last executing test programs: 2m56.609957367s ago: executing program 1 (id=59): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0xa80, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x5420, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "9e4d2236078f0080000004ff98023dffffffff"}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@mcast2, @rand_addr=' \x01\x00', @private2, 0x0, 0x0, 0x0, 0x100, 0x0, 0xa0023, r2}) 2m55.829892442s ago: executing program 1 (id=64): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x250, 0x0, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x400}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_NAT={0x224, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40004041}, 0x8800) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x2800, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x200000) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f00000000c0)={{0x7, 0x2}, {0x1, 0x60000000}, 0x5}) r3 = socket(0x15, 0x5, 0x0) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x1000, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @win={{0x0, 0x8001}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x4000001, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m55.606052126s ago: executing program 1 (id=68): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x3, 0x3}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f00000001c0)={0x1, r3, 0x400, 0x401, 0x5, 0x6, 0xc00, 0x3, 0x8}) (async, rerun: 64) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x61) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000c80)={0xa, 0x4e22, 0x82, @mcast2, 0x5}, 0x2c) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f0000002140)) 2m55.43795576s ago: executing program 1 (id=71): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x802, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0xa, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x2, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x1005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x1, 0x200, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0xfd, 0x6, 0x1, 0x800007, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x3, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x55, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x8, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x41}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m55.261668514s ago: executing program 1 (id=73): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x146b, 0x902, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x7c, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x6f2}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0xfe, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0xf, 0xc1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x5, 0x81, 0x20}, 0x21, &(0x7f00000000c0)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x4, 0xf007, 0x5, [0x0, 0x180c0, 0xff00, 0x0]}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4001}}, {0xfc, &(0x7f00000002c0)=@string={0xfc, 0x3, "f1f8bbcc16b69b74e384cf80bb19bb9dcecf50048689da6ffe7f46bd9a57277d773e94366f41be290f09623cbe47ed6a6399b49a5d355bffdf6d095ddce72ea5bf7f7ce95658c07e2e2de8019eb1bd2930c8bf3fc4fbcd8a6b7e1a53fa8a0006c77f07b289d9765d336e2ca15752ae61408f250d51e75bc2302d49e8d7907f559d493f34d8aef0426bc5012b34fc740233fb2a72636c59b60187aad1c33970cceb721ad46f194382db495946793662a52bb7424339c7744926fa13ab9e159c9a551a7799e7d758a4ca400864a5de286c955587ceb64a56e2bf1afc6c0bd85b0182e2a9c070d37e938d3dfa45229b4cc8b245d679a62c7353a07c"}}]}) (async, rerun: 32) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB='@\t#'], 0x0}, 0x0) 2m55.175447416s ago: executing program 0 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x8c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 2m55.158470889s ago: executing program 2 (id=75): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000511000/0x400000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 2m55.033726143s ago: executing program 1 (id=76): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xf8, 0x6, 0xc29, 0x1100, 0xe24, [0x3f00, 0x3f1e, 0xfff0, 0x0, 0xff0000, 0x1fe000f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf8, 0x7, 0x5, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x5}]}, 0x2, [{0x9, &(0x7f0000000380)=@string={0x9, 0x3, "2a2df3e081bd04"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2001}}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x78, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) unshare(0x2c060000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="403006000004060312ca5cfa"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000640)={0x40, 0x0, 0xf2, "f3f5feef4c945f8e8b52ad2968a077791ae576e1b9d24f7c3c4de5690c8fdc1c836578aa5c9e0bf389948efd736944278413ef586df2578ed0895367a253e0df81207cd24431eab8af81afbc8571e194811112ae9be38d7213f8fe0dd5541739130ff9413261f86d574971b21c5dc9b8fedc00d0fb54cbddc351f730066208264814778b63472903049f4b92e75a43cfd9064e03e85faa91d93d7dbe9f37f9d10e72505eb4dedbc3e188040742f3c509b753cb8152bb8c172ee6dc80d6e689d0cc81c6fae6107745b14cb7f872c6a763755014322c81b4e8efd643473506ab7f650834a19d64920a3cca0b8d17f13cac31a9"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf9}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 2m54.890038681s ago: executing program 2 (id=77): ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000004c0)) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x36de, 0x0, 0x2000, &(0x7f0000000440)="d1596137019028b4e6973edf1911fbfc4c57a136ff048efb6d1ff9da18c7b520508922e15ef5a43a2403935d48ed4c365d55448dc474f02bfc8c827504ccfccbaca50d6089edf0b48722fa0da7"}, {0x36de, 