1}}, {0x400, 0x1ff, {0x1, 0x4}}, {0xff, 0xbe, {0x3, 0x6}}, {0x6, 0xa, {0x1, 0x80000001}}, {0x2, 0x5, {0x0, 0xa}}, {0x200, 0x0, {0x1, 0x200}}, {0xa2b1, 0x200, {0x3, 0x8001}}, {0x3, 0x8, {0x1, 0x9}}, {0xaa1e, 0x4, {0x0, 0x1}}, {0x2, 0x0, {0x3, 0x2}}, {0x3, 0x8000, {0x2, 0x9}}, {0x2, 0x4, {0x0, 0xc}}, {0x800, 0x8, {0x3, 0x5}}, {0x1, 0xab97, {0x3, 0x3}}, {0xcb, 0x7, {0x0, 0x3}}, {0x6, 0x5d55, {0x0, 0x7fffffff}}, {0x6, 0xd, {0x1, 0x1}}, {0x8, 0x81, {0x3, 0x6}}, {0x400, 0x3ff, {0x1}}, {0x7, 0x5, {0x3, 0xb}}, {0x5, 0xfff, {0x0, 0x9}}, {0x5d, 0x9, {0x4cbbfbc150c1a20d, 0x4}}, {0x6, 0x40, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x43b}, 0x2, 0x0, 0x6, 0xff8b, 0x28, 'syz1\x00', "3622fbd72701c8ca70212a71cddebf152a530d5294c2dadc885a07428a482cb3", "fab363d514db4d20c4c2d69c2963632a6301423fe48e70c50b3b416de25d2ff5", [{0xee8b, 0x80, {0x1, 0xcedd}}, {0x3, 0x0, {0x2, 0xff}}, {0x6, 0x100, {0x2, 0xc000}}, {0x0, 0x5, {0x1, 0x2cd}}, {0x5ed, 0x5, {0x0, 0x3}}, {0x80, 0xd0d, {0x2, 0x9}}, {0x2, 0x1ff, {0x3, 0x80000000}}, {0x2, 0x101, {0x0, 0xfffffffd}}, {0x68b0, 0x4, {0x1, 0x5}}, {0x101, 0x5, {0x1, 0x7}}, {0x5, 0xfffc, {0x0, 0x2}}, {0x80, 0x38}, {0xffff, 0x3, {0x2, 0x1000}}, {0xfe00, 0xa, {0x1, 0xa}}, {0x5, 0x8, {0x2, 0x3}}, {0xd8, 0x2, {0x1, 0x93}}, {0xa, 0xbd, {0x0, 0x9e7}}, {0xbd, 0x7, {0x3, 0x7}}, {0x1, 0x8, {0x3, 0x4}}, {0x8, 0x9, {0x2, 0x2}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x0, {0x0, 0x8}}, {0x3, 0x0, {0x0, 0x2}}, {0xf, 0x7, {0x2, 0x8}}, {0xc6, 0x12f, {0x0, 0x9}}, {0xc0, 0x1}, {0x4, 0x7f, {0x2, 0xff}}, {0x2, 0x3, {0x2, 0x1ff}}, {0x3, 0x5, {0x2, 0x6}}, {0x3, 0x5, {0x2, 0x9}}, {0x9, 0x2, {0x3, 0x1fa7}}, {0x1, 0x7, {0x3, 0x6}}, {0x111f, 0x2, {0x0, 0xb}}, {0x3cd1, 0x722c, {0x0, 0x1}}, {0xc, 0x1, {0x1, 0x8000}}, {0x4, 0x4, {0x1, 0x9}}, {0x7, 0x5a, {0x0, 0x1ff}}, {0x6, 0x3ff, {0x2}}, {0x1000, 0x10, {0x2, 0x2}}, {0x3, 0xfffa, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x5, 0x9f, 0x8001, 0x0, 0x10, 'syz1\x00', "df4e92831ec65b5d2c5df6366ac9bd669ff5b0933b93ea0c5f272e7e35f68316", "759d4e002a359611d547ce4a12fcad7ed7bf0cdd98c36d131a29c4666c7b8866", [{0x2, 0x4, {0x0, 0x8}}, {0x9, 0x7, {0x2, 0xf}}, {0x9, 0x3, {0x1, 0x80000000}}, {0xa, 0x7, {0x0, 0xfffff001}}, {0x6, 0x7, {0x2, 0x7f}}, {0x71d, 0x40, {0x1, 0xfffffffa}}, {0x4, 0x4, {0x2, 0x6}}, {0x3ff, 0x1, {0x0, 0x6}}, {0x3, 0xa, {0x3, 0x3}}, {0xfff7, 0x5e5a, {0x1, 0x7}}, {0x80, 0x7, {0x0, 0x2}}, {0x8, 0xb, {0x2}}, {0xb, 0x8, {0x2, 0xfffffffe}}, {0xfff, 0x9251, {0x0, 0x7}}, {0xf, 0x3, {0x1, 0xdc00}}, {0x2, 0x5, {0x0, 0x3}}, {0x8001, 0x9, {0x0, 0x7}}, {0xfa7b, 0x8, {0x3, 0x3}}, {0xffb6, 0x2, {0x0, 0x7}}, {0x4, 0x5, {0x1, 0x1}}, {0x1000, 0x8, {0x0, 0x614}}, {0x4, 0x4, {0x1, 0x399}}, {0x480, 0x0, {0x3, 0xcc}}, {0x4, 0xc43e, {0x3, 0x8}}, {0x800, 0x7, {0x2, 0xffff}}, {0x91f5, 0x6, {0x3, 0x979d}}, {0x0, 0x4, {0x0, 0x1}}, {0xe, 0x4, {0x1}}, {0x4, 0x65, {0x2, 0x6}}, {0x0, 0x7, {0x1, 0xffffffff}}, {0x7, 0xfff5, {0x0, 0x2}}, {0x57, 0x8001, {0x3, 0x2}}, {0x7f, 0x53, {0x0, 0xd0b2}}, {0x8000, 0x8, {0x1, 0x2}}, {0x9, 0x4, {0x0, 0x5}}, {0x0, 0x2e93, {0x2, 0xa67d}}, {0x5, 0xde5f, {0x1, 0x3}}, {0xc2c, 0xab, {0x3, 0x241f}}, {0xd3, 0x6, {0x2, 0x2}}, {0x58, 0x5, {0x1, 0x9}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 3.397369622s ago: executing program 0 (id=408): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.287102536s ago: executing program 8 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 3.145628553s ago: executing program 6 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x20004800) 89.314293ms ago: executing program 8 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 53.047775ms ago: executing program 7 (id=411): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0xa940) ioctl$FIBMAP(r0, 0x227f, &(0x7f0000000040)=0x85) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(0xffffffffffffffff) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x0) mkdir(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=412): syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ff0300ffffff000000000000000442420300404000000062cf00"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x10, 0x3, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0xfdef) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') exit(0xf) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/229, 0xe5, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): uous mode [ 522.038280][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.046411][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.116315][ T7119] bridge_slave_1: entered allmulticast mode [ 522.132940][ T7170] binder: 7169:7170 ioctl c0306201 0 returned -14 [ 522.140821][ T7119] bridge_slave_1: entered promiscuous mode [ 522.191341][ T7114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.431576][ T7114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.514540][ T5078] Bluetooth: hci3: command tx timeout [ 522.618147][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.770347][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.795786][ T1004] bridge_slave_1: left allmulticast mode [ 522.801968][ T1004] bridge_slave_1: left promiscuous mode [ 522.809388][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.863980][ T1004] bridge_slave_0: left allmulticast mode [ 522.869996][ T1004] bridge_slave_0: left promiscuous mode [ 522.877446][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.900007][ T1004] bridge_slave_1: left allmulticast mode [ 522.906327][ T1004] bridge_slave_1: left promiscuous mode [ 522.913784][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.929003][ T1004] bridge_slave_0: left allmulticast mode [ 522.936057][ T1004] bridge_slave_0: left promiscuous mode [ 522.943102][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.299294][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.318643][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.346811][ T1004] bond0 (unregistering): Released all slaves [ 523.705783][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.753391][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.771923][ T1004] bond0 (unregistering): Released all slaves [ 523.937160][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.004856][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.096521][ T7114] team0: Port device team_slave_0 added [ 524.130851][ T7114] team0: Port device team_slave_1 added [ 524.227909][ T1004] hsr_slave_0: left promiscuous mode [ 524.262701][ T1004] hsr_slave_1: left promiscuous mode [ 524.270989][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.288568][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.322174][ T1004] hsr_slave_0: left promiscuous mode [ 524.330666][ T1004] hsr_slave_1: left promiscuous mode [ 524.339981][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.350153][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.472730][ T796] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 524.699817][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 524.701664][ T796] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 524.717836][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.735953][ T796] usb 5-1: config 0 descriptor?? [ 524.792227][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 524.972784][ T796] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 525.209715][ T796] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 525.218046][ T796] [drm] Initialized udl on minor 2 [ 525.377988][ T796] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 525.396599][ T796] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 525.601569][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 525.664716][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 525.845190][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.860622][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.880122][ T7180] x_tables: duplicate underflow at hook 1 [ 527.084154][ T7119] team0: Port device team_slave_0 added [ 527.577171][ T7181] vlan2: entered allmulticast mode [ 527.583032][ T7181] macsec0: entered allmulticast mode [ 527.588806][ T7181] veth1_macvtap: entered allmulticast mode [ 527.744776][ T7119] team0: Port device team_slave_1 added [ 528.383968][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.391576][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.418729][ T7114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.755831][ T7114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.763396][ T7114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.793271][ T7114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.899342][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.908020][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.935844][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.154828][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.192935][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.200351][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.227787][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.338092][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.758641][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.766556][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.854448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.862993][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.128751][ T9] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 530.138005][ T9] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 530.147442][ T796] usb 5-1: USB disconnect, device number 28 [ 530.226142][ T7114] hsr_slave_0: entered promiscuous mode [ 530.276945][ T7114] hsr_slave_1: entered promiscuous mode [ 530.305164][ T7114] debugfs: 'hsr0' already exists in 'hsr' [ 530.311680][ T7114] Cannot create hsr debugfs directory [ 530.580779][ T7119] hsr_slave_0: entered promiscuous mode [ 530.597348][ T7119] hsr_slave_1: entered promiscuous mode [ 530.643542][ T7119] debugfs: 'hsr0' already exists in 'hsr' [ 530.649685][ T7119] Cannot create hsr debugfs directory [ 530.662686][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.671213][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.752714][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.760977][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.396305][ T7193] netlink: 'syz.4.217': attribute type 39 has an invalid length. [ 531.556038][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.588448][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.601868][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.619423][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.673896][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.590265][ T5078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.615850][ T5078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.629332][ T5078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.653960][ T5078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.679238][ T5078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.335007][ T7210] binder: 7209:7210 ioctl c0306201 0 returned -14 [ 533.793385][ T5786] Bluetooth: hci2: command tx timeout [ 534.753828][ T5786] Bluetooth: hci4: command tx timeout [ 535.873191][ T5786] Bluetooth: hci2: command tx timeout [ 536.536832][ T7237] netlink: 'syz.4.224': attribute type 39 has an invalid length. [ 536.832992][ T5786] Bluetooth: hci4: command tx timeout [ 537.025296][ T7114] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 537.271375][ T7114] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 537.335973][ T7114] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 537.475186][ T7197] chnl_net:caif_netlink_parms(): no params data found [ 537.514516][ T7114] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 537.952916][ T5786] Bluetooth: hci2: command tx timeout [ 538.113429][ T2959] bridge_slave_1: left allmulticast mode [ 538.119843][ T2959] bridge_slave_1: left promiscuous mode [ 538.128900][ T2959] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.168968][ T2959] bridge_slave_0: left allmulticast mode [ 538.176072][ T2959] bridge_slave_0: left promiscuous mode [ 538.183439][ T2959] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.948221][ T5786] Bluetooth: hci4: command tx timeout [ 538.981435][ T2959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.010216][ T2959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.035372][ T2959] bond0 (unregistering): Released all slaves [ 539.481664][ T7205] chnl_net:caif_netlink_parms(): no params data found [ 539.751983][ T2959] hsr_slave_0: left promiscuous mode [ 539.792047][ T2959] hsr_slave_1: left promiscuous mode [ 539.814168][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.860609][ T2959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.033371][ T5786] Bluetooth: hci2: command tx timeout [ 540.410125][ T2959] team0 (unregistering): Port device team_slave_1 removed [ 540.476388][ T2959] team0 (unregistering): Port device team_slave_0 removed [ 540.928564][ T7119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 540.992909][ T5786] Bluetooth: hci4: command tx timeout [ 541.146175][ T7119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.305303][ T7119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.353871][ T7197] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.362074][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.391595][ T7197] bridge_slave_0: entered allmulticast mode [ 541.415395][ T7197] bridge_slave_0: entered promiscuous mode [ 541.439117][ T7119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 541.503602][ T7197] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.511617][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.542490][ T7197] bridge_slave_1: entered allmulticast mode [ 541.628961][ T7197] bridge_slave_1: entered promiscuous mode [ 541.961738][ T7197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.988453][ T7197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.168336][ T7197] team0: Port device team_slave_0 added [ 542.241969][ T7197] team0: Port device team_slave_1 added [ 542.641790][ T7276] netlink: 'syz.4.231': attribute