last executing test programs: 3m25.765411459s ago: executing program 4 (id=5): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000c8}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="c80000000a06050000000000000000000d0000070900020073797a3000000000100007800a001100aaaaaaaaaaaa00000800094000000067880008800c000780060005404e2100000c00078005001a00000000000c00078008000840000000020c00078008000940000000050c0007800500070001000000100007800a0011000180c20000010000100007800900130073797a3200000000100007800900130073797a32000000000c00078005001a00000000000c0007800800064000000008080009400000000037c1943941a6dd8f58601897fd6d69a1cc70f7698d2f21d54b9110f919c8c3d31ce5e5451510cf1836"], 0xc8}, 0x1, 0x0, 0x0, 0x20000008}, 0x8004) r4 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r4, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2025, 0x221e, 0xffffeff6, 0xc211, 0x0, 0x1}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.510067692s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x1e8c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200100, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xffffffffffffffff, 0x6, 0x80fa11, 0xfffffff9}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004bf00058006700000306907864010100ac1414aa070f07ac1e0101ac14140ae000000289031e8303930000000000000000000000000000000000000100004e2100004e2200000000000001"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYRES32], 0x40}}, 0x2004004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 3m21.956141508s ago: executing program 4 (id=8): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000c8}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="c80000000a06050000000000000000000d0000070900020073797a3000000000100007800a001100aaaaaaaaaaaa00000800094000000067880008800c000780060005404e2100000c00078005001a00000000000c00078008000840000000020c00078008000940000000050c0007800500070001000000100007800a0011000180c20000010000100007800900130073797a3200000000100007800900130073797a32000000000c00078005001a00000000000c0007800800064000000008080009400000000037c1943941a6dd8f58601897fd6d69a1cc70f7698d2f21d54b9110f919c8c3d31ce5e5451510cf1836"], 0xc8}, 0x1, 0x0, 0x0, 0x20000008}, 0x8004) r4 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r4, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2025, 0x221e, 0xffffeff6, 0xc211, 0x0, 0x1}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m21.943418734s ago: executing program 1 (id=9): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x121102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x20800) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x2000, 0x40, 0x0, 0x2, 0x2, 0x9}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x521}, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) write$nbd(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0100"], 0x40) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) 3m20.073835184s ago: executing program 1 (id=12): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x80) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r4 = syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)="b540bc234aa31963438a3256773c9a4714887e00008ff85b747644a0a56ed2dcfd98", 0x22}, {&(0x7f0000000240)="c9be3da19ffebdcf92b102f6030649392ab54e50472a4f2ff42fa7b7f830ea646d4244a40fa9d2603ab727327169a54d634c4fac58bf0edb1ce948e6720660fc3e58d223e0adb430f2b4a2bfd9e691709ef3e57a6cf3f84573abd126cf09010331466c6bcdc724dd340369f0ab6ff2617b0a889d1a1fd0f936cf37d80658005262d87ba2de3d55fa22e47a89e4d89fefb8dd9a7a163a95cd7c3195bbf1cd84e293cd07dc507f2998d0", 0xa9}, {&(0x7f0000000980)="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", 0xab8}], 0x3}, 0x4048805) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x2c, r6, 0x5, 0x70bd28, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x2c}}, 0x40006) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 3m19.486514081s ago: executing program 2 (id=13): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xfffffff7, 0x5, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "f819ebf45608e22e7a4944572ae210d0125a4b55b61c5deb3eb574c486d27eb2"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000000002000001"], 0x64}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 3m18.51209769s ago: executing program 2 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000c8}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="c80000000a06050000000000000000000d0000070900020073797a3000000000100007800a001100aaaaaaaaaaaa00000800094000000067880008800c000780060005404e2100000c00078005001a00000000000c00078008000840000000020c00078008000940000000050c0007800500070001000000100007800a0011000180c20000010000100007800900130073797a3200000000100007800900130073797a32000000000c00078005001a00000000000c0007800800064000000008080009400000000037c1943941a6dd8f58601897fd6d69a1cc70f7698d2f21d54b9110f919c8c3d31ce5e5451510cf1836"], 0xc8}, 0x1, 0x0, 0x0, 0x20000008}, 0x8004) r4 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r4, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2025, 0x221e, 0xffffeff6, 0xc211, 0x0, 0x1}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m17.524676472s ago: executing program 4 (id=15): keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000002fcdbdf250a01010200000000000000000000000020010000000020000000000000000001000000004e230004020020003b000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x1170, 0x1170, 0x178, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0xef4, 0x0, 0x3, 0x4}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x48a, 0x5, 0x4, 0x1, 0x0, "f342a67c2c8839f34dc41410843d9d5b6c0bffd9272e2a6bbb41043c26f552454c4da82330ce9be65548dea046d85e62aee4e92396bc1c01a84b1d197d6754c2"}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) eventfd2(0xfffffffd, 0x1) setsockopt$inet_int(r8, 0x29, 0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x24}}, 0x20004000) 3m16.586537088s ago: executing program 1 (id=17): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x5, 0x2, 0x1, 0xfff, 0x19, "8f6cfc0a997263d8d0749aa99cc8e550c3d491af51b6a39646"}, 0x22, 0x3) write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) 3m15.829311193s ago: executing program 4 (id=18): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x18, 0x0, '4-2'}]}, 0x60}, 0x1, 0x7}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40018, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$inet6(0xa, 0x800, 0xfffffc00) 3m14.00828904s ago: executing program 2 (id=20): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0xa, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000c80)='./file0\x00') read$FUSE(r0, &(0x7f0000000cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)) umount2(&(0x7f0000000500)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m13.765749031s ago: executing program 1 (id=22): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @random="1c00"}) 3m13.407033155s ago: executing program 1 (id=23): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180), 0xa}], 0x1}}], 0x4000000000000ff, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3m12.031622482s ago: executing program 2 (id=26): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x401}}, 0x4003, 0x200, 0xe652, 0x2, 0x14, 0x7fff, 0x3}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007000800"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000980)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x162, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)='veth0\x00', 0x8000, 0x2, 0xb49}) pipe(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/70) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r8], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000000c0)=[{0x0}], 0x1) socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x7ff, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0xd, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x80003, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x0, 0x1], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x0, 0x9, 0x8, 0xba, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x4, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa4, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x2, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x20056e, 0x2, 0x1007, 0x40000006, 0xd4, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) 3m0.221048417s ago: executing program 32 (id=18): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000700), r7, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x6, {"ec48ec694b96429cea4a1f5d456505d9"}, 0xffffffffffffffff, 0x7, 0x7}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x18, 0x0, '4-2'}]}, 0x60}, 0x1, 0x7}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40018, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) sendmsg$TIPC_NL_PEER_REMOVE(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) socket$inet6(0xa, 0x800, 0xfffffc00) 2m58.97483439s ago: executing program 1 (id=29): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x6719, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) fcntl$getown(r3, 0x9) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x80010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x2400c080) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f72"], 0x60}}, 0x0) 2m55.691099619s ago: executing program 33 (id=26): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x9, @empty, 0x401}}, 0x4003, 0x200, 0xe652, 0x2, 0x14, 0x7fff, 0x3}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007000800"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000980)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x162, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000940)='veth0\x00', 0x8000, 0x2, 0xb49}) pipe(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/70) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r8], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000000c0)=[{0x0}], 0x1) socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x7ff, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0xd, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x80003, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x0, 0x1], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x0, 0x9, 0x8, 0xba, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x4, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa4, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x2, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x20056e, 0x2, 0x1007, 0x40000006, 0xd4, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x3, 0x200, 0x7fffffff, 0x2]}, 0x45c) 2m43.654302987s ago: executing program 34 (id=29): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x6719, 0x0, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) fcntl$getown(r3, 0x9) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x80010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x2400c080) sendmsg$nl_route(r2, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f72"], 0x60}}, 0x0) 2m24.341518212s ago: executing program 0 (id=41): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYRESHEX=r4], 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180), 0xa}], 0x1}}], 0x4000000000000ff, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2m19.441238597s ago: executing program 0 (id=44): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_setup(0x659, &(0x7f00000002c0)=0x0) r4 = eventfd2(0xc41a, 0x800) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x69a3284f3269e7d7, 0xe, &(0x7f0000000140)=""/14}]}) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0xe5c, 0x80000) r11 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000100)={r10, 0x7, 0x2, r11}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000000)={r11, 0x9, 0x2, r10}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0xae, 0xbf, 0xc, 0x5, 0x7, 0x4, 0xb, 0x0, 0x3, 0x2, 0x2, 0x5, 0x9, 0xe, 0xf, 0x5}}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r12, 0xae80, 0x0) io_submit(r3, 0x4, &(0x7f0000000780)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x9fa2, 0xffffffffffffffff, &(0x7f00000003c0)="6a2932e237979bf6f207c43d1ded3cec7ab42396f478a11f9bfdb37b031abe13f316631ec5baf6a18e1796f39cca29517b59fc634142f4fc3b3962cfb4b608070c3c38ad399b01ca02858940ab9fb074946539e6ada4e26f45bb49ba3f14838dd0acaf52970142980f61be9455e88999ba9dcaf2ba2761e7aad29cd0c4dc4a0a8dfa59835b661e5f9d9ed1f228cdaad70adb98c3c15ed068a6d60f291eb5566d8e444019e969c0a48657d4b11c7ca51488da392d4be7030a60e5723bfb301160906b1f10771e22adf7ce55fac86e33bce4e541184afdce0e4bd064d616a83ae31f7783f365d47b11ded0e1", 0xeb, 0x7, 0x0, 0x2, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000004c0)="fd1b69f468ccf6665fee27f51b68f77e71593359a666e397a1b54517e5d24dc23d8617b9c05a855331153e81759d9907d1658522793c9bfbe5ed4acd045fe5e624bbebeebf8a355e797765a20c28c38c9e19c950d90ecdc7945e2f55884ef606d6d50408ee3074dd7b11ab0ac98533cbbc82c0657323ff7da0c93be2d7691f8926f87cbc4ce9d093f2b3acc3870eb3b226647f842470eb9507", 0x99, 0x0, 0x0, 0x7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xb, r0, 0x0, 0x0, 0xf7, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0xf, r1, &(0x7f00000006c0)="4e5a64661e85a057cefeb6518267360e8c82df22c342debed4c3bf37b1458a6c8692c4285e957bc1d54a256f5132b87c0ad4a9", 0x33, 0x8, 0x0, 0x1, r7}]) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x2, &(0x7f0000000080)=""/2}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) 2m13.797163062s ago: executing program 0 (id=46): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180), 0xa}], 0x1}}], 0x4000000000000ff, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2m9.777504963s ago: executing program 0 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d) recvmmsg(r2, &(0x7f0000000380), 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 2m9.397135461s ago: executing program 0 (id=49): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x401, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x670e}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40012) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYRES32=r3], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m55.370702912s ago: executing program 0 (id=51): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r4, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2025, 0x221e, 0xffffeff6, 0xc211, 0x0, 0x1}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m40.024643362s ago: executing program 35 (id=51): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r4, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) waitid(0x1, 0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) r5 = syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x2025, 0x221e, 0xffffeff6, 0xc211, 0x0, 0x1}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.848252106s ago: executing program 8 (id=211): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)={r0}) 6.585389023s ago: executing program 8 (id=212): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00000015000100fdffffff0000001002100000", @ANYRESDEC=r4, @ANYRESDEC=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20004010}, 0x48000) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) close(r1) r5 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x200, 0x0) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r5, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000004a80)=""/4103, 0x1007}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f00000015c0)=""/112, 0x70}, {&(0x7f0000001640)=""/146, 0x92}, {&(0x7f0000001700)=""/108, 0x6c}], 0x9, &(0x7f0000000240)=""/57, 0x39}}, {{&(0x7f0000001840)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f00000018c0)=""/121, 0x79}, {&(0x7f0000001940)=""/143, 0x8f}], 0x2, &(0x7f0000001a00)=""/230, 0xe6}, 0xffffffc0}, {{&(0x7f0000001b00)=@hci, 0x80, &(0x7f0000003080)=[{&(0x7f0000001b80)=""/198, 0xc6}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/117, 0x75}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/122, 0x7a}, {&(0x7f0000002dc0)=""/178, 0xb2}, {&(0x7f0000002e80)=""/204, 0xcc}, {&(0x7f0000002f80)=""/195, 0xc3}], 0x8, 0xffffffffffffffff}, 0x1}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003100)=""/26, 0x1a}, {&(0x7f0000003140)=""/228, 0xe4}, {&(0x7f0000003240)=""/194, 0xc2}, {&(0x7f0000003340)=""/95, 0x5f}, {&(0x7f00000033c0)=""/62, 0x3e}, {&(0x7f0000003400)=""/43, 0x2b}, {&(0x7f0000003440)=""/206, 0xce}], 0x7, &(0x7f00000035c0)=""/62, 0x3e}, 0x4}, {{&(0x7f0000003600)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/76, 0x4c}, {&(0x7f0000004700)=""/185, 0xb9}, {&(0x7f00000047c0)=""/56, 0x38}], 0x4, &(0x7f0000004840)=""/227, 0xe3}}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x4000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x2) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 4.755597578s ago: executing program 5 (id=217): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000000}) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x83c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x810, 0x2, [@TCA_BPF_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x785b4398, 0x3, 0x9, 0x761, 0xb3d3, 0xef4, 0x0, 0x7ff, 0x9, 0x1, 0x0, 0x3ff, 0x6, 0x4, 0x2, 0x2, 0xffffffff, 0xb32, 0xd, 0x2, 0x9, 0x2, 0x40, 0x9, 0x3, 0xfa, 0x2f3, 0x9, 0x7, 0x6, 0x86f8, 0xa, 0x7, 0x1e, 0x0, 0xa1, 0xe4800, 0x80000000, 0x5, 0x9, 0x3, 0x0, 0x401, 0xff, 0x7f, 0x200, 0x53d, 0x400, 0x1, 0x3ab, 0xf8b, 0x7, 0x7, 0x5, 0x4, 0x4, 0x5, 0x9, 0x8, 0x9, 0x1e7e27bd, 0xf2ed, 0x7, 0x81, 0x1ff, 0xff, 0xef2, 0x5, 0x7a, 0x8, 0x0, 0x6, 0x8, 0x15, 0x1, 0x7, 0x4, 0x80000001, 0x1, 0x5, 0x7, 0x2, 0x2, 0x3, 0x76030d1e, 0x95, 0x6, 0xbad, 0x2, 0x2, 0xff, 0x9, 0xfffffff9, 0x2, 0x7, 0x3ff, 0x0, 0x358, 0x9, 0x3, 0x4, 0x7f, 0x6, 0x2, 0x8, 0x3, 0x7, 0x4d, 0x2, 0x3ff, 0x23a, 0x0, 0x3cb36560, 0x200, 0x2, 0x4, 0xaf3, 0x1ff, 0x2, 0x6, 0x6, 0x2517, 0x1, 0x3, 0x4, 0x8001, 0x3, 0xfffffffc, 0x2, 0x4, 0x2bb26586, 0x80, 0x8, 0x400, 0xbb, 0x3, 0x7, 0x3ff, 0x8000, 0xe27, 0x1, 0x2, 0x5, 0x8, 0x7, 0x2, 0x80, 0x5, 0x6, 0x81, 0xc, 0x3, 0x9, 0x1e74a0cb, 0x8, 0xfd9, 0x5, 0xfffffffb, 0x6, 0x0, 0xf, 0xadb, 0x8, 0x5, 0x40, 0x2, 0x0, 0x10, 0x0, 0x10000, 0x9, 0x7, 0x0, 0x9, 0x7, 0x1, 0x1, 0xd3, 0x7, 0x6, 0x5, 0x10278447, 0xadd1, 0xaa4, 0x7, 0x6a, 0x7b, 0x917, 0x9, 0xf735, 0x5, 0x0, 0x0, 0xd84, 0x8, 0x8, 0x1, 0x3, 0x100, 0x4, 0x1, 0x4, 0xdb7, 0x95, 0x7, 0x80, 0x10001, 0xe48, 0xad, 0x8, 0x4, 0xfa, 0x8, 0x3, 0x6, 0x2, 0x4, 0x1, 0x81, 0x7, 0x0, 0xe69, 0x4, 0x182, 0x1, 0x2, 0x3ff, 0x7fffffff, 0x3b41, 0x0, 0x0, 0x7, 0x5, 0x3, 0x81, 0x7, 0x80000000, 0x5c, 0x4, 0xdf, 0x1ff, 0x1, 0x4b78, 0xca, 0x2d4, 0x7f, 0x1, 0x10001, 0x3, 0x3f16, 0x97, 0x0, 0x1, 0x9, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x0, 0x4, 0xe8000, 0x2, 0x3, 0x2b7185cf, 0x359, 0xa, 0xffffff77, 0x6, 0x6, 0xa71, 0x2112, 0x6, 0x618, 0x1, 0xd, 0x2, 0x4, 0xa30c, 0x9, 0x400, 0x5, 0x7, 0x7, 0x8, 0x1, 0x10000, 0x2, 0x64, 0x2, 