last executing test programs: 20m27.788640755s ago: executing program 3 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x51, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000301010300000000000000000a0000020c00198008000100090400003c0001800c000280050001003a0000002c00018014000300fc0100c207ebd0cb9abf5f002001000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) futex(0x0, 0x7, 0x2, 0x0, 0x0, 0x2) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 20m26.300899048s ago: executing program 3 (id=90): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) lseek(r5, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 20m22.170400173s ago: executing program 3 (id=93): ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000001440)={0x2, 0x1, 0x3, 0x19, 0x1c0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2b, 0x80801, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) 20m21.110491022s ago: executing program 3 (id=95): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x1b4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xc4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x17}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2d}}]}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 20m20.95504667s ago: executing program 3 (id=97): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0xfffffffffffffd60, &(0x7f0000001600)=[{&(0x7f0000000240)="cd", 0xff70}], 0x1}, 0x810) ftruncate(0xffffffffffffffff, 0x2007ffb) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x22480, 0x0) 20m19.385774595s ago: executing program 3 (id=99): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf3, &(0x7f0000006680)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) close(0xffffffffffffffff) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 20m4.079696578s ago: executing program 32 (id=99): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf3, &(0x7f0000006680)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) close(0xffffffffffffffff) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 18m12.914142234s ago: executing program 0 (id=350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 18m6.930055618s ago: executing program 0 (id=359): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m5.594190535s ago: executing program 0 (id=360): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtfilter={0x1d0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1a0, 0x2, [@TCA_CGROUP_EMATCHES={0x19c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6f5d, 0x2, 0x2}, {0x6}}}, @TCF_EM_CONTAINER={0xf8, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xfffd}, "3140ab4cbb28fdd32a47248f19c161954970735409f44d61340b7b050d292552db5e58c92f35db8da008d8119d79d77002143b42da0cffe2e08b0f58d4bf646fbe558d9c652a1d95d827236183d9f67672a1550bb084aa8ecb6db98fa53417e20d73ef9f415177dd5aa1b43131244a0fcc192f2ed077249bfab8149073877e1341a2f3c7701d991be486dd358b1ec8b274287da1fd76473051c7af86fc8c7382551ad71316da0df80c8b9ff37df847a9f33c109daad5fd9fde4e6d59c6f8f0e8412a81a1dfc991d73c4defe76b78b74947cc020a3d67169ec9ee36218e30d56d7f5ba7c14e3134bd7a0187"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x0, 0x9, 0x2, 0x6, 0x1, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0x24, 0x1, 0x0, 0x0, {{0x9f1, 0x0, 0x4}, "85d3ac9d0eebd7d61890a62d7de0e07993e5340b024c"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xffff, 0x3, 0x6}, {0x3, 0x1ff, 0x3, 0xb617}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x80}, {{}, {0x2, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x40, 0x1, 0x5}, {0x1, 0x5, 0x9, 0x2, 0x7, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x1d0}}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18m4.701710225s ago: executing program 0 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) 18m3.142186019s ago: executing program 0 (id=367): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18m1.999824152s ago: executing program 0 (id=370): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 17m44.008327797s ago: executing program 33 (id=370): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={0x77359400}, 0x10) write(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 17m26.039843297s ago: executing program 5 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)={0x2}) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000200)={0x3f}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0xdc) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m24.612349751s ago: executing program 5 (id=453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 17m21.757532443s ago: executing program 5 (id=459): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x30}}, 0x0) r0 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd_index=0xa, 0x0, 0x0, 0xffffffdc, 0x2, 0x1}) io_uring_enter(r0, 0x66ae, 0x4, 0x2, 0x0, 0x0) 17m21.597733241s ago: executing program 5 (id=461): bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 17m19.742529642s ago: executing program 5 (id=465): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socket(0x200000000000011, 0x2, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x0, 0xc1, 0x7f, 0xc}}]}}]}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0xc8c80, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x545381, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 17m14.554103086s ago: executing program 5 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 16m59.380444574s ago: executing program 34 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 8m18.405993423s ago: executing program 6 (id=2127): syz_open_dev$vim2m(0x0, 0x10003, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x200008, &(0x7f0000000200)) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000180), &(0x7f0000000340)=r0}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 8m16.882702575s ago: executing program 6 (id=2128): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace$pokeuser(0x6, 0x0, 0x118, 0x137db) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) 8m15.534753274s ago: executing program 1 (id=2131): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e8) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x26a200, 0x59) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000002c0)=0xc) 8m12.815416295s ago: executing program 1 (id=2134): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m8.753734349s ago: executing program 6 (id=2137): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m6.640471851s ago: executing program 1 (id=2141): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mlock2(&(0x7f000013b000/0x4000)=nil, 0x4000, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x800) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) 8m5.405041571s ago: executing program 1 (id=2142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="993f9c1af8c3e77309004bb415ed2244669814a2eb6aaa9a9a562bb761e5516ab245ee774d7249a97bceff21720849284148073a4d14805c6e61d91afd0e301d545369f63d7fc3c355c510ff695c6b6a90eb7cc704696e348b27bd", 0x5b}, {&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000680)="b6db6051d3a1d1848f67cae7aa98f670fd3a23f9242d7fc58648b9f7ad8d69cd5f82ca086db8138de47f21b1a7edb1a05ce8f2d98752aca87a5100d16f659e74ab11345d1e9c0db28e66aefc201c5d85ffb6569a36bbb7cb374f62d4fd65d4930d9411fad799038dec28996a7235a49e5ee71b9f34e7f7c61a9f3197b06c7aaa015567beca8d3d2b1fd392fa2631c2e28b54e9df466fccc87696795fbb19b1797065aad7bd351a60c6abbe7bd63d357e3a7ab1bb21f92c419b3b85ac4bb8dce30830af19591374e9b1204a23ece56d0cc5afe505819097dbc551322b07c45be8bb8dda86b49c5972f8e1", 0xea}, {&(0x7f0000000000)="576e284ccce6a44a9d3907d5bd90fdbf6c31d0c2b385e8baf03db67513e9d8", 0x1f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c98161e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee45c1ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="c0fc27ec23129a11eb6b42fdbae11ba76778a7b68d4fd5eac6eabb8ae3fb8d929d9efc398d8fb05e07b2b90b7aada90b502e30adda417b88dd96e6eb92b60ae25ba45f67515a08877b69ac930ec6de5fe106b7a58f8e86202b461e90f1f1d1eb0954fcf5327052179f311e", 0x6b}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001ec0)="f6e15788a9", 0x5}, {&(0x7f0000000bc0)="c12ec4171652cc8aae4185157494a3bad6f08750727ad1a8689828ad72c5a1a41c93bdacb7b1dad7d90235b4c5", 0x2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000c80)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b83f88797600eaa4911052cee7c5f5f210392fdb3bec0d84d4080000007511ca5efb", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="f3044983dc21ddf8bc9c02815f4b383060906089be92daac8161b70d76a097156c69c454acd5813a511f001ba51633e35df2bcb0f6bfb442842b18cea7fc403429021320034cc723c2450430fa9173e1e67afc6633cd8e25d3cbde1d35febd3aca20a899abb4b415f281bb016099db32c0bbf054e0140c02d7755664d49e1578e604ed38bb4e1bbe997a14430593a09481062694ae44716df0a39d3229bd2ba5afb137eea4afaaba9356a079d16017a9acdb50f9cd41fb07329ff48eff16d8e4a943265f8998955226c6017d83120506a7a4c201dac8", 0xd6}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000f80)="d3482c", 0x3}, {&(0x7f0000000fc0)="7137ec13312d8145d8570393fb3050a3c8b059afc4320d5199568662f4ccb9c984998bb98c3eb84dcf5523d914e552e921799cd5dce581c6d9547be9fb108cefd7716a530f2f54ab8a1ec95c624a05bbbd1a457f7a13a004ceaa09547ea7939ee3ec345b8ecf70b94549e447b3f06f13f14cac134165680f21ae1ff441b52c20455ff61470b00af904511ee730fe2f22e765b60854072e8a95f5bd5cd64ce6293c9d78b679bce50fb3a1e69f4e60f12d2b122ba1439c3d", 0xb7}, {&(0x7f0000002080)="4f00f7db0712eedcf0dbddf2aae4ac4455d92d95524672e6b8d5ed45374e129003eb235d8d3891b64c9fcd66013401c68410e6cbcd942a63db26a4bb60e02963b8bb9a412f6f4bb8a7720f4e327e729596f62a6e32dc9813e9bd04637007cbc2d1fd39e6c0c7fb4a397a48704b4221ee4a881d3116486bca48c7b085abc00482844107937efe0a1ef368a36fedb87d17aa0d39408b9017152f7a8d413261ad74a3245cf58fd002f752d222074906591702c9719051c2c928abc13d6088fd75228c50748bebe0f6f0358d4b85629aad11ed947eaf2e5252680e9409", 0xdb}, {&(0x7f0000002180)="e8b4320734", 0x5}, {&(0x7f0000000b40)="fcf26cc32b83a3d1cb29a27662235c644badc5c10131219e3fc2f5b3e3e262e87636763037cc499239292cb8a4974f3a894230b787c726d4697d", 0x3a}, {0x0}], 0x6}}], 0x7, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8m5.243491254s ago: executing program 1 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 8m3.534237821s ago: executing program 6 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20981, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB="07b0"], 0x0) 7m57.799131844s ago: executing program 6 (id=2149): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = memfd_secret(0x80000) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xace2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x33, 0xf5) 7m56.589529967s ago: executing program 6 (id=2150): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 7m50.397310883s ago: executing program 1 (id=2155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) 7m41.071205864s ago: executing program 35 (id=2150): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x3b, @rand_addr=0x64010104, 0x4e22, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000020c0)=@multiplanar_mmap={0xc, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0xc, 0xb, 0x6a, 0x2, 0x6, "13b7a904"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x800003, {0x4}, 0x3}, {0x7, 0x39, {0x4}, 0x80ffd}]}, 0x7}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd", 0x20}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)}], 0x1, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bc26, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}}, 0x24}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) 7m34.397946115s ago: executing program 36 (id=2155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) 6m42.743136276s ago: executing program 4 (id=2223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 6m41.720586131s ago: executing program 4 (id=2225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0x3, 0xc}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004400000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0x2, &(0x7f0000000340)={0x7, 0x5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x11, 0x4, 0x0, {0x6}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)) 6m41.054055692s ago: executing program 4 (id=2226): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000040)="e9d06eac5a", 0x5}, {&(0x7f0000000100)="d48bab410e744469c734998cab96", 0xe}, {&(0x7f0000000500)="c43288f59eac87b72bf72b4d6f61d2ce73a4bc3d22883f582414ef4f3634518ab8d0337c89fbc4e776ccea9cf111de4f43c348da23c88362e759822f8b26296bc98afb6f35c85411c9660465f691fda530472474b6842026c442c74cd7ee4c230419d83dd52429437dfcbc09a16218cb1dcef4a31ed3960f26917d85e137b6d411c8e8e47aadf60be703a1f9e29b5f1a0ba17c2be11d8fab2ae3120abe9c4026b3c944f437622c395018c1ba0b75e3f8346af2ffc59496ad7d58781d3e8f88e786b54d87b20d02b958998d40d80c11d1d0be4616b3a14e19cd62b0119a8c20d4ec2500eb1a985822296cb46f14993435", 0xf0}, {&(0x7f0000000200)="d8b27ecc1d1f5c0a35e0ff0a6a0a48338ad67922ca84b2648ff4a9bf44f6938112a7a05b3531a4e5ee1ab5390b98cd407abf90e199a4cb29751e169b4e16fdc9f7326da4ae5921137f43138f9d0d2a1306e645d3eed35aa35dffae9f5204c01490239007066cd45b7cf11af660f6aad17d1e2f27f4ced28ae0", 0x79}, {&(0x7f0000000600)="6c4e8a193eed4760f09a0ca6d010dcf532b72a1bc7bd38e9d5dcf8a89fe4fb604f6bf32fd163a07baa8f189e4ddef71f4a4d72b1d07ac5452e83f58762143fdad6f153ec4045aec50b0883a625a2e780795a4e213eaacfbb0906584cb23bf5161c579bed5b901b453a6e209c8663ef037d4d5348cca3e0314a94b6fb0b6aa449e2c3e251e431923fd87c", 0x8a}, {&(0x7f0000000440)="7011b27346255102958cf1da4d2f5f5850903a6de16aaeb065f88c0b27b91022764b0f4eed698c15bc0beca08c88d2bb083505ea7ad3c608bc61ad97b078f943f2b247b6f3598b878f3756751c067c664f52e71b494e39", 0x57}, {&(0x7f00000006c0)}, {&(0x7f0000000740)="10937e94dfdc9c509171e768559aec0a714a425e516062def0ca91c2656ef14207c48d4788bbb39e474ff1401241dee29b83de2eeaf1ca27e53f7f680887272c", 0x40}], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) 6m38.445366942s ago: executing program 4 (id=2229): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) 6m37.230933957s ago: executing program 4 (id=2231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r6 = shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x2000) shmdt(r6) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 6m36.166277885s ago: executing program 4 (id=2233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="2015d5000000b7a2"], 0x0, 0x0}) 6m20.66936497s ago: executing program 37 (id=2233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="2015d5000000b7a2"], 0x0, 0x0}) 1m39.860732042s ago: executing program 2 (id=2488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x810) 1m38.416674075s ago: executing program 2 (id=2490): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xf, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m35.872493514s ago: executing program 2 (id=2493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m34.153316832s ago: executing program 2 (id=2495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, &(0x7f0000000000)=0x9, 0x8, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = gettid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x42300, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, 0x0) ioctl$PPPIOCGFLAGS1(r8, 0x40047454, &(0x7f00000001c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m32.861130857s ago: executing program 2 (id=2497): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x837, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1m29.254921711s ago: executing program 2 (id=2500): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xf, 0x0, 0x0) 1m13.47982775s ago: executing program 38 (id=2500): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r5 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xf, 0x0, 0x0) 15.08099575s ago: executing program 7 (id=2567): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 13.975807051s ago: executing program 7 (id=2568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r5 = shmat(0xffffffffffffffff, &(0x7f0000af6000/0x2000)=nil, 0x2000) shmdt(r5) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 12.922025169s ago: executing program 7 (id=2569): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) symlinkat(&(0x7f0000000000)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') name_to_handle_at(r2, &(0x7f0000000580)='./file0/../file0\x00', 0x0, 0x0, 0x600) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 11.785480407s ago: executing program 7 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5401000010000100feffffff000100007f00000100"/32, @ANYRES32=0x0], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000240)={0x12, 0x0, 0x0, 0x0, 0x1000000009, 0x0, 0x0, 0x7, 