last executing test programs: 12m44.223663389s ago: executing program 4 (id=48): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {}, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 12m42.42592623s ago: executing program 4 (id=50): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f, @loopback}, 0x1c) syz_create_resource$binfmt(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) listen(0xffffffffffffffff, 0x8) 12m40.907673782s ago: executing program 4 (id=53): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="fd00000020"], 0x20) socket$packet(0x11, 0x2, 0x300) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0xf}, {0xf, 0x21}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 12m39.151725865s ago: executing program 4 (id=56): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0xb, 0x80005, 0xfffffffe, 0x8, 0x16, "260000000000000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9d}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 12m37.647160671s ago: executing program 4 (id=63): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r1}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003006401"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x6677) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) close(r2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) 12m36.277096557s ago: executing program 4 (id=68): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x4, 0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r3, 0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close(0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f00000001c0)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) socket(0x10, 0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0x8, 0x8001}}) 12m20.773379852s ago: executing program 32 (id=68): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1d, 0x4, 0x6) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) flock(r3, 0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) close(0x3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f00000001c0)=0x5, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) socket(0x10, 0x3, 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe4) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfffffffd, 0x4, 0x8, 0x8001}}) 11m46.295892603s ago: executing program 1 (id=135): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) socket(0x10, 0x803, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$igmp6(0xa, 0x3, 0x2) 11m43.337984256s ago: executing program 1 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x0, r3, 0x20000000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m41.693955246s ago: executing program 1 (id=142): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b2a85ba", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a", 0x1d}], 0x1}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m39.961616701s ago: executing program 1 (id=145): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e9", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES32=r0], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a", 0x1d}], 0x1}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m38.764742655s ago: executing program 1 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 11m36.913739994s ago: executing program 1 (id=152): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000ec0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x28, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x4}}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r8, 0x80047437, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r10 = syz_io_uring_setup(0xe3c, &(0x7f0000000140)={0x0, 0xa14e, 0x400, 0x3, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r10, 0x1, 0x1, 0x1, 0x0, 0x0) unshare(0x2020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m21.187501174s ago: executing program 33 (id=152): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000ec0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_delroute={0x28, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x4}}]}, 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x25f14}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a18}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x3) ioctl$TIOCSLCKTRMIOS(r8, 0x80047437, &(0x7f0000000040)) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r10 = syz_io_uring_setup(0xe3c, &(0x7f0000000140)={0x0, 0xa14e, 0x400, 0x3, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r10, 0x1, 0x1, 0x1, 0x0, 0x0) unshare(0x2020400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11.170248547s ago: executing program 6 (id=1429): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="10ffffff7f0000000000a27b", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb9a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x4083, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0x8000, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0xd, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xfffffffb, 0x10001, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x80000000, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x800003, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x976, 0x5, 0x2, 0x8, 0x8, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x4, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x4, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x9, 0x0, 0x84, 0x3, 0x1ff, 0x403, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x3, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x7ff, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x8000, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26d, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x1000009, 0x100, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x3fe, 0x781d, 0x80, 0x348810a0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0x40000f, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0x6, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x80000008, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed35, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x3, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x0, 0x5, 0x7, 0xffffffff, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0x100b, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x9, 0xaa5, 0x800, 0xf, 0x7, 0x3, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x6, 0xabde, 0x1, 0xb, 0x100800, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x3319, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), 0x0, 0x6c, r3}, 0x38) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000500)='/dev/comedi3\x00', 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x800007f}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000008c0)=ANY=[], 0x8) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x100, 0x2007, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0xffffffff, 0x1, 0x8, 0x1, 0x100, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x86, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r4, 0x22052000) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x29, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000100000208000a40000000000900010073797a300000000008000540000000db78bb02421c0900020073797a3200000000080003400000008c140000001000010000000000000000000784000a41b9b48c94160facfbcb07f53179818328135a9501a300f6f4d38a0b0ace1606bbe6191bdca0d0d879"], 0x6c}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 8.325469794s ago: executing program 2 (id=1443): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b2a85baca2f5d2369d567a31613dd1ee7d1c883e9", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.321124807s ago: executing program 5 (id=1444): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068", 0x38}], 0x2}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001080)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ad02833129bfe0a1923f66ffec9572bf5c4adc98733222233ae44e5e54822b90ac6b1e368ab3b9fee07c6ec70f5f3c16a490b2e38996cd0a848d4c0f9e542256e25c61b4a43ec2d5c20e95af9622e03e7a69d9dd0f76fa37ca17dba74a8417adf7dbbfe7befa3b60f75fa21671e4c815c48fd1383685f9fb68445a4cae0603db803a8c9e4b9c989d55d9727", 0xe1}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000300)="4cdc491247f212437048d0bde044c81940a2718d5ed003ddb9404688a16eb4f67cb7aa757771", 0x26}, {&(0x7f0000000340)="19ac8597e2b78847604acada4f7fce1594770145a04f559182a7637de3e4a5c4234d1e902d279440b8f366f46201cef54adb7ebef5e51adf36c4ee9cce94db1564457d3c235f52f6d58644625c0a1b51cc4074c2703be4c8fadae78f59ef995117694d84bfccc61fecdcb4bce530a8a650d192dc5a238bd1767e93b79682", 0x7e}, {0x0}, {&(0x7f0000001380)="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", 0x162}, {0x0}], 0x5}}], 0x3, 0x4000000) 7.279004566s ago: executing program 2 (id=1446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64, @ANYBLOB="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"/392], 0x198) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004900)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) 7.057553632s ago: executing program 5 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff"], 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 6.599634418s ago: executing program 5 (id=1451): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009050300000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) 6.498883697s ago: executing program 6 (id=1452): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 6.145682746s ago: executing program 6 (id=1453): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = dup(0xffffffffffffffff) getsockname$packet(r2, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = epoll_create(0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x80000000}) 5.782665058s ago: executing program 5 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'macvtap0\x00', {0x800}, 0x98}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x6) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x2, 0x7, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffff9, {0x0, 0x0, 0x0, r4, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x55d, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x1, 0x2002) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 5.58785679s ago: executing program 2 (id=1456): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b2a85baca2f5d2369d567a31613dd1ee7d1c883e9", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.305645637s ago: executing program 5 (id=1458): socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) 3.970200144s ago: executing program 0 (id=1460): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) creat(&(0x7f00000000c0)='./file0\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x80005, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000340)={0xa0, 0x19, 0x1, {0x150, {0x4, 0x0, 0x8}, 0x8, 0x0, 0x0, 0x6955, 0x955, 0x6, 0xea8, 0x0, 0x5, 0x7fff, 0x2, 0x3, 0x48, 0x1ff, 0x6, 0x137, 0x5, 0x4}}, 0xa0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x109340, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x14, 0x1d, 0x10, 0x11, 0x7, 0xebaa, 0x2, 0xdb, 0xffffffffffffffff}}) fadvise64(r3, 0x5e67, 0x7, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x1000, 0x12) 3.524092872s ago: executing program 2 (id=1461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002340)=ANY=[@ANYBLOB="9801000000000000", @ANYRES64, @ANYBLOB="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"/392], 0x198) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004900)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) 3.351997905s ago: executing program 3 (id=1462): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'm\xf6\\O\xfb\x05\xe3>#Y@x\xb4f\xfeD<\x97!\xddd\x10\x03\xd0Mt\v\xca\x9f\x9d\x0eJ\x00_\xd0\xef'}, {0x20, 'cgr/up\xe7i\r\xb1t\x00'}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d326932a5f3d7222391730900000000000000c99c85359d2227cd7d204190a2fb32ae3e7e4f3d839bd6a4e6f411c6ef855e6c53241f34f14773c4c19ab0fad88abad96a214f2ed56b6bb53eb28029fb01bdcdf6104221bda7baa55683f3ef7362c4aeb9e3ba6d29f71bbe"}, 0xcf) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 3.124918845s ago: executing program 3 (id=1463): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x40, 0x6589d1dcc1ed157f, 0x2, 'gz'}, 0x0, 0x0}) 2.570704222s ago: executing program 0 (id=1464): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000100009050300000000000800d20001000000a50000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4"], 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) 2.423716096s ago: executing program 6 (id=1465): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e", 0x27}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c8442218425232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068", 0x38}], 0x2}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001080)="fa98151f51a5cd01a13cca732ada71da23eb1dbc1760afa900e0a7e5bd78d1aae07a60bfa40ae396026e0e2659a1e1332ac789341255aedc3223c16d66ce458c85f3c4372aa7f0ba420f8f046adc689289630718809ad02833129bfe0a1923f66ffec9572bf5c4adc98733222233ae44e5e54822b90ac6b1e368ab3b9fee07c6ec70f5f3c16a490b2e38996cd0a848d4c0f9e542256e25c61b4a43ec2d5c20e95af9622e03e7a69d9dd0f76fa37ca17dba74a8417adf7dbbfe7befa3b60f75fa21671e4c815c48fd1383685f9fb68445a4cae0603db803a8c9e4b9c989d55d9727", 0xe1}, {&(0x7f0000001640)="22c042cdf9bd9c9359e29aca901441bdb830df717384916ecdcc1d0484ed77459f0c", 0x22}], 0x2}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000300)="4cdc491247f212437048d0bde044c81940a2718d5ed003ddb9404688a16eb4f67cb7aa757771", 0x26}, {&(0x7f0000000340)="19ac8597e2b78847604acada4f7fce1594770145a04f559182a7637de3e4a5c4234d1e902d279440b8f366f46201cef54adb7ebef5e51adf36c4ee9cce94db1564457d3c235f52f6d58644625c0a1b51cc4074c2703be4c8fadae78f59ef995117694d84bfccc61fecdcb4bce530a8a650d192dc5a238bd1767e93b79682", 0x7e}, {&(0x7f0000000880)="79aa820df1d202b703746590c56ec144e324bd47e888184a2b27bf2c37143fb22df2558adf974a0f434865a579be7aae190f59f7f328720a028f783fdb861f79ed1dd03938737c05da367af8cabcb5998dd77d2a72e668f4538e10acb1988f769a86b1e22dcc9be43926b2d20ba61f84264aeb61b91785cc0d03613ccdbe13d21b41f7c039d5511d77e84fbd9cb75562fc2db34b8976bf78900e89bec57bc343ccd6a94e244cc9fdb5d16ba20a8dd57d6b2307992924477ddd4e3be22d1a00b1a2ae51c638908eaee7088bc9568b7af2f7ad6f1e5ce1664411fb3486074f", 0xde}, {0x0}, {&(0x7f0000001380)="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", 0xff}], 0x5}}], 0x3, 0x4000000) 2.381631057s ago: executing program 3 (id=1466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24048894) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.381414899s ago: executing program 0 (id=1467): r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 2.228626986s ago: executing program 3 (id=1468): r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 2.211368417s ago: executing program 6 (id=1469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000380)=""/73}, 0x20) 2.201660167s ago: executing program 0 (id=1470): r0 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) 2.171541871s ago: executing program 5 (id=1471): r0 = socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000280)=""/79, 0x4f) 1.607165655s ago: executing program 0 (id=1472): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b", @ANYRES32=0x41424344], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {}, 0x9}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) 1.605484264s ago: executing program 6 (id=1473): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280"], 0x64}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0", 0x7b}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.59481144s ago: executing program 2 (id=1474): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a300000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x20050840) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.589971217s ago: executing