0x2, 0x0, 0x7f, 0x76ee, 0x3, 0x5, 0x80, 0x2, 0x9, 0xfffffff9, 0x4, 0x3, 0x9be4, 0x7fffffff, 0x2, 0x10001, 0x3, 0x8001, 0x6, 0x9, 0x0, 0x2, 0x91e9, 0x3, 0x3, 0x400, 0x8, 0x5, 0x7, 0x5, 0xf883, 0x1, 0x2, 0x4, 0x5, 0x3ff, 0xffffffff, 0xb5, 0xa, 0x4, 0x3f4, 0x1, 0xd5, 0xffffff3c, 0x0, 0x0, 0x3ff, 0x1000, 0x2, 0x4, 0x80, 0x401, 0x9, 0x8000, 0x0, 0x6, 0x7, 0x487, 0x5, 0x10, 0x4, 0x9, 0x7, 0x9, 0xe, 0x80000001, 0x5, 0x1, 0x0, 0x10, 0x308d, 0x6, 0x7, 0x5, 0x10, 0x0, 0x6, 0x2, 0x1, 0x8, 0x1, 0x3, 0x9, 0x2, 0x2, 0x1, 0x6, 0x7fff, 0x5, 0xe0, 0x3, 0x8, 0x0, 0x8, 0x2, 0x5, 0x6, 0xe, 0x401, 0x9, 0xb, 0x5, 0x0, 0xa, 0x4, 0x3, 0x6950dc19, 0xa0, 0x7, 0x1, 0x38bfc83c, 0x2, 0x8, 0x5, 0x7ff, 0x10000, 0x5, 0x5, 0x7fff, 0xa, 0xfffffff0, 0x0, 0x3, 0x9, 0x8, 0x6, 0xffff, 0x7, 0xfffffef8, 0x4, 0x6, 0x4b, 0xffff, 0x3, 0x6, 0x24ca, 0x7f, 0x9, 0x4, 0x0, 0xf46e, 0x5, 0xd2, 0x0, 0xf, 0x9e, 0xfffff001, 0xfbc0, 0x3, 0xc, 0x8, 0xd9, 0x20, 0x0, 0xfffffff7, 0x41, 0x9df, 0x401, 0xffffffff, 0x2, 0x9e, 0x69, 0x38, 0x80, 0x4, 0x5, 0x7836, 0x42, 0x4, 0x9, 0x2, 0x81, 0xe2, 0x2, 0x4df, 0x5, 0x101, 0x2, 0x3, 0x9, 0x9, 0x39c1, 0x80000000, 0x2, 0x4, 0x1, 0x5, 0xf64bc5ee, 0x34e, 0xf2, 0xcb, 0xf, 0xbe, 0xfffffff8, 0x5, 0x5, 0x5, 0x0, 0x9, 0xffff7fff, 0x3, 0x0, 0x6, 0x1932, 0x401, 0x1, 0x4, 0x8, 0x8, 0x9, 0x8, 0x6, 0x4, 0x81, 0x3, 0x5, 0x5, 0xfffffffc, 0x4, 0x9, 0x347ae13c, 0x0, 0x9, 0x6]}]}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000480)={0x53, 0xffffffffffffffff, 0x6, 0xb0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1555a351d204", 0x0, 0x20000002, 0x10002, 0xfffffffd, 0x0}) r10 = fcntl$dupfd(r8, 0x406, r8) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0xffffffff, 0x0}) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) (async) r13 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r13, 0x1}) (async) ioctl$KVM_IOEVENTFD(r12, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r13, 0x1}) (async) write$tun(r10, &(0x7f0000000400)=ANY=[], 0xa2) (async) readv(r10, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}], 0x2) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@local}) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x6, 0x30}, &(0x7f00000006c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000700)={r14, 0x7, 0x1, 0x2}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@host}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) 4.132026803s ago: executing program 5 (id=220): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', 0x0) r5 = fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180), 0xa}], 0x1}}], 0x4000000000000ff, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x2}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.362513586s ago: executing program 6 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e) r4 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) shutdown(r6, 0x1) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$UFFDIO_MOVE(r7, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x2000, 0x2}) close(0x3) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$key(0xf, 0x3, 0x2) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r10) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000140)) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x2, 0x4}}, 0xe8) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000400)={0x0, 0x0, r7}) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 3.189029822s ago: executing program 8 (id=223): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_setup(0x659, &(0x7f00000002c0)=0x0) eventfd2(0xc41a, 0x800) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x69a3284f3269e7d7, 0xe, &(0x7f0000000140)=""/14}]}) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd2(0xe5c, 0x80000) r10 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000100)={r9, 0x7, 0x2, r10}) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000000)={r10, 0x9, 0x2, r9}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0xae, 0xbf, 0xc, 0x5, 0x7, 0x4, 0xb, 0x0, 0x3, 0x2, 0x2, 0x5, 0x9, 0xe, 0xf, 0x5}}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x4, 0x6d, 0x2, 0x1002, 0xef, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r11, 0xae80, 0x0) io_submit(r3, 0x3, &(0x7f0000000780)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f00000004c0)="fd1b69f468ccf6665fee27f51b68f77e71593359a666e397a1b54517e5d24dc23d8617b9c05a855331153e81759d9907d1658522793c9bfbe5ed4acd045fe5e624bbebeebf8a355e797765a20c28c38c9e19c950d90ecdc7945e2f55884ef606d6d50408ee3074dd7b11ab0ac98533cbbc82c0657323ff7da0c93be2d7691f8926f87cbc4ce9d093f2b3acc3870eb3b226647f842470eb9507", 0x99, 0x0, 0x0, 0x7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xb, r0, &(0x7f0000000600)="0588a1f058643feca62bc38c59286f3062bc9a20a44a167de444d0eb19292be93024d70f51db3d646ad59bbcad5fd1e34327074e8c51e3ac4836141ac5396b0b88106e8bf4582b135f459ad9b508f52a4cad2a21b48ff2329299f6e3b6b6283754be0d00574bd451758c00b8cc8c5b27b190d28e97b0179c495e5c492866afe82af9ed05122f806d", 0x88, 0xf7, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0xf, r1, &(0x7f00000006c0)="4e5a64661e85a057cefeb6518267360e8c82df22c342debed4c3bf37b1458a6c8692c4285e957bc1d54a256f5132b87c0ad4a9", 0x33, 0x8, 0x0, 0x1, r6}]) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x2, &(0x7f0000000080)=""/2}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="eb", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) 3.110624311s ago: executing program 7 (id=224): syz_open_dev$tty1(0xc, 0x4, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001600)={0x0, 0xffffffffffffffff, 0x91, 0x80, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="c0a86374a0073a746967927656cebbcbdcbad3a9b1a64e7b9d8f8f7d85f8a5219b4f1228639a9b9c04114ec615c4c770ac408391d8ecb15298bae45c772366407e930e15d5dd5f0c3e91d65ac0999a07ea189d2dba0e2c4f3611844b295620f96a33a0f79fb1633373964ae46a1c7a8f3c54bab634c58d77897eb3c994c67d99c4040e1b0737bd605f97c073297bf5c586", 0x0, 0x1ff, 0x10023, 0xffffffffffffffff, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) semget$private(0x0, 0x6, 0x0) (async) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) (async) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x7}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{}, {}], 0x2) semop(r2, &(0x7f0000000c40)=[{0x0, 0x0, 0x1000}, {0x4}], 0x2) (async) semop(r2, &(0x7f0000000c40)=[{0x0, 0x0, 0x1000}, {0x4}], 0x2) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0x101}, {&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb3526e6c5524e8307b9012440403f", 0xb2}], 0x2}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x8ab8, 0x4, 0x2007, 0x802, 0x7ffd, 0xa, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000001, 0x0, 0x0, 0xfe, 0x6, 0x1], 0x4000, 0x1906a2}) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x8ab8, 0x4, 0x2007, 0x802, 0x7ffd, 0xa, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000001, 0x0, 0x0, 0xfe, 0x6, 0x1], 0x4000, 0x1906a2}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)=@x86={0x5, 0x2, 0x10, 0x0, 0x1000a, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x11, 0x7, '\x00', 0x6, 0x4080000000000005}) syz_emit_ethernet(0x70, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1f88a81400810040000011aaaa325659a142000c051b5e34b497318516ae8d074d731704455093a59341601467c2dc386a1e126381a078bf9d44847880a4af43dd1ca731eb2b34e6dc0e47a9e2aeee708c3beee8185254c5ca05c16a"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x90}}, 0x4048001) syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504090000000000090507"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0)) (async) r3 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\"w\x8d\x144\x9c\xce`\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\t`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9e\xc6\t.\xd9EZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98', 0x1) io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x200}) (async) r8 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x200}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000e, 0x11, r7, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, &(0x7f0000000640)={0x8}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r6) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x10, 0x0, 0x7ff}) io_uring_enter(r3, 0x4d10, 0x2, 0x4, 0x0, 0x0) 2.912213439s ago: executing program 5 (id=225): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xf468, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x9, 0x6e2, 0x51880}) (fail_nth: 1) 2.61429945s ago: executing program 7 (id=226): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xf468, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2, 0x9, 0x6e2, 0x51880}) 2.612623069s ago: executing program 3 (id=227): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x700, 0x0, 0x0) 2.504208335s ago: executing program 5 (id=228): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000841) listen(r0, 0x2000fff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 2.490342902s ago: executing program 3 (id=229): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.284352557s ago: executing program 6 (id=231): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@delsa={0x28, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {@in=@rand_addr=0x64010102, 0x4d5, 0x0, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 2.152175789s ago: executing program 3 (id=232): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 2.151296041s ago: executing program 6 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0xfa, 0xa296}}]}, 0x38}, 0x1, 0x0, 0x0, 0x401c4}, 0x8840) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.924189619s ago: executing program 3 (id=234): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c12, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x8, "fee89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.857695535s ago: executing program 3 (id=235): pipe2(&(0x7f00000006c0), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe95, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(&(0x7f0000000200), 0x2000000f5, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdc"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000200)="240000001e005f80004000000000000003000000000000000000080008000100", 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="ff010000a9f7a23bbcd7520e972ba4ce0fbe4538377255c2d7730c1d5de5e62d0c00c403151ac04ec5e6", @ANYRES16=r6, @ANYBLOB="495303000000fcffffff6700000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000700000029000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) 1.738315146s ago: executing program 6 (id=236): syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31a20000000900010073797a3100000000180003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@userptr={0x1, 0xd, 0x4, 0x800, 0xf, {0x77359400}, {0x5, 0x0, 0x4, 0x1, 0x2c, 0xb8, "247d31e3"}, 0x5, 0x2, {0x0}, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="e2ffffff", @ANYRES16=r7, @ANYBLOB="000027bd7000fddbdf2501000000140001800800090038000000060002000000000014000280080005000400000006000e004e240000"], 0x3c}, 0x1, 0x0, 0x0, 0xc042040}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, r7, 0x2, 0x70bd2a, 0x25dfdbef, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x48844) 1.329385791s ago: executing program 5 (id=237): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) r1 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31a20000000900010073797a3100000000180003"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@userptr={0x1, 0xd, 0x4, 0x800, 0xf, {0x77359400}, {0x5, 0x0, 0x4, 0x1, 0x2c, 0xb8, "247d31e3"}, 0x5, 0x2, {0x0}, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="e2ffffff", @ANYRES16=r7, @ANYBLOB="000027bd7000fddbdf2501000000140001800800090038000000060002000000000014000280080005000400000006000e004e240000"], 0x3c}, 0x1, 0x0, 0x0, 0xc042040}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x74, r7, 0x2, 0x70bd2a, 0x25dfdbef, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x48844) 1.22692209s ago: executing program 8 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x24}, 0x1, 0xf000000, 0x0, 0x20040044}, 0x4010) 1.01208401s ago: executing program 7 (id=239): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0000000000000000050000000003"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) close_range(r0, 0xffffffffffffffff, 0x1100000000000000) 734.235265ms ago: executing program 7 (id=240): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x7a000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x9804, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800200, 0x0, 0x38414261, 0x1, 0xfffffffd, 0x2, 0x2, 0x3, 0x0, 0x2}}) fcntl$setflags(r2, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f00000003c0)={0x2, 0x0, @pic={0x0, 0x7e, 0x7, 0x0, 0xd, 0x9, 0x9, 0x1, 0xb, 0xf8, 0x2, 0x6, 0x2, 0x6, 0x4, 0xf}}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xff7f, 0x4, 0x83, 0x8}]}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x10000000215b9037, 0x8, 0xffffffff7fffffff, 0x11, 0x8000000000f2, 0x0, 0x3, 0x5, 0x5, 0xc6ba, 0x56a, 0x45, 0x5, 0x7], 0x6006, 0x1c1793}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) 636.232113ms ago: executing program 3 (id=241): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r8, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r7, r10, 0xfffffffffffffc01, 0x0) socket(0x1f, 0x3, 0xfa) 574.079899ms ago: executing program 8 (id=242): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}}, {{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}}, 0x108) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000200), &(0x7f0000000580)=[r7], &(0x7f00000000c0)}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1ff, 0x2, 0x2}, {0x2, 0x60, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x3, 0x6, 0x4}}}]}]}]}}]}, 0x64}}, 0x0) 499.571609ms ago: executing program 6 (id=243): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x5, 0x6, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e1d, 0x80000002, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x61) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000200)={@loopback, 0x57, r5}) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x100013c, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc00000, 0x0, &(0x7f0000000000/0xc00000)=nil) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="bab43125378b0a02474cfe1d2d03f5ff7aa2bfbf2990f617e97ef24588fc9e9e3d931b588e6faa3d3cda553506466b6a32ae53aca570030000001c73f1ba32fb5a31833bf81916c1cff8b91472d18ef204ab8bf94c6b4d8582d8a9226209a8110ae9ec9684b7c55aeb905a8e18a4186c911c1ea8250d07a26b000000000000"], 0x6) 198.122206ms ago: executing program 5 (id=244): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = socket(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES32=r1], 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000140)={0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000609000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003e8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x802}, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x12, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r6 = dup3(r3, r2, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@flat=@handle={0x73682a85, 0x1, 0xfffffffe}, @fda={0x66646185, 0x2, 0x0, 0x37}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) 104.165157ms ago: executing program 6 (id=245): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1c20000035020000140035007465616d5f736c6176655f31000000001800348014"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/207, 0xcf}], 0x1, 0xa3, 0x800d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) 43.129294ms ago: executing program 7 (id=246): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$loop(&(0x7f00000007c0), 0x10000, 0x100) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f00000009c0)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3d, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x8, 0x1, 0x80000000}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0x36}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x2400c080) recvmsg(0xffffffffffffffff, 0x0, 0x10000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 0s ago: executing program 8 (id=247): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r3, 0x51e}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={0x0, 0x0, r2, r4, 0xe, 0x81, 0xa, 0x9, {0x4, 0x3c3d, 0x2, 0xb8, 0x4, 0xebe9, 0xcd54, 0x9, 0x5, 0x90, 0xaf36, 0x7, 0x4, 0x8, "0002891a2b0e4b9935069338a9b12ef0d295d0e6bfd080808779e7cd8966615d"}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) close(0xffffffffffffffff) socketpair(0x27, 0x3, 0x8000, &(0x7f0000000240)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x5, 0xffffbffb, 0xffffffff, 0x515f3157, 0x4, "1c00000000000000ebff5f33e45206fb00"}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x4}, 0x0, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000004c0)={0x4, 0x3, 0x2c00, 0xcb, &(0x7f00000003c0)=""/203, 0xe9, &(0x7f0000000540)=""/233, 0xaa, &(0x7f0000000780)=""/170}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}}, 0x24004000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ][ T5839] team0: Port device team_slave_0 added [ 72.073924][ T5844] team0: Port device team_slave_0 added [ 72.082053][ T5840] team0: Port device team_slave_1 added [ 72.089893][ T5839] team0: Port device team_slave_1 added [ 72.113976][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.126460][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.126802][ T5832] Bluetooth: hci3: command tx timeout [ 72.138676][ T5844] team0: Port device team_slave_1 added [ 72.206042][ T5838] Bluetooth: hci0: command tx timeout [ 72.211923][ T5832] Bluetooth: hci2: command tx timeout [ 72.219969][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.227881][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.253827][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.275588][ T5843] team0: Port device team_slave_0 added [ 72.286086][ T5838] Bluetooth: hci1: command tx timeout [ 72.291889][ T5832] Bluetooth: hci4: command tx timeout [ 72.300303][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.307745][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.333699][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.345442][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.352576][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.378694][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.401792][ T5843] team0: Port device team_slave_1 added [ 72.408693][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.415633][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.441596][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.453274][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.460793][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.487141][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.509419][ T5841] hsr_slave_0: entered promiscuous mode [ 72.516045][ T5841] hsr_slave_1: entered promiscuous mode [ 72.533420][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.540487][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.566514][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.619417][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.626488][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.652920][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.665707][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.672711][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.698741][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.755166][ T5839] hsr_slave_0: entered promiscuous mode [ 72.761853][ T5839] hsr_slave_1: entered promiscuous mode [ 72.768491][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.774286][ T5839] Cannot create hsr debugfs directory [ 72.802915][ T5840] hsr_slave_0: entered promiscuous mode [ 72.809237][ T5840] hsr_slave_1: entered promiscuous mode [ 72.815253][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 72.821053][ T5840] Cannot create hsr debugfs directory [ 72.927640][ T5844] hsr_slave_0: entered promiscuous mode [ 72.933874][ T5844] hsr_slave_1: entered promiscuous mode [ 72.940259][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 72.946233][ T5844] Cannot create hsr debugfs directory [ 72.975304][ T5843] hsr_slave_0: entered promiscuous mode [ 72.981667][ T5843] hsr_slave_1: entered promiscuous mode [ 72.988122][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 72.993844][ T5843] Cannot create hsr debugfs directory [ 73.457831][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.471858][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.481851][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.501094][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.562067][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.578534][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.606782][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.618201][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.694488][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.705123][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.715349][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.728556][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.844884][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.854948][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.888350][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.915242][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.925698][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.985656][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.998986][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.011012][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.029761][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.038184][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.061306][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.068592][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.113292][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.128216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.135307][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.192947][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.206337][ T5832] Bluetooth: hci3: command tx timeout [ 74.213212][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.242460][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.249590][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.286137][ T5838] Bluetooth: hci0: command tx timeout [ 74.291638][ T5832] Bluetooth: hci2: command tx timeout [ 74.300201][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.307368][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.338153][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.376725][ T5832] Bluetooth: hci4: command tx timeout [ 74.382173][ T5832] Bluetooth: hci1: command tx timeout [ 74.407312][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.414455][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.441130][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.448260][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.494577][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.517867][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.552978][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.584635][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.607734][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.630053][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.637258][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.647465][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.654558][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.663775][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.670883][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.683417][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.729846][ T774] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.736973][ T774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.764704][ T5839] veth0_vlan: entered promiscuous mode [ 74.808812][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.832751][ T5839] veth1_vlan: entered promiscuous mode [ 74.873091][ T5841] veth0_vlan: entered promiscuous mode [ 74.891017][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.929045][ T5841] veth1_vlan: entered promiscuous mode [ 74.980930][ T5839] veth0_macvtap: entered promiscuous mode [ 75.023154][ T5839] veth1_macvtap: entered promiscuous mode [ 75.035542][ T5840] veth0_vlan: entered promiscuous mode [ 75.052751][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.064016][ T5841] veth0_macvtap: entered promiscuous mode [ 75.073881][ T5841] veth1_macvtap: entered promiscuous mode [ 75.091938][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.105494][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.132258][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.141390][ T5840] veth1_vlan: entered promiscuous mode [ 75.163639][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.176323][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.210305][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.221995][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.251455][ T5843] veth0_vlan: entered promiscuous mode [ 75.258173][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267337][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.308061][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.321208][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.369227][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.378763][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.389413][ T5840] veth0_macvtap: entered promiscuous mode [ 75.398703][ T5843] veth1_vlan: entered promiscuous mode [ 75.428954][ T5840] veth1_macvtap: entered promiscuous mode [ 75.451282][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.461635][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.512003][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.533916][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.542310][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.554126][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.561711][ T5844] veth0_vlan: entered promiscuous mode [ 75.598182][ T5844] veth1_vlan: entered promiscuous mode [ 75.611663][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.628172][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.650296][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.660938][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.681235][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.681841][ T5843] veth0_macvtap: entered promiscuous mode [ 75.695669][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.715091][ T5843] veth1_macvtap: entered promiscuous mode [ 75.739709][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.750055][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.780389][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.792746][ T5844] veth0_macvtap: entered promiscuous mode [ 75.817022][ T5844] veth1_macvtap: entered promiscuous mode [ 75.874903][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.910237][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.944449][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.000024][ T2949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.010226][ T2949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028123][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.055288][ T2949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.065551][ T2949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.107303][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.113406][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.136166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.145410][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.206323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.214473][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.215978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.236646][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.261985][ T5922] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.276092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.306871][ T5832] Bluetooth: hci3: command tx timeout [ 76.426411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.436699][ T5832] Bluetooth: hci2: command tx timeout [ 76.442126][ T5832] Bluetooth: hci0: command tx timeout [ 76.448492][ T5832] Bluetooth: hci1: command tx timeout [ 76.453886][ T5832] Bluetooth: hci4: command tx timeout [ 76.485084][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.636262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.692734][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.701254][ T5882] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.711075][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.042184][ T774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.050899][ T774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.076253][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 77.125326][ T5882] usb 5-1: config 0 has no interfaces? [ 77.146523][ T5882] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.195974][ T5882] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 77.204012][ T5882] usb 5-1: Manufacturer: syz [ 77.331567][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.377038][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.425353][ T5882] usb 5-1: config 0 descriptor?? [ 77.538206][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.576238][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.063930][ T774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.074470][ T774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.153248][ T5935] fuse: Bad value for 'fd' [ 78.276256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 78.367470][ T5838] Bluetooth: hci3: command tx timeout [ 78.527270][ T5838] Bluetooth: hci4: command tx timeout [ 78.527286][ T5832] Bluetooth: hci1: command tx timeout [ 78.532855][ T5838] Bluetooth: hci0: command tx timeout [ 78.538227][ T53] Bluetooth: hci2: command tx timeout [ 78.815517][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 78.824472][ T5948] team0: Port device batadv1 added [ 78.941917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.076628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.091792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.695197][ T5908] usb 5-1: USB disconnect, device number 2 [ 80.901339][ T5864] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.376427][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 81.435614][ T5864] usb 5-1: config 0 has no interfaces? [ 81.470813][ T5864] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 81.601623][ T5864] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 81.643549][ T5864] usb 5-1: Manufacturer: syz [ 82.061739][ T5864] usb 5-1: config 0 descriptor?? [ 82.186229][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.248559][ T5985] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13'. [ 82.582873][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 82.625616][ T5882] usb 1-1: config 0 has no interfaces? [ 82.633017][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 82.754597][ T5882] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 82.870142][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.907718][ T5882] usb 1-1: Manufacturer: syz [ 82.933803][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.942426][ T5987] team0: Port device batadv1 added [ 83.157173][ T5882] usb 1-1: config 0 descriptor?? [ 83.773951][ T5882] usb 5-1: USB disconnect, device number 3 [ 84.515977][ T5864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 84.726075][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 84.790550][ T5864] usb 3-1: config 0 has no interfaces? [ 84.805810][ T5864] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.874047][ T5864] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.900900][ T5864] usb 3-1: Manufacturer: syz [ 84.927392][ T5864] usb 3-1: config 0 descriptor?? [ 85.703774][ T5829] usb 1-1: USB disconnect, device number 2 [ 86.372833][ T6028] block device autoloading is deprecated and will be removed. [ 86.861591][ T6021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 86.869706][ T9] cfg80211: failed to load regulatory.db [ 87.009764][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.209883][ T6021] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.233444][ T6021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.240108][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.252714][ T6021] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 87.277718][ T6021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.284141][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.302477][ T6021] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 87.324838][ T6021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.336616][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.350337][ T6021] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 87.374707][ T6021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 87.392498][ T6021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.477300][ T6021] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 87.605796][ T5864] usb 3-1: USB disconnect, device number 2 [ 88.145319][ T6044] bridge0: port 3(veth0_to_bridge) entered blocking state [ 88.155340][ T6044] bridge0: port 3(veth0_to_bridge) entered disabled state [ 88.168582][ T6044] veth0_to_bridge: entered allmulticast mode [ 88.184258][ T6044] veth0_to_bridge: entered promiscuous mode [ 88.197608][ T6044] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.222961][ T6044] bridge0: port 3(veth0_to_bridge) entered blocking state [ 88.230346][ T6044] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 88.485603][ T6050] process 'syz.1.23' launched './file1' with NULL argv: empty string added [ 88.530629][ T6050] overlayfs: missing 'lowerdir' [ 88.557160][ T6050] fuse: Bad value for 'fd' [ 88.860905][ T6057] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.930479][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.256024][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.331253][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.338573][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.343033][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.344610][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.356873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 89.376372][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.388858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 89.402105][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.414423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 89.427230][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.439436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 89.452192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.464401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 89.571139][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 90.051058][ T9] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 90.077267][ T9] usb 1-1: config 0 has no interface number 0 [ 90.083428][ T9] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 91.010909][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 91.411486][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 91.417622][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.423664][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.536930][ T9] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 91.646130][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 94.079756][ T9] usb 1-1: config 0 interface 113 has no altsetting 0 [ 94.136290][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.143046][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.154580][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.345906][ C1] net_ratelimit: 13995 callbacks suppressed [ 94.345924][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 94.364605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.376764][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.388952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.401201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 94.413941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 94.426168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.438352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 94.450769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 94.463491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 95.966186][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.972245][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.454197][ C0] sched: DL replenish lagged too much [ 99.046192][ T9] usb 1-1: string descriptor 0 read error: -71 [ 99.055313][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 99.356128][ C1] net_ratelimit: 14573 callbacks suppressed [ 99.356144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.374522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 99.387830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.400082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.412402][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.424725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 99.438132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 