type 39 has an invalid length. [ 542.703506][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.710655][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.738949][ T7197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.830476][ T7197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.838490][ T7197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.867411][ T7197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.921836][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.930098][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.947690][ T7205] bridge_slave_0: entered allmulticast mode [ 542.958601][ T7205] bridge_slave_0: entered promiscuous mode [ 542.977458][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.985440][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.995497][ T7205] bridge_slave_1: entered allmulticast mode [ 543.007009][ T7205] bridge_slave_1: entered promiscuous mode [ 543.262205][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.285894][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.341370][ T7279] lo speed is unknown, defaulting to 1000 [ 543.364136][ T7197] hsr_slave_0: entered promiscuous mode [ 543.375572][ T7197] hsr_slave_1: entered promiscuous mode [ 543.385439][ T7197] debugfs: 'hsr0' already exists in 'hsr' [ 543.391582][ T7197] Cannot create hsr debugfs directory [ 543.419264][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.516080][ T7279] lo speed is unknown, defaulting to 1000 [ 543.607896][ T7205] team0: Port device team_slave_0 added [ 543.627224][ T7279] lo speed is unknown, defaulting to 1000 [ 543.809385][ T7205] team0: Port device team_slave_1 added [ 543.994633][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.202151][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.209853][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.237853][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.329747][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.337188][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.365618][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.391751][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.400275][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.642260][ T7279] infiniband syz0: set active [ 544.649035][ T7279] infiniband syz0: added lo [ 544.770273][ T7279] RDS/IB: syz0: added [ 544.794984][ T7279] smc: adding ib device syz0 with port count 1 [ 544.801737][ T7279] smc: ib device syz0 port 1 has no pnetid [ 544.861870][ T5889] lo speed is unknown, defaulting to 1000 [ 544.959850][ T7097] lo speed is unknown, defaulting to 1000 [ 545.011274][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.020040][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.041162][ T6011] bridge_slave_1: left allmulticast mode [ 545.048442][ T6011] bridge_slave_1: left promiscuous mode [ 545.056159][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.071705][ T6011] bridge_slave_0: left allmulticast mode [ 545.078758][ T6011] bridge_slave_0: left promiscuous mode [ 545.086675][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.394856][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.411644][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.445619][ T6011] bond0 (unregistering): Released all slaves [ 545.458464][ T7279] lo speed is unknown, defaulting to 1000 [ 545.621660][ T7205] hsr_slave_0: entered promiscuous mode [ 545.655780][ T7205] hsr_slave_1: entered promiscuous mode [ 545.666790][ T7205] debugfs: 'hsr0' already exists in 'hsr' [ 545.673741][ T7205] Cannot create hsr debugfs directory [ 546.080248][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.521607][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.562758][ T7279] lo speed is unknown, defaulting to 1000 [ 546.857796][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.865674][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.901944][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.909910][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.959806][ T7197] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 547.072615][ T7197] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 547.183634][ T7197] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 547.236997][ T7197] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 547.652614][ T7279] lo speed is unknown, defaulting to 1000 [ 548.562062][ T7205] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 548.684162][ T7205] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 548.737666][ T7205] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 548.838835][ T7205] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 549.037993][ T7279] lo speed is unknown, defaulting to 1000 [ 549.132983][ T7114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.493301][ T7197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.729034][ T7197] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.819951][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.954005][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.962382][ T6849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.190485][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.198619][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.769403][ T7279] lo speed is unknown, defaulting to 1000 [ 551.165566][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.476415][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.807381][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.815433][ T6174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.963365][ T7114] veth0_vlan: entered promiscuous mode [ 552.068386][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.076528][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.305155][ T7114] veth1_vlan: entered promiscuous mode [ 552.438322][ T7279] lo speed is unknown, defaulting to 1000 [ 552.771081][ T7119] veth0_vlan: entered promiscuous mode [ 552.861649][ T7197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.022813][ T7114] veth0_macvtap: entered promiscuous mode [ 553.041363][ T7119] veth1_vlan: entered promiscuous mode [ 553.100178][ T7114] veth1_macvtap: entered promiscuous mode [ 553.476995][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.589106][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 553.597217][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 553.688434][ T7119] veth0_macvtap: entered promiscuous mode [ 553.729309][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.835765][ T1004] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.878479][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.891624][ T7119] veth1_macvtap: entered promiscuous mode [ 553.943317][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.081731][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.480503][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.630114][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.032825][ T2959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.136619][ T6011] hsr_slave_0: left promiscuous mode [ 555.147751][ T6011] hsr_slave_1: left promiscuous mode [ 555.167962][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.191502][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.834705][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 555.884296][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 555.914507][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 556.124418][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 556.138265][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.172717][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.185508][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 556.197386][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 556.208155][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.253865][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 556.263798][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 556.273528][ T9] usb 5-1: Manufacturer: syz [ 556.304493][ T9] usb 5-1: config 0 descriptor?? [ 556.385437][ T2959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.506925][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.624661][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.759259][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.416961][ T7197] veth0_vlan: entered promiscuous mode [ 557.628840][ T7197] veth1_vlan: entered promiscuous mode [ 558.305952][ T7197] veth0_macvtap: entered promiscuous mode [ 558.421333][ T7197] veth1_macvtap: entered promiscuous mode [ 558.802956][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.975617][ T7197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.188567][ T6011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.327490][ T5884] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.444351][ T5884] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.540421][ T68] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.589614][ T9] rc_core: IR keymap rc-hauppauge not found [ 560.606132][ T9] Registered IR keymap rc-empty [ 560.663458][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 560.693029][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.024270][ T7205] veth0_vlan: entered promiscuous mode [ 561.142242][ T7205] veth1_vlan: entered promiscuous mode [ 561.171578][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 561.227115][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 561.384715][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.450667][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.487844][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.529778][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.587687][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.651975][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.698470][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.756994][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.807430][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.833058][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 561.912308][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 561.922156][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 561.983502][ T9] usb 5-1: USB disconnect, device number 29 [ 562.019583][ T7205] veth0_macvtap: entered promiscuous mode [ 562.171952][ T7205] veth1_macvtap: entered promiscuous mode [ 562.611900][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.776038][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.988702][ T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.040039][ T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.138967][ T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.231647][ T5884] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.344135][ T7376] netlink: 'syz.4.238': attribute type 39 has an invalid length. [ 565.441844][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.450649][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.851488][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.860680][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.201318][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.210927][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.557834][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.566142][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.478641][ C1] Unknown status report in ack skb [ 568.554133][ T7429] fuse: Unknown parameter 'grou00000000000000000000' [ 569.564944][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.246'. [ 571.685054][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.694108][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.679660][ T6849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.688332][ T6849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.935314][ T7473] fuse: Unknown parameter 'grou00000000000000000000' [ 579.123309][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 579.363304][ T796] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 579.371867][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 579.418976][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 579.432871][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 579.444993][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.456044][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.471272][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.486137][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.635404][ T796] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 579.648017][ T796] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 579.660231][ T796] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 579.672038][ T796] usb 7-1: config 0 interface 0 has no altsetting 0 [ 579.742365][ T796] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 579.753300][ T796] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 579.761966][ T796] usb 7-1: Product: syz [ 579.766721][ T796] usb 7-1: Manufacturer: syz [ 579.771724][ T796] usb 7-1: SerialNumber: syz [ 579.827683][ T796] usb 7-1: config 0 descriptor?? [ 579.861560][ T7477] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 579.956866][ T9] usb 10-1: GET_CAPABILITIES returned 2f [ 579.963763][ T9] usbtmc 10-1:16.0: can't read capabilities [ 580.054054][ T796] usb 7-1: selecting invalid altsetting 0 [ 580.225885][ T9] usb 10-1: USB disconnect, device number 2 [ 580.478444][ T796] usb 7-1: USB disconnect, device number 2 [ 580.654433][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.663116][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.931494][ T7347] udevd[7347]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.382604][ T7493] netlink: 6 bytes leftover after parsing attributes in process `syz.8.258'. [ 583.644369][ T7493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.701863][ T7503] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 583.713749][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.722207][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.086903][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 590.404697][ T7521] fuse: Unknown parameter 'grou00000000000000000000' [ 590.537641][ T796] IPVS: starting estimator thread 0... [ 590.652180][ T7523] IPVS: using max 192 ests per chain, 9600 per kthread [ 595.581704][ T7543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 599.362952][ T3306] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 602.343489][ T7553] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.217732][ T7567] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 603.315620][ T7569] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 606.391540][ T7580] fuse: Unknown parameter 'group_i00000000000000000000' [ 607.982986][ T796] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 608.233509][ T796] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 608.233686][ T796] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 608.263653][ T796] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 608.277041][ T796] usb 7-1: config 0 interface 0 has no altsetting 0 [ 608.547481][ T796] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 608.557678][ T796] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 608.571532][ T796] usb 7-1: Product: syz [ 608.577500][ T796] usb 7-1: Manufacturer: syz [ 608.582818][ T796] usb 7-1: SerialNumber: syz [ 609.418353][ T796] usb 7-1: config 0 descriptor?? [ 609.431622][ T7602] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 609.457097][ T796] usb 7-1: selecting invalid altsetting 0 [ 610.459935][ T796] usb 7-1: USB disconnect, device number 3 [ 610.593410][ T5834] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 610.944310][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 611.100213][ T5834] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 611.283102][ T5834] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 611.494414][ T5834] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 611.510322][ T5834] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 611.522020][ T5834] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 611.539579][ T5834] usb 10-1: config 0 interface 0 has no altsetting 0 [ 611.697143][ T7316] udevd[7316]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.096759][ T5834] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 612.107268][ T5834] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 612.116806][ T5834] usb 10-1: Product: syz [ 612.121362][ T5834] usb 10-1: Manufacturer: syz [ 612.126515][ T5834] usb 10-1: SerialNumber: syz [ 612.171443][ T5834] usb 10-1: config 0 descriptor?? [ 612.215180][ T7628] fuse: Unknown parameter 'group_i00000000000000000000' [ 612.272265][ T5834] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 612.734933][ T5834] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 612.889838][ T5834] usb 10-1: USB disconnect, device number 3 [ 613.001730][ T5834] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 615.262231][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 615.270364][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.567252][ T7119] cgroup: fork rejected by pids controller in /syz6 [ 617.898484][ T7669] netlink: 436 bytes leftover after parsing attributes in process `syz.7.305'. [ 617.943419][ T3306] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 617.976530][ T7670] fuse: Unknown parameter 'group_i00000000000000000000' [ 618.165709][ T3306] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 618.179789][ T3306] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 618.196153][ T3306] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 618.215886][ T3306] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.616349][ T3306] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 618.626919][ T3306] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 618.636417][ T3306] usb 9-1: Product: syz [ 618.641077][ T3306] usb 9-1: Manufacturer: syz [ 618.646333][ T3306] usb 9-1: SerialNumber: syz [ 618.876356][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.918003][ T3306] usb 9-1: config 0 descriptor?? [ 618.988563][ T7664] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 619.127487][ T3306] usb 9-1: selecting invalid altsetting 0 [ 619.307155][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.617981][ T3306] usb 9-1: USB disconnect, device number 3 [ 619.745008][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.390027][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.680249][ T7642] udevd[7642]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.256559][ T7684] lo speed is unknown, defaulting to 1000 [ 624.369038][ T35] bridge_slave_1: left allmulticast mode [ 624.377078][ T35] bridge_slave_1: left promiscuous mode [ 624.384980][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.509639][ T35] bridge_slave_0: left allmulticast mode [ 624.516485][ T35] bridge_slave_0: left promiscuous mode [ 624.523422][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.718746][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.790267][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.817350][ T35] bond0 (unregistering): Released all slaves [ 627.239646][ T5078] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 627.276316][ T5078] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 627.289053][ T5078] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 627.343078][ T5078] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 627.363080][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.493317][ T7114] cgroup: fork rejected by pids controller in /syz8 [ 628.579324][ T7713] lo speed is unknown, defaulting to 1000 [ 629.478304][ T5786] Bluetooth: hci3: command tx timeout [ 630.171451][ T35] hsr_slave_0: left promiscuous mode [ 630.216414][ T35] hsr_slave_1: left promiscuous mode [ 630.243431][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.251317][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.337629][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.345908][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.497296][ T35] veth1_macvtap: left promiscuous mode [ 630.529726][ T35] veth0_macvtap: left promiscuous mode [ 630.572966][ T35] veth1_vlan: left promiscuous mode [ 630.582246][ T35] veth0_vlan: left promiscuous mode [ 631.556383][ T5786] Bluetooth: hci3: command tx timeout [ 632.503365][ T35] team0 (unregistering): Port device team_slave_1 removed [ 632.615695][ T35] team0 (unregistering): Port device team_slave_0 removed [ 633.643042][ T5786] Bluetooth: hci3: command tx timeout [ 634.221881][ T5078] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.245322][ T5078] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.275608][ T5078] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.298604][ T5078] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.314674][ T5078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.203378][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 635.420127][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.463344][ T9] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 635.477463][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 635.489503][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 635.504551][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 635.712712][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 635.723662][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 635.732882][ T9] usb 8-1: Product: syz [ 635.737347][ T9] usb 8-1: Manufacturer: syz [ 635.742896][ T9] usb 8-1: SerialNumber: syz [ 635.744678][ T5078] Bluetooth: hci3: command tx timeout [ 635.777625][ T9] usb 8-1: config 0 descriptor?? [ 635.811565][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.920554][ T7756] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 636.019363][ T7746] lo speed is unknown, defaulting to 1000 [ 636.125294][ T9] usb 8-1: selecting invalid altsetting 0 [ 636.215797][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.295380][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 636.337001][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 636.354170][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 636.376567][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 636.426786][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 636.437328][ T50] Bluetooth: hci1: command tx timeout [ 636.655921][ T9] usb 8-1: USB disconnect, device number 2 [ 636.661640][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.209971][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 637.258523][ T7642] udevd[7642]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.778418][ T7769] binder: 7767:7769 ioctl 4018620d 0 returned -22 [ 638.520432][ T5786] Bluetooth: hci5: command tx timeout [ 638.526066][ T5078] Bluetooth: hci1: command tx timeout [ 638.554002][ T35] bridge_slave_1: left allmulticast mode [ 638.560670][ T35] bridge_slave_1: left promiscuous mode [ 638.572211][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.657289][ T35] bridge_slave_0: left allmulticast mode [ 638.663597][ T35] bridge_slave_0: left promiscuous mode [ 638.675528][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.006986][ T7197] cgroup: fork rejected by pids controller in /syz9 [ 640.603854][ T5078] Bluetooth: hci1: command tx timeout [ 640.609773][ T5078] Bluetooth: hci5: command tx timeout [ 641.214081][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.338889][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.430531][ T35] bond0 (unregistering): Released all slaves [ 641.586930][ T7763] lo speed is unknown, defaulting to 1000 [ 641.613300][ T7781] geneve2: entered promiscuous mode [ 641.619360][ T7781] geneve2: entered allmulticast mode [ 642.682630][ T5078] Bluetooth: hci5: command tx timeout [ 642.688660][ T5078] Bluetooth: hci1: command tx timeout [ 643.477557][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.489706][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.528426][ T7713] bridge_slave_0: entered allmulticast mode [ 643.563741][ T7713] bridge_slave_0: entered promiscuous mode [ 643.664405][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.672949][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.723807][ T7713] bridge_slave_1: entered allmulticast mode [ 643.753108][ T7713] bridge_slave_1: entered promiscuous mode [ 644.536618][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.702913][ T35] hsr_slave_0: left promiscuous mode [ 644.722706][ T35] hsr_slave_1: left promiscuous mode [ 644.731425][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.740274][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.752804][ T5078] Bluetooth: hci5: command tx timeout [ 644.817321][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.825734][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.909331][ T35] veth1_macvtap: left promiscuous mode [ 644.932655][ T35] veth0_macvtap: left promiscuous mode [ 644.939493][ T35] veth1_vlan: left promiscuous mode [ 644.963004][ T35] veth0_vlan: left promiscuous mode [ 645.713676][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.739620][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.750962][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.767937][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.782315][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.154319][ T35] team0 (unregistering): Port device team_slave_1 removed [ 646.214945][ T35] team0 (unregistering): Port device team_slave_0 removed [ 646.624585][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.662831][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 646.841065][ T9] usb 8-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 646.854557][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 646.868006][ T9] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 646.880835][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 646.940078][ T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 646.950475][ T9] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 646.959871][ T9] usb 8-1: Product: syz [ 646.965345][ T9] usb 8-1: Manufacturer: syz [ 646.970342][ T9] usb 8-1: SerialNumber: syz [ 647.040392][ T7713] team0: Port device team_slave_0 added [ 647.078484][ T9] usb 8-1: config 0 descriptor?? [ 647.116979][ T7804] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 647.163590][ T9] usb 8-1: selecting invalid altsetting 0 [ 647.281510][ T7713] team0: Port device team_slave_1 added [ 647.390247][ T9] usb 8-1: USB disconnect, device number 3 [ 647.732800][ T7801] lo speed is unknown, defaulting to 1000 [ 647.764021][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.771209][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.800310][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.873707][ T5078] Bluetooth: hci0: command tx timeout [ 647.979921][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.991113][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.019923][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.607140][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.831031][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 648.935265][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.070101][ T7713] hsr_slave_0: entered promiscuous mode [ 649.094847][ T7713] hsr_slave_1: entered promiscuous mode [ 649.118390][ T7713] debugfs: 'hsr0' already exists in 'hsr' [ 649.125076][ T7713] Cannot create hsr debugfs directory [ 649.310011][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.733403][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.954549][ T5078] Bluetooth: hci0: command tx timeout [ 650.165157][ T7830] binder: 7829:7830 ioctl 4018620d 0 returned -22 [ 650.243399][ T7763] chnl_net:caif_netlink_parms(): no params data found [ 651.061003][ T7841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 651.743385][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.036980][ T5078] Bluetooth: hci0: command tx timeout [ 652.070419][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.181895][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.194331][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.205561][ T7746] bridge_slave_0: entered allmulticast mode [ 652.224000][ T7746] bridge_slave_0: entered promiscuous mode [ 652.396564][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.533442][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.541513][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.553406][ T7746] bridge_slave_1: entered allmulticast mode [ 652.565789][ T7746] bridge_slave_1: entered promiscuous mode [ 652.612617][ T7848] lo speed is unknown, defaulting to 1000 [ 652.747884][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.259927][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.343658][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.351356][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.388081][ T7763] bridge_slave_0: entered allmulticast mode [ 653.422264][ T7763] bridge_slave_0: entered promiscuous mode [ 653.539376][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.596109][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.604311][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.631372][ T7763] bridge_slave_1: entered allmulticast mode [ 653.657699][ T7763] bridge_slave_1: entered promiscuous mode [ 653.919975][ T7746] team0: Port device team_slave_0 added [ 654.066661][ T7746] team0: Port device team_slave_1 added [ 654.114373][ T5078] Bluetooth: hci0: command tx timeout [ 654.409451][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.456040][ T7801] chnl_net:caif_netlink_parms(): no params data found [ 654.730907][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.798206][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.806018][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.835456][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.023890][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.033342][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.065686][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.366724][ T35] bridge_slave_1: left allmulticast mode [ 655.373269][ T35] bridge_slave_1: left promiscuous mode [ 655.380623][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.419152][ T35] bridge_slave_0: left allmulticast mode [ 655.426188][ T35] bridge_slave_0: left promiscuous mode [ 655.434640][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.499050][ T35] bridge_slave_1: left allmulticast mode [ 655.509358][ T35] bridge_slave_1: left promiscuous mode [ 655.517647][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.157950][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.191926][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.207901][ T35] bond0 (unregistering): Released all slaves [ 656.409948][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.427105][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.443565][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 656.465731][ T35] bond0 (unregistering): Released all slaves [ 656.495691][ T7763] team0: Port device team_slave_0 added [ 657.244434][ T7763] team0: Port device team_slave_1 added [ 657.679658][ T7746] hsr_slave_0: entered promiscuous mode [ 657.734640][ T7746] hsr_slave_1: entered promiscuous mode [ 657.764935][ T7746] debugfs: 'hsr0' already exists in 'hsr' [ 657.771236][ T7746] Cannot create hsr debugfs directory [ 657.810768][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.818822][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.847258][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.945808][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.953462][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.980844][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.042924][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 658.199972][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.208123][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.220399][ T7801] bridge_slave_0: entered allmulticast mode [ 658.230293][ T7801] bridge_slave_0: entered promiscuous mode [ 658.308443][ T7713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 658.349138][ T7713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 658.371615][ T7801] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.380548][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.398631][ T7801] bridge_slave_1: entered allmulticast mode [ 658.408860][ T7801] bridge_slave_1: entered promiscuous mode [ 658.485772][ T7713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 658.647745][ T7763] hsr_slave_0: entered promiscuous mode [ 658.659154][ T7763] hsr_slave_1: entered promiscuous mode [ 658.668951][ T7763] debugfs: 'hsr0' already exists in 'hsr' [ 658.675338][ T7763] Cannot create hsr debugfs directory [ 658.713112][ T7713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 658.993960][ T7801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.022140][ T7801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.898044][ T7899] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 660.387623][ T7801] team0: Port device team_slave_0 added [ 660.905084][ T35] hsr_slave_0: left promiscuous mode [ 660.932854][ T35] hsr_slave_1: left promiscuous mode [ 660.946856][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.955428][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.969476][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.978257][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.031301][ T35] hsr_slave_0: left promiscuous mode [ 661.057525][ T35] hsr_slave_1: left promiscuous mode [ 661.066251][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.075579][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.086012][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.094295][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.130514][ T35] veth1_macvtap: left promiscuous mode [ 661.137142][ T35] veth0_macvtap: left promiscuous mode [ 661.147157][ T35] veth1_vlan: left promiscuous mode [ 661.153477][ T35] veth0_vlan: left promiscuous mode [ 661.178430][ T35] veth1_macvtap: left allmulticast mode [ 661.184498][ T35] veth1_macvtap: left promiscuous mode [ 661.190426][ T35] veth0_macvtap: left promiscuous mode [ 661.198590][ T35] veth1_vlan: left promiscuous mode [ 661.204888][ T35] veth0_vlan: left promiscuous mode [ 662.468118][ T35] team0 (unregistering): Port device team_slave_1 removed [ 662.534839][ T35] team0 (unregistering): Port device team_slave_0 removed [ 662.814830][ T7912] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 662.823870][ T7912] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 663.673060][ T35] team0 (unregistering): Port device team_slave_1 removed [ 663.768548][ T35] team0 (unregistering): Port device team_slave_0 removed [ 664.146048][ T146] smc: removing ib device syz0 [ 664.307028][ T7801] team0: Port device team_slave_1 added [ 664.904064][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.912024][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.941596][ T7801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.406495][ T9] lo speed is unknown, defaulting to 1000 [ 665.413721][ T9] syz0: Port: 1 Link DOWN [ 665.636172][ T7801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.643855][ T7801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.672913][ T7801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.472049][ T7801] hsr_slave_0: entered promiscuous mode [ 667.526606][ T7801] hsr_slave_1: entered promiscuous mode [ 668.191746][ T7931] binder: 7930:7931 ioctl 4018620d 0 returned -22 [ 669.454257][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.536874][ T7746] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 669.614887][ T7746] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 669.921827][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.950845][ T7746] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 670.138913][ T7746] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 670.268320][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.276819][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.580299][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.588496][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.585949][ T7713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 672.597869][ T7713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.853807][ T7763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 676.957625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 676.965010][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.196701][ T7763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 679.496332][ T7763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 679.590178][ T7763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 680.584042][ T7801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 680.648364][ T7801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 680.793933][ T7801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 680.849379][ T7801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 680.985595][ T7746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.128106][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.548449][ T7746] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.770003][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.777922][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.963938][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.972624][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.433571][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.809228][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.979922][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.988010][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.230207][ T7801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.270843][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.278883][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.652895][ T7801] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.141964][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.149899][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.225382][ T7713] veth0_vlan: entered promiscuous mode [ 684.339661][ T7763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.451140][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.459611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.689166][ T7713] veth1_vlan: entered promiscuous mode [ 685.575155][ T7746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.650542][ T7713] veth0_macvtap: entered promiscuous mode [ 685.787548][ T7713] veth1_macvtap: entered promiscuous mode [ 686.207953][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.649165][ T7763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.915890][ T7763] veth0_vlan: entered promiscuous mode [ 688.430283][ T7763] veth1_vlan: entered promiscuous mode [ 688.812958][ T8029] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd7": -EINTR [ 689.451910][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.586379][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.625978][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 689.710777][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 689.761092][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 689.854017][ T7801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.150779][ T7763] veth0_macvtap: entered promiscuous mode [ 691.875430][ T5078] Bluetooth: hci2: command tx timeout [ 692.158744][ T7763] veth1_macvtap: entered promiscuous mode [ 693.127793][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.321568][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.952962][ T5078] Bluetooth: hci2: command tx timeout [ 694.242227][ T146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.711906][ T6011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.034391][ T5078] Bluetooth: hci2: command tx timeout [ 696.170971][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.424921][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.449101][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.459883][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.476702][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.489951][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.620317][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.720866][ T8081] binder: BINDER_SET_CONTEXT_MGR already set [ 697.783717][ T8081] binder: 8077:8081 ioctl 4018620d 200000000040 returned -16 [ 697.808295][ T8081] binder: 8077:8081 ioctl c0306201 2000000003c0 returned -14 [ 698.017690][ T8039] chnl_net:caif_netlink_parms(): no params data found [ 698.112718][ T5786] Bluetooth: hci2: command tx timeout [ 698.253480][ T5078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 698.295930][ T5078] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 698.307111][ T5078] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 698.331251][ T5078] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 698.343272][ T5078] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 698.604279][ T5078] Bluetooth: hci3: command tx timeout [ 698.783237][ T7801] veth0_vlan: entered promiscuous mode [ 698.806035][ T1097] bridge_slave_1: left allmulticast mode [ 698.812116][ T1097] bridge_slave_1: left promiscuous mode [ 698.819270][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.944614][ T1097] bridge_slave_0: left allmulticast mode [ 698.951072][ T1097] bridge_slave_0: left promiscuous mode [ 698.958066][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.666023][ T8092] binder: 8091:8092 ioctl c0306201 0 returned -14 [ 700.139760][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.224577][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.272992][ T1097] bond0 (unregistering): Released all slaves [ 700.435216][ T5078] Bluetooth: hci6: command tx timeout [ 700.672709][ T5078] Bluetooth: hci3: command tx timeout [ 700.713227][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.359'. [ 700.892924][ T1097] hsr_slave_0: left promiscuous mode [ 700.928084][ T1097] hsr_slave_1: left promiscuous mode [ 