program 3 (id=1475): r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffee3, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$inet(0x2, 0x2, 0x9bbd) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) 399.451393ms ago: executing program 3 (id=1476): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2}}], 0x3, 0x4000000) 289.833261ms ago: executing program 2 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x8, 0x80, "4a6535dffaa9779c16cc07f4e70156e42a022ece000000005000", 0x224f5747}) memfd_create(0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x8000000, 0x11, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0xf, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, 0xb5b, 0x9, 0xfffffffffffffff7, 0x1ff, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r9, &(0x7f0000004900)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=1478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x24048894) r2 = accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): changing to 7 [ 385.994603][ T5793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.994644][ T5793] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 385.994670][ T5793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.067545][ T5793] usb 1-1: config 0 descriptor?? [ 386.507488][ T5793] usbhid 1-1:0.0: can't add hid device: -71 [ 386.507712][ T5793] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 386.556204][ T5793] usb 1-1: USB disconnect, device number 18 [ 387.546701][ T7627] ======================================================= [ 387.546701][ T7627] WARNING: The mand mount option has been deprecated and [ 387.546701][ T7627] and is ignored by this kernel. Remove the mand [ 387.546701][ T7627] option from the mount to silence this warning. [ 387.546701][ T7627] ======================================================= [ 387.788811][ T7627] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 393.650077][ T36] IPVS: starting estimator thread 0... [ 393.773429][ T7659] IPVS: using max 8 ests per chain, 19200 per kthread [ 394.154854][ T36] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 394.375708][ T7673] capability: warning: `syz.0.365' uses deprecated v2 capabilities in a way that may be insecure [ 395.227933][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 395.322922][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.322972][ T36] usb 3-1: can't read configurations, error -61 [ 395.518062][ T36] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 395.541757][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 395.671480][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 395.705489][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 395.705533][ T36] usb 3-1: can't read configurations, error -61 [ 395.712255][ T36] usb usb3-port1: attempt power cycle [ 396.069476][ T199] IPVS: starting estimator thread 0... [ 396.167281][ T7684] IPVS: using max 7 ests per chain, 16800 per kthread [ 397.018059][ T36] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 397.040713][ T36] usb 3-1: device descriptor read/8, error -71 [ 400.327972][ T36] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 400.476142][ T36] usb 3-1: device descriptor read/8, error -71 [ 400.579722][ T36] usb usb3-port1: unable to enumerate USB device [ 406.290247][ T5734] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 406.468095][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 406.486567][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 406.486609][ T5734] usb 3-1: can't read configurations, error -61 [ 406.608665][ T5734] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 406.761054][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 406.764920][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 406.764967][ T5734] usb 3-1: can't read configurations, error -61 [ 406.771726][ T5734] usb usb3-port1: attempt power cycle [ 406.791984][ T7732] binder: BINDER_SET_CONTEXT_MGR already set [ 406.792037][ T7732] binder: 7731:7732 ioctl 4018620d 200000004a80 returned -16 [ 407.138744][ T5734] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 407.158813][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 407.166670][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 407.166786][ T5734] usb 3-1: can't read configurations, error -61 [ 407.546174][ T5734] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 407.658857][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 407.661837][ T5734] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 407.661878][ T5734] usb 3-1: can't read configurations, error -61 [ 407.662606][ T5734] usb usb3-port1: unable to enumerate USB device [ 409.769538][ T3389] bridge_slave_1: left allmulticast mode [ 409.769591][ T3389] bridge_slave_1: left promiscuous mode [ 409.770417][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.712544][ T3389] bridge_slave_0: left allmulticast mode [ 410.712592][ T3389] bridge_slave_0: left promiscuous mode [ 410.712892][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.469602][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.525895][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.574425][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.590467][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.593083][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.097954][ T5330] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 417.141174][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 417.176097][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 417.182274][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 417.225331][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 417.297966][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 417.302688][ T5330] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 417.302730][ T5330] usb 1-1: can't read configurations, error -61 [ 417.362064][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 417.443465][ T5330] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 417.587906][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 417.591526][ T5330] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 417.591570][ T5330] usb 1-1: can't read configurations, error -61 [ 417.592070][ T5330] usb usb1-port1: attempt power cycle [ 417.929405][ T5330] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 417.949041][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 417.951972][ T5330] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 417.952000][ T5330] usb 1-1: can't read configurations, error -61 [ 418.068970][ T3389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.095443][ T5330] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 418.128953][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 418.132009][ T5330] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 418.132052][ T5330] usb 1-1: can't read configurations, error -61 [ 418.132463][ T5330] usb usb1-port1: unable to enumerate USB device [ 418.219051][ T3389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.262868][ T3389] bond0 (unregistering): Released all slaves [ 418.727155][ T5612] Bluetooth: hci3: command tx timeout [ 419.399723][ T5612] Bluetooth: hci6: command tx timeout [ 421.858345][ T7817] netlink: 64 bytes leftover after parsing attributes in process `syz.0.393'. [ 421.897489][ T5612] Bluetooth: hci3: command tx timeout [ 421.897543][ T5612] Bluetooth: hci6: command tx timeout [ 424.625705][ T5603] Bluetooth: hci6: command tx timeout [ 424.625741][ T5603] Bluetooth: hci3: command tx timeout [ 426.342460][ T3389] hsr_slave_0: left promiscuous mode [ 426.363541][ T3389] hsr_slave_1: left promiscuous mode [ 426.364663][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.418129][ T3389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.678155][ T5612] Bluetooth: hci3: command tx timeout [ 426.678195][ T5612] Bluetooth: hci6: command tx timeout [ 426.998023][ T36] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 427.153602][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 427.187870][ T36] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 427.187915][ T36] usb 1-1: can't read configurations, error -61 [ 427.317968][ T36] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.468063][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 427.513211][ T36] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 427.513246][ T36] usb 1-1: can't read configurations, error -61 [ 427.565751][ T36] usb usb1-port1: attempt power cycle [ 428.009007][ T36] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 428.034573][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 428.069247][ T36] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 428.069291][ T36] usb 1-1: can't read configurations, error -61 [ 428.198040][ T36] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 428.227862][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 428.236321][ T36] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 428.236364][ T36] usb 1-1: can't read configurations, error -61 [ 428.236867][ T36] usb usb1-port1: unable to enumerate USB device [ 428.523107][ T3389] team0 (unregistering): Port device team_slave_1 removed [ 428.609909][ T3389] team0 (unregistering): Port device team_slave_0 removed [ 429.607707][ T7881] loop8: detected capacity change from 0 to 8 [ 429.653372][ T7881] Dev loop8: unable to read RDB block 8 [ 429.653522][ T7881] loop8: unable to read partition table [ 429.653757][ T7881] loop8: partition table beyond EOD, truncated [ 429.653802][ T7881] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 438.578269][ T7946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 441.791756][ T7962] loop8: detected capacity change from 0 to 8 [ 441.795090][ T7962] Dev loop8: unable to read RDB block 8 [ 441.795144][ T7962] loop8: unable to read partition table [ 441.795401][ T7962] loop8: partition table beyond EOD, truncated [ 441.795423][ T7962] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 442.267591][ T1137] bridge_slave_1: left allmulticast mode [ 442.267647][ T1137] bridge_slave_1: left promiscuous mode [ 442.268875][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.424641][ T1137] bridge_slave_0: left allmulticast mode [ 442.424684][ T1137] bridge_slave_0: left promiscuous mode [ 442.424982][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.739711][ T7986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.424'. [ 444.962414][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.172107][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.172196][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.310595][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.401976][ T1137] bond0 (unregistering): Released all slaves [ 447.749767][ T1137] hsr_slave_0: left promiscuous mode [ 447.808070][ T1137] hsr_slave_1: left promiscuous mode [ 447.809428][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.878642][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.017967][ T5607] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 448.170519][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 448.175465][ T5607] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.175498][ T5607] usb 4-1: config 0 has no interfaces? [ 448.199533][ T5607] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 448.199626][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.199687][ T5607] usb 4-1: Product: syz [ 448.199726][ T5607] usb 4-1: Manufacturer: syz [ 448.199755][ T5607] usb 4-1: SerialNumber: syz [ 448.247630][ T5607] usb 4-1: config 0 descriptor?? [ 451.240661][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 451.291633][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 451.785545][ T5607] usb 4-1: USB disconnect, device number 21 [ 451.945435][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.945579][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.945797][ T7792] bridge_slave_0: entered allmulticast mode [ 451.978290][ T7792] bridge_slave_0: entered promiscuous mode [ 452.004349][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.004474][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.004655][ T7800] bridge_slave_0: entered allmulticast mode [ 452.043083][ T7800] bridge_slave_0: entered promiscuous mode [ 452.045625][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.045844][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.046044][ T7792] bridge_slave_1: entered allmulticast mode [ 452.076019][ T7792] bridge_slave_1: entered promiscuous mode [ 452.113381][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.113521][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.113810][ T7800] bridge_slave_1: entered allmulticast mode [ 452.217909][ T7800] bridge_slave_1: entered promiscuous mode [ 452.755669][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.834647][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.905642][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.007658][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.314263][ T7792] team0: Port device team_slave_0 added [ 454.363157][ T7800] team0: Port device team_slave_0 added [ 454.396981][ T7792] team0: Port device team_slave_1 added [ 454.413042][ T7800] team0: Port device team_slave_1 added [ 454.855721][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.855741][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.855767][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.932026][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.932044][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.932084][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.979139][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.979199][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.979302][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.128235][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.128250][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.128270][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.097282][ T7800] hsr_slave_0: entered promiscuous mode [ 456.098821][ T7800] hsr_slave_1: entered promiscuous mode [ 456.100627][ T7800] debugfs: 'hsr0' already exists in 'hsr' [ 456.100654][ T7800] Cannot create hsr debugfs directory [ 457.693924][ T7792] hsr_slave_0: entered promiscuous mode [ 457.694880][ T7792] hsr_slave_1: entered promiscuous mode [ 457.695647][ T7792] debugfs: 'hsr0' already exists in 'hsr' [ 457.695665][ T7792] Cannot create hsr debugfs directory [ 469.168006][ T8105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 470.191874][ T1137] bridge_slave_1: left allmulticast mode [ 470.191917][ T1137] bridge_slave_1: left promiscuous mode [ 470.192227][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.384758][ T1137] bridge_slave_0: left allmulticast mode [ 470.384805][ T1137] bridge_slave_0: left promiscuous mode [ 470.385120][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.653401][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.770998][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.839010][ T1137] bond0 (unregistering): Released all slaves [ 473.097644][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 473.334620][ T1137] hsr_slave_0: left promiscuous mode [ 473.375566][ T1137] hsr_slave_1: left promiscuous mode [ 473.376545][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.411733][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.919114][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.962540][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.974805][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.992839][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.008917][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.946597][ T8149] netlink: 64 bytes leftover after parsing