0x0, "002546e3aa02e11c073d19e6c41dc85e57c88dcb0beceb261df83228d5e07180252d19ead217705e99f7906e044e246f726495c45e940000000100", "131baeb9c2f06041a56fa2b226bb94ce7cadf37e68998fe9d212f3fb2a2a3fbbddaa414ad649565c244427cb0cd26affa0d5956c888ebce027a1aedcf83aee5a", "e978332d4728ebf2cab7d407b8f8e318743509536547e06c6548ffbca79e0f83", [0x8000000000000000, 0x200]}) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000001dc0)={0x9, 0x84, 0x80000, {r8}}, 0x20) r9 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r9, 0x80044d1c, &(0x7f0000000100)) mount$overlay(0x0, 0x0, 0x0, 0x100000, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @mcast1={0xff, 0x5}, 0x1}, 0x1c) 9.728779302s ago: executing program 7 (id=2571): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, 0x0, 0x101800, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r5, 0x847ba, 0x0, 0xf, 0x0, 0x0) 0s ago: executing program 7 (id=2572): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) add_key(&(0x7f0000005a80)='rxrpc\x00', 0x0, &(0x7f0000005b00)="88", 0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) capget(&(0x7f0000000340)={0x19980330, r2}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) kernel console output (not intermixed with test programs): (): no params data found [ 1026.167338][ T8139] bridge_slave_1: left allmulticast mode [ 1026.167356][ T8139] bridge_slave_1: left promiscuous mode [ 1026.167502][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.357061][ T8139] bridge_slave_0: left allmulticast mode [ 1026.357093][ T8139] bridge_slave_0: left promiscuous mode [ 1026.357360][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.373902][T11125] Bluetooth: hci1: command tx timeout [ 1027.350332][ T8139] bridge0: port 3(batadv0) entered disabled state [ 1027.563224][T14294] netlink: 'syz.7.2272': attribute type 10 has an invalid length. [ 1028.156200][ T8139] bridge_slave_1: left allmulticast mode [ 1028.156230][ T8139] bridge_slave_1: left promiscuous mode [ 1028.156465][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.204720][ T8139] bridge_slave_0: left allmulticast mode [ 1028.204743][ T8139] bridge_slave_0: left promiscuous mode [ 1028.204904][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.270216][ T8139] bridge_slave_1: left allmulticast mode [ 1028.270236][ T8139] bridge_slave_1: left promiscuous mode [ 1028.270376][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.314610][ T8139] bridge_slave_0: left allmulticast mode [ 1028.314629][ T8139] bridge_slave_0: left promiscuous mode [ 1028.314787][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.376463][ T8139] bridge_slave_1: left allmulticast mode [ 1028.376495][ T8139] bridge_slave_1: left promiscuous mode [ 1028.376693][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.444678][ T8139] bridge_slave_0: left allmulticast mode [ 1028.444699][ T8139] bridge_slave_0: left promiscuous mode [ 1028.444862][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.463795][T11125] Bluetooth: hci1: command tx timeout [ 1028.944352][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.024885][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.095994][ T8139] bond0 (unregistering): Released all slaves [ 1030.895053][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.955264][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.996164][ T8139] bond0 (unregistering): Released all slaves [ 1031.928556][ T8139] bond1 (unregistering): Released all slaves [ 1032.174612][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.254387][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.315620][ T8139] bond0 (unregistering): Released all slaves [ 1032.564376][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.644589][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.706554][ T8139] bond0 (unregistering): Released all slaves [ 1032.864899][T14247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.865644][T14247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.865924][T14247] bridge_slave_0: entered allmulticast mode [ 1032.868557][T14247] bridge_slave_0: entered promiscuous mode [ 1032.875343][T14247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.909101][T14247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.909504][T14247] bridge_slave_1: entered allmulticast mode [ 1032.912234][T14247] bridge_slave_1: entered promiscuous mode [ 1033.030222][T14247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.053144][T14247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.143468][T14247] team0: Port device team_slave_0 added [ 1033.155576][T14247] team0: Port device team_slave_1 added [ 1033.251009][T14247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.251021][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.251035][T14247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.252693][T14247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.252707][T14247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.252722][T14247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.311429][ T8139] tipc: Left network mode [ 1034.628591][T14247] hsr_slave_0: entered promiscuous mode [ 1034.629396][T14247] hsr_slave_1: entered promiscuous mode [ 1034.629917][T14247] debugfs: 'hsr0' already exists in 'hsr' [ 1034.629932][T14247] Cannot create hsr debugfs directory [ 1035.057947][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1035.061436][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1035.066529][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1035.067620][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1035.068738][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1037.093856][ T5813] Bluetooth: hci0: command tx timeout [ 1039.178310][ T5813] Bluetooth: hci0: command tx timeout [ 1039.863015][T14346] netlink: 'syz.7.2279': attribute type 10 has an invalid length. [ 1040.862536][T11125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1041.320170][T11125] Bluetooth: hci0: command tx timeout [ 1041.376121][T14355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1041.430967][T14355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1041.494364][T14355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1041.519292][T14355] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1043.186256][T14364] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1043.334589][ T5813] Bluetooth: hci0: command tx timeout [ 1043.906533][ T5813] Bluetooth: hci6: command tx timeout [ 1043.955859][ T8139] hsr_slave_0: left promiscuous mode [ 1044.133825][ T8139] hsr_slave_1: left promiscuous mode [ 1044.134506][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.307318][T14368] netlink: 'syz.7.2283': attribute type 10 has an invalid length. [ 1044.945269][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.053807][ T8139] hsr_slave_0: left promiscuous mode [ 1045.073824][ T8139] hsr_slave_1: left promiscuous mode [ 1045.074502][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.074522][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.114701][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.114733][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.243914][ T8139] hsr_slave_0: left promiscuous mode [ 1045.263787][ T8139] hsr_slave_1: left promiscuous mode [ 1045.264752][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.284420][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.443888][ T8139] hsr_slave_0: left promiscuous mode [ 1045.473803][ T8139] hsr_slave_1: left promiscuous mode [ 1045.474607][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.504471][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.560691][ T8139] veth1_macvtap: left promiscuous mode [ 1045.560769][ T8139] veth0_macvtap: left promiscuous mode [ 1045.560910][ T8139] veth1_vlan: left promiscuous mode [ 1045.561006][ T8139] veth0_vlan: left promiscuous mode [ 1046.014784][ T5813] Bluetooth: hci6: command tx timeout [ 1046.436780][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1046.584373][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1048.053848][ T5813] Bluetooth: hci6: command tx timeout [ 1049.944319][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1050.133805][ T5813] Bluetooth: hci6: command tx timeout [ 1050.174336][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1053.294458][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1053.456020][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1054.405838][T14317] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1054.422859][T14317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1054.432440][T14317] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1054.477862][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.477947][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.503241][T14317] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1054.513485][T14317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1054.654581][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1054.804774][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1056.693745][ T5813] Bluetooth: hci7: command tx timeout [ 1057.632547][T14315] chnl_net:caif_netlink_parms(): no params data found [ 1058.174096][T14350] chnl_net:caif_netlink_parms(): no params data found [ 1058.529931][T14315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.530108][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.530331][T14315] bridge_slave_0: entered allmulticast mode [ 1058.532617][T14315] bridge_slave_0: entered promiscuous mode [ 1058.676811][T14315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.676945][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.677147][T14315] bridge_slave_1: entered allmulticast mode [ 1058.679819][T14315] bridge_slave_1: entered promiscuous mode [ 1058.784066][ T5813] Bluetooth: hci7: command tx timeout [ 1060.402224][T14370] chnl_net:caif_netlink_parms(): no params data found [ 1061.284772][ T5813] Bluetooth: hci7: command tx timeout [ 1062.008051][T14315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.008288][T14350] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.008376][T14350] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.008542][T14350] bridge_slave_0: entered allmulticast mode [ 1062.011107][T14350] bridge_slave_0: entered promiscuous mode [ 1062.477910][T14350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.481440][T14350] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.506537][T14350] bridge_slave_1: entered allmulticast mode [ 1062.609379][T14350] bridge_slave_1: entered promiscuous mode [ 1062.707259][T14315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.096626][T14350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.100455][T14315] team0: Port device team_slave_0 added [ 1063.125580][T14350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.333959][T14317] Bluetooth: hci7: command tx timeout [ 1063.396127][T14315] team0: Port device team_slave_1 added [ 1063.497114][T14370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.497314][T14370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.497564][T14370] bridge_slave_0: entered allmulticast mode [ 1063.499220][T14370] bridge_slave_0: entered promiscuous mode [ 1063.502663][T14350] team0: Port device team_slave_0 added [ 1063.834843][T14315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.834861][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.834886][T14315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.837265][T14370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.837336][T14370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.837503][T14370] bridge_slave_1: entered allmulticast mode [ 1063.839099][T14370] bridge_slave_1: entered promiscuous mode [ 1063.842044][T14350] team0: Port device team_slave_1 added [ 1063.843533][T14315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.843543][T14315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.844962][T14315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.978741][T14370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.979884][T14350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.979895][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.979909][T14350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.983537][T14370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.088584][T14350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.088596][T14350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.088610][T14350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.458254][T14315] hsr_slave_0: entered promiscuous mode [ 1064.459201][T14315] hsr_slave_1: entered promiscuous mode [ 1064.459844][T14315] debugfs: 'hsr0' already exists in 'hsr' [ 1064.459860][T14315] Cannot create hsr debugfs directory [ 1064.464835][T14370] team0: Port device team_slave_0 added [ 1064.498679][T14370] team0: Port device team_slave_1 added [ 1064.687372][T14350] hsr_slave_0: entered promiscuous mode [ 1064.688241][T14350] hsr_slave_1: entered promiscuous mode [ 1064.688788][T14350] debugfs: 'hsr0' already exists in 'hsr' [ 1064.688804][T14350] Cannot create hsr debugfs directory [ 1064.690391][T14370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.690404][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.690428][T14370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.781692][T14370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.781710][T14370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1064.781734][T14370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1065.195573][T14370] hsr_slave_0: entered promiscuous mode [ 1065.197097][T14370] hsr_slave_1: entered promiscuous mode [ 1065.198088][T14370] debugfs: 'hsr0' already exists in 'hsr' [ 1065.198112][T14370] Cannot create hsr debugfs directory [ 1066.272670][T14247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1066.342181][T14247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1066.423768][T14247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1066.509449][T14247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1067.183812][ T806] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1067.336699][ T806] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.336726][ T806] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1067.337795][ T806] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1067.337819][ T806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1067.337836][ T806] usb 8-1: SerialNumber: syz [ 1067.608046][ T806] usb 8-1: 0:2 : does not exist [ 1067.646594][ T806] usb 8-1: 0:0: failed to get current value for ch 0 (-22) [ 1067.671479][ T806] usb 8-1: USB disconnect, device number 6 [ 1067.723268][T14448] udevd[14448]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1067.893237][T14247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.985564][T14247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.002194][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.002286][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.020295][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.020398][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.562118][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.791463][ T8139] bridge_slave_1: left allmulticast mode [ 1068.791492][ T8139] bridge_slave_1: left promiscuous mode [ 1068.791732][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.869801][ T8139] bridge_slave_0: left allmulticast mode [ 1068.869822][ T8139] bridge_slave_0: left promiscuous mode [ 1068.870089][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.932373][ T8139] bridge_slave_1: left allmulticast mode [ 1068.932394][ T8139] bridge_slave_1: left promiscuous mode [ 1068.932547][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.005046][ T8139] bridge_slave_0: left allmulticast mode [ 1069.005066][ T8139] bridge_slave_0: left promiscuous mode [ 1069.005253][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.067508][ T8139] bridge_slave_1: left allmulticast mode [ 1069.067528][ T8139] bridge_slave_1: left promiscuous mode [ 1069.067672][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.195252][ T8139] bridge_slave_0: left allmulticast mode [ 1069.195282][ T8139] bridge_slave_0: left promiscuous mode [ 1069.195532][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.288979][ T8139] bridge_slave_1: left allmulticast mode [ 1069.288999][ T8139] bridge_slave_1: left promiscuous mode [ 1069.289148][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1069.355731][ T8139] bridge_slave_0: left allmulticast mode [ 1069.355750][ T8139] bridge_slave_0: left promiscuous mode [ 