0x4801, 0x0, 0x0}], 0x2}) 2m54.870698794s ago: executing program 0 (id=78): set_mempolicy(0x2, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_setup(0x800, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x158, r3, 0x800, 0x70bd2d, 0x25dfdbff}, 0x1bb}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x517102, 0x20) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m54.753008151s ago: executing program 3 (id=79): r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x2271, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x802, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x7, 0xffff, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0x2, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0xa, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x2, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x1005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0xb, 0x1, 0x200, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0xfffffbff, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0xfd, 0x6, 0x1, 0x800007, 0x1fc, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x3, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x55, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x8, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x6, 0x1, '%\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m54.509979509s ago: executing program 3 (id=80): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x32, 0x1c0, 0x0, 0x0, {0x0, 0x0, 0x41000000}, {}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x106, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) 2m54.210464403s ago: executing program 3 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x1}) ioctl$TUNGETVNETBE(r0, 0x8927, &(0x7f0000000000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000300)={0x780, r3, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x51b, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x192, 0x80, [@dsss={0x3, 0x1, 0x4}, @mesh_chsw={0x76, 0x6, {0x9, 0x5, 0x15, 0x4}}, @link_id={0x65, 0x12, {@random="7e01725cccb2", @broadcast}}, @fast_bss_trans={0x37, 0x16d, {0x4, 0xa, "97fe0a00f3e717dbe1ff7753119403ba", "2fcd301a0fdb70f6aa6803f39064d2a60e8924621c17fe8a991130707a12db4d", "4f11f4c480d58dc7ce4eec7f53826f198f8ee98d004f0504114f01e291c8b0cf", [{0x4, 0x1e, "967e50344d9d4750914c7888d209268516f8718b8bbd573040539bf648d0"}, {0x1, 0x1d, "5428e573ee80b679065bab911835cf95c177d61d84e32da352eddd599b"}, {0x2, 0xe, "79a446773eed878b478439cd9319"}, {0x1, 0x16, "f927adcdaa0c97d4b8448da67d5959ef80d8766ba73f"}, {0x1, 0x21, "75d0ebff348d9ba4b57d3330519ce165e379455ad39d653c96253fd43a6a199adb"}, {0x2, 0x27, "cf5ad01a6080d86fc139d40f3b14a3616204ea99ee53b51f2ff059fb8995f63fca5eac444ec7ff"}, {0x2, 0x1e, "a2533aeed657a815ba5684bedafc0a8f9dcec0566b52c3903e5ccc7ede1e"}, {0x3, 0x2, "b296"}, {0x1, 0x27, "9c2a3ceba0bdfc717a984d0d89cdc220ee7891011928effc9113f83d474d7248a8d141d1a06cf8"}, {0x2, 0x19, "193d67de158089d86ae46e0111ac2bcb1263303125811c3974"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0xa8, 0xf, [@random_vendor={0xdd, 0x35, "8d38207f698bd5594b94220c93ac4cf08977eec023c77f1c4b88af8bbdd3b19f8bae5ff8e865737e672d6dca02ee00963d21aa7f84"}, @prep={0x83, 0x1f, {{}, 0xfc, 0x3, @device_a, 0x4, @void, 0x0, 0x7, @device_a, 0x9}}, @dsss={0x3, 0x1, 0x7}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @supported_rates={0x1, 0x2, [{0xb}, {0x1}]}, @prep={0x83, 0x1f, {{}, 0x7, 0xf9, @device_a, 0xb, @void, 0x9, 0x84, @device_b, 0xc}}, @rann={0x7e, 0x15, {{0x0, 0x7b}, 0x87, 0x2, @broadcast, 0xfffffff9, 0xb, 0x4}}, @chsw_timing={0x68, 0x4, {0x861, 0xe7}}, @ibss={0x6, 0x2, 0x4}]}]]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x8004) close(0x3) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2m53.779871374s ago: executing program 0 (id=82): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2c2e83, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2m52.705482823s ago: executing program 3 (id=83): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x16c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x80, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x102}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xa8, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8094) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2m52.704919148s ago: executing program 0 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x43, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x4, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0xfffffff9, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x8, 0x0, 0xe, 0x312, 0x78, 0x9, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x7, 0xff, 0x20005, 0x5, 0x5f31, 0x4, 0x1000, 0x2, 0x2, 0xa, 0x4, 0x9, 0xb, 0x800, 0x6, 0x9, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0xffffffff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x2, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4c2b, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xb, 0x4, 0x6d01, 0x5, 0x5f, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x9, 0x6, 0xac8, 0xbf, 0x2, 0x200, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x3, 0x9, 0x1c, 0x120000, 0x3, 0x7, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x7, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m52.558031991s ago: executing program 2 (id=85): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc010000130001"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0xf0, 0x1c, 0x413, 0x70bd28, 0x0, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0xa, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d, 