attributes in process `syz.3.462'. [ 475.691962][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 475.759959][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 476.803471][ T5612] Bluetooth: hci0: command tx timeout [ 479.374229][ T5612] Bluetooth: hci0: command tx timeout [ 481.505193][ T5612] Bluetooth: hci0: command tx timeout [ 482.136078][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.201397][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.207435][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.217256][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.223368][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.561705][ T5612] Bluetooth: hci0: command tx timeout [ 485.918069][ T5612] Bluetooth: hci5: command tx timeout [ 487.958414][ T5603] Bluetooth: hci5: command tx timeout [ 490.037912][ T5603] Bluetooth: hci5: command tx timeout [ 490.200115][ T1137] bridge_slave_1: left allmulticast mode [ 490.200155][ T1137] bridge_slave_1: left promiscuous mode [ 490.200466][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.459119][ T1137] bridge_slave_0: left allmulticast mode [ 490.459152][ T1137] bridge_slave_0: left promiscuous mode [ 490.485200][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.187507][ T5603] Bluetooth: hci5: command tx timeout [ 492.403861][ T8257] overlayfs: failed to clone lowerpath [ 492.593065][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.732126][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.813074][ T1137] bond0 (unregistering): Released all slaves [ 495.036116][ T8300] autofs: Unknown parameter '0x0000000000000000' [ 495.268043][ T1137] hsr_slave_0: left promiscuous mode [ 495.308651][ T1137] hsr_slave_1: left promiscuous mode [ 495.309865][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.338985][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.119193][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 496.179400][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 496.788444][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.788688][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.788988][ T8142] bridge_slave_0: entered allmulticast mode [ 496.828312][ T8142] bridge_slave_0: entered promiscuous mode [ 496.870269][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.870429][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.870642][ T8142] bridge_slave_1: entered allmulticast mode [ 496.885569][ T8142] bridge_slave_1: entered promiscuous mode [ 497.395587][ T8142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.617674][ T8142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.163252][ T8142] team0: Port device team_slave_0 added [ 500.167625][ T8142] team0: Port device team_slave_1 added [ 500.451161][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.451176][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.451195][ T8142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.516996][ T8142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.517012][ T8142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.517035][ T8142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.408032][ T8142] hsr_slave_0: entered promiscuous mode [ 501.413856][ T8142] hsr_slave_1: entered promiscuous mode [ 501.423946][ T8142] debugfs: 'hsr0' already exists in 'hsr' [ 501.424030][ T8142] Cannot create hsr debugfs directory [ 506.200275][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.201341][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.201525][ T8172] bridge_slave_0: entered allmulticast mode [ 506.220998][ T8172] bridge_slave_0: entered promiscuous mode [ 506.351042][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.351133][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.351317][ T8172] bridge_slave_1: entered allmulticast mode [ 506.381568][ T8172] bridge_slave_1: entered promiscuous mode [ 507.194711][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.194791][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.594817][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.752476][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.518686][ T8172] team0: Port device team_slave_0 added [ 508.546846][ T8172] team0: Port device team_slave_1 added [ 509.883168][ T8395] netlink: 64 bytes leftover after parsing attributes in process `syz.3.509'. [ 510.915932][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.915948][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.915968][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.946812][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.946881][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.946958][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.770757][ T8172] hsr_slave_0: entered promiscuous mode [ 511.777645][ T8172] hsr_slave_1: entered promiscuous mode [ 511.793846][ T8172] debugfs: 'hsr0' already exists in 'hsr' [ 511.793870][ T8172] Cannot create hsr debugfs directory [ 512.143094][ T8142] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.262227][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.673427][ T8142] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.836688][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.873423][ T8142] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.919168][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.211075][ T8142] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 514.571456][ T8430] netlink: 64 bytes leftover after parsing attributes in process `syz.2.518'. [ 515.419303][ T8429] netlink: 320 bytes leftover after parsing attributes in process `syz.0.519'. [ 515.474432][ T8142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.004612][ T1137] bridge_slave_1: left allmulticast mode [ 517.004646][ T1137] bridge_slave_1: left promiscuous mode [ 517.004886][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.612598][ T1137] bridge_slave_0: left allmulticast mode [ 518.612629][ T1137] bridge_slave_0: left promiscuous mode [ 518.612879][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.541639][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.658682][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.769607][ T1137] bond0 (unregistering): Released all slaves [ 520.182200][ T8459] syz_tun: entered allmulticast mode [ 520.920865][ T1137] hsr_slave_0: left promiscuous mode [ 520.969006][ T1137] hsr_slave_1: left promiscuous mode [ 520.970225][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.026479][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.092433][ T8467] netlink: 320 bytes leftover after parsing attributes in process `syz.3.530'. [ 521.689631][ T8471] netlink: 64 bytes leftover after parsing attributes in process `syz.0.528'. [ 524.323086][ T8480] 9pnet_virtio: no channels available for device syz [ 524.883890][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 524.971109][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 525.224149][ T8492] netlink: 320 bytes leftover after parsing attributes in process `syz.2.539'. [ 525.666638][ T8499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 527.481509][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.725241][ T8142] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.832399][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.832559][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.934666][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.934763][ T3307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.421744][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 530.233802][ T8541] netlink: 308 bytes leftover after parsing attributes in process `syz.0.549'. [ 530.270741][ T8540] program syz.2.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.084942][ T8556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.553'. [ 537.014737][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 537.036043][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 537.037218][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 537.086456][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 537.087281][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 540.219998][ T5603] Bluetooth: hci3: command tx timeout [ 543.361208][ T5603] Bluetooth: hci3: command tx timeout [ 544.150974][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.185657][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.240124][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.266769][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.267529][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 545.398184][ T5603] Bluetooth: hci3: command tx timeout [ 546.362242][ T5603] Bluetooth: hci0: command tx timeout [ 547.478017][ T5603] Bluetooth: hci3: command tx timeout [ 547.930889][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.572'. [ 548.441046][ T5603] Bluetooth: hci0: command tx timeout [ 550.736796][ T5603] Bluetooth: hci0: command tx timeout [ 552.218796][ T5607] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 552.367995][ T5607] usb 3-1: Using ep0 maxpacket: 16 [ 552.370600][ T5607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.370631][ T5607] usb 3-1: config 0 has no interfaces? [ 552.408925][ T5607] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 552.408964][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.408985][ T5607] usb 3-1: Product: syz [ 552.409002][ T5607] usb 3-1: Manufacturer: syz [ 552.409019][ T5607] usb 3-1: SerialNumber: syz [ 552.476401][ T5607] usb 3-1: config 0 descriptor?? [ 552.715451][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.2.576'. [ 552.765002][ T5603] Bluetooth: hci0: command tx timeout [ 554.102935][ T5793] usb 3-1: USB disconnect, device number 19 [ 559.638802][ T1137] bridge_slave_1: left allmulticast mode [ 559.638845][ T1137] bridge_slave_1: left promiscuous mode [ 559.642203][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.929012][ T1137] bridge_slave_0: left allmulticast mode [ 559.929057][ T1137] bridge_slave_0: left promiscuous mode [ 559.929361][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.919789][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.998988][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.043150][ T1137] bond0 (unregistering): Released all slaves [ 562.299325][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 562.311436][ T8734] syz_tun: entered allmulticast mode [ 562.915177][ T8778] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 562.915447][ T8778] overlayfs: missing 'lowerdir' [ 564.409408][ T1137] hsr_slave_0: left promiscuous mode [ 564.447896][ T1137] hsr_slave_1: left promiscuous mode [ 564.449146][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.489127][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.738651][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 566.799820][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 567.144426][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 567.324537][ T8625] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.335330][ T8625] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.335616][ T8625] bridge_slave_0: entered allmulticast mode [ 567.361971][ T8625] bridge_slave_0: entered promiscuous mode [ 567.594154][ T8625] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.594291][ T8625] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.594572][ T8625] bridge_slave_1: entered allmulticast mode [ 567.620293][ T8625] bridge_slave_1: entered promiscuous mode [ 568.012070][ T8625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.022775][ T8625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.065401][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.065640][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.065853][ T8594] bridge_slave_0: entered allmulticast mode [ 568.071744][ T8594] bridge_slave_0: entered promiscuous mode [ 568.858683][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.858767][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.113827][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.114083][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.114295][ T8594] bridge_slave_1: entered allmulticast mode [ 569.121745][ T8594] bridge_slave_1: entered promiscuous mode [ 569.445173][ T8625] team0: Port device team_slave_0 added [ 569.515088][ T8625] team0: Port device team_slave_1 added [ 569.811703][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.897384][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.075320][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.075343][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.075369][ T8625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.248203][ T8625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.248226][ T8625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.248256][ T8625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.304300][ T8594] team0: Port device team_slave_0 added [ 572.474747][ T8594] team0: Port device team_slave_1 added [ 573.839041][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.839063][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.839094][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.102757][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.102778][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.102809][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.495423][ T8625] hsr_slave_0: entered promiscuous mode [ 575.512270][ T8625] hsr_slave_1: entered promiscuous mode [ 575.526187][ T8625] debugfs: 'hsr0' already exists in 'hsr' [ 575.526218][ T8625] Cannot create hsr debugfs directory [ 576.106365][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 576.536135][ T8888] fuse: Bad value for 'fd' [ 578.126008][ T8594] hsr_slave_0: entered promiscuous mode [ 578.140174][ T8594] hsr_slave_1: entered promiscuous mode [ 578.146148][ T8594] debugfs: 'hsr0' already exists in 'hsr' [ 578.146181][ T8594] Cannot create hsr debugfs directory [ 579.708020][ T8899] fuse: Bad value for 'fd' [ 582.546849][ T8924] fuse: Bad value for 'fd' [ 586.042621][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 587.829351][ T1137] bridge_slave_1: left allmulticast mode [ 587.829394][ T1137] bridge_slave_1: left promiscuous mode [ 587.829716][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.023052][ T1137] bridge_slave_0: left allmulticast mode [ 588.023097][ T1137] bridge_slave_0: left promiscuous mode [ 588.072199][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.439639][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.548842][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.639162][ T1137] bond0 (unregistering): Released all slaves [ 590.706199][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 591.401254][ T1137] hsr_slave_0: left promiscuous mode [ 591.451928][ T1137] hsr_slave_1: left promiscuous mode [ 591.453233][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.512210][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.228744][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 593.375255][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 595.013155][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 598.654430][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 598.731807][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 598.736921][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 598.745835][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 598.750048][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.207850][ T5603] Bluetooth: hci5: command tx timeout [ 601.536634][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 601.584228][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 601.606013][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 601.612761][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 