1069.355914][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.764441][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.864881][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.927559][ T8139] bond0 (unregistering): Released all slaves [ 1070.244563][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.324393][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.385569][ T8139] bond0 (unregistering): Released all slaves [ 1070.664362][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1070.764329][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.825827][ T8139] bond0 (unregistering): Released all slaves [ 1071.509461][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.584380][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1071.646144][ T8139] bond0 (unregistering): Released all slaves [ 1071.970952][T14247] veth0_vlan: entered promiscuous mode [ 1072.578967][T14247] veth1_vlan: entered promiscuous mode [ 1073.043945][ T5886] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1073.112173][T14247] veth0_macvtap: entered promiscuous mode [ 1073.162406][T14247] veth1_macvtap: entered promiscuous mode [ 1073.191552][T14247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.235380][ T5886] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.235407][ T5886] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1073.236662][ T5886] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1073.236689][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1073.236707][ T5886] usb 8-1: SerialNumber: syz [ 1073.373985][ T8139] hsr_slave_0: left promiscuous mode [ 1073.433824][ T8139] hsr_slave_1: left promiscuous mode [ 1073.434753][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.458007][ T5886] usb 8-1: 0:2 : does not exist [ 1073.500006][ T5886] usb 8-1: 0:0: failed to get current value for ch 0 (-22) [ 1073.534171][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.540100][ T5886] usb 8-1: USB disconnect, device number 7 [ 1073.613331][T14448] udevd[14448]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.757814][ T8139] hsr_slave_0: left promiscuous mode [ 1073.773903][ T8139] hsr_slave_1: left promiscuous mode [ 1073.774554][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.814490][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.954012][ T8139] hsr_slave_0: left promiscuous mode [ 1073.993848][ T8139] hsr_slave_1: left promiscuous mode [ 1073.994797][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.024416][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.223782][ T8139] hsr_slave_0: left promiscuous mode [ 1074.507952][ T8139] hsr_slave_1: left promiscuous mode [ 1074.509832][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.534370][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.691803][T14479] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1076.691821][T14479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1076.699407][T14479] vhci_hcd vhci_hcd.0: Device attached [ 1076.964987][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1077.016206][ T5886] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1077.024410][ T5879] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1077.148294][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1077.202611][ T5886] usb 8-1: config 0 has no interfaces? [ 1077.202645][ T5886] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1077.202657][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.283883][ T5886] usb 8-1: config 0 descriptor?? [ 1077.500853][T14480] usb 47-1: recv xbuf, 0 [ 1077.513450][ T5972] vhci_hcd vhci_hcd.7: stop threads [ 1077.513469][ T5972] vhci_hcd vhci_hcd.7: release socket [ 1077.521954][ T5972] vhci_hcd vhci_hcd.7: disconnect device [ 1077.574757][ T5879] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1078.056867][ T9] usb 8-1: USB disconnect, device number 8 [ 1078.474346][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1078.638802][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1079.854574][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1080.028682][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1080.771262][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1080.795742][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1080.800487][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1080.802078][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1080.802829][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1081.394385][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1081.565311][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1082.936438][T14317] Bluetooth: hci2: command tx timeout [ 1083.068977][T14315] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1083.601160][T14315] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1083.723734][T14315] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1083.910111][T14315] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1084.101869][T14491] syz.7.2305 (14491): drop_caches: 2 [ 1084.589978][T14350] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1085.029189][T14317] Bluetooth: hci2: command tx timeout [ 1085.286841][T14350] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1085.448092][T14350] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1086.231138][T14485] chnl_net:caif_netlink_parms(): no params data found [ 1086.283775][T14350] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1087.238018][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.238202][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.238400][T14485] bridge_slave_0: entered allmulticast mode [ 1087.239844][T14485] bridge_slave_0: entered promiscuous mode [ 1087.241203][T14370] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1087.253864][T14317] Bluetooth: hci2: command tx timeout [ 1087.273961][ T5886] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1087.331220][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.331372][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.331612][T14485] bridge_slave_1: entered allmulticast mode [ 1087.333284][T14485] bridge_slave_1: entered promiscuous mode [ 1087.355586][T14370] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1087.453709][ T5886] usb 8-1: Using ep0 maxpacket: 16 [ 1087.468371][T14370] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1087.475970][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.476000][ T5886] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.476021][ T5886] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1087.476064][ T5886] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1087.476084][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.511440][ T5886] usb 8-1: config 0 descriptor?? [ 1087.605470][T14370] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.697523][T14485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.705380][T14485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.797403][T14485] team0: Port device team_slave_0 added [ 1087.808954][T14485] team0: Port device team_slave_1 added [ 1087.924119][T14485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.924135][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.924153][T14485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.933277][T14485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.933294][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.933317][T14485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.012803][ T5886] usbhid 8-1:0.0: can't add hid device: -71 [ 1088.012925][ T5886] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1088.042713][ T5886] usb 8-1: USB disconnect, device number 9 [ 1088.466473][T14485] hsr_slave_0: entered promiscuous mode [ 1088.467810][T14485] hsr_slave_1: entered promiscuous mode [ 1088.679333][T14315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.343932][T14317] Bluetooth: hci2: command tx timeout [ 1089.377832][T14350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.515830][T14315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.817469][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.817668][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.852006][T14350] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.884260][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.884978][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.280378][T14539] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1090.879525][T14541] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1090.879551][T14541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1090.892225][T14541] vhci_hcd vhci_hcd.0: Device attached [ 1090.922238][T14370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.930861][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.930988][T13758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.969308][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.969382][T13758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.133874][ T5879] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1091.153931][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1091.305793][ T9] usb 8-1: config 0 has no interfaces? [ 1091.305825][ T9] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1091.305838][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.308772][ T9] usb 8-1: config 0 descriptor?? [ 1091.511909][T14370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.528909][T14542] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 1091.529075][ T43] vhci_hcd vhci_hcd.7: stop threads [ 1091.529091][ T43] vhci_hcd vhci_hcd.7: release socket [ 1091.529159][ T43] vhci_hcd vhci_hcd.7: disconnect device [ 1091.542139][T13758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.566176][T13758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.597613][T13758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.597712][T13758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.747864][ T8139] bridge_slave_1: left allmulticast mode [ 1091.747892][ T8139] bridge_slave_1: left promiscuous mode [ 1091.748159][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.844646][ T8139] bridge_slave_0: left allmulticast mode [ 1091.844667][ T8139] bridge_slave_0: left promiscuous mode [ 1091.844858][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.101286][ T806] usb 8-1: USB disconnect, device number 10 [ 1095.257784][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1095.304483][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1095.327116][ T8139] bond0 (unregistering): Released all slaves [ 1095.348984][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1095.360607][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1095.378280][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1095.379659][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1095.380344][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1096.174124][ T8139] hsr_slave_0: left promiscuous mode [ 1096.195264][ T8139] hsr_slave_1: left promiscuous mode [ 1096.196475][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.196499][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1096.227401][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.313850][ T5879] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1096.416412][ T8139] veth1_macvtap: left promiscuous mode [ 1096.416517][ T8139] veth0_macvtap: left promiscuous mode [ 1096.416762][ T8139] veth1_vlan: left promiscuous mode [ 1096.416955][ T8139] veth0_vlan: left promiscuous mode [ 1097.413759][T14317] Bluetooth: hci1: command tx timeout [ 1099.464266][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1099.498521][T14317] Bluetooth: hci1: command tx timeout [ 1099.755112][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1100.912169][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.934152][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.936858][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.941420][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.942170][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.573828][T14317] Bluetooth: hci1: command tx timeout [ 1102.308243][T14485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1102.610705][T14566] gretap0: entered promiscuous mode [ 1102.610969][T14566] vlan2: entered promiscuous mode [ 1102.787244][T14485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1103.127225][T14317] Bluetooth: hci0: command tx timeout [ 1103.200107][T14485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1103.240195][T14485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1103.683771][T14317] Bluetooth: hci1: command tx timeout [ 1104.884781][T14610] netlink: 'syz.7.2322': attribute type 10 has an invalid length. [ 1104.922206][T14370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.927348][T14558] chnl_net:caif_netlink_parms(): no params data found [ 1105.164002][T14568] chnl_net:caif_netlink_parms(): no params data found [ 1105.183808][T14317] Bluetooth: hci0: command tx timeout [ 1106.162158][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.162359][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.162606][T14558] bridge_slave_0: entered allmulticast mode [ 1106.190666][T14558] bridge_slave_0: entered promiscuous mode [ 1106.656774][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.656896][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.657144][T14558] bridge_slave_1: entered allmulticast mode [ 1106.660564][T14558] bridge_slave_1: entered promiscuous mode [ 1106.750890][T14568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.751013][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.751259][T14568] bridge_slave_0: entered allmulticast mode [ 1106.755004][T14568] bridge_slave_0: entered promiscuous mode [ 1106.802906][T14485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.804425][T14568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.804553][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.804791][T14568] bridge_slave_1: entered allmulticast mode [ 1106.808144][T14568] bridge_slave_1: entered promiscuous mode [ 1106.863786][T14665] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1106.863814][T14665] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1106.863912][T14665] vhci_hcd vhci_hcd.0: Device attached [ 1107.092261][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.104162][ T5886] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1107.143713][T11712] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1107.149384][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.223130][T14568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.253782][T14317] Bluetooth: hci0: command tx timeout [ 1107.265698][ T5886] usb 8-1: config 0 has no interfaces? [ 1107.265733][ T5886] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1107.265753][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.271593][ T5886] usb 8-1: config 0 descriptor?? [ 1107.320090][T14568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.325584][T14558] team0: Port device team_slave_0 added [ 1107.362790][T14558] team0: Port device team_slave_1 added [ 1107.490893][T14667] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 1107.492995][ T5972] vhci_hcd vhci_hcd.7: stop threads [ 1107.493013][ T5972] vhci_hcd vhci_hcd.7: release socket [ 1107.493085][ T5972] vhci_hcd vhci_hcd.7: disconnect device [ 1107.628437][T14568] team0: Port device team_slave_0 added [ 1107.700715][T14568] team0: Port device team_slave_1 added [ 1107.736490][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.736508][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.736534][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.741217][T14485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.757980][T14370] veth0_vlan: entered promiscuous mode [ 1107.789746][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.789763][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.789787][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.904495][T14568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.904512][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.904537][T14568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.941094][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.941341][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.951162][T14568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.951178][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.951203][T14568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.036639][ T5784] usb 8-1: USB disconnect, device number 11 [ 1108.161637][T14370] veth1_vlan: entered promiscuous mode [ 1108.169637][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.169773][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.204966][T14558] hsr_slave_0: entered promiscuous mode [ 1108.206305][T14558] hsr_slave_1: entered promiscuous mode [ 1108.207231][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 1108.207255][T14558] Cannot create hsr debugfs directory [ 1108.641873][T14568] hsr_slave_0: entered promiscuous mode [ 1108.643241][T14568] hsr_slave_1: entered promiscuous mode [ 1108.646487][T14568] debugfs: 'hsr0' already exists in 'hsr' [ 1108.646513][T14568] Cannot create hsr debugfs directory [ 1109.347145][T14317] Bluetooth: hci0: command tx timeout [ 1110.738088][T14718] nvme_fabrics: missing parameter 'transport=%s' [ 1110.738107][T14718] nvme_fabrics: missing parameter 'nqn=%s' [ 1111.035500][T14722] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2331'. [ 1111.393728][ T5784] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1111.583980][ T5784] usb 8-1: Using ep0 maxpacket: 16 [ 1111.587860][ T5784] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.587892][ T5784] usb 8-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.587914][ T5784] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1111.587945][ T5784] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1111.587966][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.596141][ T5784] usb 8-1: config 0 descriptor?? [ 1112.016415][T14370] veth0_macvtap: entered promiscuous mode [ 1112.073691][ T5784] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.7-1/input0 [ 1112.115880][T14370] veth1_macvtap: entered promiscuous mode [ 1112.264031][ T5784] usb 8-1: USB disconnect, device number 12 [ 1112.285685][T11712] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1112.492089][T14370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.578521][T14370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.620363][ T8139] bridge_slave_1: left allmulticast mode [ 1112.620391][ T8139] bridge_slave_1: left promiscuous mode [ 1112.620636][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.704747][ T8139] bridge_slave_0: left allmulticast mode [ 1112.704782][ T8139] bridge_slave_0: left promiscuous mode [ 1112.705043][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.797635][ T8139] bridge_slave_1: left allmulticast mode [ 1112.797664][ T8139] bridge_slave_1: left promiscuous mode [ 1112.797890][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.905306][ T8139] bridge_slave_0: left allmulticast mode [ 1112.905326][ T8139] bridge_slave_0: left promiscuous mode [ 1112.905482][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.379823][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1114.382742][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1114.401021][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1114.402129][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1114.410197][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1114.444436][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.514167][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.535875][ T8139] bond0 (unregistering): Released all slaves [ 1115.764547][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.824927][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.846385][ T8139] bond0 (unregistering): Released all slaves [ 1115.901813][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.901881][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.184163][ T5972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.190867][ T5972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.212864][ T5972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.266011][ T5972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.511966][T14317] Bluetooth: hci3: command tx timeout [ 1118.533936][T14317] Bluetooth: hci3: command tx timeout [ 1120.614142][T14317] Bluetooth: hci3: command tx timeout [ 1120.792999][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2336'. [ 1121.428823][T14485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.760713][T14783] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2338'. [ 1121.814253][ T8139] hsr_slave_0: left promiscuous mode [ 1121.853724][ T8139] hsr_slave_1: left promiscuous mode [ 1121.854546][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.876890][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.033700][ T8139] hsr_slave_0: left promiscuous mode [ 1122.056309][ T8139] hsr_slave_1: left promiscuous mode [ 1122.057142][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.094325][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.693962][T14317] Bluetooth: hci3: command tx timeout [ 1123.334415][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1123.604360][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1126.435856][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1126.725017][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1128.872089][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2339'. [ 1130.336751][T14764] chnl_net:caif_netlink_parms(): no params data found [ 1130.407838][T14485] veth0_vlan: entered promiscuous mode [ 1130.510838][T14485] veth1_vlan: entered promiscuous mode [ 1130.683906][T14764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.684049][T14764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.684297][T14764] bridge_slave_0: entered allmulticast mode [ 1130.686181][T14764] bridge_slave_0: entered promiscuous mode [ 1130.729565][T14764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.743984][T14764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.744239][T14764] bridge_slave_1: entered allmulticast mode [ 1130.767388][T14764] bridge_slave_1: entered promiscuous mode [ 1131.054318][T14764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.060590][T14764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.119363][T14764] team0: Port device team_slave_0 added [ 1131.122010][T14764] team0: Port device team_slave_1 added [ 1131.349728][T14764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.349745][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.349770][T14764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.575535][T14764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.575547][T14764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.575561][T14764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.638501][T14485] veth0_macvtap: entered promiscuous mode [ 1131.928573][T14485] veth1_macvtap: entered promiscuous mode [ 1132.281090][T14764] hsr_slave_0: entered promiscuous mode [ 1132.281879][T14764] hsr_slave_1: entered promiscuous mode [ 1132.282416][T14764] debugfs: 'hsr0' already exists in 'hsr' [ 1132.282432][T14764] Cannot create hsr debugfs directory [ 1132.468132][T14485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.473878][T14558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1132.659765][T14558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1132.750099][T14558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1132.829049][T14485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.009545][T14558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1133.271531][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.315775][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.435025][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.490412][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.751654][ T8139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.893517][T14568] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1133.948132][T14568] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1134.156868][ T8139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.206104][T14568] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1134.298383][T14568] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1134.560146][ T8139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.878572][ T8139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.089737][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.089759][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.920362][ T5972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.920381][ T5972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.350257][T14856] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2345'. [ 1136.480613][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.505680][ T8139] bridge_slave_1: left allmulticast mode [ 1136.505709][ T8139] bridge_slave_1: left promiscuous mode [ 1136.506039][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.595275][ T8139] bridge_slave_0: left allmulticast mode [ 1136.595304][ T8139] bridge_slave_0: left promiscuous mode [ 1136.595547][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.355925][ T806] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1137.563713][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 1137.569672][ T806] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.569701][ T806] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.569722][ T806] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1137.569754][ T806] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1137.569775][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.577992][ T806] usb 3-1: config 0 descriptor?? [ 1138.049394][ T806] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1138.296291][ T9512] usb 3-1: USB disconnect, device number 35 [ 1138.386182][T14897] fido_id[14897]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1139.181908][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.256628][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.303902][ T8139] bond0 (unregistering): Released all slaves [ 1141.336219][ T8139] hsr_slave_0: left promiscuous mode [ 1141.375145][ T8139] hsr_slave_1: left promiscuous mode [ 1141.376356][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.376372][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.446989][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.447008][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.663437][ T8139] veth1_macvtap: left promiscuous mode [ 1141.676319][ T8139] veth0_macvtap: left promiscuous mode [ 1141.676603][ T8139] veth1_vlan: left promiscuous mode [ 1141.676771][ T8139] veth0_vlan: left promiscuous mode [ 1144.669480][T14979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2355'. [ 1146.714419][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1146.996841][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1149.656285][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.213885][ T6381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.214117][ T6381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.549340][T14568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.825305][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.825530][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.124969][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2359'. [ 1151.861252][T14568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.881740][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.904281][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.930807][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.930893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.517231][T14764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1153.553361][T14764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1154.214600][T14764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1154.398335][T15037] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2364'. [ 1154.605994][T14764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1155.897529][T14764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1156.010661][T14764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.067349][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.067503][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1156.157516][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.157654][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.184884][T14568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1156.411074][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1156.425398][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.437563][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.451049][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.453832][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.499113][T15062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2365'. [ 1158.172217][T15091] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2367'. [ 1158.534363][T14317] Bluetooth: hci1: command tx timeout [ 1162.256399][T14317] Bluetooth: hci1: command tx timeout [ 1163.749062][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1163.785709][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1163.794257][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1163.795333][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1163.796616][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1164.303844][ T5813] Bluetooth: hci1: command tx timeout [ 1164.375252][T14764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.500830][T15061] chnl_net:caif_netlink_parms(): no params data found [ 1165.893803][ T5813] Bluetooth: hci4: command tx timeout [ 1166.315228][ T1446] bridge_slave_1: left allmulticast mode [ 1166.315247][ T1446] bridge_slave_1: left promiscuous mode [ 1166.315428][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.383783][ T5813] Bluetooth: hci1: command tx timeout [ 1166.405598][ T1446] bridge_slave_0: left allmulticast mode [ 1166.405618][ T1446] bridge_slave_0: left promiscuous mode [ 1166.405784][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.502309][T15152] syz.7.2374 (15152): drop_caches: 2 [ 1168.606565][ T5813] Bluetooth: hci4: command tx timeout [ 1169.728392][T15184] blktrace: Concurrent blktraces are not allowed on sg0 [ 1170.076447][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.135562][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.162079][ T1446] bond0 (unregistering): Released all slaves [ 1170.594184][T15061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.594264][T15061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.594451][T15061] bridge_slave_0: entered allmulticast mode [ 1170.595882][T15061] bridge_slave_0: entered promiscuous mode [ 1170.708278][ T5813] Bluetooth: hci4: command tx timeout [ 1170.856257][ T1446] hsr_slave_0: left promiscuous mode [ 1170.894410][ T1446] hsr_slave_1: left promiscuous mode [ 1170.895529][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.938853][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.773650][ T5813] Bluetooth: hci4: command tx timeout [ 1173.445742][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 1174.068511][ T5813] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1174.069639][ T5813] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1174.540990][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 1174.679053][T14317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.679227][ T9512] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1174.682758][T14317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.685434][T14317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.687259][T14317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.688025][T14317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1174.823697][ T9512] usb 8-1: Using ep0 maxpacket: 16 [ 1174.832897][ T9512] usb 8-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1174.832924][ T9512] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1174.859985][ T9512] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1174.860014][ T9512] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.860032][ T9512] usb 8-1: Product: syz [ 1174.860044][ T9512] usb 8-1: Manufacturer: syz [ 1174.860057][ T9512] usb 8-1: SerialNumber: syz [ 1175.211355][ T9512] usb 8-1: 0:2 : does not exist [ 1175.225617][ T9512] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1175.259645][ T9512] usb 8-1: USB disconnect, device number 13 [ 1175.338162][T15217] udevd[15217]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1176.783698][ T5813] Bluetooth: hci0: command tx timeout [ 1178.034361][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.034432][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.107562][ T9512] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 1178.244989][T14317] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1178.245283][T14317] Bluetooth: hci5: Injecting HCI hardware error event [ 1178.252282][T14317] Bluetooth: hci5: hardware error 0x00 [ 1178.405523][ T9512] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1178.405552][ T9512] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.444449][ T9512] usb 8-1: config 0 descriptor?? [ 1178.549598][ T9512] usb 8-1: selecting invalid altsetting 3 [ 1178.549622][ T9512] comedi comedi5: could not set alternate setting 3 in high speed [ 1178.549635][ T9512] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1178.572863][ T9512] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1178.853731][ T5813] Bluetooth: hci0: command tx timeout [ 1179.474398][T15061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.474519][T15061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.474721][T15061] bridge_slave_1: entered allmulticast mode [ 1179.476257][T15061] bridge_slave_1: entered promiscuous mode [ 1179.517069][T15228] 8021q: VLANs not supported on vcan0 [ 1179.519395][ T806] usb 8-1: USB disconnect, device number 14 [ 1179.623710][ T5886] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1179.636716][T15061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.683692][T15061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.785152][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 1179.788887][T15061] team0: Port device team_slave_0 added [ 1179.804463][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.804488][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.806903][ T5886] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1179.806929][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.806947][ T5886] usb 3-1: Product: syz [ 1179.806959][ T5886] usb 3-1: Manufacturer: syz [ 1179.806971][ T5886] usb 3-1: SerialNumber: syz [ 1179.858472][T15133] chnl_net:caif_netlink_parms(): no params data found [ 1179.913499][T15061] team0: Port device team_slave_1 added [ 1180.102132][ T5886] usb 3-1: 0:2 : does not exist [ 1180.112542][ T5886] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1180.281110][ T5886] usb 3-1: USB disconnect, device number 36 [ 1180.396976][T15217] udevd[15217]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.453725][T14317] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1180.492533][T15061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.492550][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.492574][T15061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.615025][T15061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.615043][T15061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.615067][T15061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.296789][T14317] Bluetooth: hci0: command tx timeout [ 1181.559303][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2392'. [ 1183.586211][T14317] Bluetooth: hci0: command tx timeout [ 1183.953311][T15275] syz.7.2394 (15275): drop_caches: 2 [ 1184.098240][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.098432][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.098636][T15133] bridge_slave_0: entered allmulticast mode [ 1184.125257][T15133] bridge_slave_0: entered promiscuous mode [ 1184.231998][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.232116][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.232366][T15133] bridge_slave_1: entered allmulticast mode [ 1184.236488][T15133] bridge_slave_1: entered promiscuous mode [ 1184.275631][T15061] hsr_slave_0: entered promiscuous mode [ 1184.279206][T15061] hsr_slave_1: entered promiscuous mode [ 1184.280833][T15061] debugfs: 'hsr0' already exists in 'hsr' [ 1184.280861][T15061] Cannot create hsr debugfs directory [ 1184.554737][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.714627][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1185.796712][ T5813] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1186.728588][T15311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2399'. [ 1187.620421][T15133] team0: Port device team_slave_0 added [ 1187.698271][T15133] team0: Port device team_slave_1 added [ 1189.264974][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.264992][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.265016][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.294045][T15243] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1189.360200][T15218] chnl_net:caif_netlink_parms(): no params data found [ 1189.473725][T15243] usb 3-1: Using ep0 maxpacket: 16 [ 1189.476895][T15243] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.476924][T15243] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.476945][T15243] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1189.476974][T15243] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1189.476994][T15243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.481517][T15243] usb 3-1: config 0 descriptor?? [ 1189.636835][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.636852][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.636878][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.814623][ T5813] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1189.815095][ T5813] Bluetooth: hci2: Injecting HCI hardware error event [ 1189.820216][T14317] Bluetooth: hci2: hardware error 0x00 [ 1190.011276][T15243] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1190.272611][ T9512] usb 3-1: USB disconnect, device number 37 [ 1190.889877][T15133] hsr_slave_0: entered promiscuous mode [ 1190.910491][T15133] hsr_slave_1: entered promiscuous mode [ 1190.921363][T15133] debugfs: 'hsr0' already exists in 'hsr' [ 1190.921390][T15133] Cannot create hsr debugfs directory [ 1191.507400][ T5813] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1191.507497][ T5813] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1191.675370][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.676501][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.678908][T15218] bridge_slave_0: entered allmulticast mode [ 1192.027343][T15218] bridge_slave_0: entered promiscuous mode [ 1192.212690][T14317] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1192.435700][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.435846][T15218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.436077][T15218] bridge_slave_1: entered allmulticast mode [ 1192.439503][T15218] bridge_slave_1: entered promiscuous mode [ 1192.932116][T15218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.164935][T15218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.461898][T15218] team0: Port device team_slave_0 added [ 1193.665580][T15218] team0: Port device team_slave_1 added [ 1194.848931][T15414] syz.2.2408 (15414): drop_caches: 2 [ 1194.874706][T15218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.874723][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.874748][T15218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.078825][T15218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.078842][T15218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.078867][T15218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.541017][T15218] hsr_slave_0: entered promiscuous mode [ 1195.542231][T15218] hsr_slave_1: entered promiscuous mode [ 1195.543050][T15218] debugfs: 'hsr0' already exists in 'hsr' [ 1195.543066][T15218] Cannot create hsr debugfs directory [ 1196.399967][T15424] blktrace: Concurrent blktraces are not allowed on sg0 [ 1196.653768][T11712] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1196.733459][T15061] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1196.834829][T11712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.834847][T11712] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1196.834867][T11712] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1196.834878][T11712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.837700][T11712] usb 3-1: config 0 descriptor?? [ 1196.868820][T15061] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1197.234961][T15061] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1197.335078][T15061] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1198.369302][ T1446] bridge_slave_1: left allmulticast mode [ 1198.369323][ T1446] bridge_slave_1: left promiscuous mode [ 1198.369475][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.514893][ T1446] bridge_slave_0: left allmulticast mode [ 1198.514921][ T1446] bridge_slave_0: left promiscuous mode [ 1198.515163][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.668422][ T1446] bridge_slave_1: left allmulticast mode [ 1198.668452][ T1446] bridge_slave_1: left promiscuous mode [ 1198.668702][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.747556][ T1446] bridge_slave_0: left allmulticast mode [ 1198.747583][ T1446] bridge_slave_0: left promiscuous mode [ 1198.747825][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.812482][ T9512] usb 3-1: USB disconnect, device number 38 [ 1202.484882][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.534940][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.557747][ T1446] bond0 (unregistering): Released all slaves [ 1203.644293][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.694408][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.716435][ T1446] bond0 (unregistering): Released all slaves [ 1205.432540][T15480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2417'. [ 1207.269618][ T1446] hsr_slave_0: left promiscuous mode [ 1207.307844][ T1446] hsr_slave_1: left promiscuous mode [ 1207.308808][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.344443][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.399064][T15488] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1207.399083][T15488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1207.408170][T15488] vhci_hcd vhci_hcd.0: Device attached [ 1207.516169][ T1446] hsr_slave_0: left promiscuous mode [ 1207.538895][ T1446] hsr_slave_1: left promiscuous mode [ 1207.539867][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.596031][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.543779][T15244] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 1208.554368][ T6005] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1208.747836][ T6005] usb 8-1: config 0 has no interfaces? [ 1208.747882][ T6005] usb 8-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1208.747904][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.768420][ T6005] usb 8-1: config 0 descriptor?? [ 1208.991059][T15489] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 1209.015481][ T1006] vhci_hcd vhci_hcd.7: stop threads [ 1209.015494][ T1006] vhci_hcd vhci_hcd.7: release socket [ 1209.017776][ T1006] vhci_hcd vhci_hcd.7: disconnect device [ 1209.496984][ T9512] usb 8-1: USB disconnect, device number 15 [ 1213.594581][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 1213.653898][T15244] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1214.296039][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 1216.998617][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1217.004963][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1217.026924][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1217.038708][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1217.039841][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1217.854273][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 1218.126020][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 1219.093707][T14317] Bluetooth: hci3: command tx timeout [ 1221.143639][ T9512] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1221.173805][T14317] Bluetooth: hci3: command tx timeout [ 1221.353707][ T9512] usb 8-1: Using ep0 maxpacket: 16 [ 1221.358140][ T9512] usb 8-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 1221.358166][ T9512] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1221.360494][ T9512] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1221.360523][ T9512] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.360542][ T9512] usb 8-1: Product: syz [ 1221.360554][ T9512] usb 8-1: Manufacturer: syz [ 1221.360567][ T9512] usb 8-1: SerialNumber: syz [ 1221.621177][ T9512] usb 8-1: 0:2 : does not exist [ 1221.638964][ T9512] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1221.702445][ T9512] usb 8-1: USB disconnect, device number 16 [ 1221.922161][T15526] udevd[15526]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.420212][T14317] Bluetooth: hci3: command tx timeout [ 1223.823157][T15523] chnl_net:caif_netlink_parms(): no params data found [ 1224.325648][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.325767][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.326023][T15523] bridge_slave_0: entered allmulticast mode [ 1224.390986][T15523] bridge_slave_0: entered promiscuous mode [ 1224.455192][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.455319][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.455594][T15523] bridge_slave_1: entered allmulticast mode [ 1224.458317][T15523] bridge_slave_1: entered promiscuous mode [ 1224.638723][T14317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1224.654187][T14317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1224.658615][T14317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1224.684746][T14317] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1224.689854][T14317] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1224.773474][T15523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.073348][T15523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.370281][T15576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2436'. [ 1225.494432][T14317] Bluetooth: hci3: command tx timeout [ 1226.365325][T15523] team0: Port device team_slave_0 added [ 1226.689833][T15523] team0: Port device team_slave_1 added [ 1226.842415][T14317] Bluetooth: hci1: command tx timeout [ 1227.864962][T15523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.864975][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.864988][T15523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.884544][T15523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.884559][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.884578][T15523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.691272][T15586] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2438'. [ 1229.573909][T14317] Bluetooth: hci1: command tx timeout [ 1230.125542][T15523] hsr_slave_0: entered promiscuous mode [ 1230.126914][T15523] hsr_slave_1: entered promiscuous mode [ 1230.127901][T15523] debugfs: 'hsr0' already exists in 'hsr' [ 1230.127924][T15523] Cannot create hsr debugfs directory [ 1231.376397][T15218] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1231.671129][ T5813] Bluetooth: hci1: command tx timeout [ 1232.046020][T15218] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1232.750330][T15218] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1232.847238][T15218] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1233.734505][ T5813] Bluetooth: hci1: command tx timeout [ 1234.299990][T15564] chnl_net:caif_netlink_parms(): no params data found [ 1234.424047][T15218] kthread_run failed with err -4 [ 1234.553933][T13126] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1234.736043][T13126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.736074][T13126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.737692][T13126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1234.737719][T13126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1234.737739][T13126] usb 3-1: SerialNumber: syz [ 1235.040815][T13126] usb 3-1: 0:2 : does not exist [ 1235.046459][T13126] usb 3-1: 0:0: failed to get current value for ch 0 (-22) [ 1235.164240][T13126] usb 3-1: USB disconnect, device number 39 [ 1235.306916][T15615] udevd[15615]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.467566][T14317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1235.472294][T14317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1235.475967][T14317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1235.544503][T14317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1235.550450][T14317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1235.867008][T15625] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2445'. [ 1238.282359][ T5813] Bluetooth: hci0: command tx timeout [ 1238.380577][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2447'. [ 1238.917030][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.917098][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.451367][T15564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.451469][T15564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.451669][T15564] bridge_slave_0: entered allmulticast mode [ 1239.475759][T15564] bridge_slave_0: entered promiscuous mode [ 