99.450392][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.462844][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 99.475226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 99.812272][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.009358][ T9] usb 1-1: config 0 descriptor?? [ 100.076202][ T9] usb 1-1: can't set config #0, error -71 [ 100.149552][ T9] usb 1-1: USB disconnect, device number 3 [ 102.714605][ T6070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.802414][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 103.790477][ T6080] team0: Port device batadv2 added [ 104.366228][ C1] net_ratelimit: 11043 callbacks suppressed [ 104.366246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 104.385359][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.397586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.409809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.422499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 104.435202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.447373][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.459561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 104.472563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 104.485248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 106.693976][ T6090] overlayfs: missing 'lowerdir' [ 107.603593][ T6098] fuse: Bad value for 'fd' [ 107.786610][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.798629][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.810817][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.850318][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.858407][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.376023][ C1] net_ratelimit: 11529 callbacks suppressed [ 109.376038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.394262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 109.407090][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.419276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.431475][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.443942][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.456195][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 109.468946][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 109.481189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.493404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 109.621828][ T6092] team0: Device gtp0 is of different type [ 109.896676][ T5824] Bluetooth: hci3: command tx timeout [ 111.508794][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.517859][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.525789][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.534317][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.554479][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.762750][ T6107] hub 9-0:1.0: USB hub found [ 111.769229][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.850463][ T6107] hub 9-0:1.0: 1 port detected [ 112.012602][ T5832] Bluetooth: hci3: command tx timeout [ 113.341376][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.650456][ T5832] Bluetooth: hci1: command tx timeout [ 114.047891][ T5832] Bluetooth: hci3: command tx timeout [ 114.385952][ C1] net_ratelimit: 12669 callbacks suppressed [ 114.385967][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 114.404174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.416408][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 114.429108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.441287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.453498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.466003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.478418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 114.490873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 114.503104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 114.857427][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.240001][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.726067][ T5832] Bluetooth: hci1: command tx timeout [ 116.126289][ T5832] Bluetooth: hci3: command tx timeout [ 117.965778][ T5832] Bluetooth: hci1: command tx timeout [ 119.396297][ C1] net_ratelimit: 14108 callbacks suppressed [ 119.396317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.414450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.426952][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 119.439178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.451388][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 119.464036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.476182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.488595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.501040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 119.513229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.085955][ T5832] Bluetooth: hci1: command tx timeout [ 124.405897][ C1] net_ratelimit: 12794 callbacks suppressed [ 124.405916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 124.424591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.436819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.449319][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.462056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.474653][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 124.487198][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 124.499418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.511907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 124.524515][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.906096][ T13] bridge_slave_1: left allmulticast mode [ 124.911968][ T13] bridge_slave_1: left promiscuous mode [ 125.607148][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.662246][ T6139] overlayfs: missing 'lowerdir' [ 125.723849][ T6140] fuse: Bad value for 'fd' [ 126.121111][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.451386][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.500074][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.510035][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.517828][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.216901][ T13] bridge_slave_0: left allmulticast mode [ 127.222591][ T13] bridge_slave_0: left promiscuous mode [ 127.604715][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.549669][ T6154] overlayfs: missing 'lowerdir' [ 128.606103][ T5824] Bluetooth: hci0: command tx timeout [ 128.836917][ T6153] fuse: Bad value for 'fd' [ 129.416392][ C1] net_ratelimit: 12028 callbacks suppressed [ 129.416414][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 129.434737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.446957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 129.460078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 129.472446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.484927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.497400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.509779][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 129.522284][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 129.534516][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 130.686068][ T5824] Bluetooth: hci0: command tx timeout [ 130.985997][ T5829] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.216061][ T5829] usb 1-1: device descriptor read/64, error -71 [ 131.526301][ T5829] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.579882][ T6167] overlayfs: missing 'lowerdir' [ 131.621774][ T6167] fuse: Bad value for 'fd' [ 131.861880][ T5829] usb 1-1: device descriptor read/64, error -71 [ 132.270680][ T5829] usb usb1-port1: attempt power cycle [ 132.695933][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.746162][ T5829] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 132.776108][ T5824] Bluetooth: hci0: command tx timeout [ 132.811091][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.848738][ T13] bond0 (unregistering): Released all slaves [ 132.866833][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873296][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.426767][ C1] net_ratelimit: 11149 callbacks suppressed [ 134.426788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.445021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.457624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 134.469973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.482282][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 134.495261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 134.507518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.519825][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.533154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.545482][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 134.865315][ T5824] Bluetooth: hci0: command tx timeout [ 136.731634][ T5829] usb 1-1: device descriptor read/8, error -71 [ 137.279664][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 137.380178][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 137.714367][ T6174] overlayfs: missing 'lowerdir' [ 138.863111][ T6175] fuse: Bad value for 'fd' [ 139.436144][ C1] net_ratelimit: 11020 callbacks suppressed [ 139.436165][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.454916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 139.467317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.480761][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.493358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 139.505950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.518464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.531005][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 139.544549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 139.557072][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 140.155982][ T13] hsr_slave_0: left promiscuous mode [ 140.246028][ T13] hsr_slave_1: left promiscuous mode [ 140.256453][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.307951][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.086095][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.093525][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.357896][ T13] veth1_macvtap: left promiscuous mode [ 141.363683][ T13] veth0_macvtap: left promiscuous mode [ 141.422023][ T13] veth1_vlan: left promiscuous mode [ 141.431102][ T13] veth0_vlan: left promiscuous mode [ 142.285171][ T6195] fuse: Bad value for 'fd' [ 144.445942][ C1] net_ratelimit: 12953 callbacks suppressed [ 144.445962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.464338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 144.476701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.489018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.501406][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 144.514511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.526861][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.539268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.552669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.565105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 144.909114][ T6201] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.155973][ T5829] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 145.398660][ T5829] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 145.427348][ T5829] usb 1-1: config 0 has no interface number 0 [ 145.452591][ T5829] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 145.478034][ T5829] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 145.490365][ T5829] usb 1-1: config 0 interface 113 has no altsetting 0 [ 145.500426][ T5829] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 145.519370][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.589061][ T5829] usb 1-1: Product: syz [ 145.593274][ T5829] usb 1-1: Manufacturer: syz [ 145.772366][ T5829] usb 1-1: SerialNumber: syz [ 145.900380][ T6214] hub 9-0:1.0: USB hub found [ 145.906949][ T6214] hub 9-0:1.0: 1 port detected [ 145.955191][ T5829] usb 1-1: config 0 descriptor?? [ 146.002026][ C0] usb 1-1: NFC: Urb failure (status -71) [ 146.011123][ T5829] usb 1-1: NFC: Unable to get FW version [ 146.123204][ T5829] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 146.344122][ T5829] usb 1-1: USB disconnect, device number 8 [ 147.676940][ T13] team0 (unregistering): Port device team_slave_1 removed [ 147.739505][ T13] team0 (unregistering): Port device team_slave_0 removed [ 148.059999][ T6221] overlayfs: missing 'lowerdir' [ 148.094524][ T6221] fuse: Bad value for 'fd' [ 149.456034][ C1] net_ratelimit: 10612 callbacks suppressed [ 149.456049][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.474334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.486561][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 149.499702][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.511903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.524118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.537646][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.549838][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.562263][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 149.574489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.780790][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 149.817617][ T6215] team0: Port device batadv2 added [ 150.648371][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.791315][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.886417][ T6111] bridge_slave_0: entered allmulticast mode [ 150.908750][ T6111] bridge_slave_0: entered promiscuous mode [ 151.167244][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.174781][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.223682][ T6111] bridge_slave_1: entered allmulticast mode [ 151.370460][ T6111] bridge_slave_1: entered promiscuous mode [ 152.293939][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.326094][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.333381][ T6100] bridge_slave_0: entered allmulticast mode [ 152.381892][ T6100] bridge_slave_0: entered promiscuous mode [ 154.466066][ C1] net_ratelimit: 14013 callbacks suppressed [ 154.466082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.484689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 154.496944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.509125][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.521329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 154.533493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.545613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.557769][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 154.570405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.582533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.476099][ C1] net_ratelimit: 17329 callbacks suppressed [ 159.476114][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.494229][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.506673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 159.518868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.531041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 159.543303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 159.555513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.567692][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 159.579855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 159.592575][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.183851][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.194373][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.292404][ T6247] binder: 6243:6247 ioctl 4018620d 0 returned -22 [ 163.300725][ T6247] binder: 6243:6247 ioctl c018620c 200000000380 returned -1 [ 163.332100][ T6100] bridge_slave_1: entered allmulticast mode [ 163.428366][ T6100] bridge_slave_1: entered promiscuous mode [ 163.906676][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.487187][ C1] net_ratelimit: 12983 callbacks suppressed [ 164.487210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.505663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.518233][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.532353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.544735][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.557199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 164.569414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.581560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 164.593787][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 164.606140][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 164.910996][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.484640][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.496105][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.505140][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.513376][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.526124][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.593877][ T6111] team0: Port device team_slave_0 added [ 165.639353][ T6111] team0: Port device team_slave_1 added [ 167.355069][ T6269] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 167.445060][ T6275] netlink: 'syz.3.52': attribute type 10 has an invalid length. [ 167.565957][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.725981][ T5832] Bluetooth: hci5: command tx timeout [ 167.857079][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 167.974066][ T5829] usb 1-1: config 0 has no interfaces? [ 169.495893][ C1] net_ratelimit: 10852 callbacks suppressed [ 169.495914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.515448][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.527817][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.540492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 169.552743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.565107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 169.577478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 169.589743][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.601982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 169.614303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 169.805975][ T5832] Bluetooth: hci5: command tx timeout [ 171.887136][ T5832] Bluetooth: hci5: command tx timeout [ 172.088260][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.218796][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.227928][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.238767][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.247502][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.257923][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.769646][ T6269] team0: Port device dummy0 added [ 172.923129][ T6275] team0: Port device