601.630823][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.436557][ T5612] Bluetooth: hci5: command tx timeout [ 603.798142][ T5603] Bluetooth: hci6: command tx timeout [ 605.498262][ T5603] Bluetooth: hci5: command tx timeout [ 605.882578][ T5603] Bluetooth: hci6: command tx timeout [ 607.559318][ T5603] Bluetooth: hci5: command tx timeout [ 607.828038][ T56] bridge_slave_1: left allmulticast mode [ 607.828078][ T56] bridge_slave_1: left promiscuous mode [ 607.828384][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.958002][ T5603] Bluetooth: hci6: command tx timeout [ 607.975529][ T56] bridge_slave_0: left allmulticast mode [ 607.975566][ T56] bridge_slave_0: left promiscuous mode [ 607.993863][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.377947][ T5607] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 608.579427][ T5607] usb 3-1: Using ep0 maxpacket: 16 [ 608.596365][ T5607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.596398][ T5607] usb 3-1: config 0 has no interfaces? [ 608.623569][ T5607] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 608.623608][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.623629][ T5607] usb 3-1: Product: syz [ 608.623644][ T5607] usb 3-1: Manufacturer: syz [ 608.623661][ T5607] usb 3-1: SerialNumber: syz [ 608.674959][ T5607] usb 3-1: config 0 descriptor?? [ 608.710277][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.830292][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.922567][ T56] bond0 (unregistering): Released all slaves [ 609.098313][ T5734] usb 3-1: USB disconnect, device number 20 [ 610.259136][ T5603] Bluetooth: hci6: command tx timeout [ 610.317985][ T9206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.684'. [ 610.572311][ T9210] netlink: 68 bytes leftover after parsing attributes in process `syz.3.685'. [ 610.639535][ T56] hsr_slave_0: left promiscuous mode [ 610.679117][ T56] hsr_slave_1: left promiscuous mode [ 610.680878][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.730851][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.838669][ T56] team0 (unregistering): Port device team_slave_1 removed [ 611.919745][ T56] team0 (unregistering): Port device team_slave_0 removed [ 611.986709][ T9244] netlink: 68 bytes leftover after parsing attributes in process `syz.2.694'. [ 615.518916][ T9291] overlayfs: failed to clone lowerpath [ 615.625305][ T9292] overlayfs: failed to clone lowerpath [ 624.950394][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.950639][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.950921][ T9055] bridge_slave_0: entered allmulticast mode [ 624.972976][ T9055] bridge_slave_0: entered promiscuous mode [ 625.045894][ T9086] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.046029][ T9086] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.046287][ T9086] bridge_slave_0: entered allmulticast mode [ 625.052832][ T9086] bridge_slave_0: entered promiscuous mode [ 625.143148][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.143311][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.143590][ T9055] bridge_slave_1: entered allmulticast mode [ 625.146452][ T9055] bridge_slave_1: entered promiscuous mode [ 625.179983][ T9086] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.180114][ T9086] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.180367][ T9086] bridge_slave_1: entered allmulticast mode [ 625.183268][ T9086] bridge_slave_1: entered promiscuous mode [ 625.447449][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.644638][ T56] bridge_slave_1: left allmulticast mode [ 625.644684][ T56] bridge_slave_1: left promiscuous mode [ 625.644999][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.812137][ T56] bridge_slave_0: left allmulticast mode [ 625.812179][ T56] bridge_slave_0: left promiscuous mode [ 625.822323][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.110532][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.228939][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.310489][ T56] bond0 (unregistering): Released all slaves [ 628.427281][ T9393] overlayfs: failed to clone lowerpath [ 628.516401][ T9394] overlayfs: failed to clone lowerpath [ 629.315426][ T9086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.330526][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.750890][ T9086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.134845][ T9400] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 631.445514][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.445596][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.655906][ T9055] team0: Port device team_slave_0 added [ 631.684095][ T9086] team0: Port device team_slave_0 added [ 631.704871][ T9055] team0: Port device team_slave_1 added [ 633.000670][ T56] hsr_slave_0: left promiscuous mode [ 633.312026][ T56] hsr_slave_1: left promiscuous mode [ 633.314758][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.374815][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.901073][ T9426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.722'. [ 635.469210][ T56] team0 (unregistering): Port device team_slave_1 removed [ 635.608766][ T56] team0 (unregistering): Port device team_slave_0 removed [ 636.041288][ T9086] team0: Port device team_slave_1 added [ 636.426872][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.426892][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.426923][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.041936][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.041958][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.041988][ T9086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.045040][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.045057][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.045087][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.046469][ T9086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.046483][ T9086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.046519][ T9086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.519958][ T9086] hsr_slave_0: entered promiscuous mode [ 637.521192][ T9086] hsr_slave_1: entered promiscuous mode [ 637.527382][ T9086] debugfs: 'hsr0' already exists in 'hsr' [ 637.527407][ T9086] Cannot create hsr debugfs directory [ 639.092094][ T9055] hsr_slave_0: entered promiscuous mode [ 639.095424][ T9055] hsr_slave_1: entered promiscuous mode [ 639.118025][ T9055] debugfs: 'hsr0' already exists in 'hsr' [ 639.118066][ T9055] Cannot create hsr debugfs directory [ 640.217266][ T9483] overlayfs: conflicting lowerdir path [ 644.933096][ T9086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 645.071646][ T9086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.103053][ T9086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 645.223868][ T9086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.238233][ T9086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 645.291271][ T9086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.309571][ T9086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 645.365404][ T9086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 646.576580][ T9530] overlayfs: failed to clone lowerpath [ 646.638668][ T9531] overlayfs: failed to clone lowerpath [ 647.709934][ T9055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 647.716169][ T9534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 647.734489][ T9534] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 648.966604][ T9055] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.972251][ T9055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 649.431181][ T9055] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.436740][ T9055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 649.547453][ T9055] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.608648][ T9055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 649.696916][ T9055] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.312478][ T9086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.465658][ T9086] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.542134][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.542427][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.624189][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.624288][ T3389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.906225][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.113172][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.194817][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.210756][ T3389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.322279][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.322430][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.671872][ T9621] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 655.864980][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.469904][ T9086] veth0_vlan: entered promiscuous mode [ 656.555648][ T9086] veth1_vlan: entered promiscuous mode [ 660.224780][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.260477][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.275461][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.279597][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.314324][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.633740][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.688151][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.692021][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.694754][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 661.696201][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.435764][ T9664] overlayfs: failed to clone lowerpath [ 662.454851][ T5603] Bluetooth: hci0: command tx timeout [ 662.490685][ T9662] overlayfs: failed to clone lowerpath [ 663.067422][ T9676] overlayfs: failed to clone lowerpath [ 663.175483][ T9677] overlayfs: failed to clone lowerpath [ 663.951818][ T5603] Bluetooth: hci3: command tx timeout [ 664.519713][ T5603] Bluetooth: hci0: command tx timeout [ 665.074460][ T5734] IPVS: starting estimator thread 0... [ 665.167930][ T9697] IPVS: using max 11 ests per chain, 26400 per kthread [ 665.957903][ T5603] Bluetooth: hci3: command tx timeout [ 666.814566][ T5603] Bluetooth: hci0: command tx timeout [ 667.081136][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 668.039368][ T5603] Bluetooth: hci3: command tx timeout [ 668.489184][ T9727] overlayfs: failed to clone lowerpath [ 668.737100][ T9731] overlayfs: failed to clone lowerpath [ 668.778809][ T9731] overlayfs: failed to clone lowerpath [ 668.837823][ T5603] Bluetooth: hci0: command tx timeout [ 671.029618][ T5603] Bluetooth: hci3: command tx timeout [ 671.187547][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.248908][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.205034][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.251066][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.630493][ T1541] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.715830][ T1541] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.802683][ T1541] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.858174][ T1541] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.943920][ T9767] overlayfs: failed to clone lowerpath [ 674.060962][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.061200][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.061536][ T9643] bridge_slave_0: entered allmulticast mode [ 674.064661][ T9643] bridge_slave_0: entered promiscuous mode [ 674.124170][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.124342][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.124569][ T9643] bridge_slave_1: entered allmulticast mode [ 674.127083][ T9643] bridge_slave_1: entered promiscuous mode [ 674.311906][ T9643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.361197][ T9643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.916490][ T9643] team0: Port device team_slave_0 added [ 675.235263][ T9643] team0: Port device team_slave_1 added [ 675.690022][ T9790] netlink: 64 bytes leftover after parsing attributes in process `syz.3.802'. [ 676.361085][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.361108][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.361138][ T9643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.472510][ T9643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.472532][ T9643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.472563][ T9643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.253300][ T8779] bridge_slave_1: left allmulticast mode [ 677.253337][ T8779] bridge_slave_1: left promiscuous mode [ 677.253617][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.410885][ T8779] bridge_slave_0: left allmulticast mode [ 677.410997][ T8779] bridge_slave_0: left promiscuous mode [ 677.411351][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.639986][ T8779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.698798][ T8779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.742732][ T8779] bond0 (unregistering): Released all slaves [ 678.941101][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.944699][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.945023][ T9657] bridge_slave_0: entered allmulticast mode [ 678.979323][ T9657] bridge_slave_0: entered promiscuous mode [ 679.130510][ T9643] hsr_slave_0: entered promiscuous mode [ 679.133936][ T9643] hsr_slave_1: entered promiscuous mode [ 679.137992][ T9643] debugfs: 'hsr0' already exists in 'hsr' [ 679.138014][ T9643] Cannot create hsr debugfs directory [ 679.448667][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.450709][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.469572][ T9657] bridge_slave_1: entered allmulticast mode [ 679.913383][ T9657] bridge_slave_1: entered promiscuous mode [ 680.258704][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.420516][ T8779] hsr_slave_0: left promiscuous mode [ 680.470226][ T8779] hsr_slave_1: left promiscuous mode [ 680.471448][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.519066][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.034723][ T8779] team0 (unregistering): Port device team_slave_1 removed [ 682.110141][ T8779] team0 (unregistering): Port device team_slave_0 removed [ 682.519597][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.996945][ T9849] ip6erspan0: entered allmulticast mode [ 683.043224][ T9657] team0: Port device team_slave_0 added [ 683.076809][ T9657] team0: Port device team_slave_1 added [ 683.454563][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.454586][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.454617][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.457423][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.457443][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.457472][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.470553][ T9657] hsr_slave_0: entered promiscuous mode [ 684.474165][ T9657] hsr_slave_1: entered promiscuous mode [ 684.476949][ T9657] debugfs: 'hsr0' already exists in 'hsr' [ 684.476981][ T9657] Cannot create hsr debugfs directory [ 685.064561][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 685.469199][ T9884] overlayfs: failed to clone lowerpath [ 685.634901][ T9887] overlayfs: failed to clone lowerpath [ 687.025735][ T9901] overlayfs: failed to clone lowerpath [ 687.052554][ T9901] overlayfs: failed to clone lowerpath [ 687.832829][ T9925] netlink: 92 bytes leftover after parsing attributes in process `syz.0.837'. [ 687.901082][ T9929] netlink: 92 bytes leftover after parsing attributes in process `syz.0.837'. [ 688.661800][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 689.761375][ T9947] netlink: 92 bytes leftover after parsing attributes