0x0, r1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0x7, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x5}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}}, 0xf0}}, 0x804) 2m52.304739064s ago: executing program 2 (id=86): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x8919) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'wlan1\x00', @random="0134010100bf"}) ppoll(&(0x7f0000000100)=[{r2, 0x4}, {r2, 0x1080}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x3a0]}, 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x25, 0x4) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000)=0x802, 0x4) 2m52.289815993s ago: executing program 3 (id=87): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/239, 0xef, 0x1, 0x3, 0x3f, 0x7, 0x5}}, 0x120) 2m51.881967862s ago: executing program 2 (id=88): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1002, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551a, &(0x7f00000001c0)={0x5, 0x8, [0x0, 0x0]}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@W'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000037c00000400f6000c0001800600060080"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) getrlimit(0x1d, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, 0x0}, 0x4000000) r5 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x20000) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000280)={{r3}, {@void, @max}}) setrlimit(0x7, &(0x7f00000002c0)={0x3, 0x7}) close(r4) 2m51.811570232s ago: executing program 0 (id=89): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000003080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) 2m51.464817609s ago: executing program 0 (id=90): set_mempolicy(0x2, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_setup(0x800, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x158, r3, 0x800, 0x70bd2d, 0x25dfdbff}, 0x1bb}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x517102, 0x20) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m46.009106179s ago: executing program 2 (id=91): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x80885659, 0x0) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000000000002900000032000000fe"], 0x28}}], 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000000c0)) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009040081000000000100000000000008", 0x1d) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="200d690000006901f9776c52d064921ca879a28b5635fdf6b115541a604e36aa788741df22f1024037a15062731a55e31954328aec076c9e36ddabeedb37be86126df1568cd72ebb358314b3688de9fe69ac060bb91469ff49e6f03feffeb0a3fb0ce300"/111], &(0x7f0000000180)={0x0, 0x3, 0x1a, {0xc}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000856000000b58015521f9c185c7b8221591a3da764b549ee8848fb98c9e1ab288572f9f67a9e0cc1a554daacb92af5af394ad300618761e0631723350d2bb4016167efd8978166bbf39ecc1e30b0e6b6fa56a7fa26f1a15ceac3b8"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0xfffc, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000001180)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r6, 0x600000}, &(0x7f00000000c0)=0xc) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m43.530802166s ago: executing program 3 (id=92): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/bus/input/handlers\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffff5, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x111e}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2m18.851548373s ago: executing program 32 (id=90): set_mempolicy(0x2, 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_setup(0x800, &(0x7f0000000440)) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000004c0)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x158, r3, 0x800, 0x70bd2d, 0x25dfdbff}, 0x1bb}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x517102, 0x20) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 0s ago: executing program 33 (id=76): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x35db, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x5, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0x20bfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x5393, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x3b, &(0x7f0000000300)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0xf8, 0x6, 0xc29, 0x1100, 0xe24, [0x3f00, 0x3f1e, 0xfff0, 0x0, 0xff0000, 0x1fe000f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf8, 0x7, 0x5, 0x5, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x5}]}, 0x2, [{0x9, &(0x7f0000000380)=@string={0x9, 0x3, "2a2df3e081bd04"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2001}}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x78, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) unshare(0x2c060000) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="403006000004060312ca5cfa"], &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000004c0)={0x1c, &(0x7f0000000640)={0x40, 0x0, 0xf2, "f3f5feef4c945f8e8b52ad2968a077791ae576e1b9d24f7c3c4de5690c8fdc1c836578aa5c9e0bf389948efd736944278413ef586df2578ed0895367a253e0df81207cd24431eab8af81afbc8571e194811112ae9be38d7213f8fe0dd5541739130ff9413261f86d574971b21c5dc9b8fedc00d0fb54cbddc351f730066208264814778b63472903049f4b92e75a43cfd9064e03e85faa91d93d7dbe9f37f9d10e72505eb4dedbc3e188040742f3c509b753cb8152bb8c172ee6dc80d6e689d0cc81c6fae6107745b14cb7f872c6a763755014322c81b4e8efd643473506ab7f650834a19d64920a3cca0b8d17f13cac31a9"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf9}}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.170' (ED25519) to the list of known hosts. [ 84.818437][ T5853] cgroup: Unknown