dummy0 removed [ 172.949474][ T6275] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.976498][ T6145] chnl_net:caif_netlink_parms(): no params data found [ 173.110366][ T5829] usb 1-1: string descriptor 0 read error: -32 [ 173.260703][ T5829] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 173.306633][ T5829] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 173.433488][ T5829] usb 1-1: config 0 descriptor?? [ 173.459585][ T5829] usb 1-1: can't set config #0, error -32 [ 173.628536][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.015892][ T5832] Bluetooth: hci5: command tx timeout [ 174.144372][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.285982][ T5832] Bluetooth: hci1: command tx timeout [ 174.506149][ C1] net_ratelimit: 11261 callbacks suppressed [ 174.506170][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 174.524458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.536661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.549089][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 174.561344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.573620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.585801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 174.598460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 174.610803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.623097][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 174.713757][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.366078][ T5832] Bluetooth: hci1: command tx timeout [ 176.442159][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.450471][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.458417][ T6145] bridge_slave_0: entered allmulticast mode [ 176.494734][ T6145] bridge_slave_0: entered promiscuous mode [ 177.155213][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.174056][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.193402][ T6145] bridge_slave_1: entered allmulticast mode [ 177.312493][ T6145] bridge_slave_1: entered promiscuous mode [ 178.524887][ T5832] Bluetooth: hci1: command tx timeout [ 179.170797][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.217305][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.515874][ C1] net_ratelimit: 14036 callbacks suppressed [ 179.515894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 179.534859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.547065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.559257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.572039][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.584219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.596892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 179.609241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.621413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.633780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 180.617929][ T6322] overlayfs: missing 'lowerdir' [ 180.623161][ T5832] Bluetooth: hci1: command tx timeout [ 181.618144][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.100476][ T6325] fuse: Bad value for 'fd' [ 183.728466][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.242806][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.252144][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.262339][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.271596][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.279848][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.525929][ C1] net_ratelimit: 13086 callbacks suppressed [ 184.525949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.544113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.556506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 184.568700][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.581066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 184.593292][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 184.605489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.617606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.629742][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 184.642276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.697791][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.857362][ T6283] chnl_net:caif_netlink_parms(): no params data found [ 185.943092][ T6262] chnl_net:caif_netlink_parms(): no params data found [ 187.335435][ T5832] Bluetooth: hci0: command tx timeout [ 187.766422][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.776519][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.792903][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.857755][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.877609][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.905225][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 188.946192][ T5829] usb 1-1: USB disconnect, device number 9 [ 189.406055][ T5832] Bluetooth: hci0: command tx timeout [ 189.535891][ C1] net_ratelimit: 14456 callbacks suppressed [ 189.535912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.554201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.566583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 189.579206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 189.591352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.603492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.616282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.628427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.640780][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:16:cc:35:8b:85:52, vlan:0) [ 189.652967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.052700][ T6358] Zero length message leads to an empty skb [ 190.059290][ T5832] Bluetooth: hci3: command tx timeout [ 190.285903][ T6262] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.293082][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.322145][ T6262] bridge_slave_0: entered allmulticast mode [ 190.340568][ T6262] bridge_slave_0: entered promiscuous mode [ 190.369305][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.391681][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.414985][ T6283] bridge_slave_0: entered allmulticast mode [ 190.448291][ T6283] bridge_slave_0: entered promiscuous mode [ 190.473244][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.503309][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.524613][ T6283] bridge_slave_1: entered allmulticast mode [ 190.552652][ T6283] bridge_slave_1: entered promiscuous mode [ 190.627277][ T6262] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.654285][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.688107][ T6262] bridge_slave_1: entered allmulticast mode [ 190.697186][ T6262] bridge_slave_1: entered promiscuous mode [ 191.047750][ T6283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.099014][ T6283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.463750][ T6262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.498337][ T5832] Bluetooth: hci0: command tx timeout [ 191.759276][ T6373] overlayfs: missing 'lowerdir' [ 191.816891][ T6374] fuse: Bad value for 'fd' [ 191.887601][ T13] veth0_to_bridge: left allmulticast mode [ 191.893460][ T13] veth0_to_bridge: left promiscuous mode [ 191.918671][ T13] bridge0: port 3(veth0_to_bridge) entered disabled state [ 191.954370][ T13] bridge_slave_1: left allmulticast mode [ 191.962134][ T13] bridge_slave_1: left promiscuous mode [ 191.968243][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.006517][ T13] bridge_slave_0: left allmulticast mode [ 192.015909][ T13] bridge_slave_0: left promiscuous mode [ 192.044663][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.073211][ T13] bridge_slave_1: left allmulticast mode [ 192.079625][ T13] bridge_slave_1: left promiscuous mode [ 192.085414][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.097875][ T13] bridge_slave_0: left allmulticast mode [ 192.194362][ T5832] Bluetooth: hci3: command tx timeout [ 192.217217][ T13] bridge_slave_0: left promiscuous mode [ 192.222898][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.771405][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.783190][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.797460][ T13] bond0 (unregistering): Released all slaves [ 193.146542][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.162042][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.174514][ T13] bond0 (unregistering): Released all slaves [ 193.234955][ T6262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.342092][ T6283] team0: Port device team_slave_0 added [ 193.504557][ T6262] team0: Port device team_slave_0 added [ 193.519214][ T6283] team0: Port device team_slave_1 added [ 193.566592][ T5832] Bluetooth: hci0: command tx timeout [ 193.612462][ T6262] team0: Port device team_slave_1 added [ 193.687825][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 193.707977][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.714929][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.859919][ T6283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.879377][ T6283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.913363][ T6283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.962718][ T6283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.071400][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.080456][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.109298][ T6262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.123456][ T6262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.131010][ T6262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.195871][ T6262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.217265][ T5832] Bluetooth: hci3: command tx timeout [ 194.247242][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 194.301918][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.308898][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333453][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 194.801499][ T6283] hsr_slave_0: entered promiscuous mode [ 194.809510][ T6283] hsr_slave_1: entered promiscuous mode [ 194.816687][ T6283] debugfs: 'hsr0' already exists in 'hsr' [ 194.828857][ T6283] Cannot create hsr debugfs directory [ 195.198507][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.216001][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.228139][ T6341] bridge_slave_0: entered allmulticast mode [ 195.287142][ T6341] bridge_slave_0: entered promiscuous mode [ 195.309234][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.316847][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.325180][ T6341] bridge_slave_1: entered allmulticast mode [ 195.341338][ T6341] bridge_slave_1: entered promiscuous mode [ 195.430066][ T6262] hsr_slave_0: entered promiscuous mode [ 195.436514][ T6262] hsr_slave_1: entered promiscuous mode [ 195.442612][ T6262] debugfs: 'hsr0' already exists in 'hsr' [ 195.449164][ T6262] Cannot create hsr debugfs directory [ 195.458720][ T13] hsr_slave_0: left promiscuous mode [ 195.464626][ T13] hsr_slave_1: left promiscuous mode [ 195.480909][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.488593][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.516839][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.525368][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.579477][ T13] hsr_slave_0: left promiscuous mode [ 195.586159][ T13] hsr_slave_1: left promiscuous mode [ 195.592055][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.599505][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.609915][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.621565][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.668857][ T13] veth1_macvtap: left promiscuous mode [ 195.675084][ T13] veth0_macvtap: left promiscuous mode [ 195.681326][ T13] veth1_vlan: left promiscuous mode [ 195.686773][ T13] veth0_vlan: left promiscuous mode [ 195.709285][ T13] veth1_macvtap: left promiscuous mode [ 195.714803][ T13] veth0_macvtap: left promiscuous mode [ 195.720680][ T13] veth1_vlan: left promiscuous mode [ 195.729997][ T13] veth0_vlan: left promiscuous mode [ 196.286034][ T5832] Bluetooth: hci3: command tx timeout [ 196.494115][ T13] team0 (unregistering): Port device team_slave_1 removed [ 196.524693][ T13] team0 (unregistering): Port device team_slave_0 removed [ 197.042834][ T13] team0 (unregistering): Port device team_slave_1 removed [ 197.072977][ T13] team0 (unregistering): Port device team_slave_0 removed [ 197.441451][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.452020][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.460573][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.468174][ T6334] bridge_slave_0: entered allmulticast mode [ 197.477737][ T6334] bridge_slave_0: entered promiscuous mode [ 197.506855][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.548918][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.557239][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.564493][ T6334] bridge_slave_1: entered allmulticast mode [ 197.581622][ T6334] bridge_slave_1: entered promiscuous mode [ 197.713364][ T6341] team0: Port device team_slave_0 added [ 197.731148][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.802005][ T6341] team0: Port device team_slave_1 added [ 197.818241][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.955772][ T6334] team0: Port device team_slave_0 added [ 197.974965][ T6334] team0: Port device team_slave_1 added [ 198.019412][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.026603][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.057014][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.122908][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.133304][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.159540][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.225122][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.232531][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.258705][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.300543][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.307660][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.335038][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.459410][ T6341] hsr_slave_0: entered promiscuous mode [ 198.466543][ T6341] hsr_slave_1: entered promiscuous mode [ 198.563849][ T6283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.592179][ T6435] overlayfs: missing 'lowerdir' [ 198.604180][ T6283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.662172][ T6435] fuse: Bad value for 'fd' [ 198.878649][ T6334] hsr_slave_0: entered promiscuous mode [ 198.891923][ T6334] hsr_slave_1: entered promiscuous mode [ 198.902471][ T6334] debugfs: 'hsr0' already exists in 'hsr' [ 198.911156][ T6334] Cannot create hsr debugfs directory [ 198.917279][ T6283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.076649][ T6283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.125087][ T6262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.531412][ T6262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.568250][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.818890][ T6262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.909247][ T6262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.989316][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.351659][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.640117][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.835134][ T6341] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 200.970273][ T6473] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 200.978818][ T6473] team0: Port device batadv3 added [ 200.984672][ T6341] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 201.024917][ T6341] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 201.097376][ T6283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.134443][ T6341] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 201.212983][ T13] bridge_slave_1: left allmulticast mode [ 201.221216][ T13] bridge_slave_1: left promiscuous mode [ 201.227669][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.239237][ T13] bridge_slave_0: left allmulticast mode [ 201.244991][ T13] bridge_slave_0: left promiscuous mode [ 201.252541][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.271930][ T13] bridge_slave_1: left allmulticast mode [ 201.277948][ T13] bridge_slave_1: left promiscuous mode [ 201.283716][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.302668][ T13] bridge_slave_0: left allmulticast mode [ 201.308752][ T13] bridge_slave_0: left promiscuous mode [ 201.314584][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.326965][ T13] bridge_slave_1: left allmulticast mode [ 201.332658][ T13] bridge_slave_1: left promiscuous mode [ 201.338925][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.348220][ T13] bridge_slave_0: left allmulticast mode [ 201.353964][ T13] bridge_slave_0: left promiscuous mode [ 201.359822][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.374179][ T13] bridge_slave_1: left allmulticast mode [ 201.380714][ T13] bridge_slave_1: left promiscuous mode [ 201.386744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.397544][ T13] bridge_slave_0: left allmulticast mode [ 201.403311][ T13] bridge_slave_0: left promiscuous mode [ 201.411798][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.714378][ T6493] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 201.793339][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.804438][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.817678][ T13] bond0 (unregistering): Released all slaves [ 201.892269][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.902937][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.913088][ T13] bond0 (unregistering): Released all slaves [ 201.986036][ T5882] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 201.988395][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.004227][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.014590][ T13] bond0 (unregistering): Released all slaves [ 202.080815][ T13] bond0 (unregistering): Released all slaves [ 202.098126][ T6283] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.156929][ T5882] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 202.166351][ T5882] usb 4-1: config 0 has no interface number 0 [ 202.172488][ T5882] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 202.191860][ T5882] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.209050][ T6334] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.217119][ T5882] usb 4-1: config 0 interface 113 has no altsetting 0 [ 202.247041][ T6334] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.254295][ T5882] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 