in process `syz.3.841'. [ 689.814456][ T9949] netlink: 92 bytes leftover after parsing attributes in process `syz.3.841'. [ 690.410162][ T9962] Bluetooth: MGMT ver 1.23 [ 690.649447][ T9966] overlayfs: failed to clone lowerpath [ 691.504476][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.504560][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.949083][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.964767][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.012930][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.013111][ T9989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.109381][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.109605][ T9989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.192220][ T5603] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 693.193433][ T5603] Bluetooth: hci0: command 0x1407 tx timeout [ 693.211920][ T9989] team0: Port device bridge0 added [ 693.759629][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.759914][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.319047][ T9990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.341718][ T9990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.556492][ T66] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.575181][ T66] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.607381][ T66] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.607442][ T66] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.117153][T10036] overlayfs: failed to clone lowerpath [ 698.936736][T10050] bond0: Unable to set up delay as MII monitoring is disabled [ 699.262456][T10050] bond0 (unregistering): Released all slaves [ 700.029486][ T8779] bridge_slave_1: left allmulticast mode [ 700.029531][ T8779] bridge_slave_1: left promiscuous mode [ 700.029832][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.515379][ T8779] bridge_slave_0: left allmulticast mode [ 701.515419][ T8779] bridge_slave_0: left promiscuous mode [ 701.515726][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.558589][ T8779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.598785][ T8779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.620597][ T8779] bond0 (unregistering): Released all slaves [ 704.337086][T10107] fuse: fd is not a fuse device [ 704.657851][ T8779] hsr_slave_0: left promiscuous mode [ 704.697957][ T8779] hsr_slave_1: left promiscuous mode [ 704.699147][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.724064][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.798663][ T8779] veth1_vlan: left promiscuous mode [ 704.798881][ T8779] veth0_vlan: left promiscuous mode [ 705.368708][ T8779] team0 (unregistering): Port device team_slave_1 removed [ 705.422452][ T8779] team0 (unregistering): Port device team_slave_0 removed [ 706.979728][T10119] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.980202][T10119] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.164357][T10133] overlayfs: failed to clone lowerpath [ 707.222372][T10136] overlayfs: failed to clone lowerpath [ 707.921493][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.929464][T10119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.351299][T10152] overlayfs: failed to clone lowerpath [ 708.395636][T10152] overlayfs: failed to clone lowerpath [ 708.851042][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.857877][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 708.868663][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.869224][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.869332][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.897416][T10161] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 708.914869][T10161] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 710.508720][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.899'. [ 710.532633][T10182] ip6erspan0: entered allmulticast mode [ 712.132039][T10211] overlayfs: failed to clone lowerpath [ 714.189418][ T9643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 714.222652][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.223971][ T9643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 714.284574][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.286183][ T9643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 714.408761][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.425534][ T9643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 714.466147][ T9643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.568760][T10256] team0: Port device bridge0 added [ 715.696051][ T9657] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 715.796493][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.832683][ T9657] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 715.918288][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.924246][ T9657] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 716.031476][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.048338][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.051966][ T9657] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 716.103547][ T9657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 716.269898][ T9643] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.318582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.318755][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.400318][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.400474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.796846][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.968064][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.996494][ T1541] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.996644][ T1541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.071106][ T1541] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.071252][ T1541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.089979][T10310] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 718.164613][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 718.190768][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 718.194948][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 718.235180][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 718.257293][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 718.296572][T10315] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 720.319794][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.358062][ T5603] Bluetooth: hci0: command tx timeout [ 720.774421][ T5603] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 722.567451][ T5603] Bluetooth: hci0: command tx timeout [ 722.769237][T10376] overlayfs: missing 'lowerdir' [ 722.846999][T10377] overlayfs: failed to clone lowerpath [ 723.740418][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.772428][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.792352][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.800224][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.813421][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 724.598009][ T5603] Bluetooth: hci0: command tx timeout [ 724.846834][ T5603] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 724.881082][ T5603] Bluetooth: hci4: Injecting HCI hardware error event [ 724.903745][ T5603] Bluetooth: hci4: hardware error 0x00 [ 724.999989][T10311] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.000250][T10311] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.000537][T10311] bridge_slave_0: entered allmulticast mode [ 725.019100][T10311] bridge_slave_0: entered promiscuous mode [ 725.055353][T10396] fuse: fd is not a fuse device [ 725.257908][T10311] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.258123][T10311] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.258420][T10311] bridge_slave_1: entered allmulticast mode [ 725.280324][T10311] bridge_slave_1: entered promiscuous mode [ 725.639728][T10311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.665042][T10311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.980921][T10311] team0: Port device team_slave_0 added [ 726.002283][T10311] team0: Port device team_slave_1 added [ 726.050536][ T5612] Bluetooth: hci3: command tx timeout [ 726.363132][T10311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.363154][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.363184][T10311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.462626][T10311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.462649][T10311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.462777][T10311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.677910][ T5612] Bluetooth: hci0: command tx timeout [ 727.397965][ T5603] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 727.479396][ T1512] bridge_slave_1: left allmulticast mode [ 727.479449][ T1512] bridge_slave_1: left promiscuous mode [ 727.479783][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.177383][ T5603] Bluetooth: hci3: command tx timeout [ 728.207953][ T1512] bridge_slave_0: left allmulticast mode [ 728.207994][ T1512] bridge_slave_0: left promiscuous mode [ 728.208272][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.352802][T10437] fuse: fd is not a fuse device [ 728.455438][T10439] fuse: fd is not a fuse device [ 730.313460][ T5603] Bluetooth: hci3: command tx timeout [ 730.818973][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.878867][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.901756][ T1512] bond0 (unregistering): Released all slaves [ 731.081279][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 731.286098][T10311] hsr_slave_0: entered promiscuous mode [ 731.296503][T10311] hsr_slave_1: entered promiscuous mode [ 731.309153][T10311] debugfs: 'hsr0' already exists in 'hsr' [ 731.309184][T10311] Cannot create hsr debugfs directory [ 731.923485][ T1512] hsr_slave_0: left promiscuous mode [ 731.959713][ T1512] hsr_slave_1: left promiscuous mode [ 731.961924][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.046301][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.176379][T10487] overlayfs: failed to clone lowerpath [ 732.513002][ T5603] Bluetooth: hci3: command tx timeout [ 734.859239][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 734.978779][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 735.523080][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 736.638823][T10533] overlayfs: failed to clone lowerpath [ 737.831418][T10540] fuse: fd is not a fuse device [ 738.605716][T10558] netlink: 64 bytes leftover after parsing attributes in process `syz.0.985'. [ 739.159227][T10575] overlayfs: failed to clone lowerpath [ 739.218667][T10576] overlayfs: failed to clone lowerpath [ 740.077394][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.077594][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.095089][T10374] bridge_slave_0: entered allmulticast mode [ 740.111501][T10374] bridge_slave_0: entered promiscuous mode [ 740.135390][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.135538][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.135861][T10374] bridge_slave_1: entered allmulticast mode [ 740.165111][T10374] bridge_slave_1: entered promiscuous mode [ 740.249292][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.270688][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.347118][T10374] team0: Port device team_slave_0 added [ 740.362379][T10374] team0: Port device team_slave_1 added [ 740.431550][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.431571][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.431594][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.497974][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.497996][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.498019][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.276406][T10616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.995'. [ 742.452886][T10374] hsr_slave_0: entered promiscuous mode [ 742.467933][T10374] hsr_slave_1: entered promiscuous mode [ 742.468969][T10374] debugfs: 'hsr0' already exists in 'hsr' [ 742.468996][T10374] Cannot create hsr debugfs directory [ 742.779028][T10624] overlayfs: failed to clone lowerpath [ 742.826074][T10625] overlayfs: failed to clone lowerpath [ 743.812701][T10628] 9p: Bad value for 'wfdno' [ 744.378756][T10639] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1002'. [ 745.581944][T10639] 0{X: renamed from gretap0 [ 745.628389][T10639] 0{X: entered allmulticast mode [ 745.644403][T10653] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1005'. [ 745.689904][T10639] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 745.811376][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 746.748651][T10669] overlayfs: failed to clone lowerpath [ 747.944133][T10675] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1009'. [ 748.227863][T10681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1011'. [ 749.941981][T10712] overlayfs: failed to clone lowerpath [ 749.972686][ T5330] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 750.668911][ T5330] usb 3-1: Using ep0 maxpacket: 32 [ 750.671776][ T5330] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 750.671808][ T5330] usb 3-1: config 0 has no interface number 0 [ 750.671859][ T5330] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.671890][ T5330] usb 3-1: config 0 interface 85 has no altsetting 0 [ 750.675320][ T5330] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 750.675353][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.675375][ T5330] usb 3-1: Product: syz [ 750.675392][ T5330] usb 3-1: Manufacturer: syz [ 750.675409][ T5330] usb 3-1: SerialNumber: syz [ 750.921865][ T5330] usb 3-1: config 0 descriptor?? [ 751.095993][ T1512] bridge_slave_1: left allmulticast mode [ 751.096037][ T1512] bridge_slave_1: left promiscuous mode [ 751.129434][ T1512] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.637393][ T5330] appletouch 3-1:0.85: Failed to request geyser raw mode [ 751.648942][ T5330] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 751.689546][ T5330] usb 3-1: USB disconnect, device number 21 [ 751.755584][T10731] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1020'. [ 751.806896][T10733] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1020'. [ 751.834416][ T1512] bridge_slave_0: left allmulticast mode [ 751.834474][ T1512] bridge_slave_0: left promiscuous mode [ 751.836316][ T1512] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.934071][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.934157][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.269266][ T1512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.328966][ T1512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.370950][ T1512] bond0 (unregistering): Released all slaves [ 754.424521][ T1512] hsr_slave_0: left promiscuous mode [ 754.473187][ T1512] hsr_slave_1: left promiscuous mode [ 754.474467][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.518841][ T1512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.268776][T10782] overlayfs: failed to clone lowerpath [ 756.968742][ T1512] team0 (unregistering): Port device team_slave_1 removed [ 757.028859][ T1512] team0 (unregistering): Port device team_slave_0 removed [ 758.340963][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 759.968735][T10835] overlayfs: failed to clone lowerpath [ 761.297843][ T199] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 761.478273][ T199] usb 3-1: Using ep0 maxpacket: 32 [ 761.502533][ T199] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.502573][ T199] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.536573][ T199] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 761.536614][ T199] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 761.536636][ T199] usb 3-1: Product: syz [ 761.536652][ T199] usb 