subsys name 'net' [ 84.969819][ T5853] cgroup: Unknown subsys name 'cpuset' [ 84.979580][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.725757][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.651729][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.668612][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.680206][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.689297][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.698879][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.709793][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.718278][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.727674][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.762505][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.794063][ T5882] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.809047][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.822556][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.824364][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.839497][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.847142][ T5886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.855623][ T5886] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.855763][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.871141][ T5886] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.871678][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.887486][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.450128][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 91.539673][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 91.619718][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 91.729105][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 91.765392][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.772929][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.781036][ T5866] bridge_slave_0: entered allmulticast mode [ 91.788714][ T5866] bridge_slave_0: entered promiscuous mode [ 91.826767][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.833893][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.841760][ T5866] bridge_slave_1: entered allmulticast mode [ 91.848923][ T5866] bridge_slave_1: entered promiscuous mode [ 91.880127][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.887832][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.894991][ T5868] bridge_slave_0: entered allmulticast mode [ 91.902496][ T5868] bridge_slave_0: entered promiscuous mode [ 91.941351][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.948737][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.956349][ T5868] bridge_slave_1: entered allmulticast mode [ 91.963726][ T5868] bridge_slave_1: entered promiscuous mode [ 91.987845][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.034593][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.074204][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.081773][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.089310][ T5867] bridge_slave_0: entered allmulticast mode [ 92.096760][ T5867] bridge_slave_0: entered promiscuous mode [ 92.132610][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.143073][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.150758][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.159055][ T5867] bridge_slave_1: entered allmulticast mode [ 92.166780][ T5867] bridge_slave_1: entered promiscuous mode [ 92.176663][ T5866] team0: Port device team_slave_0 added [ 92.197208][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.234892][ T5866] team0: Port device team_slave_1 added [ 92.241040][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.248450][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.255635][ T5871] bridge_slave_0: entered allmulticast mode [ 92.263452][ T5871] bridge_slave_0: entered promiscuous mode [ 92.326119][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.333378][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.341555][ T5871] bridge_slave_1: entered allmulticast mode [ 92.349902][ T5871] bridge_slave_1: entered promiscuous mode [ 92.358732][ T5868] team0: Port device team_slave_0 added [ 92.368298][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.382166][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.390131][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.397841][ T812] cfg80211: failed to load regulatory.db [ 92.422571][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.449250][ T5868] team0: Port device team_slave_1 added [ 92.469082][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.479838][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.487379][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.514071][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.539499][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.598380][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.630805][ T5867] team0: Port device team_slave_0 added [ 92.638145][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.645232][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.672061][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.698615][ T5871] team0: Port device team_slave_0 added [ 92.707672][ T5867] team0: Port device team_slave_1 added [ 92.715514][ T5871] team0: Port device team_slave_1 added [ 92.722626][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.730005][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.756972][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.786434][ T5875] Bluetooth: hci0: command tx timeout [ 92.858818][ T5866] hsr_slave_0: entered promiscuous mode [ 92.865650][ T5866] hsr_slave_1: entered promiscuous mode [ 92.873308][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.880549][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.907478][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.919834][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.927144][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.954114][ T5875] Bluetooth: hci3: command tx timeout [ 92.954273][ T5875] Bluetooth: hci1: command tx timeout [ 92.959722][ T5874] Bluetooth: hci2: command tx timeout [ 92.967096][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.983711][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.991070][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.017389][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.037525][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.044604][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.070649][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.118475][ T5868] hsr_slave_0: entered promiscuous mode [ 93.125284][ T5868] hsr_slave_1: entered promiscuous mode [ 93.131789][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 93.138696][ T5868] Cannot create hsr debugfs directory [ 93.273398][ T5871] hsr_slave_0: entered promiscuous mode [ 93.279954][ T5871] hsr_slave_1: entered promiscuous mode [ 93.287418][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 93.293273][ T5871] Cannot create hsr debugfs directory [ 93.344259][ T5867] hsr_slave_0: entered promiscuous mode [ 93.352162][ T5867] hsr_slave_1: entered promiscuous mode [ 93.359732][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 93.365660][ T5867] Cannot create hsr debugfs directory [ 93.774010][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.788670][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.819804][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.831528][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.891011][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.902046][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.914127][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.928931][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.022188][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.034163][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.053412][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.088247][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.172809][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.184951][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.199484][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.218059][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.333472][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.369352][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.398392][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.431671][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.439009][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.453115][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.470597][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.477816][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.508909][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.516410][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.540280][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.579859][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.587046][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.608320][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.647954][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.668272][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.691085][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.698292][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.731313][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.738524][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.749388][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.756614][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.793777][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.801313][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.866552][ T5874] Bluetooth: hci0: command tx timeout [ 94.965616][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.026889][ T5874] Bluetooth: hci2: command tx timeout [ 95.027434][ T5875] Bluetooth: hci3: command tx timeout [ 95.033047][ T5886] Bluetooth: hci1: command tx timeout [ 95.239001][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.370950][ T5866] veth0_vlan: entered promiscuous mode [ 95.413303][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.433097][ T5866] veth1_vlan: entered promiscuous mode [ 95.521696][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.555796][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.577625][ T5866] veth0_macvtap: entered promiscuous mode [ 95.602419][ T5868] veth0_vlan: entered promiscuous mode [ 95.620710][ T5866] veth1_macvtap: entered promiscuous mode [ 95.642920][ T5868] veth1_vlan: entered promiscuous mode [ 95.688922][ T5871] veth0_vlan: entered promiscuous mode [ 95.706885][ T5867] veth0_vlan: entered promiscuous mode [ 95.722200][ T5871] veth1_vlan: entered promiscuous mode [ 95.733898][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.765248][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.778411][ T5867] veth1_vlan: entered promiscuous mode [ 95.802359][ T5868] veth0_macvtap: entered promiscuous mode [ 95.814150][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.832209][ T5868] veth1_macvtap: entered promiscuous mode [ 