202.265188][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.270991][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.274008][ T5882] usb 4-1: Product: syz [ 202.280339][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.297544][ T5882] usb 4-1: Manufacturer: syz [ 202.307233][ T5882] usb 4-1: SerialNumber: syz [ 202.321699][ T6334] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.343284][ T5882] usb 4-1: config 0 descriptor?? [ 202.362419][ C0] usb 4-1: NFC: Urb failure (status -71) [ 202.365391][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.370152][ T5882] usb 4-1: NFC: Unable to get FW version [ 202.375241][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.381778][ T5882] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 202.439196][ T6334] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.593480][ T6262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.661981][ T5909] usb 4-1: USB disconnect, device number 2 [ 202.722497][ T13] hsr_slave_0: left promiscuous mode [ 202.742254][ T13] hsr_slave_1: left promiscuous mode [ 202.753254][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.761194][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.770699][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.779660][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.808521][ T13] veth1_macvtap: left promiscuous mode [ 202.814222][ T13] veth0_macvtap: left promiscuous mode [ 202.821871][ T13] veth1_vlan: left promiscuous mode [ 202.827335][ T13] veth0_vlan: left promiscuous mode [ 202.978753][ T13] team0 (unregistering): Port device batadv2 removed [ 203.000499][ T13] team0 (unregistering): Port device batadv1 removed [ 203.305339][ T13] team0 (unregistering): Port device team_slave_1 removed [ 203.336833][ T13] team0 (unregistering): Port device team_slave_0 removed [ 204.417796][ T13] team0 (unregistering): Port device team_slave_1 removed [ 204.442709][ T13] team0 (unregistering): Port device team_slave_0 removed [ 204.510160][ T6524] overlayfs: missing 'lowerdir' [ 204.521338][ T6524] fuse: Bad value for 'fd' [ 204.983337][ T6283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.058691][ T6262] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.117111][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.133158][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.140375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.377697][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.433829][ T6283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.492608][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.499747][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.529402][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.562925][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.570107][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.750850][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.768993][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.776179][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.859814][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.867002][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.924960][ T6283] veth0_vlan: entered promiscuous mode [ 205.962836][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.970056][ T6237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.970693][ T6539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.068355][ T6283] veth1_vlan: entered promiscuous mode [ 206.188750][ T6262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.266865][ T5829] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 206.292828][ T6283] veth0_macvtap: entered promiscuous mode [ 206.310044][ T6283] veth1_macvtap: entered promiscuous mode [ 206.332958][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.423173][ T6262] veth0_vlan: entered promiscuous mode [ 206.437264][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.451832][ T5829] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 206.468080][ T5829] usb 4-1: config 0 has no interface number 0 [ 206.471093][ T6262] veth1_vlan: entered promiscuous mode [ 206.480614][ T5829] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 206.508291][ T5829] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.511831][ T6283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.542959][ T5829] usb 4-1: config 0 interface 113 has no altsetting 0 [ 206.559959][ T5829] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 206.578656][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.586308][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.600882][ T5829] usb 4-1: Product: syz [ 206.602381][ T2997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.613947][ T5829] usb 4-1: Manufacturer: syz [ 206.613967][ T5829] usb 4-1: SerialNumber: syz [ 206.619748][ T5829] usb 4-1: config 0 descriptor?? [ 206.649685][ C0] usb 4-1: NFC: Urb failure (status -71) [ 206.649689][ T2997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.668923][ T5829] usb 4-1: NFC: Unable to get FW version [ 206.681874][ T5829] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 206.704521][ T2997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.719370][ T2997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.750594][ T6341] veth0_vlan: entered promiscuous mode [ 206.792780][ T6341] veth1_vlan: entered promiscuous mode [ 206.811143][ T6262] veth0_macvtap: entered promiscuous mode [ 206.830888][ T6262] veth1_macvtap: entered promiscuous mode [ 206.888065][ T24] usb 4-1: USB disconnect, device number 3 [ 206.973549][ T6334] veth0_vlan: entered promiscuous mode [ 206.985240][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.010292][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.024818][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.024890][ T6341] veth0_macvtap: entered promiscuous mode [ 207.070761][ T6262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.120586][ T6334] veth1_vlan: entered promiscuous mode [ 207.152483][ T6064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.163663][ T6064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.190985][ T6341] veth1_macvtap: entered promiscuous mode [ 207.207118][ T6063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.214968][ T6063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.224579][ T6064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.257640][ T6064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.363758][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.390458][ T6334] veth0_macvtap: entered promiscuous mode [ 207.416075][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.425177][ T6334] veth1_macvtap: entered promiscuous mode [ 207.444755][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.470065][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.581694][ T6063] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.596813][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.653406][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.661453][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.668009][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.971589][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.149541][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.185225][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.835034][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.896267][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.977862][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.002428][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.156871][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.164727][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.399814][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.432787][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.473537][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.503291][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.609418][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.621692][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.185913][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.536130][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 210.544420][ T10] usb 4-1: config 0 has no interfaces? [ 210.552322][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.576614][ T5864] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 210.655102][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.771125][ T5864] usb 7-1: Using ep0 maxpacket: 32 [ 210.784177][ T10] usb 4-1: Manufacturer: syz [ 210.799885][ T5864] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 210.813136][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.843275][ T10] usb 4-1: config 0 descriptor?? [ 211.046539][ T5864] usb 7-1: config 0 descriptor?? [ 211.482389][ T5864] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 211.634703][ T5864] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 211.651262][ T5864] dib0700: firmware download failed at 7 with -22 [ 213.391038][ T5909] usb 4-1: USB disconnect, device number 4 [ 213.666795][ T6642] overlayfs: missing 'lowerdir' [ 213.728493][ T6642] fuse: Bad value for 'fd' [ 213.915358][ T5928] usb 7-1: USB disconnect, device number 2 [ 214.795925][ T5925] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 214.955890][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 214.979327][ T5925] usb 4-1: config 0 has no interfaces? [ 214.987723][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.996790][ T5925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 215.006641][ T5925] usb 4-1: Manufacturer: syz [ 215.169815][ T5925] usb 4-1: config 0 descriptor?? [ 215.606272][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.615142][ T6673] team0: Port device batadv1 added [ 215.761181][ T6671] hub 9-0:1.0: USB hub found [ 215.776019][ T6671] hub 9-0:1.0: 1 port detected [ 217.681962][ T5928] usb 4-1: USB disconnect, device number 5 [ 217.843158][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.85'. [ 217.951837][ T6693] libceph: resolve '0..' (ret=-3): failed [ 218.517698][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 218.571785][ T6715] overlayfs: missing 'lowerdir' [ 218.748760][ T6715] fuse: Bad value for 'fd' [ 220.515916][ T6528] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 220.527240][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 220.537386][ T6743] team0: Port device batadv1 added [ 220.776248][ T6528] usb 9-1: Using ep0 maxpacket: 16 [ 220.824795][ T6528] usb 9-1: config 0 has no interfaces? [ 220.868105][ T6528] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 220.886322][ T6528] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 220.899116][ T6528] usb 9-1: Manufacturer: syz [ 220.915887][ T6528] usb 9-1: config 0 descriptor?? [ 221.107739][ T6754] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.116880][ T6754] team0: Port device batadv1 added [ 221.578963][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 221.593086][ T6759] team0: Port device batadv4 added [ 221.944516][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.959770][ T6763] team0: Port device batadv1 added [ 222.431817][ T6760] usb 9-1: USB disconnect, device number 2 [ 222.493575][ T6763] hub 9-0:1.0: USB hub found [ 222.499869][ T6763] hub 9-0:1.0: 1 port detected [ 222.841908][ T5909] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 223.452054][ T6773] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 223.558392][ T6773] team0: Port device batadv2 added [ 224.316335][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 224.466005][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 224.473396][ T10] usb 8-1: config 0 has no interfaces? [ 224.563872][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.768815][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.910446][ T10] usb 8-1: Manufacturer: syz [ 225.091226][ T10] usb 8-1: config 0 descriptor?? [ 225.620644][ T6801] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 225.704773][ T6801] team0: Port device batadv2 added [ 226.036096][ T6800] hub 9-0:1.0: USB hub found [ 226.043591][ T6800] hub 9-0:1.0: 1 port detected [ 227.396855][ T6528] usb 8-1: USB disconnect, device number 2 [ 227.496132][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 227.889665][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 227.902138][ T6828] team0: Port device batadv2 added [ 228.072245][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 228.090019][ T5909] usb 4-1: config 0 has no interfaces? [ 228.109283][ T5909] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.125551][ T5909] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.192080][ T5909] usb 4-1: Manufacturer: syz [ 228.226949][ T5909] usb 4-1: config 0 descriptor?? [ 229.821367][ T6846] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 229.842516][ T6846] team0: Port device batadv2 added [ 230.037063][ T6847] hub 9-0:1.0: USB hub found [ 230.079262][ T6847] hub 9-0:1.0: 1 port detected [ 230.223082][ T10] usb 4-1: USB disconnect, device number 6 [ 231.384170][ T6866] overlayfs: missing 'lowerdir' [ 231.529966][ T6869] fuse: Bad value for 'fd' [ 231.973519][ T6874] overlayfs: missing 'lowerdir' [ 232.026523][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 232.046719][ T6867] team0: Port device batadv3 added [ 232.223654][ T6874] fuse: Bad value for 'fd' [ 232.527236][ T6865] hub 9-0:1.0: USB hub found [ 232.568768][ T6865] hub 9-0:1.0: 1 port detected [ 233.186161][ T6887] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 233.264414][ T6887] team0: Port device batadv3 added [ 233.594526][ T6894] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 233.604969][ T6894] team0: Port device batadv3 added [ 233.801936][ T6886] hub 9-0:1.0: USB hub found [ 233.816024][ T6886] hub 9-0:1.0: 1 port detected [ 235.138780][ T6914] fuse: Bad value for 'fd' [ 235.817196][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 236.506174][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 236.522920][ T10] usb 8-1: config 0 has no interfaces? [ 236.668185][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.706654][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.734729][ T10] usb 8-1: Manufacturer: syz [ 236.755370][ T10] usb 8-1: config 0 descriptor?? [ 236.786093][ T6528] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 236.864874][ T6937] overlayfs: missing 'lowerdir' [ 236.878631][ T6937] fuse: Bad value for 'fd' [ 236.970389][ T6528] usb 9-1: Using ep0 maxpacket: 16 [ 237.227087][ T6528] usb 9-1: config 0 has no interfaces? [ 237.234042][ T6528] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.243710][ T6528] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.251984][ T6528] usb 9-1: Manufacturer: syz [ 237.414828][ T6528] usb 9-1: config 0 descriptor?? [ 239.143090][ T918] usb 8-1: USB disconnect, device number 3 [ 239.365938][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.432749][ T5928] usb 9-1: USB disconnect, device number 4 [ 239.545547][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 239.582616][ T43] usb 4-1: config 0 has no interfaces? [ 239.590702][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 239.675103][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 239.721868][ T43] usb 4-1: Manufacturer: syz [ 239.807969][ T43] usb 4-1: config 0 descriptor?? [ 239.861620][ T6970] hub 9-0:1.0: USB hub found [ 239.869091][ T6970] hub 9-0:1.0: 1 port detected [ 240.991200][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 241.021536][ T6971] team0: Port device batadv4 added [ 241.203357][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.310861][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 241.331560][ T6977] team0: Port device batadv3 added [ 242.094451][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 242.102847][ T7001] team0: Port device batadv4 added [ 242.161109][ T7001] hub 9-0:1.0: USB hub found [ 242.190697][ T918] usb 4-1: USB disconnect, device number 7 [ 242.221013][ T7001] hub 9-0:1.0: 1 port detected [ 242.418964][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.8.129'. [ 243.040126][ T7018] overlayfs: missing 'lowerdir' [ 243.141646][ T7019] fuse: Bad value for 'fd' [ 243.769568][ T7028] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 243.781091][ T7028] team0: Port device batadv5 added [ 243.888572][ T7028] hub 9-0:1.0: USB hub found [ 243.928287][ T7028] hub 9-0:1.0: 1 port detected [ 244.495904][ T6528] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 244.715959][ T6528] usb 7-1: Using ep0 maxpacket: 16 [ 244.756782][ T6528] usb 7-1: config 0 has no interfaces? [ 245.016045][ T6528] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 245.065918][ T6528] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.145659][ T6528] usb 7-1: Manufacturer: syz [ 245.185158][ T7042] netlink: 12 bytes leftover after parsing attributes in process `syz.7.136'. [ 245.223583][ T6528] usb 7-1: config 0 descriptor?? [ 245.258108][ T7042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.265506][ T7042] IPv6: NLM_F_CREATE should be set when creating new route [ 246.797805][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 246.816873][ T7064] team0: Port device batadv6 added [ 246.886779][ T7064] hub 9-0:1.0: USB hub found [ 246.947966][ T7064] hub 9-0:1.0: 1 port detected [ 247.227218][ T918] usb 7-1: USB disconnect, device number 3 [ 247.230137][ T7068] netlink: 'syz.7.141': attribute type 10 has an invalid length. [ 247.330451][ T7074] netlink: 'syz.7.141': attribute type 10 has an invalid length. [ 247.605939][ T7068] team0: Port device dummy0 added [ 247.745188][ T7074] team0: Port device dummy0 removed [ 247.783919][ T7074] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.817538][ T30] audit: type=1326 audit(1764645060.551:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7075 comm="syz.6.