1239.516223][T15564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.523410][T15564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.524413][T15564] bridge_slave_1: entered allmulticast mode [ 1239.551433][T15564] bridge_slave_1: entered promiscuous mode [ 1240.199253][T15564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.296629][ T5813] Bluetooth: hci0: command tx timeout [ 1240.548416][T15564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.076996][T15564] team0: Port device team_slave_0 added [ 1241.111080][T15564] team0: Port device team_slave_1 added [ 1244.793792][ T5813] Bluetooth: hci0: command tx timeout [ 1245.904806][T15564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1245.904824][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.904849][T15564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1245.977472][T15564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1245.977490][T15564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1245.977516][T15564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.113758][ T1446] bridge_slave_1: left allmulticast mode [ 1246.113782][ T1446] bridge_slave_1: left promiscuous mode [ 1246.114498][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.185502][ T1446] bridge_slave_0: left allmulticast mode [ 1246.185539][ T1446] bridge_slave_0: left promiscuous mode [ 1246.185831][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.334802][T15662] Bluetooth: MGMT ver 1.23 [ 1246.659866][ T1446] bridge_slave_1: left allmulticast mode [ 1246.659887][ T1446] bridge_slave_1: left promiscuous mode [ 1246.660046][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.734567][ T1446] bridge_slave_0: left allmulticast mode [ 1246.734587][ T1446] bridge_slave_0: left promiscuous mode [ 1246.734749][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.854632][ T5813] Bluetooth: hci0: command tx timeout [ 1247.414473][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.494664][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.574186][ T1446] bond0 (unregistering): Released all slaves [ 1249.554651][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.681681][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.736195][ T1446] bond0 (unregistering): Released all slaves [ 1249.928832][T15681] SQUASHFS error: Failed to read block 0x0: -5 [ 1249.928869][T15681] unable to read squashfs_super_block [ 1250.105388][T15564] hsr_slave_0: entered promiscuous mode [ 1250.111140][T15564] hsr_slave_1: entered promiscuous mode [ 1250.111819][T15564] debugfs: 'hsr0' already exists in 'hsr' [ 1250.111835][T15564] Cannot create hsr debugfs directory [ 1250.144726][T15523] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1250.232926][T15523] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1250.315499][T15523] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1250.441296][T15523] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1250.533877][T15689] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1251.044831][ T1446] hsr_slave_0: left promiscuous mode [ 1251.063780][ T1446] hsr_slave_1: left promiscuous mode [ 1251.065335][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.104884][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.293721][ T1446] hsr_slave_0: left promiscuous mode [ 1251.313786][ T1446] hsr_slave_1: left promiscuous mode [ 1251.314418][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.355332][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.614509][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 1252.784929][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 1254.069401][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 1254.244361][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 1255.204239][T15617] chnl_net:caif_netlink_parms(): no params data found [ 1257.725090][T15617] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.726775][T15617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.727043][T15617] bridge_slave_0: entered allmulticast mode [ 1257.767222][T15617] bridge_slave_0: entered promiscuous mode [ 1257.860044][T15617] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.860184][T15617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.860449][T15617] bridge_slave_1: entered allmulticast mode [ 1257.871140][T15617] bridge_slave_1: entered promiscuous mode [ 1258.218357][T15617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.286739][T15617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.722115][T15736] 8021q: VLANs not supported on vcan0 [ 1258.891627][T15617] team0: Port device team_slave_0 added [ 1258.993615][T13126] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1259.095888][T15617] team0: Port device team_slave_1 added [ 1259.191697][T13126] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1259.191727][T13126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.198171][T13126] usb 8-1: config 0 descriptor?? [ 1259.320180][T15617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.320196][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.320218][T15617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.343856][T15523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.362861][T15617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.362880][T15617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1259.362915][T15617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.432681][T13126] usb 8-1: selecting invalid altsetting 3 [ 1259.432705][T13126] comedi comedi5: could not set alternate setting 3 in high speed [ 1259.432719][T13126] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1259.452049][T13126] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1259.554736][T15617] hsr_slave_0: entered promiscuous mode [ 1259.556049][T15617] hsr_slave_1: entered promiscuous mode [ 1259.557296][T15617] debugfs: 'hsr0' already exists in 'hsr' [ 1259.557321][T15617] Cannot create hsr debugfs directory [ 1259.565458][T13126] usb 8-1: USB disconnect, device number 17 [ 1259.937884][T15523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.022020][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.026604][ T8139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.103720][T15476] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1260.107815][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.107921][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.108917][T15564] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1260.197615][T15564] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1261.554030][T15476] usb 3-1: Using ep0 maxpacket: 16 [ 1261.572843][T15476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.572862][T15476] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1261.572887][T15476] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1261.572899][T15476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.706762][T15476] usb 3-1: config 0 descriptor?? [ 1261.777231][T15564] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1261.979865][T15564] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1262.141663][T15476] usbhid 3-1:0.0: can't add hid device: -71 [ 1262.141783][T15476] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1262.160971][T15476] usb 3-1: USB disconnect, device number 40 [ 1263.503850][T15758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'. [ 1265.492521][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2477'. [ 1268.428542][T15564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.837269][T15564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.888200][ T8139] bridge_slave_1: left allmulticast mode [ 1268.888226][ T8139] bridge_slave_1: left promiscuous mode [ 1268.888474][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.975260][ T8139] bridge_slave_0: left allmulticast mode [ 1268.975290][ T8139] bridge_slave_0: left promiscuous mode [ 1268.975568][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.678289][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 1270.717965][T15801] blktrace: Concurrent blktraces are not allowed on sg0 [ 1270.794129][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.854299][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.896050][ T8139] bond0 (unregistering): Released all slaves [ 1270.953668][T15476] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1271.267139][T15476] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.267156][T15476] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.267181][T15476] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.267193][T15476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.271978][T15476] usb 8-1: config 0 descriptor?? [ 1271.417748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.417870][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.457782][T15523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.921886][ T8139] hsr_slave_0: left promiscuous mode [ 1271.953669][ T8139] hsr_slave_1: left promiscuous mode [ 1271.954391][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.005987][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.654283][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1272.794093][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1273.600713][T15476] usb 8-1: USB disconnect, device number 18 [ 1274.526090][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.526196][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.203742][ T36] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1276.446198][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 1276.972404][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.972433][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1276.972472][ T36] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1276.972492][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.016847][ T36] usb 3-1: config 0 descriptor?? [ 1277.104703][T15523] veth0_vlan: entered promiscuous mode [ 1277.559272][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 1277.559388][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1277.588235][ T36] usb 3-1: USB disconnect, device number 41 [ 1277.752745][T15564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.200962][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2492'. [ 1278.620032][T15843] binder_alloc: 15842: binder_alloc_buf, no vma [ 1280.003915][T15849] binder_alloc: 15842: binder_alloc_buf, no vma [ 1280.092235][T14317] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1280.121896][T14317] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1280.178420][T14317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1280.197254][T14317] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1280.210770][T14317] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1281.571058][T15617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1281.739126][T15617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1281.753626][ T6005] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1281.804853][T15617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1281.913684][ T6005] usb 3-1: Using ep0 maxpacket: 32 [ 1281.921567][ T6005] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.944071][ T6005] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1281.944098][ T6005] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1281.944115][ T6005] usb 3-1: Product: syz [ 1281.944134][ T6005] usb 3-1: Manufacturer: syz [ 1281.986537][ T6005] hub 3-1:4.0: bad descriptor, ignoring hub [ 1281.986574][ T6005] hub 3-1:4.0: probe with driver hub failed with error -5 [ 1281.989661][ T6005] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 1282.299863][T15617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1282.453828][T14317] Bluetooth: hci3: command tx timeout [ 1284.533857][T14317] Bluetooth: hci3: command tx timeout [ 1284.679627][T15850] chnl_net:caif_netlink_parms(): no params data found [ 1284.692408][ T9] usb 3-1: USB disconnect, device number 42 [ 1285.014324][T15850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.014512][T15850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.014731][T15850] bridge_slave_0: entered allmulticast mode [ 1285.017509][T15850] bridge_slave_0: entered promiscuous mode [ 1285.035362][T15850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.035477][T15850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.035735][T15850] bridge_slave_1: entered allmulticast mode [ 1285.038246][T15850] bridge_slave_1: entered promiscuous mode [ 1285.737405][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1285.748002][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1285.755675][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1285.772115][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1285.782376][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1286.004375][ T8139] bridge_slave_1: left allmulticast mode [ 1286.004393][ T8139] bridge_slave_1: left promiscuous mode [ 1286.004989][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.076132][ T8139] bridge_slave_0: left allmulticast mode [ 1286.076151][ T8139] bridge_slave_0: left promiscuous mode [ 1286.076298][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.613698][ T5813] Bluetooth: hci3: command tx timeout [ 1287.974169][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.983818][ T5813] Bluetooth: hci1: command tx timeout [ 1288.056116][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.097560][ T8139] bond0 (unregistering): Released all slaves [ 1288.135056][T15850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.157933][T15850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.298326][T15850] team0: Port device team_slave_0 added [ 1288.310029][T15850] team0: Port device team_slave_1 added [ 1288.457228][T15617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.469132][T15899] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2502'. [ 1288.717887][ T5813] Bluetooth: hci3: command tx timeout [ 1289.264597][ T8139] hsr_slave_0: left promiscuous mode [ 1289.283712][ T8139] hsr_slave_1: left promiscuous mode [ 1289.284765][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.377821][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.475817][ T8139] veth0_vlan: left promiscuous mode [ 1290.053946][ T5813] Bluetooth: hci1: command tx timeout [ 1292.173553][ T5813] Bluetooth: hci1: command tx timeout [ 1294.215361][ T5813] Bluetooth: hci1: command tx timeout [ 1295.554221][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1295.863772][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1295.949940][T15927] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2509'. [ 1296.864630][T14317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1296.912247][T14317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1296.923767][T14317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1296.957715][T14317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1296.984662][T14317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1298.443778][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1298.635646][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.635673][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.636744][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1298.636767][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1298.636785][ T9] usb 8-1: SerialNumber: syz [ 1298.850813][ T9] usb 8-1: 0:2 : does not exist [ 1298.907005][ T9] usb 8-1: USB disconnect, device number 19 [ 1298.998799][T15789] udevd[15789]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.093862][T14317] Bluetooth: hci4: command tx timeout [ 1300.774200][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.774268][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.181605][T14317] Bluetooth: hci4: command tx timeout [ 1301.335132][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1301.371733][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1301.498432][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1301.500004][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1301.500737][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1302.214252][T15850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.214270][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.214295][T15850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.553665][ T5813] Bluetooth: hci4: command tx timeout [ 1303.699861][T14317] Bluetooth: hci6: command tx timeout [ 1303.758447][T15958] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2517'. [ 1303.785813][T15850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.785827][T15850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.785842][T15850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1304.426157][T15850] hsr_slave_0: entered promiscuous mode [ 1304.432548][T15850] hsr_slave_1: entered promiscuous mode [ 1304.434296][T15850] debugfs: 'hsr0' already exists in 'hsr' [ 1304.434324][T15850] Cannot create hsr debugfs directory [ 1306.773564][T14317] Bluetooth: hci4: command tx timeout [ 1306.773600][ T5813] Bluetooth: hci6: command tx timeout [ 1307.282402][T15890] chnl_net:caif_netlink_parms(): no params data found [ 1307.395262][T15949] chnl_net:caif_netlink_parms(): no params data found [ 1308.176404][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2521'. [ 1308.854122][ T5813] Bluetooth: hci6: command tx timeout [ 1309.236190][T15929] chnl_net:caif_netlink_parms(): no params data found [ 1309.837728][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.838046][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.838213][T15890] bridge_slave_0: entered allmulticast mode [ 1309.839708][T15890] bridge_slave_0: entered promiscuous mode [ 1310.072303][T16034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2524'. [ 1310.116677][T15949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.116911][T15949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.117152][T15949] bridge_slave_0: entered allmulticast mode [ 1310.118605][T15949] bridge_slave_0: entered promiscuous mode [ 1310.120873][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.120993][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.121165][T15890] bridge_slave_1: entered allmulticast mode [ 1310.122981][T15890] bridge_slave_1: entered promiscuous mode [ 1310.184605][T15949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.184747][T15949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.184995][T15949] bridge_slave_1: entered allmulticast mode [ 1310.187154][T15949] bridge_slave_1: entered promiscuous mode [ 1310.922055][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.934071][T15929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.934247][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.934317][ T5813] Bluetooth: hci6: command tx timeout [ 1310.934783][T15929] bridge_slave_0: entered allmulticast mode [ 1310.936921][T15929] bridge_slave_0: entered promiscuous mode [ 1310.947538][T15949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1310.967219][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.968145][T15929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.968276][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.968496][T15929] bridge_slave_1: entered allmulticast mode [ 1310.971124][T15929] bridge_slave_1: entered promiscuous mode [ 1310.977239][T15949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.147237][T15890] team0: Port device team_slave_0 added [ 1311.437633][T15929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.445898][T15949] team0: Port device team_slave_0 added [ 1311.456641][T15890] team0: Port device team_slave_1 added [ 1312.470804][T15929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.476943][T15949] team0: Port device team_slave_1 added [ 1312.692571][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.692584][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.692597][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.697118][T15929] team0: Port device team_slave_0 added [ 1312.706698][T15949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.706715][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.706739][T15949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.738298][T15929] team0: Port device team_slave_1 added [ 1312.739374][T15949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.739385][T15949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.739408][T15949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.825432][T15850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1312.943107][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.943119][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.943134][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.987850][T15850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1313.032690][T15929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.032702][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.032724][T15929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.038664][T15850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1313.173979][T15929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.173995][T15929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1313.174018][T15929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.187650][T15850] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1313.388214][T15949] hsr_slave_0: entered promiscuous mode [ 1313.391292][T15949] hsr_slave_1: entered promiscuous mode [ 1313.391889][T15949] debugfs: 'hsr0' already exists in 'hsr' [ 1313.391906][T15949] Cannot create hsr debugfs directory [ 1313.529303][T15890] hsr_slave_0: entered promiscuous mode [ 1313.531429][T15890] hsr_slave_1: entered promiscuous mode [ 1313.532843][T15890] debugfs: 'hsr0' already exists in 'hsr' [ 1313.532860][T15890] Cannot create hsr debugfs directory [ 1313.841387][T15929] hsr_slave_0: entered promiscuous mode [ 1313.849848][T15929] hsr_slave_1: entered promiscuous mode [ 1313.851461][T15929] debugfs: 'hsr0' already exists in 'hsr' [ 1313.851478][T15929] Cannot create hsr debugfs directory [ 1314.190459][ T8139] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.616269][ T8139] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.994670][ T8139] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.326202][ T8139] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.593968][T15476] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1316.750565][T15850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1316.789721][T15476] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.789739][T15476] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1316.791757][T15476] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1316.791774][T15476] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1316.791784][T15476] usb 8-1: SerialNumber: syz [ 1317.048955][T15476] usb 8-1: 0:2 : does not exist [ 1317.049036][T15476] usb 8-1: unit 5 not found! [ 1317.119559][T15476] usb 8-1: USB disconnect, device number 20 [ 1317.170536][T15789] udevd[15789]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.201036][T15850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.219894][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.220670][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.458108][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.458209][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.689491][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2531'. [ 1318.869466][T15850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.773038][ T8139] bridge_slave_1: left allmulticast mode [ 1319.773065][ T8139] bridge_slave_1: left promiscuous mode [ 1319.803732][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.875960][ T8139] bridge_slave_0: left allmulticast mode [ 1319.875987][ T8139] bridge_slave_0: left promiscuous mode [ 1319.876244][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.966670][ T8139] bridge_slave_1: left allmulticast mode [ 1319.966691][ T8139] bridge_slave_1: left promiscuous mode [ 1319.966847][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.046478][ T8139] bridge_slave_0: left allmulticast mode [ 1320.046507][ T8139] bridge_slave_0: left promiscuous mode [ 1320.046745][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.139964][ T8139] bridge_slave_1: left allmulticast mode [ 1320.139993][ T8139] bridge_slave_1: left promiscuous mode [ 1320.140230][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.344610][ T8139] bridge_slave_0: left allmulticast mode [ 1320.344631][ T8139] bridge_slave_0: left promiscuous mode [ 1320.344796][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.594301][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.684559][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.781759][ T8139] bond0 (unregistering): Released all slaves [ 1325.176488][T16146] syz.7.2545 (16146): drop_caches: 2 [ 1326.924505][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.987328][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.005959][ T8139] bond0 (unregistering): Released all slaves [ 1328.193691][T15243] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1328.406586][T15243] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.406611][T15243] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1328.406635][T15243] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1328.406647][T15243] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.498816][T15243] usb 8-1: config 0 descriptor?? [ 1328.641907][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.706258][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.749147][ T8139] bond0 (unregistering): Released all slaves [ 1329.068655][T15850] veth0_vlan: entered promiscuous mode [ 1329.384733][T15850] veth1_vlan: entered promiscuous mode [ 1329.537646][T15850] veth0_macvtap: entered promiscuous mode [ 1329.552424][T15850] veth1_macvtap: entered promiscuous mode [ 1330.415207][T15850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.495498][T15850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.881081][T13758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.885999][T13758] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.886640][T13758] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.887296][T13758] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.961785][ T5879] usb 8-1: USB disconnect, device number 21 [ 1331.104982][ T8139] hsr_slave_0: left promiscuous mode [ 1331.146584][ T8139] hsr_slave_1: left promiscuous mode [ 1331.147597][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.161376][T16176] SQUASHFS error: Failed to read block 0x0: -5 [ 1331.161429][T16176] unable to read squashfs_super_block [ 1331.206012][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.743813][ T8139] hsr_slave_0: left promiscuous mode [ 1331.791179][ T8139] hsr_slave_1: left promiscuous mode [ 1331.792160][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.792183][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.836836][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.836855][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.918829][T16182] syz.7.2552 (16182): drop_caches: 2 [ 1332.003778][ T8139] hsr_slave_0: left promiscuous mode [ 1332.024431][ T8139] hsr_slave_1: left promiscuous mode [ 1332.025381][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1332.074857][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.344816][ T8139] veth1_macvtap: left promiscuous mode [ 1332.344921][ T8139] veth0_macvtap: left promiscuous mode [ 1332.345526][ T8139] veth1_vlan: left promiscuous mode [ 1332.345720][ T8139] veth0_vlan: left promiscuous mode [ 1334.705311][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1334.844387][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1338.514145][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1338.754347][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1338.881174][T14355] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1338.941560][T14355] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1338.952429][T14355] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1339.003375][T14355] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1339.011364][T14355] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1341.204196][T14355] Bluetooth: hci0: command tx timeout [ 1343.095535][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1343.295603][T14355] Bluetooth: hci0: command tx timeout [ 1343.334203][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1345.353742][T14355] Bluetooth: hci0: command tx timeout [ 1346.745187][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1346.755656][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1346.763902][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1346.892723][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1346.903752][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1347.427036][T14355] Bluetooth: hci0: command tx timeout [ 1348.455851][T16188] chnl_net:caif_netlink_parms(): no params data found [ 1349.139744][T14355] Bluetooth: hci2: command tx timeout [ 1349.633115][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.633291][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.633663][T16188] bridge_slave_0: entered allmulticast mode [ 1349.667143][T16188] bridge_slave_0: entered promiscuous mode [ 1349.726269][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.726464][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.726716][T16188] bridge_slave_1: entered allmulticast mode [ 1349.729669][T16188] bridge_slave_1: entered promiscuous mode [ 1349.839228][T16203] chnl_net:caif_netlink_parms(): no params data found [ 1349.862514][T15949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1349.893028][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.917387][T15949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1349.955466][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.035541][T15949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1350.125068][T15949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1350.292619][T16188] team0: Port device team_slave_0 added [ 1350.316057][T16188] team0: Port device team_slave_1 added [ 1350.651141][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.651153][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.651167][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.656362][T16203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.657186][T16203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.657393][T16203] bridge_slave_0: entered allmulticast mode [ 1350.659861][T16203] bridge_slave_0: entered promiscuous mode [ 1350.674612][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.674630][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1350.674654][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.676881][T16203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.676997][T16203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.677217][T16203] bridge_slave_1: entered allmulticast mode [ 1350.764747][T16203] bridge_slave_1: entered promiscuous mode [ 1350.956808][T16203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.048502][T16203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.145191][T16188] hsr_slave_0: entered promiscuous mode [ 1351.146071][T16188] hsr_slave_1: entered promiscuous mode [ 1351.226141][T14355] Bluetooth: hci2: command tx timeout [ 1352.322368][T16203] team0: Port device team_slave_0 added [ 1352.780148][T16257] SQUASHFS error: Failed to read block 0x0: -5 [ 1352.780182][T16257] unable to read squashfs_super_block [ 1352.876561][T16203] team0: Port device team_slave_1 added [ 1353.025285][T16260] syz.7.2559 (16260): drop_caches: 2 [ 1353.253806][T14355] Bluetooth: hci2: command tx timeout [ 1353.399762][T16203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.399776][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.399791][T16203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.447450][T16203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.447468][T16203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.447493][T16203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.612142][T15929] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1353.648902][T16262] 8021q: VLANs not supported on vcan0 [ 1353.667317][T15929] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1353.749637][T15929] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1353.813379][T15929] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1353.888157][T16203] hsr_slave_0: entered promiscuous mode [ 1353.889020][T16203] hsr_slave_1: entered promiscuous mode [ 1353.889602][T16203] debugfs: 'hsr0' already exists in 'hsr' [ 1353.889623][T16203] Cannot create hsr debugfs directory [ 1353.893729][ T9] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1354.050906][ T9] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1354.050934][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.073200][ T9] usb 8-1: config 0 descriptor?? [ 1354.095331][ T9] usb 8-1: selecting invalid altsetting 3 [ 1354.095355][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 1354.095370][ T9] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1354.098515][ T9] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1354.281870][ T9] usb 8-1: USB disconnect, device number 22 [ 1354.546083][T16188] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.922669][T16188] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1355.334152][T14355] Bluetooth: hci2: command tx timeout [ 1356.217288][T16188] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.605889][T16188] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.797561][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1356.823002][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1356.831985][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1356.841664][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1356.842547][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1356.901188][T15949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.979184][T16288] tipc: Started in network mode [ 1357.979216][T16288] tipc: Node identity 5ea3adbbed67, cluster identity 4711 [ 1357.979406][T16288] tipc: Enabled bearer , priority 0 [ 1358.030864][T16288] syzkaller0: entered promiscuous mode [ 1358.030890][T16288] syzkaller0: entered allmulticast mode [ 1358.061409][T15949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.127716][T16288] tipc: Resetting bearer [ 1358.236471][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.236713][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.283800][T16287] tipc: Resetting bearer [ 1358.426073][T16287] tipc: Disabling bearer [ 1358.650460][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.650560][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.824650][T16293] syz.7.2566 (16293): drop_caches: 2 [ 1358.848195][ T8139] bridge_slave_1: left allmulticast mode [ 1358.848224][ T8139] bridge_slave_1: left promiscuous mode [ 1358.848689][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.928319][ T8139] bridge_slave_0: left allmulticast mode [ 1358.928380][ T8139] bridge_slave_0: left promiscuous mode [ 1358.929228][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.953019][ T5813] Bluetooth: hci1: command tx timeout [ 1359.024047][ T8139] bridge_slave_1: left allmulticast mode [ 1359.024076][ T8139] bridge_slave_1: left promiscuous mode [ 1359.024741][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.131794][ T8139] bridge_slave_0: left allmulticast mode [ 1359.131856][ T8139] bridge_slave_0: left promiscuous mode [ 1359.132899][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.872092][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.944447][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.021981][ T8139] bond0 (unregistering): Released all slaves [ 1361.145598][ T5813] Bluetooth: hci1: command tx timeout [ 1361.650445][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1362.390804][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1362.392227][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1362.393331][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1362.395143][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1362.397728][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.397791][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.739758][T16312] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2570'. [ 1364.426047][T14355] Bluetooth: hci1: command tx timeout [ 1364.453739][T14355] Bluetooth: hci3: command tx timeout [ 1364.994448][ T8139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.074222][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.117514][ T8139] bond0 (unregistering): Released all slaves [ 1366.383692][ T8139] hsr_slave_0: left promiscuous mode [ 1366.407153][ T8139] hsr_slave_1: left promiscuous mode [ 1366.407754][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.444135][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.454135][T14355] Bluetooth: hci1: command tx timeout [ 1366.533988][T14355] Bluetooth: hci3: command tx timeout [ 1366.583661][ T8139] hsr_slave_0: left promiscuous mode [ 1366.623706][ T8139] hsr_slave_1: left promiscuous mode [ 1366.624965][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1366.624982][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.664741][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.664759][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.836541][ T8139] veth1_macvtap: left promiscuous mode [ 1366.836616][ T8139] veth0_macvtap: left promiscuous mode [ 1366.836760][ T8139] veth1_vlan: left promiscuous mode [ 1366.836858][ T8139] veth0_vlan: left promiscuous mode [ 1367.846777][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1368.024210][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1368.614180][T14355] Bluetooth: hci3: command tx timeout [ 1370.704168][T14355] Bluetooth: hci3: command tx timeout [ 1371.694531][ T8139] team0 (unregistering): Port device team_slave_1 removed [ 1371.994356][ T8139] team0 (unregistering): Port device team_slave_0 removed [ 1374.837440][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2572'. [ 1375.794539][T16278] chnl_net:caif_netlink_parms(): no params data found [ 1377.851592][T16278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.851661][T16278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.851834][T16278] bridge_slave_0: entered allmulticast mode [ 1377.916332][T16278] bridge_slave_0: entered promiscuous mode [ 1377.946611][T16278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.946680][T16278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.946835][T16278] bridge_slave_1: entered allmulticast mode [ 1377.948341][T16278] bridge_slave_1: entered promiscuous mode [ 1378.061112][T16324] ------------[ cut here ]------------ [ 1378.061123][T16324] !rwb [ 1378.061135][T16324] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0x148/0x1a0, CPU#1: syz.7.2572/16324 [ 1378.061272][T16324] Modules linked in: [ 1378.061294][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.7.2572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.061306][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1378.061319][T16324] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 1378.061335][T16324] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 34 da 8c 06 e8 af 27 3c fd eb 18 e8 a8 27 3c fd eb 0d e8 a1 27 3c fd 4c 89 ff e8 f9 8c 95 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 57 8e 06 [ 1378.061344][T16324] RSP: 0018:ffffc90004b6ee48 EFLAGS: 00010282 [ 1378.061353][T16324] RAX: ba4d0fec7cd10900 RBX: 1ffff1100b706304 RCX: 0000000000000046 [ 1378.061361][T16324] RDX: 0000000000000006 RSI: ffffffff8d3443b4 RDI: ffffffff8b861680 [ 1378.061368][T16324] RBP: dffffc0000000000 R08: ffffffff8f48f777 R09: 1ffffffff1e91eee [ 1378.061375][T16324] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffff88805b831820 [ 1378.061383][T16324] R13: 0000000000000000 R14: ffff88808ae3f000 R15: ffff88805b831800 [ 1378.061390][T16324] FS: 00007f1da98956c0(0000) GS:ffff88812669c000(0000) knlGS:0000000000000000 [ 1378.061419][T16324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.061427][T16324] CR2: 000055c50e43e658 CR3: 000000002e486000 CR4: 00000000003526f0 [ 1378.061437][T16324] Call Trace: [ 1378.061444][T16324] [ 1378.061453][T16324] blk_register_queue+0x36a/0x3f0 [ 1378.061498][T16324] __add_disk+0x677/0xd50 [ 1378.061549][T16324] add_disk_fwnode+0xfb/0x480 [ 1378.061566][T16324] nbd_dev_add+0x72c/0xb50 [ 1378.061623][T16324] ? __pfx_nbd_dev_add+0x10/0x10 [ 1378.061654][T16324] nbd_genl_connect+0x965/0x1c80 [ 1378.061669][T16324] ? __pfx___nla_validate_parse+0x10/0x10 [ 1378.061745][T16324] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1378.061765][T16324] ? rcu_is_watching+0x15/0xb0 [ 1378.061805][T16324] ? __nla_parse+0x40/0x60 [ 1378.061820][T16324] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1378.061874][T16324] genl_family_rcv_msg_doit+0x22a/0x330 [ 1378.061890][T16324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1378.061909][T16324] ? lockdep_hardirqs_on+0x7a/0x110 [ 1378.061959][T16324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1378.062000][T16324] genl_rcv_msg+0x61c/0x7a0 [ 1378.062015][T16324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.062027][T16324] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1378.062042][T16324] ? __pfx_ref_tracker_free+0x10/0x10 [ 1378.062074][T16324] ? __skb_clone+0x63/0x7a0 [ 1378.062120][T16324] netlink_rcv_skb+0x232/0x4b0 [ 1378.062158][T16324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.062172][T16324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1378.062194][T16324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.062204][T16324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.062216][T16324] genl_rcv+0x28/0x40 [ 1378.062226][T16324] netlink_unicast+0x831/0x9f0 [ 1378.062245][T16324] ? __pfx_netlink_unicast+0x10/0x10 [ 1378.062258][T16324] ? __alloc_skb+0x193/0x390 [ 1378.062268][T16324] ? netlink_sendmsg+0x650/0xb40 [ 1378.062277][T16324] ? skb_put+0x11b/0x210 [ 1378.062290][T16324] netlink_sendmsg+0x813/0xb40 [ 1378.062304][T16324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.062318][T16324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1378.062343][T16324] ____sys_sendmsg+0xa4e/0xac0 [ 1378.062379][T16324] ? __might_fault+0xaf/0x130 [ 1378.062437][T16324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.062455][T16324] ? import_iovec+0x73/0xa0 [ 1378.062508][T16324] ___sys_sendmsg+0x2a5/0x360 [ 1378.062521][T16324] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.062559][T16324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.062576][T16324] ? futex_wait+0x29a/0x380 [ 1378.062615][T16324] ? __fget_files+0x2a/0x420 [ 1378.062674][T16324] ? __fget_files+0x3a6/0x420 [ 1378.062693][T16324] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1378.062708][T16324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1378.062727][T16324] ? rcu_is_watching+0x15/0xb0 [ 1378.062748][T16324] do_syscall_64+0x14d/0xf80 [ 1378.062780][T16324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.062807][T16324] ? trace_irq_disable+0x37/0x100 [ 1378.062827][T16324] ? clear_bhb_loop+0x40/0x90 [ 1378.062840][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.062850][T16324] RIP: 0033:0x7f1dab65bf79 [ 1378.062865][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.062874][T16324] RSP: 002b:00007f1da9895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.062886][T16324] RAX: ffffffffffffffda RBX: 00007f1dab8d6090 RCX: 00007f1dab65bf79 [ 1378.062897][T16324] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 1378.062907][T16324] RBP: 00007f1dab6f27e0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.062918][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.062925][T16324] R13: 00007f1dab8d6128 R14: 00007f1dab8d6090 R15: 00007ffda6fcaa78 [ 1378.062942][T16324] [ 1378.062952][T16324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1378.062962][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.7.2572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1378.062975][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1378.062981][T16324] Call Trace: [ 1378.062986][T16324] [ 1378.062990][T16324] vpanic+0x1e0/0x670 [ 1378.063019][T16324] panic+0xc5/0xd0 [ 1378.063033][T16324] ? __pfx_panic+0x10/0x10 [ 1378.063055][T16324] __warn+0x315/0x4a0 [ 1378.063068][T16324] ? wbt_init_enable_default+0x148/0x1a0 [ 1378.063083][T16324] ? wbt_init_enable_default+0x148/0x1a0 [ 1378.063097][T16324] __report_bug+0x29a/0x540 [ 1378.063156][T16324] ? nbd_dev_add+0x72c/0xb50 [ 1378.063168][T16324] ? nbd_genl_connect+0x965/0x1c80 [ 1378.063180][T16324] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 1378.063195][T16324] ? wbt_init_enable_default+0x148/0x1a0 [ 1378.063210][T16324] ? __pfx___report_bug+0x10/0x10 [ 1378.063234][T16324] ? wbt_init_enable_default+0x148/0x1a0 [ 1378.063248][T16324] report_bug+0x16a/0x220 [ 1378.063263][T16324] ? wbt_init_enable_default+0x148/0x1a0 [ 1378.063276][T16324] ? wbt_init_enable_default+0x14a/0x1a0 [ 1378.063289][T16324] handle_bug+0x98/0x200 [ 1378.063300][T16324] exc_invalid_op+0x1a/0x50 [ 1378.063311][T16324] asm_exc_invalid_op+0x1a/0x20 [ 1378.063320][T16324] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 1378.063335][T16324] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 34 da 8c 06 e8 af 27 3c fd eb 18 e8 a8 27 3c fd eb 0d e8 a1 27 3c fd 4c 89 ff e8 f9 8c 95 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 57 8e 06 [ 1378.063343][T16324] RSP: 0018:ffffc90004b6ee48 EFLAGS: 00010282 [ 1378.063352][T16324] RAX: ba4d0fec7cd10900 RBX: 1ffff1100b706304 RCX: 0000000000000046 [ 1378.063358][T16324] RDX: 0000000000000006 RSI: ffffffff8d3443b4 RDI: ffffffff8b861680 [ 1378.063365][T16324] RBP: dffffc0000000000 R08: ffffffff8f48f777 R09: 1ffffffff1e91eee [ 1378.063371][T16324] R10: dffffc0000000000 R11: fffffbfff1e91eef R12: ffff88805b831820 [ 1378.063378][T16324] R13: 0000000000000000 R14: ffff88808ae3f000 R15: ffff88805b831800 [ 1378.063393][T16324] ? wbt_init_enable_default+0x147/0x1a0 [ 1378.063409][T16324] blk_register_queue+0x36a/0x3f0 [ 1378.063430][T16324] __add_disk+0x677/0xd50 [ 1378.063462][T16324] add_disk_fwnode+0xfb/0x480 [ 1378.063487][T16324] nbd_dev_add+0x72c/0xb50 [ 1378.063512][T16324] ? __pfx_nbd_dev_add+0x10/0x10 [ 1378.063569][T16324] nbd_genl_connect+0x965/0x1c80 [ 1378.063593][T16324] ? __pfx___nla_validate_parse+0x10/0x10 [ 1378.063618][T16324] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1378.063649][T16324] ? rcu_is_watching+0x15/0xb0 [ 1378.063675][T16324] ? __nla_parse+0x40/0x60 [ 1378.063696][T16324] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1378.063724][T16324] genl_family_rcv_msg_doit+0x22a/0x330 [ 1378.063747][T16324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1378.063778][T16324] ? lockdep_hardirqs_on+0x7a/0x110 [ 1378.063794][T16324] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1378.063820][T16324] genl_rcv_msg+0x61c/0x7a0 [ 1378.063847][T16324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.063865][T16324] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1378.063888][T16324] ? __pfx_ref_tracker_free+0x10/0x10 [ 1378.063905][T16324] ? __skb_clone+0x63/0x7a0 [ 1378.063930][T16324] netlink_rcv_skb+0x232/0x4b0 [ 1378.063949][T16324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1378.063962][T16324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1378.063985][T16324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.063995][T16324] ? netlink_deliver_tap+0x2e/0x1b0 [ 1378.064007][T16324] genl_rcv+0x28/0x40 [ 1378.064018][T16324] netlink_unicast+0x831/0x9f0 [ 1378.064037][T16324] ? __pfx_netlink_unicast+0x10/0x10 [ 1378.064050][T16324] ? __alloc_skb+0x193/0x390 [ 1378.064060][T16324] ? netlink_sendmsg+0x650/0xb40 [ 1378.064069][T16324] ? skb_put+0x11b/0x210 [ 1378.064081][T16324] netlink_sendmsg+0x813/0xb40 [ 1378.064095][T16324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1378.064109][T16324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1378.064121][T16324] ____sys_sendmsg+0xa4e/0xac0 [ 1378.064133][T16324] ? __might_fault+0xaf/0x130 [ 1378.064147][T16324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.064164][T16324] ? import_iovec+0x73/0xa0 [ 1378.064178][T16324] ___sys_sendmsg+0x2a5/0x360 [ 1378.064190][T16324] ? __lock_acquire+0x6b5/0x2cf0 [ 1378.064205][T16324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.064220][T16324] ? futex_wait+0x29a/0x380 [ 1378.064247][T16324] ? __fget_files+0x2a/0x420 [ 1378.064260][T16324] ? __fget_files+0x3a6/0x420 [ 1378.064277][T16324] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1378.064290][T16324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1378.064308][T16324] ? rcu_is_watching+0x15/0xb0 [ 1378.064328][T16324] do_syscall_64+0x14d/0xf80 [ 1378.064337][T16324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.064346][T16324] ? trace_irq_disable+0x37/0x100 [ 1378.064359][T16324] ? clear_bhb_loop+0x40/0x90 [ 1378.064370][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.064379][T16324] RIP: 0033:0x7f1dab65bf79 [ 1378.064389][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.064398][T16324] RSP: 002b:00007f1da9895028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1378.064408][T16324] RAX: ffffffffffffffda RBX: 00007f1dab8d6090 RCX: 00007f1dab65bf79 [ 1378.064415][T16324] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 1378.064421][T16324] RBP: 00007f1dab6f27e0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.064427][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.064433][T16324] R13: 00007f1dab8d6128 R14: 00007f1dab8d6090 R15: 00007ffda6fcaa78 [ 1378.064449][T16324] [ 1378.064829][T16324] Kernel Offset: disabled