95.840423][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.849317][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.877880][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.903905][ T5871] veth0_macvtap: entered promiscuous mode [ 95.932249][ T5871] veth1_macvtap: entered promiscuous mode [ 95.941871][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.957138][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.022614][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.031923][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.048748][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.056868][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.069251][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.085668][ T5867] veth0_macvtap: entered promiscuous mode [ 96.100514][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.123256][ T5867] veth1_macvtap: entered promiscuous mode [ 96.149482][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.174169][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.187739][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.201376][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.224394][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.275145][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.278890][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.290784][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.303112][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.313234][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337700][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.363955][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.431028][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.456732][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.464630][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.480347][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.492753][ T5955] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 96.529104][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.543437][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.595277][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.699898][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.712495][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.775470][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.846153][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.854586][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.923735][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.943182][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.952728][ T5874] Bluetooth: hci0: command tx timeout [ 97.031269][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 97.087446][ T5966] Invalid ELF header len 16 [ 97.101418][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.106197][ T5874] Bluetooth: hci2: command tx timeout [ 97.113969][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.114972][ T5886] Bluetooth: hci1: command tx timeout [ 97.125545][ T5874] Bluetooth: hci3: command tx timeout [ 97.204451][ T5966] debugfs: 'ttyS3' already exists in 'caif_serial' [ 97.279138][ T5964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.447010][ T5964] usb 4-1: Using ep0 maxpacket: 32 [ 97.488876][ T5964] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 97.526409][ T5964] usb 4-1: config 0 has no interface number 0 [ 97.543881][ T5964] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.597631][ T5964] usb 4-1: config 0 interface 85 has no altsetting 0 [ 97.621949][ T5964] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 97.644832][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.655347][ T5964] usb 4-1: Product: syz [ 97.659728][ T5964] usb 4-1: Manufacturer: syz [ 97.675109][ T5964] usb 4-1: SerialNumber: syz [ 97.711689][ T5964] usb 4-1: config 0 descriptor?? [ 97.954659][ T5964] appletouch 4-1:0.85: Failed to read mode from device. [ 97.994114][ T5964] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 98.482968][ T6001] overlayfs: failed to resolve './file1': -2 [ 98.914191][ T6008] tmpfs: Unknown parameter 'usrq' [ 99.028752][ T5875] Bluetooth: hci0: command tx timeout [ 99.188615][ T5875] Bluetooth: hci1: command tx timeout [ 99.194389][ T5874] Bluetooth: hci2: command tx timeout [ 99.199994][ T5886] Bluetooth: hci3: command tx timeout [ 99.336727][ T5964] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.495964][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 99.514716][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.546396][ T5964] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 99.564961][ T5964] usb 1-1: config 8 has no interface number 0 [ 99.575158][ T5964] usb 1-1: config 8 interface 24 has no altsetting 0 [ 99.598144][ T5964] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 99.616035][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.633649][ T5964] usb 1-1: Product: syz [ 99.638126][ T5964] usb 1-1: Manufacturer: syz [ 99.642844][ T5964] usb 1-1: SerialNumber: syz [ 100.031122][ T6019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.039092][ T6019] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 100.127827][ T5964] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 100.166785][ T6019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.199355][ T5964] usb 1-1: USB disconnect, device number 2 [ 100.205484][ T2156] usb 4-1: USB disconnect, device number 2 [ 100.205548][ T6019] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 100.308002][ T6019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.313996][ T6019] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 100.408620][ T6019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.463416][ T6019] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 100.499972][ T6041] binder: 6040:6041 ioctl c0306201 200000000080 returned -14 [ 100.746970][ T6047] Invalid ELF header len 16 [ 100.817016][ T6047] debugfs: 'ttyS3' already exists in 'caif_serial' [ 101.288188][ T6058] Invalid ELF header len 16 [ 101.335138][ T6058] debugfs: 'ttyS3' already exists in 'caif_serial' [ 101.600692][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 102.096492][ T6083] vcan0: entered allmulticast mode [ 102.387346][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.486149][ T5964] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.559108][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 102.577600][ T24] usb 4-1: config index 0 descriptor too short (expected 8242, got 50) [ 102.586233][ T24] usb 4-1: config 0 has an invalid interface number: 234 but max is 0 [ 102.595495][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.633148][ T24] usb 4-1: config 0 has no interface number 0 [ 102.646143][ T24] usb 4-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 102.666406][ T5964] usb 2-1: Using ep0 maxpacket: 32 [ 102.674166][ T5964] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 102.675924][ T24] usb 4-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 102.698899][ T5964] usb 2-1: config 0 has no interface number 0 [ 102.715510][ T5964] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.715987][ T24] usb 4-1: config 0 interface 234 has no altsetting 0 [ 102.760257][ T24] usb 4-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 102.765930][ T5964] usb 2-1: config 0 interface 85 has no altsetting 0 [ 102.780407][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.808402][ T5964] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 102.816130][ T24] usb 4-1: Product: syz [ 102.828408][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.832689][ T24] usb 4-1: Manufacturer: syz [ 102.852198][ T24] usb 4-1: SerialNumber: syz [ 102.856237][ T5964] usb 2-1: Product: syz [ 102.861785][ T5964] usb 2-1: Manufacturer: syz [ 102.869857][ T24] usb 4-1: config 0 descriptor?? [ 102.885914][ T5964] usb 2-1: SerialNumber: syz [ 102.904509][ T5964] usb 2-1: config 0 descriptor?? [ 103.134548][ T5964] appletouch 2-1:0.85: Failed to read mode from device. [ 103.155079][ T5964] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 103.465530][ T24] ums-sddr09 4-1:0.234: USB Mass Storage device detected [ 103.616127][ T24] ums-sddr09 4-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 103.671409][ T24] usb 4-1: USB disconnect, device number 3 [ 104.062575][ T6096] tipc: Started in network mode [ 104.139657][ T6096] tipc: Node identity 7f000001, cluster identity 4711 [ 104.188488][ T6096] tipc: Enabled bearer , priority 10 [ 104.373041][ T6126] syzkaller0: entered promiscuous mode [ 104.378764][ T6126] syzkaller0: entered allmulticast mode [ 105.263388][ T5964] usb 2-1: USB disconnect, device number 2 [ 105.317618][ T983] tipc: Node number set to 2130706433 [ 105.583650][ T6150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 105.796552][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.959152][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 105.973973][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.996694][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.020816][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.030256][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.045078][ T24] usb 3-1: Product: syz [ 106.057916][ T24] usb 3-1: Manufacturer: syz [ 106.070105][ T24] usb 3-1: SerialNumber: syz [ 106.770584][ T6148] netlink: 'syz.2.35': attribute type 11 has an invalid length. [ 106.952449][ T24] usb 3-1: 0:2 : does not exist [ 106.992883][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 107.054743][ T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 107.099736][ T24] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 107.180444][ T24] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 107.278565][ T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 107.308307][ T24] usb 3-1: USB disconnect, device number 2 [ 107.383698][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.140269][ T983] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.306891][ T983] usb 1-1: Using ep0 maxpacket: 32 [ 108.323435][ T983] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 108.335919][ T983] usb 1-1: config 0 has no interface number 0 [ 108.363712][ T983] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.400773][ T983] usb 1-1: config 0 interface 85 has no altsetting 0 [ 108.416626][ T983] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 108.427799][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.449136][ T983] usb 1-1: Product: syz [ 108.453360][ T983] usb 1-1: Manufacturer: syz [ 108.476881][ T983] usb 1-1: SerialNumber: syz [ 108.496865][ T983] usb 1-1: config 0 descriptor?? [ 108.715691][ T983] appletouch 1-1:0.85: Failed to read mode from device. [ 108.723226][ T983] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 108.968564][ T6221] block nbd0: Unsupported socket: should be TCP or UNIX. [ 109.088963][ T6224] netlink: 220 bytes leftover after parsing attributes in process `syz.1.52'. [ 109.184654][ T6228] netlink: 'syz.2.53': attribute type 46 has an invalid length. [ 109.466097][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.626058][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 109.648539][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.696617][ T9] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 