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879778f749 code=0xffff0000 [ 248.751693][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.144'. [ 249.949619][ T7120] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 250.410167][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 250.424813][ T7129] team0: Port device batadv5 added [ 250.663900][ T7129] hub 9-0:1.0: USB hub found [ 250.734997][ T7129] hub 9-0:1.0: 1 port detected [ 250.767772][ T7133] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 250.777042][ T7133] team0: Port device batadv5 added [ 252.112035][ T7139] overlayfs: missing 'lowerdir' [ 252.188923][ T7139] fuse: Bad value for 'fd' [ 254.731453][ T7176] overlayfs: missing 'lowerdir' [ 254.782806][ T7176] fuse: Bad value for 'fd' [ 255.741937][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749014][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.049940][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 257.058505][ T7211] team0: Port device batadv7 added [ 257.127781][ T7211] hub 9-0:1.0: USB hub found [ 257.146882][ T7211] hub 9-0:1.0: 1 port detected [ 257.900295][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 257.974152][ T7222] team0: Port device batadv6 added [ 258.331361][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.167'. [ 260.403305][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 260.439507][ T7265] team0: Port device batadv4 added [ 261.206327][ T7265] hub 9-0:1.0: USB hub found [ 261.220410][ T7265] hub 9-0:1.0: 1 port detected [ 261.625937][ T5928] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 262.129379][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 262.205659][ T5928] usb 6-1: config 0 has no interfaces? [ 262.246139][ T5928] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.289822][ T5928] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.315868][ T5928] usb 6-1: Manufacturer: syz [ 262.336052][ T5928] usb 6-1: config 0 descriptor?? [ 262.736838][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 263.029895][ T7296] team0: Port device batadv4 added [ 263.246280][ T7296] hub 9-0:1.0: USB hub found [ 263.296738][ T7296] hub 9-0:1.0: 1 port detected [ 263.813417][ T7312] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 263.828968][ T7312] team0: Port device batadv5 added [ 263.870966][ T7312] hub 9-0:1.0: USB hub found [ 263.877324][ T7312] hub 9-0:1.0: 1 port detected [ 263.953374][ T7313] overlayfs: missing 'lowerdir' [ 264.148055][ T7313] fuse: Bad value for 'fd' [ 264.432007][ T7322] overlayfs: missing 'lowerdir' [ 264.547492][ T7320] fuse: Bad value for 'fd' [ 264.778038][ T5908] usb 6-1: USB disconnect, device number 2 [ 266.156641][ T7347] netlink: 'syz.6.182': attribute type 10 has an invalid length. [ 266.207209][ T7346] netlink: 'syz.6.182': attribute type 10 has an invalid length. [ 266.284677][ T7347] team0: Port device dummy0 added [ 266.318539][ T7346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.343868][ T7346] team0: Failed to send options change via netlink (err -105) [ 266.370623][ T7346] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.380285][ T7346] team0: Port device dummy0 removed [ 266.461662][ T7346] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 267.318263][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 267.345146][ T7369] netlink: 'syz.6.186': attribute type 10 has an invalid length. [ 267.410512][ T7369] bond0: (slave dummy0): Releasing backup interface [ 267.508586][ T7373] netlink: 'syz.6.186': attribute type 10 has an invalid length. [ 267.583627][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 267.598182][ T7369] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 267.640741][ T7369] team0: Failed to send options change via netlink (err -105) [ 267.675500][ T7369] team0: Port device dummy0 added [ 267.688338][ T10] usb 9-1: config 0 has no interfaces? [ 267.713244][ T7373] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 267.768702][ T10] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 267.809525][ T10] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 267.820132][ T7373] team0: Failed to send options change via netlink (err -105) [ 267.839151][ T10] usb 9-1: Manufacturer: syz [ 267.844726][ T7373] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 267.880795][ T10] usb 9-1: config 0 descriptor?? [ 267.979300][ T7373] team0: Port device dummy0 removed [ 267.999546][ T7373] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.357057][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.187'. [ 268.518781][ T7386] fuse: Bad value for 'user_id' [ 268.524930][ T7386] fuse: Bad value for 'user_id' [ 269.606384][ T918] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 270.066049][ T918] usb 7-1: Using ep0 maxpacket: 16 [ 270.136364][ T918] usb 7-1: config 0 has no interfaces? [ 270.152113][ T918] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 270.161227][ T918] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 270.180361][ T918] usb 7-1: Manufacturer: syz [ 270.264270][ T918] usb 7-1: config 0 descriptor?? [ 270.325616][ T918] usb 9-1: USB disconnect, device number 5 [ 270.658315][ T7426] FAULT_INJECTION: forcing a failure. [ 270.658315][ T7426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 270.835495][ T7426] CPU: 1 UID: 0 PID: 7426 Comm: syz.3.195 Not tainted syzkaller #0 PREEMPT(full) [ 270.835525][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.835546][ T7426] Call Trace: [ 270.835557][ T7426] [ 270.835565][ T7426] dump_stack_lvl+0x189/0x250 [ 270.835597][ T7426] ? irqentry_exit+0x74/0x90 [ 270.835620][ T7426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.835655][ T7426] should_fail_ex+0x414/0x560 [ 270.835677][ T7426] _copy_from_iter+0x1de/0x1790 [ 270.835705][ T7426] ? rcu_is_watching+0x15/0xb0 [ 270.835727][ T7426] ? kmalloc_reserve+0xbd/0x290 [ 270.835746][ T7426] ? __pfx__copy_from_iter+0x10/0x10 [ 270.835771][ T7426] ? __build_skb_around+0x262/0x3f0 [ 270.835791][ T7426] ? netlink_sendmsg+0x642/0xb30 [ 270.835810][ T7426] ? skb_put+0x11b/0x210 [ 270.835830][ T7426] netlink_sendmsg+0x6b2/0xb30 [ 270.835860][ T7426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.835885][ T7426] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.835906][ T7426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.835925][ T7426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.835947][ T7426] __sock_sendmsg+0x21c/0x270 [ 270.835968][ T7426] ____sys_sendmsg+0x505/0x830 [ 270.835991][ T7426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.836021][ T7426] ? import_iovec+0x74/0xa0 [ 270.836040][ T7426] ___sys_sendmsg+0x21f/0x2a0 [ 270.836065][ T7426] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.836122][ T7426] ? __fget_files+0x2a/0x420 [ 270.836140][ T7426] ? __fget_files+0x3a0/0x420 [ 270.836167][ T7426] __x64_sys_sendmsg+0x19b/0x260 [ 270.836190][ T7426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.836219][ T7426] ? __pfx_ksys_write+0x10/0x10 [ 270.836237][ T7426] ? do_syscall_64+0xbe/0xfa0 [ 270.836258][ T7426] do_syscall_64+0xfa/0xfa0 [ 270.836275][ T7426] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.836293][ T7426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.836310][ T7426] ? clear_bhb_loop+0x60/0xb0 [ 270.836329][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.836346][ T7426] RIP: 0033:0x7f37b658f749 [ 270.836368][ T7426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.836382][ T7426] RSP: 002b:00007f37b7457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.836408][ T7426] RAX: ffffffffffffffda RBX: 00007f37b67e5fa0 RCX: 00007f37b658f749 [ 270.836421][ T7426] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 270.836438][ T7426] RBP: 00007f37b7457090 R08: 0000000000000000 R09: 0000000000000000 [ 270.836448][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.836457][ T7426] R13: 00007f37b67e6038 R14: 00007f37b67e5fa0 R15: 00007f37b690fa28 [ 270.836484][ T7426] [ 271.720125][ T7444] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 271.729757][ T7444] team0: Port device batadv6 added [ 271.918014][ T9] usb 7-1: USB disconnect, device number 4 [ 271.965417][ T7450] input: syz1 as /devices/virtual/input/input5 [ 272.307242][ T9] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 272.685733][ T9] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 272.714362][ T9] usb 7-1: config 0 has no interface number 0 [ 272.727974][ T7461] netlink: 'syz.5.201': attribute type 10 has an invalid length. [ 272.747392][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 272.789154][ T7466] netlink: 'syz.5.201': attribute type 10 has an invalid length. [ 272.820105][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 272.863432][ T9] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 272.912058][ T7461] team0: Port device dummy0 added [ 272.927911][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 273.032075][ T7466] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 273.055663][ T9] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 273.108522][ T9] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.176396][ T7466] team0: Failed to send options change via netlink (err -105) [ 273.184599][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 273.193965][ T7466] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 273.194392][ T7466] team0: Port device dummy0 removed [ 273.198914][ T7466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 273.290297][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.346285][ T9] usb 7-1: config 0 descriptor?? [ 273.373742][ T7450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.387376][ T7450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.519042][ T9] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 273.797678][ T7481] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7481 comm: syz.8.204) [ 273.951388][ T30] audit: type=1800 audit(1764645086.701:3): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.204" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=16173 res=0 errno=0 [ 274.344184][ T5925] usb 7-1: USB disconnect, device number 5 [ 274.358861][ T5925] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 274.795356][ T7496] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 274.814616][ T7494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.939666][ T7503] input: syz0 as /devices/virtual/input/input6 [ 275.095990][ T5908] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 275.477682][ T5908] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 275.493166][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.8.212'. [ 275.571970][ T5908] usb 7-1: config 0 has no interface number 0 [ 275.603322][ T5908] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 275.615639][ T5908] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.635283][ T5908] usb 7-1: config 0 interface 113 has no altsetting 0 [ 275.723723][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.212'. [ 275.742712][ T5908] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 275.755933][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.764937][ T7522] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 275.764937][ T7522] The task syz.7.213 (7522) triggered the difference, watch for misbehavior. [ 275.784471][ T5908] usb 7-1: Product: syz [ 275.792400][ T5908] usb 7-1: Manufacturer: syz [ 275.804779][ T5908] usb 7-1: SerialNumber: syz [ 275.810320][ T7521] bridge_slave_1: left allmulticast mode [ 275.816744][ T7521] bridge_slave_1: left promiscuous mode [ 275.822544][ T7521] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.862014][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.885601][ T5908] usb 7-1: config 0 descriptor?? [ 275.937160][ T7521] bridge_slave_0: left allmulticast mode [ 275.959666][ C1] usb 7-1: NFC: Urb failure (status -71) [ 275.967013][ T5908] usb 7-1: NFC: Unable to get FW version [ 275.973040][ T5908] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -90 [ 276.041977][ T7521] bridge_slave_0: left promiscuous mode [ 276.077774][ T7521] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.221615][ T5908] usb 7-1: USB disconnect, device number 6 [ 276.488153][ T7532] FAULT_INJECTION: forcing a failure. [ 276.488153][ T7532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.520321][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT(full) [ 276.520348][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.520359][ T7532] Call Trace: [ 276.520366][ T7532] [ 276.520374][ T7532] dump_stack_lvl+0x189/0x250 [ 276.520401][ T7532] ? __pfx____ratelimit+0x10/0x10 [ 276.520421][ T7532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.520443][ T7532] ? __pfx__printk+0x10/0x10 [ 276.520471][ T7532] should_fail_ex+0x414/0x560 [ 276.520497][ T7532] _copy_to_user+0x31/0xb0 [ 276.520516][ T7532] simple_read_from_buffer+0xe1/0x170 [ 276.520539][ T7532] proc_fail_nth_read+0x1b3/0x220 [ 276.520566][ T7532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.520592][ T7532] ? rw_verify_area+0x2a6/0x4d0 [ 276.520615][ T7532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.520640][ T7532] vfs_read+0x200/0xa30 [ 276.520664][ T7532] ? __pfx_vfs_read+0x10/0x10 [ 276.520686][ T7532] ? kvm_vm_ioctl_check_extension+0xb56/0xcf0 [ 276.520705][ T7532] ? kvm_dev_ioctl+0x5d1/0x1570 [ 276.520735][ T7532] ksys_read+0x145/0x250 [ 276.520761][ T7532] ? __pfx_ksys_read+0x10/0x10 [ 276.520781][ T7532] ? do_syscall_64+0xbe/0xfa0 [ 276.520804][ T7532] do_syscall_64+0xfa/0xfa0 [ 276.520823][ T7532] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.520843][ T7532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.520860][ T7532] ? clear_bhb_loop+0x60/0xb0 [ 276.520881][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.520897][ T7532] RIP: 0033:0x7fd308f8e15c [ 276.520912][ T7532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 276.520927][ T7532] RSP: 002b:00007fd309d92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.520946][ T7532] RAX: ffffffffffffffda RBX: 00007fd3091e5fa0 RCX: 00007fd308f8e15c [ 276.520959][ T7532] RDX: 000000000000000f RSI: 00007fd309d920a0 RDI: 0000000000000004 [ 276.520970][ T7532] RBP: 00007fd309d92090 R08: 0000000000000000 R09: 0000000000000000 [ 276.520981][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.520990][ T7532] R13: 00007fd3091e6038 R14: 00007fd3091e5fa0 R15: 00007fd30930fa28 [ 276.521019][ T7532] [ 277.042123][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 277.050952][ T7542] team0: Port device batadv7 added [ 277.071706][ T7542] hub 9-0:1.0: USB hub found [ 277.085977][ T7542] hub 9-0:1.0: 1 port detected [ 277.640856][ T5908] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 277.745623][ T7564] overlayfs: missing 'lowerdir' [ 277.785486][ T7564] fuse: Bad value for 'fd' [ 278.284141][ T7567] netlink: 277 bytes leftover after parsing attributes in process `syz.3.221'. [ 278.669437][ T7572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.798770][ T7581] FAULT_INJECTION: forcing a failure. [ 278.798770][ T7581] name failslab, interval 1, probability 0, space 0, times 1 [ 278.812311][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.5.225 Not tainted syzkaller #0 PREEMPT(full) [ 278.812335][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.812345][ T7581] Call Trace: [ 278.812353][ T7581] [ 278.812361][ T7581] dump_stack_lvl+0x189/0x250 [ 278.812382][ T7581] ? __pfx____ratelimit+0x10/0x10 [ 278.812394][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.812406][ T7581] ? __pfx__printk+0x10/0x10 [ 278.812419][ T7581] ? __pfx___might_resched+0x10/0x10 [ 278.812433][ T7581] should_fail_ex+0x414/0x560 [ 278.812447][ T7581] should_failslab+0xa8/0x100 [ 278.812460][ T7581] __kmalloc_noprof+0xcb/0x7f0 [ 278.812468][ T7581] ? kfree+0x4d/0x6d0 [ 278.812479][ T7581] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 278.812495][ T7581] tomoyo_realpath_from_path+0xe3/0x5d0 [ 278.812507][ T7581] ? tomoyo_domain+0xd9/0x130 [ 278.812521][ T7581] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 278.812530][ T7581] tomoyo_path_number_perm+0x1e8/0x5a0 [ 278.812541][ T7581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.812569][ T7581] ? __fget_files+0x2a/0x420 [ 278.812582][ T7581] ? __fget_files+0x3a0/0x420 [ 278.812592][ T7581] ? __fget_files+0x2a/0x420 [ 278.812603][ T7581] security_file_ioctl+0xcb/0x2d0 [ 278.812619][ T7581] __se_sys_ioctl+0x47/0x170 [ 278.812633][ T7581] do_syscall_64+0xfa/0xfa0 [ 278.812644][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.812656][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.812665][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 278.812677][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.812686][ T7581] RIP: 0033:0x7fd308f8f749 [ 278.812695][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.812703][ T7581] RSP: 002b:00007fd309d92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.812714][ T7581] RAX: ffffffffffffffda RBX: 00007fd3091e5fa0 RCX: 00007fd308f8f749 [ 278.812722][ T7581] RDX: 0000200000000040 RSI: 00000000c0405610 RDI: 0000000000000003 [ 278.812728][ T7581] RBP: 00007fd309d92090 R08: 0000000000000000 R09: 0000000000000000 [ 278.812739][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.812745][ T7581] R13: 00007fd3091e6038 R14: 00007fd3091e5fa0 R15: 00007fd30930fa28 [ 278.812761][ T7581] [ 278.812766][ T7581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.106979][ T5908] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 279.240751][ T7590] netlink: 'syz.3.229': attribute type 12 has an invalid length. [ 279.253461][ T7590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.229'. [ 279.265720][ T5908] usb 9-1: config 0 has an invalid interface number: 113 but max is 0 [ 279.274266][ T5908] usb 9-1: config 0 has no interface number 0 [ 279.280978][ T5908] usb 9-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 279.285017][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 279.295705][ T5908] usb 9-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 279.322185][ T5908] usb 9-1: config 0 interface 113 has no altsetting 0 [ 279.335417][ T7590] bridge1: entered promiscuous mode [ 279.342668][ T5908] usb 9-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 279.352344][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.356223][ T7590] bridge1: entered allmulticast mode [ 279.366141][ T5908] usb 9-1: Product: syz [ 279.370454][ T5908] usb 9-1: Manufacturer: syz [ 279.375246][ T5908] usb 9-1: SerialNumber: syz [ 279.396848][ T5908] usb 9-1: config 0 descriptor?? [ 279.404979][ C1] usb 9-1: NFC: Urb failure (status -71) [ 279.412532][ T5908] usb 9-1: NFC: Unable to get FW version [ 279.418969][ T5908] pn533_usb 9-1:0.113: probe with driver pn533_usb failed with error -90 [ 279.614385][ T5908] usb 9-1: USB disconnect, device number 6 [ 279.820164][ T7593] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20003 [ 279.846361][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.230'. [ 279.881881][ T7593] syzkaller1: entered promiscuous mode [ 279.888206][ T7593] syzkaller1: entered allmulticast mode [ 280.404976][ T7611] netlink: 'syz.6.236': attribute type 10 has an invalid length. [ 280.540674][ T7615] netlink: 'syz.6.236': attribute type 10 has an invalid length. [ 280.661497][ T7614] netlink: 'syz.5.237': attribute type 10 has an invalid length. [ 280.749687][ T7611] bond0: (slave dummy0): Releasing backup interface [ 280.757518][ T7622] netlink: 'syz.5.237': attribute type 10 has an invalid length. [ 280.771447][ T7611] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.785729][ T7611] team0: Failed to send options