700.965208][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.973409][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.017749][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.103347][ T1097] veth1_macvtap: left promiscuous mode [ 701.109212][ T1097] veth0_macvtap: left promiscuous mode [ 701.133069][ T1097] veth1_vlan: left promiscuous mode [ 701.138694][ T1097] veth0_vlan: left promiscuous mode [ 702.516050][ T5078] Bluetooth: hci6: command tx timeout [ 702.753033][ T5078] Bluetooth: hci3: command tx timeout [ 702.834604][ T8116] XFS (nbd7): SB validate failed with error -5. [ 704.158233][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 704.280833][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 704.595445][ T5078] Bluetooth: hci6: command tx timeout [ 704.832936][ T5078] Bluetooth: hci3: command tx timeout [ 706.533766][ T7801] veth1_vlan: entered promiscuous mode [ 706.675443][ T5078] Bluetooth: hci6: command tx timeout [ 706.841913][ T8039] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.852059][ T8039] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.903373][ T8039] bridge_slave_0: entered allmulticast mode [ 706.941951][ T8039] bridge_slave_0: entered promiscuous mode [ 707.045504][ T8039] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.054663][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.115864][ T8039] bridge_slave_1: entered allmulticast mode [ 707.184833][ T8039] bridge_slave_1: entered promiscuous mode [ 707.508587][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 707.566522][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 707.587114][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 707.659648][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 707.679538][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 707.871907][ T8039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.017198][ T8039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.342157][ T8039] team0: Port device team_slave_0 added [ 708.538774][ T8039] team0: Port device team_slave_1 added [ 708.645615][ T1097] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.207297][ T1097] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.394880][ T1097] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.763470][ T1097] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.798289][ T5786] Bluetooth: hci1: command tx timeout [ 709.854036][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.861749][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.893870][ T8039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.946630][ T8039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.954164][ T8039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.982825][ T8039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.497212][ T8073] chnl_net:caif_netlink_parms(): no params data found [ 711.251195][ T8039] hsr_slave_0: entered promiscuous mode [ 711.318752][ T8039] hsr_slave_1: entered promiscuous mode [ 711.345130][ T8039] debugfs: 'hsr0' already exists in 'hsr' [ 711.351881][ T8039] Cannot create hsr debugfs directory [ 711.400029][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 711.610698][ T8172] binder: 8168:8172 ioctl c0306201 2000000003c0 returned -14 [ 711.876932][ T5786] Bluetooth: hci1: command tx timeout [ 712.318775][ T8073] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.327825][ T8073] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.369308][ T8073] bridge_slave_0: entered allmulticast mode [ 712.388446][ T8073] bridge_slave_0: entered promiscuous mode [ 712.536718][ T8073] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.545432][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.556599][ T8073] bridge_slave_1: entered allmulticast mode [ 712.613631][ T8073] bridge_slave_1: entered promiscuous mode [ 713.231491][ T8073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.575976][ T8073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.611935][ T8140] chnl_net:caif_netlink_parms(): no params data found [ 713.957961][ T5786] Bluetooth: hci1: command tx timeout [ 714.665836][ T8073] team0: Port device team_slave_0 added [ 714.748269][ T8073] team0: Port device team_slave_1 added [ 714.880153][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.889125][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.938423][ T8083] bridge_slave_0: entered allmulticast mode [ 714.959799][ T8083] bridge_slave_0: entered promiscuous mode [ 715.000522][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.010453][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.040192][ T8083] bridge_slave_1: entered allmulticast mode [ 715.063909][ T8083] bridge_slave_1: entered promiscuous mode [ 715.100789][ T8204] binder: 8203:8204 ioctl c0306201 0 returned -14 [ 715.624277][ T5835] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 715.634693][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.642812][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.672955][ T8073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.700512][ T8073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.709217][ T8073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.736588][ T8073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.795630][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.842869][ T5835] usb 8-1: Using ep0 maxpacket: 8 [ 715.867029][ T5835] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 715.877281][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.885785][ T5835] usb 8-1: Product: syz [ 715.890428][ T5835] usb 8-1: Manufacturer: syz [ 715.895809][ T5835] usb 8-1: SerialNumber: syz [ 715.944388][ T5835] usb 8-1: config 0 descriptor?? [ 715.999669][ T5835] gspca_main: se401-2.14.0 probing 047d:5003 [ 716.032930][ T5786] Bluetooth: hci1: command tx timeout [ 716.041963][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.282216][ T1097] bridge_slave_1: left allmulticast mode [ 716.288775][ T1097] bridge_slave_1: left promiscuous mode [ 716.296627][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.316393][ T1097] bridge_slave_0: left allmulticast mode [ 716.322712][ T1097] bridge_slave_0: left promiscuous mode [ 716.330031][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.354818][ T1097] bridge_slave_1: left allmulticast mode [ 716.361134][ T1097] bridge_slave_1: left promiscuous mode [ 716.368389][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.385005][ T1097] bridge_slave_0: left allmulticast mode [ 716.391550][ T1097] bridge_slave_0: left promiscuous mode [ 716.400516][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.422569][ T5835] gspca_se401: Bayer format not supported! [ 717.542172][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.593106][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.648687][ T1097] bond0 (unregistering): Released all slaves [ 718.561562][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.599130][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.635870][ T1097] bond0 (unregistering): Released all slaves [ 719.132846][ T8073] hsr_slave_0: entered promiscuous mode [ 719.158920][ T8073] hsr_slave_1: entered promiscuous mode [ 719.171079][ T8073] debugfs: 'hsr0' already exists in 'hsr' [ 719.177297][ T8073] Cannot create hsr debugfs directory [ 719.217104][ T8083] team0: Port device team_slave_0 added [ 719.305281][ T8140] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.314310][ T8140] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.325166][ T8140] bridge_slave_0: entered allmulticast mode [ 719.354269][ T8140] bridge_slave_0: entered promiscuous mode [ 719.477882][ T8083] team0: Port device team_slave_1 added [ 719.720281][ T8140] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.728178][ T8140] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.738762][ T8140] bridge_slave_1: entered allmulticast mode [ 719.770459][ T8140] bridge_slave_1: entered promiscuous mode [ 720.101069][ T1097] hsr_slave_0: left promiscuous mode [ 720.120241][ T1097] hsr_slave_1: left promiscuous mode [ 720.148003][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.156892][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.182791][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.190890][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.243767][ T1097] hsr_slave_0: left promiscuous mode [ 720.256603][ T1097] hsr_slave_1: left promiscuous mode [ 720.276073][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.291718][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.434129][ T1097] veth1_macvtap: left promiscuous mode [ 720.441626][ T1097] veth0_macvtap: left promiscuous mode [ 720.456492][ T1097] veth1_vlan: left promiscuous mode [ 720.463002][ T1097] veth0_vlan: left promiscuous mode [ 720.927645][ T6925] usb 8-1: USB disconnect, device number 4 [ 721.154012][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.7.369'. [ 721.662943][ T5835] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 721.840108][ T5835] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.852282][ T5835] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 721.862929][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.902649][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 721.906120][ T5835] usb 8-1: config 0 descriptor?? [ 721.957368][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 721.997562][ T5835] pwc: Askey VC010 type 2 USB webcam detected. [ 722.365498][ T5835] pwc: recv_control_msg error -32 req 02 val 2b00 [ 722.386251][ T5835] pwc: recv_control_msg error -32 req 02 val 2700 [ 722.401314][ T5835] pwc: recv_control_msg error -32 req 02 val 2c00 [ 722.429305][ T5835] pwc: recv_control_msg error -32 req 04 val 1000 [ 722.447633][ T5835] pwc: recv_control_msg error -32 req 04 val 1300 [ 722.459004][ T5835] pwc: recv_control_msg error -32 req 04 val 1400 [ 722.470917][ T5835] pwc: recv_control_msg error -32 req 02 val 2000 [ 722.482816][ T5835] pwc: recv_control_msg error -32 req 02 val 2100 [ 722.554401][ T5835] pwc: recv_control_msg error -32 req 04 val 1500 [ 722.566064][ T5835] pwc: recv_control_msg error -32 req 02 val 2500 [ 722.576971][ T5835] pwc: recv_control_msg error -32 req 02 val 2400 [ 722.589463][ T5835] pwc: recv_control_msg error -32 req 02 val 2600 [ 722.601581][ T5835] pwc: recv_control_msg error -32 req 02 val 2900 [ 722.618136][ T5835] pwc: recv_control_msg error -32 req 02 val 2800 [ 722.645947][ T5835] pwc: recv_control_msg error -32 req 04 val 1100 [ 722.673395][ T5835] pwc: Registered as video103. [ 722.688136][ T5835] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 722.883105][ T5835] usb 8-1: USB disconnect, device number 5 [ 722.945317][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 723.034700][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 723.652494][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.660182][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.688650][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.744220][ T8140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.852255][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.859950][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.888564][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.978928][ T8140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.218003][ T8140] team0: Port device team_slave_0 added [ 724.595621][ T8140] team0: Port device team_slave_1 added [ 725.837321][ T8083] hsr_slave_0: entered promiscuous mode [ 725.866996][ T8083] hsr_slave_1: entered promiscuous mode [ 725.898027][ T8083] debugfs: 'hsr0' already exists in 'hsr' [ 725.904694][ T8083] Cannot create hsr debugfs directory [ 726.052568][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.060671][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.089836][ T8140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.149254][ T8140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.158431][ T8140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.188556][ T8140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.209989][ T8039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 726.463912][ T8039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 726.525471][ T8039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 726.570226][ T8039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 728.057300][ T8140] hsr_slave_0: entered promiscuous mode [ 728.079289][ T8140] hsr_slave_1: entered promiscuous mode [ 728.095525][ T8140] debugfs: 'hsr0' already exists in 'hsr' [ 728.101735][ T8140] Cannot create hsr debugfs directory [ 729.542947][ T7805] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 729.738678][ T7805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.750551][ T7805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.770036][ T7805] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 729.780169][ T7805] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 729.789333][ T7805] usb 8-1: Manufacturer: syz [ 729.826449][ T7805] usb 8-1: config 0 descriptor?? [ 730.028847][ T8073] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 730.107994][ T8073] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 730.151875][ T1097] bridge_slave_1: left allmulticast mode [ 730.159842][ T1097] bridge_slave_1: left promiscuous mode [ 730.167501][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.189526][ T1097] bridge_slave_0: left allmulticast mode [ 730.196309][ T1097] bridge_slave_0: left promiscuous mode [ 730.204429][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.292052][ T7805] usbhid 8-1:0.0: can't add hid device: -71 [ 730.299887][ T7805] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 730.321205][ T7805] usb 8-1: USB disconnect, device number 6 [ 730.651689][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.669992][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.696342][ T1097] bond0 (unregistering): Released all slaves [ 730.721491][ T8073] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 730.829649][ T8073] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 731.047808][ T1097] hsr_slave_0: left promiscuous mode [ 731.068896][ T1097] hsr_slave_1: left promiscuous mode [ 731.079372][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.091108][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.142923][ T1097] veth1_vlan: left promiscuous mode [ 731.148830][ T1097] veth0_vlan: left promiscuous mode [ 731.316843][ T8233] binder: 8231:8233 ioctl c0306201 2000000003c0 returned -14 [ 731.758441][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 731.830975][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 732.546012][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.957133][ T8237] binder: 8236:8237 ioctl c0306201 0 returned -14 [ 732.996037][ T8083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 733.045161][ T8039] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.133877][ T8083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 733.207884][ T8083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 733.287286][ T8083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 733.333817][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.341705][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.501363][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.503884][ T3306] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 733.509858][ T6849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.696586][ T3306] usb 8-1: Using ep0 maxpacket: 8 [ 733.754225][ T3306] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 733.763964][ T3306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.773333][ T3306] usb 8-1: Product: syz [ 733.778067][ T3306] usb 8-1: Manufacturer: syz [ 733.783341][ T3306] usb 8-1: SerialNumber: syz [ 733.821402][ T3306] usb 8-1: config 0 descriptor?? [ 733.889415][ T3306] gspca_main: se401-2.14.0 probing 047d:5003 [ 734.087303][ T8073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.299126][ T8140] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 734.319155][ T3306] gspca_se401: Bayer format not supported! [ 734.395582][ T8140] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 734.481313][ T8140] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 734.603822][ T8140] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 734.759820][ T8073] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.316508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.325672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.696274][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.705116][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.965061][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.946378][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 737.954352][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 737.977513][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.420256][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.428805][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.943127][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.952280][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.207136][ T6925] usb 8-1: USB disconnect, device number 7 [ 739.520505][ T8039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.768149][ T8140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.088060][ T8083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.142192][ T8140] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.393950][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.402663][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.700446][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.708360][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.921392][ T8073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.657470][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.850008][ T8083] veth0_vlan: entered promiscuous mode [ 745.009177][ T8140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.295324][ T8083] veth1_vlan: entered promiscuous mode [ 745.436539][ T8039] veth0_vlan: entered promiscuous mode [ 745.761658][ T8039] veth1_vlan: entered promiscuous mode [ 745.915597][ T8073] veth0_vlan: entered promiscuous mode [ 746.041070][ T8083] veth0_macvtap: entered promiscuous mode [ 746.147579][ T8073] veth1_vlan: entered promiscuous mode [ 746.259504][ T8083] veth1_macvtap: entered promiscuous mode [ 746.618295][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.871168][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.114790][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.136108][ T8073] veth0_macvtap: entered promiscuous mode [ 747.238858][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.337184][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.389277][ T8073] veth1_macvtap: entered promiscuous mode [ 747.448552][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.708744][ T5078] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 747.765152][ T5078] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 747.804640][ T5078] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 747.833906][ T5078] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 747.861153][ T5078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 747.933426][ T7205] cgroup: fork rejected by pids controller in /syz7 [ 747.949641][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.191093][ T8073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.267757][ T8140] veth0_vlan: entered promiscuous mode [ 748.362833][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.409787][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.488807][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.548097][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.571812][ T8140] veth1_vlan: entered promiscuous mode [ 748.840849][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.119073][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.363587][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.528975][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.952719][ T5078] Bluetooth: hci0: command tx timeout [ 750.718697][ T8140] veth0_macvtap: entered promiscuous mode [ 750.831931][ T35] bridge_slave_1: left allmulticast mode [ 750.841823][ T35] bridge_slave_1: left promiscuous mode [ 750.849314][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.943977][ T35] bridge_slave_0: left allmulticast mode [ 750.950649][ T35] bridge_slave_0: left promiscuous mode [ 750.958063][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.745631][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.764838][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.798852][ T35] bond0 (unregistering): Released all slaves [ 751.881194][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.902611][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 751.913426][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 751.934144][ T8140] veth1_macvtap: entered promiscuous mode [ 751.946810][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 751.968740][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 752.043032][ T5078] Bluetooth: hci0: command tx timeout [ 752.522173][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.761239][ T8140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.943055][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 753.042015][ T35] hsr_slave_0: left promiscuous mode [ 753.061156][ T35] hsr_slave_1: left promiscuous mode [ 753.078710][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.086908][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.099116][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.107275][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.140189][ T35] veth1_macvtap: left promiscuous mode [ 753.151943][ T35] veth0_macvtap: left promiscuous mode [ 753.161058][ T35] veth1_vlan: left promiscuous mode [ 753.168898][ T35] veth0_vlan: left promiscuous mode [ 753.809013][ T35] team0 (unregistering): Port device team_slave_1 removed [ 753.838000][ T35] team0 (unregistering): Port device team_slave_0 removed [ 754.039051][ T5786] Bluetooth: hci2: command tx timeout [ 754.113380][ T5786] Bluetooth: hci0: command tx timeout [ 754.462449][ T68] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.770498][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.904251][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.924414][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.938055][ T35] IPVS: stop unused estimator thread 0... [ 756.112736][ T5786] Bluetooth: hci2: command tx timeout [ 756.194994][ T5786] Bluetooth: hci0: command tx timeout [ 756.336378][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.344507][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.417687][ T8301] bridge_slave_0: entered allmulticast mode [ 756.468089][ T8301] bridge_slave_0: entered promiscuous mode [ 756.536068][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.544659][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.608019][ T8301] bridge_slave_1: entered allmulticast mode [ 756.654490][ T8301] bridge_slave_1: entered promiscuous mode [ 756.814499][ T5078] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.842162][ T5078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.852288][ T5078] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.867956][ T5078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.882051][ T5078] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.108780][ T8324] chnl_net:caif_netlink_parms(): no params data found [ 757.278822][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.560796][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.804368][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 757.824458][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 757.834975][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 757.850804][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 757.863418][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 758.194953][ T5078] Bluetooth: hci2: command tx timeout [ 758.223059][ T8301] team0: Port device team_slave_0 added [ 758.351862][ T8301] team0: Port device team_slave_1 added [ 758.912654][ T5078] Bluetooth: hci4: command tx timeout [ 759.036384][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.043901][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.072642][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.162163][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.170370][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.198547][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.954583][ T5078] Bluetooth: hci5: command tx timeout [ 760.048856][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.057631][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.067783][ T8324] bridge_slave_0: entered allmulticast mode [ 760.081691][ T8324] bridge_slave_0: entered promiscuous mode [ 760.251642][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.260418][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.279120][ T5786] Bluetooth: hci2: command tx timeout [ 760.299621][ T8324] bridge_slave_1: entered allmulticast mode [ 760.311999][ T8324] bridge_slave_1: entered promiscuous mode [ 760.442159][ T8301] hsr_slave_0: entered promiscuous mode [ 760.469656][ T8301] hsr_slave_1: entered promiscuous mode [ 760.603452][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.780922][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.992676][ T5078] Bluetooth: hci4: command tx timeout [ 761.188209][ T35] bridge_slave_1: left allmulticast mode [ 761.194917][ T35] bridge_slave_1: left promiscuous mode [ 761.201752][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.217827][ T35] bridge_slave_0: left allmulticast mode [ 761.224752][ T35] bridge_slave_0: left promiscuous mode [ 761.231729][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.590287][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.612048][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.636847][ T35] bond0 (unregistering): Released all slaves [ 761.708717][ T8324] team0: Port device team_slave_0 added [ 761.857122][ T35] hsr_slave_0: left promiscuous mode [ 761.866191][ T35] hsr_slave_1: left promiscuous mode [ 761.877947][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.888150][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.918083][ T35] veth1_vlan: left promiscuous mode [ 761.927048][ T35] veth0_vlan: left promiscuous mode [ 762.032832][ T5078] Bluetooth: hci5: command tx timeout [ 762.443085][ T35] team0 (unregistering): Port device team_slave_1 removed [ 762.476252][ T35] team0 (unregistering): Port device team_slave_0 removed [ 762.759654][ T8324] team0: Port device team_slave_1 added [ 763.072839][ T5078] Bluetooth: hci4: command tx timeout [ 763.247774][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 763.338646][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.346698][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.375322][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.424889][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.435686][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.469353][ T8358] chnl_net:caif_netlink_parms(): no params data found [ 763.541636][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.549215][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.577751][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.812067][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.114133][ T5078] Bluetooth: hci5: command tx timeout [ 764.220685][ T8324] hsr_slave_0: entered promiscuous mode [ 764.269565][ T8324] hsr_slave_1: entered promiscuous mode [ 764.289621][ T8324] debugfs: 'hsr0' already exists in 'hsr' [ 764.296076][ T8324] Cannot create hsr debugfs directory [ 764.319599][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.345780][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.354301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.585693][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.891006][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.161659][ T5078] Bluetooth: hci4: command tx timeout [ 765.203287][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.211912][ T8354] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.223580][ T8354] bridge_slave_0: entered allmulticast mode [ 765.250322][ T8354] bridge_slave_0: entered promiscuous mode [ 765.269935][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.278008][ T8354] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.296623][ T8354] bridge_slave_1: entered allmulticast mode [ 765.308330][ T8354] bridge_slave_1: entered promiscuous mode [ 765.322119][ T8358] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.331897][ T8358] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.350630][ T8358] bridge_slave_0: entered allmulticast mode [ 765.362521][ T8358] bridge_slave_0: entered promiscuous mode [ 765.381142][ T8358] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.389654][ T8358] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.421208][ T8358] bridge_slave_1: entered allmulticast mode [ 765.438710][ T8358] bridge_slave_1: entered promiscuous mode [ 765.916660][ T8354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.966709][ T8358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.194926][ T5078] Bluetooth: hci5: command tx timeout [ 766.242191][ T8354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.267566][ T8358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.463796][ T3306] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 766.645031][ T3306] usb 10-1: Using ep0 maxpacket: 8 [ 766.681294][ T3306] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 766.691398][ T3306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.700295][ T3306] usb 10-1: Product: syz [ 766.705117][ T3306] usb 10-1: Manufacturer: syz [ 766.710288][ T3306] usb 10-1: SerialNumber: syz [ 766.737114][ T8354] team0: Port device team_slave_0 added [ 766.744832][ T3306] usb 10-1: config 0 descriptor?? [ 766.760041][ T8358] team0: Port device team_slave_0 added [ 766.786184][ T3306] gspca_main: se401-2.14.0 probing 047d:5003 [ 766.821545][ T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.898942][ T8354] team0: Port device team_slave_1 added [ 766.920247][ T8358] team0: Port device team_slave_1 added [ 767.048816][ T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.208543][ T3306] gspca_se401: Bayer format not supported! [ 767.308972][ T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.331837][ T8301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 767.387492][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.396226][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.425250][ T8358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.454287][ T8358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.462517][ T8358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.490928][ T8358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.530853][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.538760][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.567611][ T8354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.745282][ T8301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 767.869842][ T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.163924][ T8354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.171199][ T8354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.199725][ T8354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.257841][ T8301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 768.762482][ T8301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 769.744279][ T8358] hsr_slave_0: entered promiscuous mode [ 769.760508][ T8358] hsr_slave_1: entered promiscuous mode [ 769.773490][ T8358] debugfs: 'hsr0' already exists in 'hsr' [ 769.779759][ T8358] Cannot create hsr debugfs directory [ 770.189796][ T8354] hsr_slave_0: entered promiscuous mode [ 770.280150][ T8354] hsr_slave_1: entered promiscuous mode [ 770.316849][ T8354] debugfs: 'hsr0' already exists in 'hsr' [ 770.323332][ T8354] Cannot create hsr debugfs directory [ 771.531781][ T7805] usb 10-1: USB disconnect, device number 4 [ 772.483295][ T58] bridge_slave_1: left allmulticast mode [ 772.489286][ T58] bridge_slave_1: left promiscuous mode [ 772.496604][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.543358][ T58] bridge_slave_0: left allmulticast mode [ 772.549802][ T58] bridge_slave_0: left promiscuous mode [ 772.557296][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.613588][ T58] bridge_slave_1: left allmulticast mode [ 772.619994][ T58] bridge_slave_1: left promiscuous mode [ 772.627758][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.658696][ T58] bridge_slave_0: left allmulticast mode [ 772.665019][ T58] bridge_slave_0: left promiscuous mode [ 772.671897][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.329309][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.347800][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.367981][ T58] bond0 (unregistering): Released all slaves [ 773.614440][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.653410][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.669124][ T58] bond0 (unregistering): Released all slaves [ 774.069419][ T8324] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 774.124552][ T8324] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 774.278968][ T8324] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 774.474788][ T58] hsr_slave_0: left promiscuous mode [ 774.506827][ T58] hsr_slave_1: left promiscuous mode [ 774.518747][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.527650][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.541281][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.549819][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.579560][ T58] hsr_slave_0: left promiscuous mode [ 774.589299][ T58] hsr_slave_1: left promiscuous mode [ 774.598140][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.606085][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.620683][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.631106][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.669643][ T58] veth1_macvtap: left promiscuous mode [ 774.677819][ T58] veth0_macvtap: left promiscuous mode [ 774.687370][ T58] veth1_vlan: left promiscuous mode [ 774.693138][ T58] veth0_vlan: left promiscuous mode [ 774.702273][ T58] veth1_macvtap: left promiscuous mode [ 774.708612][ T58] veth0_macvtap: left promiscuous mode [ 774.715271][ T58] veth1_vlan: left promiscuous mode [ 774.720986][ T58] veth0_vlan: left promiscuous mode [ 775.638648][ T58] team0 (unregistering): Port device team_slave_1 removed [ 775.701846][ T58] team0 (unregistering): Port device team_slave_0 removed [ 776.235681][ T58] team0 (unregistering): Port device team_slave_1 removed [ 776.290199][ T58] team0 (unregistering): Port device team_slave_0 removed [ 776.567319][ T8324] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 777.262921][ T8301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.756347][ T8301] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.886734][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.894541][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.032021][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.040175][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.071661][ T8358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 778.100237][ T8358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 778.226801][ T8358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.261669][ T8358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.318868][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.498111][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.729138][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.792227][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.989200][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.189067][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 779.204339][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 779.223016][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 779.237324][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 779.250021][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 779.607250][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.824070][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.831740][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.040800][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.048622][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.075739][ T8354] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 780.136530][ T58] bridge_slave_1: left allmulticast mode [ 780.146268][ T58] bridge_slave_1: left promiscuous mode [ 780.153304][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.169504][ T58] bridge_slave_0: left allmulticast mode [ 780.176413][ T58] bridge_slave_0: left promiscuous mode [ 780.185159][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.590886][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.613635][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.632102][ T58] bond0 (unregistering): Released all slaves [ 780.665778][ T8354] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 780.727405][ T8354] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 780.772564][ T8354] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 781.269926][ T58] hsr_slave_0: left promiscuous mode [ 781.294171][ T58] hsr_slave_1: left promiscuous mode [ 781.302215][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.310241][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.315515][ T5786] Bluetooth: hci1: command tx timeout [ 781.327751][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.337060][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.366078][ T58] veth1_macvtap: left promiscuous mode [ 781.371913][ T58] veth0_macvtap: left promiscuous mode [ 781.378620][ T58] veth1_vlan: left promiscuous mode [ 781.387772][ T58] veth0_vlan: left promiscuous mode [ 782.021020][ T58] team0 (unregistering): Port device team_slave_1 removed [ 782.044964][ T58] team0 (unregistering): Port device team_slave_0 removed [ 782.336021][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.480053][ T8301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.841623][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.998661][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.006979][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.257752][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.265867][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.356811][ T8419] chnl_net:caif_netlink_parms(): no params data found [ 783.407317][ T5786] Bluetooth: hci1: command tx timeout [ 784.593367][ T8354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.670526][ T8301] veth0_vlan: entered promiscuous mode [ 784.981490][ T8301] veth1_vlan: entered promiscuous mode [ 785.036199][ T8419] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.045770][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.060386][ T8419] bridge_slave_0: entered allmulticast mode [ 785.074329][ T8419] bridge_slave_0: entered promiscuous mode [ 785.108005][ T8419] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.116810][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.128839][ T8419] bridge_slave_1: entered allmulticast mode [ 785.140603][ T8419] bridge_slave_1: entered promiscuous mode [ 785.308948][ T8354] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.468643][ T8419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.479768][ T5786] Bluetooth: hci1: command tx timeout [ 785.541688][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.549935][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.600693][ T8419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.775909][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.784302][ T6174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.891160][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.126337][ T8419] team0: Port device team_slave_0 added [ 786.191882][ T8301] veth0_macvtap: entered promiscuous mode [ 786.248872][ T8419] team0: Port device team_slave_1 added [ 786.334132][ T8358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.438136][ T8301] veth1_macvtap: entered promiscuous mode [ 786.591881][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.599810][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.629096][ T8419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.727066][ T8419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.734663][ T8419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.764419][ T8419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.441460][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.479919][ T8419] hsr_slave_0: entered promiscuous mode [ 787.508763][ T8419] hsr_slave_1: entered promiscuous mode [ 787.520462][ T8419] debugfs: 'hsr0' already exists in 'hsr' [ 787.527803][ T8419] Cannot create hsr debugfs directory [ 787.553850][ T5786] Bluetooth: hci1: command tx timeout [ 787.727618][ T8301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.064648][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.191922][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.241853][ T8358] veth0_vlan: entered promiscuous mode [ 788.267921][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.328736][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.662456][ T8358] veth1_vlan: entered promiscuous mode [ 788.956887][ T8324] veth0_vlan: entered promiscuous mode [ 789.348427][ T8324] veth1_vlan: entered promiscuous mode [ 789.611816][ T8358] veth0_macvtap: entered promiscuous mode [ 789.739497][ T8358] veth1_macvtap: entered promiscuous mode [ 789.980796][ T8354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.230961][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.331319][ T8419] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 790.452192][ T8358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.505567][ T8419] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 790.591399][ T8419] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 790.665983][ T8419] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 790.799032][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.864412][ T8324] veth0_macvtap: entered promiscuous mode [ 790.934027][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.987654][ T8324] veth1_macvtap: entered promiscuous mode [ 791.085004][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.157655][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.428750][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.568792][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.740923][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.855992][ T1098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.931857][ T1098] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.059915][ T1098] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.621976][ T8419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.942783][ T8419] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.079222][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.087875][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.333653][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.342087][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.766100][ T8354] veth0_vlan: entered promiscuous mode [ 794.111601][ T8354] veth1_vlan: entered promiscuous mode [ 794.760131][ T8354] veth0_macvtap: entered promiscuous mode [ 794.908443][ T8354] veth1_macvtap: entered promiscuous mode [ 795.217826][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.334713][ T8354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.505235][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.543356][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.653862][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.716125][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.923028][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.931370][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.376616][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.385367][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.775341][ T8419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.506803][ T6925] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 797.713301][ T6925] usb 7-1: Using ep0 maxpacket: 32 [ 797.759196][ T6925] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 797.795027][ T6925] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 797.848181][ T6925] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 797.860200][ T6925] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 797.872210][ T6925] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 797.888490][ T6925] usb 7-1: config 0 interface 0 has no altsetting 0 [ 798.031864][ T6925] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 798.045781][ T6925] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 798.055075][ T6925] usb 7-1: Product: syz [ 798.059558][ T6925] usb 7-1: Manufacturer: syz [ 798.064656][ T6925] usb 7-1: SerialNumber: syz [ 798.218114][ T6925] usb 7-1: config 0 descriptor?? [ 798.324467][ T6925] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 798.398521][ T6925] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 798.532217][ T5138] usb 7-1: USB disconnect, device number 4 [ 798.598445][ T5138] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 799.356573][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 799.363796][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 799.694332][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.703315][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.017340][ T6849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.029018][ T6849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.949951][ T8419] veth0_vlan: entered promiscuous mode [ 801.216070][ T8419] veth1_vlan: entered promiscuous mode [ 801.262806][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.271472][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.745999][ T5884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.754454][ T5884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.913148][ T7805] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 802.018498][ T8419] veth0_macvtap: entered promiscuous mode [ 802.123877][ T7805] usb 7-1: Using ep0 maxpacket: 8 [ 802.167334][ T8419] veth1_macvtap: entered promiscuous mode [ 802.191304][ T7805] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 802.204805][ T7805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.215204][ T7805] usb 7-1: Product: syz [ 802.219602][ T7805] usb 7-1: Manufacturer: syz [ 802.225547][ T7805] usb 7-1: SerialNumber: syz [ 802.319691][ T7805] usb 7-1: config 0 descriptor?? [ 802.455127][ T7805] gspca_main: se401-2.14.0 probing 047d:5003 [ 802.521732][ T8624] binder: BINDER_SET_CONTEXT_MGR already set [ 802.597818][ T8624] binder: 8622:8624 ioctl 4018620d 200000000040 returned -16 [ 802.654985][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.826124][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.834277][ T7805] gspca_se401: Bayer format not supported! [ 803.023354][ T5884] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.114600][ T5884] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.290821][ T5884] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.424761][ T6011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.273410][ T7805] usb 7-1: USB disconnect, device number 5 [ 808.770713][ T6925] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 808.885709][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.894847][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.000616][ T6925] usb 8-1: Using ep0 maxpacket: 32 [ 809.039671][ T6925] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 809.092868][ T6925] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 809.173163][ T6925] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 809.185235][ T6925] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 809.199578][ T6925] usb 8-1: config 0 interface 0 has no altsetting 0 [ 809.378637][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.387017][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.397686][ T6925] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 809.407700][ T6925] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 809.417169][ T6925] usb 8-1: Product: syz [ 809.421728][ T6925] usb 8-1: Manufacturer: syz [ 809.426766][ T6925] usb 8-1: SerialNumber: syz [ 809.538852][ T6925] usb 8-1: config 0 descriptor?? [ 809.733428][ T6925] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 809.821269][ T6925] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 810.032251][ T5138] usb 8-1: USB disconnect, device number 8 [ 810.091790][ T5138] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 810.202902][ T1004] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.401410][ T8776] fuse: Unknown parameter 'group_id00000000000000000000' [ 810.539986][ T1004] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.821636][ T1004] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.097129][ T1004] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.796016][ T1004] bridge_slave_1: left allmulticast mode [ 811.803023][ T1004] bridge_slave_1: left promiscuous mode [ 811.810057][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.899996][ T1004] bridge_slave_0: left allmulticast mode [ 811.906714][ T1004] bridge_slave_0: left promiscuous mode [ 811.914119][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.884754][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.930897][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.962546][ T1004] bond0 (unregistering): Released all slaves [ 813.503492][ T8798] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 813.513263][ T8798] ===================================================== [ 813.521084][ T8798] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 813.529858][ T8798] dvbdmx_release_ts_feed+0x198/0x290 [ 813.536500][ T8798] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 813.542963][ T8798] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 813.549560][ T8798] dvb_demux_do_ioctl+0x9a3/0xc80 [ 813.555498][ T8798] dvb_usercopy+0x263/0x500 [ 813.560478][ T8798] dvb_demux_ioctl+0x46/0x70 [ 813.570210][ T8798] __se_sys_ioctl+0x23c/0x400 [ 813.576999][ T8798] __x64_sys_ioctl+0x97/0xe0 [ 813.582199][ T8798] x64_sys_call+0x18a7/0x3e70 [ 813.592047][ T8798] do_syscall_64+0xc9/0xf80 [ 813.597679][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.604241][ T8798] [ 813.606828][ T8798] Uninit was created at: [ 813.611462][ T8798] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 813.617960][ T8798] alloc_pages_mpol+0x328/0x860 [ 813.623426][ T8798] alloc_pages_noprof+0x101/0x280 [ 813.628791][ T8798] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 813.636912][ T8798] __vmalloc_noprof+0x128/0x1f0 [ 813.642044][ T8798] vmalloc_array_noprof+0x48/0x80 [ 813.647602][ T8798] dvb_dmx_init+0x121/0x930 [ 813.653007][ T8798] vidtv_bridge_probe+0x1b1f/0x2690 [ 813.659035][ T8798] platform_probe+0x213/0x370 [ 813.665357][ T8798] really_probe+0x4d5/0xe40 [ 813.675056][ T8798] __driver_probe_device+0x25e/0x370 [ 813.680940][ T8798] driver_probe_device+0x70/0x8f0 [ 813.688696][ T8798] __driver_attach+0x53e/0xaa0 [ 813.694315][ T8798] bus_for_each_dev+0x33b/0x580 [ 813.699558][ T8798] driver_attach+0x51/0x70 [ 813.704611][ T8798] bus_add_driver+0x54f/0xdb0 [ 813.709504][ T8798] driver_register+0x42e/0x6a0 [ 813.714729][ T8798] __platform_driver_register+0x65/0x80 [ 813.720528][ T8798] vidtv_bridge_init+0x73/0x100 [ 813.726805][ T8798] do_one_initcall+0x22b/0xad0 [ 813.731895][ T8798] do_initcall_level+0x157/0x2e0 [ 813.737466][ T8798] do_initcalls+0x176/0x310 [ 813.742417][ T8798] do_basic_setup+0x1d/0x30 [ 813.747234][ T8798] kernel_init_freeable+0x213/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 813.752920][ T8798] kernel_init+0x2f/0x5e0 [ 813.757666][ T8798] ret_from_fork+0x207/0x6f0 [ 813.762719][ T8798] ret_from_fork_asm+0x1a/0x30 [ 813.767726][ T8798] [ 813.774272][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.7.411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 813.785610][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.800490][ T8798] ===================================================== [ 813.808405][ T8798] Disabling lock debugging due to kernel taint [ 813.815624][ T8798] Kernel panic - not syncing: kmsan.panic set ... [ 813.822613][ T8798] CPU: 1 UID: 0 PID: 8798 Comm: syz.7.411 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 813.834809][ T8798] Tainted: [B]=BAD_PAGE [ 813.839143][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 813.850028][ T8798] Call Trace: [ 813.853808][ T8798] [ 813.856954][ T8798] __dump_stack+0x26/0x30 [ 813.861884][ T8798] dump_stack_lvl+0x50/0x1c0 [ 813.866803][ T8798] ? dump_stack+0x12/0x25 [ 813.871461][ T8798] dump_stack+0x1e/0x25 [ 813.876126][ T8798] vpanic+0x435/0xd40 [ 813.880563][ T8798] panic+0x15d/0x160 [ 813.884756][ T8798] kmsan_report+0x31a/0x320 [ 813.890139][ T8798] ? __msan_warning+0x1b/0x30 [ 813.895156][ T8798] ? dvbdmx_release_ts_feed+0x198/0x290 [ 813.901219][ T8798] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 813.907432][ T8798] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 813.913991][ T8798] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 813.919427][ T8798] ? dvb_usercopy+0x263/0x500 [ 813.924486][ T8798] ? dvb_demux_ioctl+0x46/0x70 [ 813.929848][ T8798] ? __se_sys_ioctl+0x23c/0x400 [ 813.935403][ T8798] ? __x64_sys_ioctl+0x97/0xe0 [ 813.940427][ T8798] ? x64_sys_call+0x18a7/0x3e70 [ 813.945807][ T8798] ? do_syscall_64+0xc9/0xf80 [ 813.950905][ T8798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.958120][ T8798] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 813.964902][ T8798] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 813.971624][ T8798] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 813.977693][ T8798] ? kmsan_get_metadata+0xf1/0x160 [ 813.983466][ T8798] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 813.990440][ T8798] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 813.997062][ T8798] ? _raw_spin_unlock_irq+0x31/0x50 [ 814.003017][ T8798] ? kmsan_get_metadata+0x146/0x160 [ 814.008883][ T8798] __msan_warning+0x1b/0x30 [ 814.014115][ T8798] dvbdmx_release_ts_feed+0x198/0x290 [ 814.020236][ T8798] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 814.026333][ T8798] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 814.032874][ T8798] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 814.039500][ T8798] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 814.046556][ T8798] dvb_demux_do_ioctl+0x9a3/0xc80 [ 814.051908][ T8798] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 814.057682][ T8798] dvb_usercopy+0x263/0x500 [ 814.062714][ T8798] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 814.068868][ T8798] ? kmsan_get_metadata+0xf1/0x160 [ 814.074499][ T8798] dvb_demux_ioctl+0x46/0x70 [ 814.079582][ T8798] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 814.085175][ T8798] __se_sys_ioctl+0x23c/0x400 [ 814.090454][ T8798] __x64_sys_ioctl+0x97/0xe0 [ 814.095555][ T8798] x64_sys_call+0x18a7/0x3e70 [ 814.100672][ T8798] do_syscall_64+0xc9/0xf80 [ 814.105606][ T8798] ? clear_bhb_loop+0x40/0x90 [ 814.110858][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.117000][ T8798] RIP: 0033:0x7ff3d639aeb9 [ 814.121708][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.142501][ T8798] RSP: 002b:00007ff3d7256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.151670][ T8798] RAX: ffffffffffffffda RBX: 00007ff3d6615fa0 RCX: 00007ff3d639aeb9 [ 814.160176][ T8798] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 814.168418][ T8798] RBP: 00007ff3d6408c1f R08: 0000000000000000 R09: 0000000000000000 [ 814.176909][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.185453][ T8798] R13: 00007ff3d6616038 R14: 00007ff3d6615fa0 R15: 00007ffd25a9a478 [ 814.195400][ T8798] [ 814.199366][ T8798] Kernel Offset: disabled [ 814.203978][ T8798] Rebooting in 86400 seconds..