109.707601][ T9] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 109.726131][ T9] usb 3-1: config 12 interface 0 has no altsetting 0 [ 109.736828][ T9] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 109.748117][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.756330][ T9] usb 3-1: Product: syz [ 109.760600][ T9] usb 3-1: Manufacturer: syz [ 109.765234][ T9] usb 3-1: SerialNumber: syz [ 109.919921][ T6241] netlink: 168 bytes leftover after parsing attributes in process `syz.1.57'. [ 109.984719][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.000915][ T9] usb 3-1: selecting invalid altsetting 0 [ 110.067196][ T9] snd-usb-audio 3-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 110.083512][ T9] usb 3-1: USB disconnect, device number 3 [ 110.224632][ T6246] udevd[6246]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.241323][ T2156] usb 1-1: USB disconnect, device number 3 [ 111.560886][ T6274] random: crng reseeded on system resumption [ 111.911099][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.937928][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.402493][ T6303] netlink: 'syz.3.79': attribute type 15 has an invalid length. [ 112.464249][ T983] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.593754][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.899553][ T983] usb 2-1: Using ep0 maxpacket: 32 [ 113.003287][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 113.086693][ T983] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 113.098078][ T6309] netlink: 9 bytes leftover after parsing attributes in process `syz.3.81'. [ 113.122126][ T983] usb 2-1: config 0 has no interface number 0 [ 113.155444][ T6309] gretap0: entered promiscuous mode [ 113.172771][ T9] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 113.199287][ T983] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.266181][ T6309] netlink: 5 bytes leftover after parsing attributes in process `syz.3.81'. [ 113.301969][ T983] usb 2-1: config 0 interface 85 has no altsetting 0 [ 113.328189][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 113.437957][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.457883][ T6309] 0ªî{X¹¦: renamed from gretap0 [ 113.481343][ T9] usb 3-1: Product: syz [ 113.487931][ T6309] 0ªî{X¹¦: left promiscuous mode [ 113.487959][ T6309] 0ªî{X¹¦: entered allmulticast mode [ 113.511727][ T6309] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 113.539685][ T9] usb 3-1: Manufacturer: syz [ 113.564680][ T9] usb 3-1: SerialNumber: syz [ 113.603537][ T6313] netlink: 168 bytes leftover after parsing attributes in process `syz.0.82'. [ 113.610012][ T983] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 113.657959][ T9] usb 3-1: config 0 descriptor?? [ 113.678376][ T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.699471][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 113.728388][ T983] usb 2-1: Product: syz [ 113.732621][ T983] usb 2-1: Manufacturer: syz [ 113.766510][ T9] usb 3-1: setting power ON [ 113.771625][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 113.799266][ T983] usb 2-1: SerialNumber: syz [ 113.892951][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.902307][ T6299] dvb-usb: bulk message failed: -22 (3/0) [ 113.902363][ T6299] cxusb: i2c wr: len=8192 is too big! [ 113.902363][ T6299] [ 113.972737][ T983] usb 2-1: config 0 descriptor?? [ 114.150818][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 114.191405][ T9] usb 3-1: media controller created [ 114.331802][ T983] appletouch 2-1:0.85: Failed to read mode from device. [ 114.352644][ T983] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 114.652361][ T6325] netlink: 324 bytes leftover after parsing attributes in process `syz.2.85'. [ 114.810295][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.982476][ T6330] mac80211_hwsim hwsim3 4: renamed from wlan1 [ 115.121254][ T9] usb 3-1: selecting invalid altsetting 6 [ 115.121309][ T9] usb 3-1: digital interface selection failed (-22) [ 115.121325][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 115.152374][ T9] usb 3-1: setting power OFF [ 115.152507][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 115.152555][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 115.152571][ T9] (NULL device *): no alternate interface [ 115.432556][ T6337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.540375][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.594027][ T9] usb 3-1: USB disconnect, device number 4 [ 116.270077][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.140907][ T9] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 117.160118][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.603306][ T9] usb 3-1: config 0 descriptor?? [ 119.304488][ T9] usb 3-1: can't set config #0, error -71 [ 127.203334][ C1] sched: DL replenish lagged too much [ 134.689334][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.712350][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 175.339395][ T5964] usb 2-1: USB disconnect, device number 3 [ 195.473289][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.488049][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.447906][ T9] usb 3-1: USB disconnect, device number 5 [ 259.477752][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.727247][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.893857][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.027510][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.373501][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.388205][ T1305] ieee802154 phy1 wpan1: encryption failed: -22