3-1: Manufacturer: syz [ 761.668894][ T199] hub 3-1:4.0: USB hub found [ 761.932887][ T199] hub 3-1:4.0: 2 ports detected [ 762.118483][ T199] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 762.118596][ T199] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 762.293824][ T199] usb 3-1: USB disconnect, device number 22 [ 765.048639][T10875] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 765.991309][T10311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 766.072053][T10311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.077316][T10311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 766.191405][T10311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.211580][T10311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 766.273480][T10311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.280871][T10311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 766.321285][T10311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.472246][T10886] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1052'. [ 766.526307][T10887] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1052'. [ 768.092184][T10374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 768.195998][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.206643][T10374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 768.266251][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.283379][T10374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 768.386673][ T5839] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 768.422539][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.463924][T10374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 768.532692][T10374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.561218][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 768.561255][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.589806][ T5839] usb 3-1: config 0 descriptor?? [ 768.615624][ T5839] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 769.522702][T10311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.656813][ T5839] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 769.704987][T10311] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.750899][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.751124][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.841182][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.841795][ T8779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.930305][T10374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.201307][T10374] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.282653][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.285806][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.419021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.426502][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.278735][ T5839] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 772.342022][ T5839] usb 3-1: USB disconnect, device number 23 [ 772.684812][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 773.423012][T10990] overlayfs: failed to clone lowerpath [ 773.503038][T10991] overlayfs: failed to clone lowerpath [ 774.529890][T10311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.175638][T10374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.960873][T10311] veth0_vlan: entered promiscuous mode [ 776.005472][T10311] veth1_vlan: entered promiscuous mode [ 776.305710][T10311] veth0_macvtap: entered promiscuous mode [ 776.445274][T10311] veth1_macvtap: entered promiscuous mode [ 776.602423][T10311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.652365][T10311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.727064][ T3307] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.952272][ T3307] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.956372][ T3307] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.124577][T11027] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1077'. [ 777.969855][ T3307] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.060885][T10374] veth0_vlan: entered promiscuous mode [ 778.112187][T10374] veth1_vlan: entered promiscuous mode [ 778.235701][T10374] veth0_macvtap: entered promiscuous mode [ 778.269168][T10374] veth1_macvtap: entered promiscuous mode [ 778.305649][T10374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.335366][T10374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.390578][ T8779] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.391942][ T8779] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.392176][ T8779] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.392217][ T8779] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.307247][ T3307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.307276][ T3307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.914006][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 779.963975][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 779.966066][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 780.004526][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 780.005444][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 780.476884][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.476914][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.202962][ T5603] Bluetooth: hci0: command tx timeout [ 782.687939][ T5330] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 782.738960][ T8779] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.891309][ T5330] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 782.891350][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 782.891366][ T5330] usb 3-1: Product: syz [ 782.891377][ T5330] usb 3-1: SerialNumber: syz [ 782.927932][ T5330] usb 3-1: config 0 descriptor?? [ 783.152457][ T5330] hso 3-1:0.0: Can't find BULK endpoints [ 783.376439][ T5330] usb 3-1: USB disconnect, device number 24 [ 784.034902][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.077331][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.095027][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.108237][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.109635][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 784.291775][ T5603] Bluetooth: hci0: command tx timeout [ 785.069119][T11078] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1088'. [ 785.106924][ T8779] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.280000][ T5603] Bluetooth: hci5: command tx timeout [ 786.357824][ T5603] Bluetooth: hci0: command tx timeout [ 786.515573][ T8779] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.329833][ T8779] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.368026][ T5603] Bluetooth: hci5: command tx timeout [ 788.441904][ T5603] Bluetooth: hci0: command tx timeout [ 790.449610][ T5603] Bluetooth: hci5: command tx timeout [ 790.477962][ T8779] bridge_slave_1: left allmulticast mode [ 790.477995][ T8779] bridge_slave_1: left promiscuous mode [ 790.478288][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.674416][ T8779] bridge_slave_0: left allmulticast mode [ 790.674463][ T8779] bridge_slave_0: left promiscuous mode [ 790.676307][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.758257][T11125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1100'. [ 791.761145][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 792.517969][ T5603] Bluetooth: hci5: command tx timeout [ 793.069685][T11129] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1101'. [ 794.472319][ T8779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.549765][ T8779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.612142][ T8779] bond0 (unregistering): Released all slaves [ 795.103812][T11125] IPVS: Unknown mcast interface: vcan0 [ 795.203670][T11123] macvtap1: entered promiscuous mode [ 795.203701][T11123] ip6gretap0: entered promiscuous mode [ 795.203939][T11123] macvtap1: entered allmulticast mode [ 795.203956][T11123] ip6gretap0: entered allmulticast mode [ 795.480828][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.481042][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.481249][T11042] bridge_slave_0: entered allmulticast mode [ 795.510444][T11042] bridge_slave_0: entered promiscuous mode [ 795.625014][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.625106][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.625365][T11042] bridge_slave_1: entered allmulticast mode [ 795.657972][T11042] bridge_slave_1: entered promiscuous mode [ 795.938722][ T8779] hsr_slave_0: left promiscuous mode [ 795.966434][ T8779] hsr_slave_1: left promiscuous mode [ 795.967266][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.967286][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.989183][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.989208][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.256235][ T8779] veth1_macvtap: left promiscuous mode [ 796.256324][ T8779] veth0_macvtap: left promiscuous mode [ 796.256522][ T8779] veth1_vlan: left promiscuous mode [ 796.314817][ T8779] veth0_vlan: left promiscuous mode [ 799.084931][ T8779] team0 (unregistering): Port device team_slave_1 removed [ 799.189386][ T8779] team0 (unregistering): Port device team_slave_0 removed [ 800.457852][T11068] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.458002][T11068] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.458286][T11068] bridge_slave_0: entered allmulticast mode [ 800.490952][T11068] bridge_slave_0: entered promiscuous mode [ 800.891158][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.916278][T11068] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.916410][T11068] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.916720][T11068] bridge_slave_1: entered allmulticast mode [ 801.111802][T11068] bridge_slave_1: entered promiscuous mode [ 802.028577][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.309026][ T36] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 802.617937][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 802.620558][ T36] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.620587][ T36] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.624994][ T36] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 802.625017][ T36] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 802.625032][ T36] usb 3-1: Product: syz [ 802.625045][ T36] usb 3-1: Manufacturer: syz [ 802.842963][T11068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.945733][T11042] team0: Port device team_slave_0 added [ 802.980963][ T36] hub 3-1:4.0: USB hub found [ 802.982824][T11068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.051090][T11042] team0: Port device team_slave_1 added [ 803.501806][ T36] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 803.597847][ T36] usb 3-1: USB disconnect, device number 25 [ 804.270538][T11068] team0: Port device team_slave_0 added [ 804.271830][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.271843][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.271864][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.273919][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.273930][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.273951][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.392167][T11068] team0: Port device team_slave_1 added [ 804.844778][T11068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.844817][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.844845][T11068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.099973][T11068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.099996][T11068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.100028][T11068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.323952][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 805.417823][T11042] hsr_slave_0: entered promiscuous mode [ 805.419375][T11042] hsr_slave_1: entered promiscuous mode [ 805.420358][T11042] debugfs: 'hsr0' already exists in 'hsr' [ 805.420382][T11042] Cannot create hsr debugfs directory [ 806.011634][T11068] hsr_slave_0: entered promiscuous mode [ 806.015264][T11068] hsr_slave_1: entered promiscuous mode [ 806.033590][T11068] debugfs: 'hsr0' already exists in 'hsr' [ 806.033615][T11068] Cannot create hsr debugfs directory [ 806.332449][T11212] fuse: fd is not a fuse device [ 806.957809][ T5734] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 807.107780][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 807.112022][ T5734] usb 3-1: config 0 has no interfaces? [ 807.116262][ T5734] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 807.116296][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.116316][ T5734] usb 3-1: Product: syz [ 807.116330][ T5734] usb 3-1: Manufacturer: syz [ 807.116343][ T5734] usb 3-1: SerialNumber: syz [ 807.199762][ T5734] usb 3-1: config 0 descriptor?? [ 807.439739][ T5607] usb 3-1: USB disconnect, device number 26 [ 808.258805][ T8779] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.570565][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 810.075662][ T5839] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 810.239483][ T5839] usb 3-1: Using ep0 maxpacket: 32 [ 810.242617][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 810.243924][ T5839] usb 3-1: config 1 has an invalid interface number: 228 but max is 1 [ 810.243951][ T5839] usb 3-1: config 1 has an invalid interface number: 246 but max is 1 [ 810.243974][ T5839] usb 3-1: config 1 has no interface number 0 [ 810.243992][ T5839] usb 3-1: config 1 has no interface number 1 [ 810.244038][ T5839] usb 3-1: config 1 interface 228 has no altsetting 0 [ 810.244059][ T5839] usb 3-1: config 1 interface 246 has no altsetting 0 [ 810.250901][ T5839] usb 3-1: string descriptor 0 read error: -22 [ 810.251303][ T5839] usb 3-1: New USB device found, idVendor=07ca, idProduct=3835, bcdDevice=5b.40 [ 810.251376][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.500662][ T8779] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.605330][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 810.717756][ T5839] usb 3-1: USB disconnect, device number 27 [ 810.855694][T11264] macvtap2: entered promiscuous mode [ 810.856737][T11264] macvtap2: entered allmulticast mode [ 812.255514][ T8779] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.321416][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 813.659135][ T8779] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.089196][ T5734] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 814.238560][ T5734] usb 3-1: Using ep0 maxpacket: 16 [ 814.242268][ T5734] usb 3-1: config 0 has no interfaces? [ 814.271608][ T5734] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 814.271647][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.271671][ T5734] usb 3-1: Product: syz [ 814.271686][ T5734] usb 3-1: Manufacturer: syz [ 814.271703][ T5734] usb 3-1: SerialNumber: syz [ 814.330301][ T5734] usb 3-1: config 0 descriptor?? [ 814.360970][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.361049][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.566393][ T5734] usb 3-1: USB disconnect, device number 28 [ 815.905977][T11338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'. [ 816.551768][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1161'. [ 816.556730][ T8779] bridge_slave_1: left allmulticast mode [ 816.556762][ T8779] bridge_slave_1: left promiscuous mode [ 816.557004][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.711644][ T8779] bridge_slave_0: left allmulticast mode [ 816.711689][ T8779] bridge_slave_0: left promiscuous mode [ 816.711974][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.888773][ T8779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.969728][ T8779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.993297][ T8779] bond0 (unregistering): Released all slaves [ 818.150242][T11352] macvtap1: entered promiscuous mode [ 818.150274][T11352] team0: entered promiscuous mode [ 818.150290][T11352] team_slave_0: entered promiscuous mode [ 818.150573][T11352] team_slave_1: entered promiscuous mode [ 818.150782][T11352] bridge0: entered promiscuous mode [ 818.151174][T11352] macvtap1: entered allmulticast mode [ 818.151185][T11352] team0: entered allmulticast mode [ 818.151196][T11352] team_slave_0: entered allmulticast mode [ 818.151211][T11352] team_slave_1: entered allmulticast mode [ 818.151226][T11352] bridge0: entered allmulticast mode [ 818.152424][T11352] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 819.437364][T11405] kAFS: unable to lookup cell '' [ 820.643993][T11429] kAFS: unable to lookup cell '' [ 822.497921][ T8779] hsr_slave_0: left promiscuous mode [ 822.542528][ T8779] hsr_slave_1: left promiscuous mode [ 822.544774][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.544804][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.589284][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.589310][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.829251][ T8779] veth1_macvtap: left promiscuous mode [ 822.829377][ T8779] veth0_macvtap: left promiscuous mode [ 822.829673][ T8779] veth1_vlan: left promiscuous mode [ 822.829881][ T8779] veth0_vlan: left promiscuous mode [ 824.717378][T11476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1194'. [ 826.063898][ T8779] team0 (unregistering): Port device team_slave_1 removed [ 826.149809][ T8779] team0 (unregistering): Port device team_slave_0 removed [ 826.824833][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1197'. [ 829.677076][T11042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 830.023315][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.067664][T11042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 830.188889][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.200202][T11042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 830.494804][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.526992][T11042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 830.633556][T11042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 831.197838][T11036] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 831.357940][T11036] usb 3-1: Using ep0 maxpacket: 8 [ 831.362821][T11036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.362858][T11036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.362889][T11036] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 831.362919][T11036] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 831.362951][T11036] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 831.362980][T11036] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.363029][T11036] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 831.363056][T11036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.526113][T11068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 831.602530][T11068] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.617279][T11068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 831.651496][T11068] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.697249][T11036] usb 3-1: GET_CAPABILITIES returned 0 [ 831.697304][T11036] usbtmc 3-1:16.0: can't read capabilities [ 831.774526][T11068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 831.835271][T11068] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.863670][T11068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 831.893735][T11068] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.143871][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.144410][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.223559][ T5734] usb 3-1: USB disconnect, device number 29 [ 832.295738][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.570584][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.673727][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.674367][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.889093][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.889292][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.987912][T11068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.138726][T11068] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.185932][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.186121][ T1512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.303737][T11557] overlayfs: failed to clone lowerpath [ 834.346832][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.346978][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.726575][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.983100][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.290748][T11612] overlayfs: failed to clone lowerpath [ 839.342160][T11042] veth0_vlan: entered promiscuous mode [ 839.473481][T11042] veth1_vlan: entered promiscuous mode [ 839.799644][T11068] veth0_vlan: entered promiscuous mode [ 839.876084][T11068] veth1_vlan: entered promiscuous mode [ 840.046422][T11068] veth0_macvtap: entered promiscuous mode [ 840.072368][T11068] veth1_macvtap: entered promiscuous mode [ 840.139065][T11068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.166235][T11068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.202793][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.203353][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.205495][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.251068][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.119636][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.119663][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.557159][T11628] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 841.665706][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 841.684529][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 841.695505][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 841.737254][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 841.751212][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.752321][T11628] bond0: (slave lo): Enslaving as an active interface with an up link [ 841.753014][T11628] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 842.188891][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.188920][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.244343][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 842.244690][T11645] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 842.244704][T11645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1233'. [ 844.554033][ T5612] Bluetooth: hci0: command tx timeout [ 844.576430][T11660] overlayfs: failed to clone lowerpath [ 845.954193][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 845.954216][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1243'. [ 846.598194][ T5612] Bluetooth: hci0: command tx timeout [ 848.685672][ T5612] Bluetooth: hci0: command tx timeout [ 850.758728][ T5612] Bluetooth: hci0: command tx timeout [ 852.353864][T11735] kAFS: unable to lookup cell '' [ 852.377777][T10938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 852.547766][T10938] usb 6-1: Using ep0 maxpacket: 16 [ 852.551621][T10938] usb 6-1: config 0 has no interfaces? [ 852.569775][T10938] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 852.569812][T10938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.569833][T10938] usb 6-1: Product: syz [ 852.569848][T10938] usb 6-1: Manufacturer: syz [ 852.569868][T10938] usb 6-1: SerialNumber: syz [ 852.669503][T10938] usb 6-1: config 0 descriptor?? [ 852.906789][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1259'. [ 853.030517][ T5734] usb 6-1: USB disconnect, device number 2 [ 853.227910][ T9343] bridge_slave_1: left allmulticast mode [ 853.227951][ T9343] bridge_slave_1: left promiscuous mode [ 853.228263][ T9343] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.400910][ T9343] bridge_slave_0: left allmulticast mode [ 853.400952][ T9343] bridge_slave_0: left promiscuous mode [ 853.401220][ T9343] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.455225][T11751] kAFS: unable to lookup cell '' [ 855.541129][ T9343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.628881][ T9343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.637847][ T5607] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 855.683868][ T9343] bond0 (unregistering): Released all slaves [ 855.797837][ T5607] usb 6-1: Using ep0 maxpacket: 8 [ 855.865230][ T5607] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 855.865255][ T5607] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 855.865274][ T5607] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 855.865294][ T5607] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 855.865314][ T5607] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 855.865332][ T5607] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.865495][ T5607] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 855.865515][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.084912][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 856.091566][T11775] kAFS: unable to lookup cell '' [ 856.348475][ T5607] usb 6-1: GET_CAPABILITIES returned 0 [ 856.348512][ T5607] usbtmc 6-1:16.0: can't read capabilities [ 856.746732][ T9343] hsr_slave_0: left promiscuous mode [ 856.779547][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 856.853040][ T9343] hsr_slave_1: left promiscuous mode [ 856.854277][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.901842][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.945226][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.947121][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.986712][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.052545][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.052610][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.052695][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.052766][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.073061][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.073635][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.090679][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.090753][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.091108][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.091189][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.091259][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.187989][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.188053][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.188099][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 857.266658][ T9343] veth1_vlan: left promiscuous mode [ 857.266906][ T9343] veth0_vlan: left promiscuous mode [ 857.292605][T11036] usb 6-1: USB disconnect, device number 3 [ 858.208508][ T9343] team0 (unregistering): Port device team_slave_1 removed [ 858.269082][ T9343] team0 (unregistering): Port device team_slave_0 removed [ 858.489415][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.489655][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.489959][T11630] bridge_slave_0: entered allmulticast mode [ 858.492622][T11630] bridge_slave_0: entered promiscuous mode [ 858.544808][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.544973][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.545277][T11630] bridge_slave_1: entered allmulticast mode [ 858.578100][T11630] bridge_slave_1: entered promiscuous mode [ 858.956603][T11630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.011339][T11630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.263588][T11630] team0: Port device team_slave_0 added [ 859.362086][T11630] team0: Port device team_slave_1 added [ 859.472731][T11630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.472753][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.472783][T11630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.475402][T11630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.475421][T11630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.475447][T11630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.271733][T11630] hsr_slave_0: entered promiscuous mode [ 860.325712][T11630] hsr_slave_1: entered promiscuous mode [ 860.329566][T11630] debugfs: 'hsr0' already exists in 'hsr' [ 860.329652][T11630] Cannot create hsr debugfs directory [ 860.663618][T11825] bond0: (slave lo): Releasing backup interface [ 860.803149][T11825] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 861.032796][T11825] team0: Port device bridge0 removed [ 861.036581][T11825] bridge_slave_0: left allmulticast mode [ 861.036607][T11825] bridge_slave_0: left promiscuous mode [ 861.036951][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.291906][T11825] bridge_slave_1: left allmulticast mode [ 861.291956][T11825] bridge_slave_1: left promiscuous mode [ 861.292273][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.470918][T11825] team0: Port device team_slave_0 removed [ 861.508931][T11825] team0: Port device team_slave_1 removed [ 861.509920][T11825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.559570][T11825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.599542][T11825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 861.722977][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 862.335225][T11849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.194342][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 866.335076][T11908] loop5: detected capacity change from 0 to 7 [ 866.386148][T11908] Dev loop5: unable to read RDB block 7 [ 866.386212][T11908] loop5: unable to read partition table [ 866.386449][T11908] loop5: partition table beyond EOD, truncated [ 866.386707][T11908] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 867.557815][T11036] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 869.777714][T11036] usb 6-1: Using ep0 maxpacket: 32 [ 869.780607][T11036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.780644][T11036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.780687][T11036] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 869.780714][T11036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.788019][T11036] usb 6-1: config 0 descriptor?? [ 870.576656][T11036] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 870.576710][T11036] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 870.847834][T11036] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 870.848814][T11036] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -32 [ 871.109887][T11950] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 871.135475][ T5607] usb 6-1: USB disconnect, device number 4 [ 871.186249][T11950] bond0: (slave lo): Enslaving as an active interface with an up link [ 871.186600][T11950] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 871.687820][T11624] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 871.837901][T11624] usb 3-1: Using ep0 maxpacket: 32 [ 871.863186][T11624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.863230][T11624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.863273][T11624] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 871.863299][T11624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.887831][T11624] usb 3-1: config 0 descriptor?? [ 873.202303][T11624] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 873.202351][T11624] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 875.010800][T11624] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 875.011363][T11624] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 875.220894][T11624] usb 3-1: USB disconnect, device number 30 [ 875.802697][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.817921][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.283263][T12007] bond0: option mode: unable to set because the bond device has slaves [ 876.547845][T11130] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 876.714354][T11130] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 876.714392][T11130] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 876.714418][T11130] usb 6-1: Product: syz [ 876.714435][T11130] usb 6-1: SerialNumber: syz [ 876.790671][T11130] usb 6-1: config 0 descriptor?? [ 876.977842][ T6033] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 877.093313][T11130] hso 6-1:0.0: Failed to find BULK eps [ 877.128738][ T6033] usb 3-1: Using ep0 maxpacket: 32 [ 877.131289][ T6033] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 877.131322][ T6033] usb 3-1: config 0 has no interface number 0 [ 877.131375][ T6033] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 877.184057][ T6033] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 877.184144][ T6033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.184171][ T6033] usb 3-1: Product: syz [ 877.184189][ T6033] usb 3-1: Manufacturer: syz [ 877.184206][ T6033] usb 3-1: SerialNumber: syz [ 877.261954][ T6033] usb 3-1: config 0 descriptor?? [ 877.263210][T12014] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 877.386170][T11130] usb 6-1: USB disconnect, device number 5 [ 877.504353][T12014] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 877.839086][T11630] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 878.037330][T11630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 878.084124][T11630] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 878.297038][T11630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 878.320206][ T6033] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 878.320283][ T6033] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 878.320700][ T6033] asix 3-1:0.188: probe with driver asix failed with error -61 [ 878.428565][T11630] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 878.510791][T11630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 878.534355][T11630] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 878.609122][T11630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.713541][T12049] loop5: detected capacity change from 0 to 7 [ 878.775377][T12049] Dev loop5: unable to read RDB block 7 [ 878.775433][T12049] loop5: unable to read partition table [ 878.775664][T12049] loop5: partition table beyond EOD, truncated [ 878.775702][T12049] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 879.681772][T11630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.790839][T11630] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.852318][ T9343] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.852461][ T9343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.907148][T11130] usb 3-1: USB disconnect, device number 31 [ 879.970126][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.970222][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.830205][T12140] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 885.004415][T11630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.856533][T11036] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 886.079067][T11036] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 886.079114][T11036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.112918][T11036] usb 3-1: config 0 descriptor?? [ 886.240463][T11036] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 886.756485][T11630] veth0_vlan: entered promiscuous mode [ 887.032636][T11630] veth1_vlan: entered promiscuous mode [ 887.243416][T11630] veth0_macvtap: entered promiscuous mode [ 887.330170][T11630] veth1_macvtap: entered promiscuous mode [ 887.424041][T11630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.429794][T11036] usb 3-1: USB disconnect, device number 32 [ 887.532971][T11630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.600467][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.600779][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.600822][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.600860][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.533561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.533587][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.004441][ T9343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.004468][ T9343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.948429][T12241] loop8: detected capacity change from 0 to 8 [ 892.049740][T12241] Dev loop8: unable to read RDB block 8 [ 892.049792][T12241] loop8: unable to read partition table [ 892.049994][T12241] loop8: partition table beyond EOD, truncated [ 892.050012][T12241] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 893.257772][ T6033] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 893.423023][ T6033] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 893.423062][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.471046][ T6033] usb 7-1: config 0 descriptor?? [ 893.495368][ T6033] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 893.587771][ T5607] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 895.431048][ T5607] usb 3-1: unable to get BOS descriptor or descriptor too short [ 895.444419][ T5607] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 895.444453][ T5607] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 895.534478][ T5607] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 895.536726][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.536764][ T5607] usb 3-1: Product: syz [ 895.536777][ T5607] usb 3-1: Manufacturer: syz [ 895.536813][ T5607] usb 3-1: SerialNumber: syz [ 895.628930][ T5607] usb 3-1: selecting invalid altsetting 1 [ 895.630610][ T5607] usb 3-1: unit 6 not found! [ 895.630737][ T5607] usb 3-1: unit 2 not found! [ 895.774470][ T5607] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 895.898236][T11575] udevd[11575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.057035][ T6033] usb 7-1: USB disconnect, device number 2 [ 896.961534][ T5734] usb 3-1: USB disconnect, device number 33 [ 897.147777][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 897.343991][ T10] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 897.344025][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.344048][ T10] usb 7-1: Product: syz [ 897.344063][ T10] usb 7-1: Manufacturer: syz [ 897.344079][ T10] usb 7-1: SerialNumber: syz [ 897.390290][ T10] usb 7-1: config 0 descriptor?? [ 897.419239][ T10] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 003 [ 897.661481][T12304] loop8: detected capacity change from 0 to 8 [ 897.672812][T12304] Dev loop8: unable to read RDB block 8 [ 897.672862][T12304] loop8: unable to read partition table [ 897.673238][T12304] loop8: partition table beyond EOD, truncated [ 897.673276][T12304] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 897.833193][ T10] (null): failure reading functionality [ 898.063529][ T10] i2c i2c-1: failure reading functionality [ 898.316150][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 898.371845][ T10] usb 7-1: USB disconnect, device number 3 [ 898.855908][T12329] loop5: detected capacity change from 0 to 7 [ 898.941160][T12329] Dev loop5: unable to read RDB block 7 [ 898.941225][T12329] loop5: unable to read partition table [ 898.941461][T12329] loop5: partition table beyond EOD, truncated [ 898.941485][T12329] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 899.327794][T11130] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 899.482168][T11130] usb 3-1: Using ep0 maxpacket: 32 [ 899.486604][T11130] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 899.486637][T11130] usb 3-1: config 0 has no interface number 0 [ 899.486685][T11130] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 899.550705][T11130] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 899.550744][T11130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.550767][T11130] usb 3-1: Product: syz [ 899.550783][T11130] usb 3-1: Manufacturer: syz [ 899.550799][T11130] usb 3-1: SerialNumber: syz [ 899.620234][T11130] usb 3-1: config 0 descriptor?? [ 899.621476][T12334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 899.856967][T12334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 901.288243][T11130] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 901.288534][T11130] asix 3-1:0.188: probe with driver asix failed with error -71 [ 901.341310][T11130] usb 3-1: USB disconnect, device number 34 [ 902.357812][ T5734] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 902.513499][ T5734] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 902.513537][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.513559][ T5734] usb 3-1: Product: syz [ 902.513575][ T5734] usb 3-1: Manufacturer: syz [ 902.513591][ T5734] usb 3-1: SerialNumber: syz [ 902.558179][ T5734] usb 3-1: config 0 descriptor?? [ 902.580334][ T5734] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 903.049057][ T5734] (null): failure reading functionality [ 903.259074][ T5734] i2c i2c-1: failure reading functionality [ 903.366134][ T5734] i2c i2c-1: connected i2c-tiny-usb device [ 903.402288][ T5734] usb 3-1: USB disconnect, device number 35 [ 903.476238][T12402] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 905.429229][T12428] loop5: detected capacity change from 0 to 7 [ 905.616774][T12428] Dev loop5: unable to read RDB block 7 [ 905.616831][T12428] loop5: unable to read partition table [ 905.617058][T12428] loop5: partition table beyond EOD, truncated [ 905.624985][T12428] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 906.013412][T12440] loop5: detected capacity change from 0 to 7 [ 906.032181][T12440] Dev loop5: unable to read RDB block 7 [ 906.032232][T12440] loop5: unable to read partition table [ 906.032519][T12440] loop5: partition table beyond EOD, truncated [ 906.037499][T12440] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 906.578913][ T6033] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 906.719710][T12449] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 906.726214][T12449] bond1: (slave lo): Enslaving as an active interface with an up link [ 906.743602][T12449] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 906.767318][ T6033] usb 7-1: Using ep0 maxpacket: 8 [ 906.785084][ T6033] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.785118][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 906.785143][ T6033] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 906.785168][ T6033] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 906.785195][ T6033] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 906.785220][ T6033] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.785365][ T6033] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.785391][ T6033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.132935][ T6033] usb 7-1: GET_CAPABILITIES returned 0 [ 907.132998][ T6033] usbtmc 7-1:16.0: can't read capabilities [ 908.599177][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 908.802793][T11130] usb 7-1: USB disconnect, device number 4 [ 910.844847][T12500] loop5: detected capacity change from 0 to 7 [ 910.891117][T12500] Dev loop5: unable to read RDB block 7 [ 910.891170][T12500] loop5: unable to read partition table [ 910.891408][T12500] loop5: partition table beyond EOD, truncated [ 910.891465][T12500] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 912.116918][ T8779] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.518086][ T5612] ================================================================== [ 912.518172][ T5612] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 912.518364][ T5612] Read of size 8 at addr ffffc900201db008 by task kworker/u9:4/5612 [ 912.518384][ T5612] [ 912.518435][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 912.518492][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 912.518508][ T5612] Workqueue: hci3 hci_rx_work [ 912.518605][ T5612] Call Trace: [ 912.518646][ T5612] [ 912.518682][ T5612] dump_stack_lvl+0xe8/0x150 [ 912.518801][ T5612] print_address_description+0x55/0x1e0 [ 912.518843][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.518885][ T5612] print_report+0x58/0x70 [ 912.518917][ T5612] kasan_report+0x117/0x150 [ 912.518997][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.519036][ T5612] __list_del_entry_valid_or_report+0xb5/0x190 [ 912.519077][ T5612] kcov_remote_start+0x295/0x6f0 [ 912.519178][ T5612] hci_rx_work+0x10f/0x1020 [ 912.519219][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 912.519288][ T5612] process_scheduled_works+0xa8e/0x14e0 [ 912.519330][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 912.519360][ T5612] ? assign_work+0x3cf/0x5d0 [ 912.519387][ T5612] worker_thread+0xa47/0xfb0 [ 912.519428][ T5612] kthread+0x388/0x470 [ 912.519481][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 912.519506][ T5612] ? __pfx_kthread+0x10/0x10 [ 912.519539][ T5612] ret_from_fork+0x514/0xb70 [ 912.519651][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 912.519684][ T5612] ? __switch_to+0xc89/0x1420 [ 912.519757][ T5612] ? __pfx_kthread+0x10/0x10 [ 912.519790][ T5612] ret_from_fork_asm+0x1a/0x30 [ 912.519821][ T5612] [ 912.519854][ T5612] [ 912.519860][ T5612] The buggy address belongs to a vmalloc virtual mapping [ 912.519908][ T5612] Memory state around the buggy address: [ 912.519922][ T5612] ffffc900201daf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 912.519936][ T5612] ffffc900201daf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 912.519950][ T5612] >ffffc900201db000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 912.519961][ T5612] ^ [ 912.519972][ T5612] ffffc900201db080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 912.519985][ T5612] ffffc900201db100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 912.519995][ T5612] ================================================================== [ 912.520044][ T5612] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 912.520062][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 912.520088][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 912.520103][ T5612] Workqueue: hci3 hci_rx_work [ 912.520138][ T5612] Call Trace: [ 912.520147][ T5612] [ 912.520156][ T5612] vpanic+0x56c/0xa60 [ 912.520181][ T5612] ? __pfx_vpanic+0x10/0x10 [ 912.520203][ T5612] ? __pfx___schedule+0x10/0x10 [ 912.520280][ T5612] panic+0xc5/0xd0 [ 912.520300][ T5612] ? __pfx_panic+0x10/0x10 [ 912.520324][ T5612] ? preempt_schedule_common+0x82/0xd0 [ 912.520361][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.520396][ T5612] check_panic_on_warn+0x89/0xb0 [ 912.520462][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.520497][ T5612] end_report+0x73/0x170 [ 912.520523][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.520558][ T5612] kasan_report+0x128/0x150 [ 912.520583][ T5612] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 912.520619][ T5612] __list_del_entry_valid_or_report+0xb5/0x190 [ 912.520661][ T5612] kcov_remote_start+0x295/0x6f0 [ 912.520692][ T5612] hci_rx_work+0x10f/0x1020 [ 912.520729][ T5612] ? process_scheduled_works+0xa20/0x14e0 [ 912.520753][ T5612] process_scheduled_works+0xa8e/0x14e0 [ 912.520791][ T5612] ? __pfx_process_scheduled_works+0x10/0x10 [ 912.520821][ T5612] ? assign_work+0x3cf/0x5d0 [ 912.520848][ T5612] worker_thread+0xa47/0xfb0 [ 912.520888][ T5612] kthread+0x388/0x470 [ 912.520921][ T5612] ? __pfx_worker_thread+0x10/0x10 [ 912.520947][ T5612] ? __pfx_kthread+0x10/0x10 [ 912.520979][ T5612] ret_from_fork+0x514/0xb70 [ 912.521013][ T5612] ? __pfx_ret_from_fork+0x10/0x10 [ 912.521045][ T5612] ? __switch_to+0xc89/0x1420 [ 912.521073][ T5612] ? __pfx_kthread+0x10/0x10 [ 912.521104][ T5612] ret_from_fork_asm+0x1a/0x30 [ 912.521134][ T5612] [ 912.521735][ T5612] Kernel Offset: disabled