change via netlink (err -105) [ 280.814007][ T7611] team0: Port device dummy0 added [ 280.841640][ T7615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 280.899556][ T7615] team0: Failed to send options change via netlink (err -105) [ 280.974891][ T7615] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.026487][ T7615] team0: Port device dummy0 removed [ 281.044272][ T7615] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.075521][ T7614] bond0: (slave dummy0): Releasing backup interface [ 281.110325][ T7614] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.142923][ T7614] team0: Failed to send options change via netlink (err -105) [ 281.148780][ T7628] loop7: detected capacity change from 0 to 16384 [ 281.171078][ T7614] team0: Port device dummy0 added [ 281.184827][ T7622] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.269137][ T7622] team0: Failed to send options change via netlink (err -105) [ 281.278743][ T7622] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.302698][ T7622] team0: Port device dummy0 removed [ 281.319930][ T7622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.478346][ T7636] loop7: detected capacity change from 16384 to 0 [ 281.488785][ C1] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 281.829525][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 281.867113][ T7659] team0: Device gtp0 is up. Set it down before adding it as a team port [ 281.932382][ T7648] [ 281.934748][ T7648] ====================================================== [ 281.941767][ T7648] WARNING: possible circular locking dependency detected [ 281.948804][ T7648] syzkaller #0 Not tainted [ 281.953221][ T7648] ------------------------------------------------------ [ 281.960245][ T7648] syz.6.245/7648 is trying to acquire lock: [ 281.966123][ T7648] ffffffff8e0250a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x1720 [ 281.975682][ T7648] [ 281.975682][ T7648] but task is already holding lock: [ 281.983027][ T7648] ffff8880249780a8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x266/0x510 [ 281.993202][ T7648] [ 281.993202][ T7648] which lock already depends on the new lock. [ 281.993202][ T7648] [ 282.003587][ T7648] [ 282.003587][ T7648] the existing dependency chain (in reverse order) is: [ 282.012583][ T7648] [ 282.012583][ T7648] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 282.021174][ T7648] lock_acquire+0x120/0x360 [ 282.026194][ T7648] blk_alloc_queue+0x538/0x620 [ 282.031462][ T7648] __blk_mq_alloc_disk+0x15c/0x340 [ 282.037087][ T7648] loop_add+0x411/0xad0 [ 282.041747][ T7648] loop_init+0xd9/0x170 [ 282.046408][ T7648] do_one_initcall+0x236/0x820 [ 282.051690][ T7648] do_initcall_level+0x104/0x190 [ 282.057133][ T7648] do_initcalls+0x59/0xa0 [ 282.061978][ T7648] kernel_init_freeable+0x334/0x4b0 [ 282.067682][ T7648] kernel_init+0x1d/0x1d0 [ 282.072513][ T7648] ret_from_fork+0x4bc/0x870 [ 282.077610][ T7648] ret_from_fork_asm+0x1a/0x30 [ 282.082876][ T7648] [ 282.082876][ T7648] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 282.090071][ T7648] lock_acquire+0x120/0x360 [ 282.095080][ T7648] fs_reclaim_acquire+0x72/0x100 [ 282.100524][ T7648] prepare_alloc_pages+0x153/0x610 [ 282.106137][ T7648] __alloc_frozen_pages_noprof+0x123/0x370 [ 282.112458][ T7648] __alloc_pages_noprof+0xa/0x30 [ 282.117900][ T7648] pcpu_populate_chunk+0x182/0xb30 [ 282.123515][ T7648] pcpu_alloc_noprof+0xcbf/0x1720 [ 282.129046][ T7648] xt_percpu_counter_alloc+0x161/0x220 [ 282.135011][ T7648] translate_table+0x1323/0x2040 [ 282.140459][ T7648] ip6t_register_table+0x106/0x7d0 [ 282.146086][ T7648] ip6table_mangle_table_init+0x41/0x70 [ 282.152156][ T7648] xt_find_table_lock+0x30c/0x3e0 [ 282.157698][ T7648] xt_request_find_table_lock+0x26/0x100 [ 282.163847][ T7648] do_ip6t_get_ctl+0x730/0x1180 [ 282.169206][ T7648] nf_getsockopt+0x26e/0x290 [ 282.174307][ T7648] ipv6_getsockopt+0x1ed/0x290 [ 282.179583][ T7648] do_sock_getsockopt+0x372/0x450 [ 282.185116][ T7648] __x64_sys_getsockopt+0x1a5/0x250 [ 282.190824][ T7648] do_syscall_64+0xfa/0xfa0 [ 282.195836][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.202254][ T7648] [ 282.202254][ T7648] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 282.209970][ T7648] validate_chain+0xb9b/0x2140 [ 282.215242][ T7648] __lock_acquire+0xab9/0xd20 [ 282.220427][ T7648] lock_acquire+0x120/0x360 [ 282.225436][ T7648] __mutex_lock+0x187/0x1350 [ 282.230535][ T7648] pcpu_alloc_noprof+0x286/0x1720 [ 282.236065][ T7648] __percpu_counter_init_many+0x43/0x380 [ 282.242203][ T7648] blkg_rwstat_init+0x2c/0x170 [ 282.247478][ T7648] throtl_pd_alloc+0xb6/0x460 [ 282.252661][ T7648] blkcg_activate_policy+0x693/0xb50 [ 282.258451][ T7648] blk_throtl_init+0x2e0/0x510 [ 282.263724][ T7648] tg_set_conf+0x1c6/0x4b0 [ 282.268650][ T7648] cgroup_file_write+0x3a1/0x740 [ 282.274096][ T7648] kernfs_fop_write_iter+0x3af/0x540 [ 282.279888][ T7648] vfs_write+0x5c9/0xb30 [ 282.284633][ T7648] ksys_write+0x145/0x250 [ 282.289464][ T7648] do_syscall_64+0xfa/0xfa0 [ 282.294476][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.300871][ T7648] [ 282.300871][ T7648] other info that might help us debug this: [ 282.300871][ T7648] [ 282.311083][ T7648] Chain exists of: [ 282.311083][ T7648] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 282.311083][ T7648] [ 282.324734][ T7648] Possible unsafe locking scenario: [ 282.324734][ T7648] [ 282.332167][ T7648] CPU0 CPU1 [ 282.337518][ T7648] ---- ---- [ 282.342865][ T7648] lock(&q->q_usage_counter(io)#17); [ 282.348311][ T7648] lock(fs_reclaim); [ 282.354798][ T7648] lock(&q->q_usage_counter(io)#17); [ 282.362680][ T7648] lock(pcpu_alloc_mutex); [ 282.367171][ T7648] [ 282.367171][ T7648] *** DEADLOCK *** [ 282.367171][ T7648] [ 282.375296][ T7648] 7 locks held by syz.6.245/7648: [ 282.380301][ T7648] #0: ffff888059272ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 282.389337][ T7648] #1: ffff888033900420 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x211/0xb30 [ 282.398287][ T7648] #2: ffff888028288c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 282.408015][ T7648] #3: ffff888075efc698 (kn->active#63){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 282.418010][ T7648] #4: ffff8880249782b0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a2/0x3d0 [ 282.428085][ T7648] #5: ffff8880249780a8 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x266/0x510 [ 282.438687][ T7648] #6: ffff8880249780e0 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x266/0x510 [ 282.449301][ T7648] [ 282.449301][ T7648] stack backtrace: [ 282.455175][ T7648] CPU: 1 UID: 0 PID: 7648 Comm: syz.6.245 Not tainted syzkaller #0 PREEMPT(full) [ 282.455191][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.455204][ T7648] Call Trace: [ 282.455210][ T7648] [ 282.455216][ T7648] dump_stack_lvl+0x189/0x250 [ 282.455237][ T7648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.455252][ T7648] ? __pfx__printk+0x10/0x10 [ 282.455265][ T7648] ? print_lock_name+0xde/0x100 [ 282.455278][ T7648] print_circular_bug+0x2ee/0x310 [ 282.455295][ T7648] check_noncircular+0x134/0x160 [ 282.455312][ T7648] validate_chain+0xb9b/0x2140 [ 282.455328][ T7648] ? __lock_acquire+0xab9/0xd20 [ 282.455345][ T7648] __lock_acquire+0xab9/0xd20 [ 282.455359][ T7648] ? pcpu_alloc_noprof+0x286/0x1720 [ 282.455372][ T7648] lock_acquire+0x120/0x360 [ 282.455384][ T7648] ? pcpu_alloc_noprof+0x286/0x1720 [ 282.455400][ T7648] __mutex_lock+0x187/0x1350 [ 282.455416][ T7648] ? pcpu_alloc_noprof+0x286/0x1720 [ 282.455428][ T7648] ? kasan_save_track+0x4f/0x80 [ 282.455440][ T7648] ? kasan_save_track+0x3e/0x80 [ 282.455452][ T7648] ? __kasan_kmalloc+0x93/0xb0 [ 282.455464][ T7648] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 282.455476][ T7648] ? throtl_pd_alloc+0x9d/0x460 [ 282.455492][ T7648] ? blkcg_activate_policy+0x693/0xb50 [ 282.455505][ T7648] ? blk_throtl_init+0x2e0/0x510 [ 282.455520][ T7648] ? tg_set_conf+0x1c6/0x4b0 [ 282.455536][ T7648] ? cgroup_file_write+0x3a1/0x740 [ 282.455549][ T7648] ? vfs_write+0x5c9/0xb30 [ 282.455560][ T7648] ? ksys_write+0x145/0x250 [ 282.455569][ T7648] ? do_syscall_64+0xfa/0xfa0 [ 282.455584][ T7648] ? pcpu_alloc_noprof+0x286/0x1720 [ 282.455598][ T7648] ? __pfx___mutex_lock+0x10/0x10 [ 282.455618][ T7648] pcpu_alloc_noprof+0x286/0x1720 [ 282.455634][ T7648] __percpu_counter_init_many+0x43/0x380 [ 282.455650][ T7648] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 282.455663][ T7648] blkg_rwstat_init+0x2c/0x170 [ 282.455678][ T7648] throtl_pd_alloc+0xb6/0x460 [ 282.455693][ T7648] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 282.455708][ T7648] blkcg_activate_policy+0x693/0xb50 [ 282.455728][ T7648] blk_throtl_init+0x2e0/0x510 [ 282.455745][ T7648] tg_set_conf+0x1c6/0x4b0 [ 282.455763][ T7648] ? __pfx_tg_set_conf+0x10/0x10 [ 282.455782][ T7648] ? kernfs_root+0x1c/0x230 [ 282.455794][ T7648] ? kernfs_root+0x1c/0x230 [ 282.455804][ T7648] ? kernfs_root+0x1c/0x230 [ 282.455814][ T7648] ? kernfs_root+0x1ea/0x230 [ 282.455824][ T7648] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 282.455841][ T7648] cgroup_file_write+0x3a1/0x740 [ 282.455855][ T7648] ? __pfx_cgroup_file_write+0x10/0x10 [ 282.455867][ T7648] ? rcu_is_watching+0x15/0xb0 [ 282.455885][ T7648] ? __pfx_cgroup_file_write+0x10/0x10 [ 282.455896][ T7648] kernfs_fop_write_iter+0x3af/0x540 [ 282.455913][ T7648] vfs_write+0x5c9/0xb30 [ 282.455925][ T7648] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 282.455940][ T7648] ? __pfx_vfs_write+0x10/0x10 [ 282.455953][ T7648] ? __fget_files+0x2a/0x420 [ 282.455969][ T7648] ksys_write+0x145/0x250 [ 282.455981][ T7648] ? __pfx_ksys_write+0x10/0x10 [ 282.455993][ T7648] ? do_syscall_64+0xbe/0xfa0 [ 282.456007][ T7648] do_syscall_64+0xfa/0xfa0 [ 282.456021][ T7648] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.456035][ T7648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.456047][ T7648] ? clear_bhb_loop+0x60/0xb0 [ 282.456061][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.456073][ T7648] RIP: 0033:0x7f879778f749 [ 282.456085][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.456097][ T7648] RSP: 002b:00007f87985b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.456110][ T7648] RAX: ffffffffffffffda RBX: 00007f87979e5fa0 RCX: 00007f879778f749 [ 282.456121][ T7648] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000009 [ 282.456129][ T7648] RBP: 00007f87985b0090 R08: 0000000000000000 R09: 0000000000000000 [ 282.456137][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.456144][ T7648] R13: 00007f87979e6038 R14: 00007f87979e5fa0 R15: 00007f8797b0fa28 [ 282.456159][ T7648] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 282.885904][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 282.897599][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 282.923618][ T10] usb 6-1: config 0 has no interface number 0 [ 282.983359][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.994330][ T5864] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 283.124282][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 283.217765][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.310449][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 283.375869][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 283.425933][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.466830][ T10] usb 6-1: config 0 descriptor?? [ 283.598327][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.694365][ T10] usb 6-1: can't set config #0, error -71 [ 283.761967][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.774192][ T10] usb 6-1: USB disconnect, device number 3 [ 283.841568][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.940336][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.030018][ T36] bridge_slave_1: left allmulticast mode [ 284.035695][ T36] bridge_slave_1: left promiscuous mode [ 284.041477][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.050538][ T36] bridge_slave_0: left allmulticast mode [ 284.057237][ T36] bridge_slave_0: left promiscuous mode [ 284.062879][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.189637][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.200332][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.211306][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 284.221149][ T36] bond0 (unregistering): Released all slaves [ 284.440774][ T36] hsr_slave_0: left promiscuous mode [ 284.446825][ T36] hsr_slave_1: left promiscuous mode [ 284.452621][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.463814][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.471753][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.479249][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.489436][ T36] veth1_macvtap: left promiscuous mode [ 284.494917][ T36] veth0_macvtap: left promiscuous mode [ 284.500791][ T36] veth1_vlan: left promiscuous mode [ 284.506107][ T36] veth0_vlan: left promiscuous mode [ 284.544426][ T36] team0 (unregistering): Port device batadv6 removed [ 284.554421][ T36] team0 (unregistering): Port device batadv5 removed [ 284.563042][ T36] team0 (unregistering): Port device batadv4 removed [ 284.572170][ T36] team0 (unregistering): Port device batadv3 removed [ 284.580788][ T36] team0 (unregistering): Port device batadv2 removed [ 284.592093][ T36] team0 (unregistering): Port device batadv1 removed [ 284.674570][ T36] team0 (unregistering): Port device team_slave_1 removed [ 284.695291][ T36] team0 (unregistering): Port device team_slave_0 removed [ 285.255807][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.301041][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.392422][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.441309][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.533187][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.574111][ T36] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.621321][ T36] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.662894][ T36] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.764714][ T36] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.810534][ T36] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.871504][ T36] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.944589][ T36] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.074372][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.140931][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.181884][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.223055][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.325080][ T36] bridge_slave_1: left allmulticast mode [ 286.332508][ T36] bridge_slave_1: left promiscuous mode [ 286.339092][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.348010][ T36] bridge_slave_0: left allmulticast mode [ 286.354261][ T36] bridge_slave_0: left promiscuous mode [ 286.360747][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.370537][ T36] bridge_slave_1: left allmulticast mode [ 286.376322][ T36] bridge_slave_1: left promiscuous mode [ 286.381960][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.390660][ T36] bridge_slave_0: left allmulticast mode [ 286.396515][ T36] bridge_slave_0: left promiscuous mode [ 286.402167][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.410911][ T36] bridge_slave_1: left allmulticast mode [ 286.416683][ T36] bridge_slave_1: left promiscuous mode [ 286.422313][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.430455][ T36] bridge_slave_0: left allmulticast mode [ 286.436330][ T36] bridge_slave_0: left promiscuous mode [ 286.441952][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.530584][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.544346][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.554211][ T36] bond0 (unregistering): Released all slaves [ 286.625688][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.635348][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.645138][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 286.654007][ T36] bond0 (unregistering): Released all slaves [ 286.695891][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.706156][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.715712][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 286.726224][ T36] bond0 (unregistering): Released all slaves [ 286.800661][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.812997][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.822571][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 286.831633][ T36] bond0 (unregistering): Released all slaves [ 287.357971][ T36] hsr_slave_0: left promiscuous mode [ 287.363951][ T36] hsr_slave_1: left promiscuous mode [ 287.372961][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.381141][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.389327][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.396787][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.406236][ T36] hsr_slave_0: left promiscuous mode [ 287.411875][ T36] hsr_slave_1: left promiscuous mode [ 287.417706][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.425072][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.432714][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.440653][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.450700][ T36] hsr_slave_0: left promiscuous mode [ 287.456360][ T36] hsr_slave_1: left promiscuous mode [ 287.461925][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.469513][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.477430][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.484803][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.495088][ T36] hsr_slave_0: left promiscuous mode [ 287.501005][ T36] hsr_slave_1: left promiscuous mode [ 287.506685][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.514043][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.521654][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.529265][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.541429][ T36] veth1_macvtap: left promiscuous mode [ 287.546980][ T36] veth0_macvtap: left promiscuous mode [ 287.552485][ T36] veth1_vlan: left promiscuous mode [ 287.557784][ T36] veth0_vlan: left promiscuous mode [ 287.563643][ T36] veth1_macvtap: left promiscuous mode [ 287.569210][ T36] veth0_macvtap: left promiscuous mode [ 287.574738][ T36] veth1_vlan: left promiscuous mode [ 287.580235][ T36] veth0_vlan: left promiscuous mode [ 287.587385][ T36] veth1_macvtap: left promiscuous mode [ 287.592860][ T36] veth0_macvtap: left promiscuous mode [ 287.598563][ T36] veth1_vlan: left promiscuous mode [ 287.603801][ T36] veth0_vlan: left promiscuous mode [ 287.609981][ T36] veth1_macvtap: left promiscuous mode [ 287.615453][ T36] veth0_macvtap: left promiscuous mode [ 287.621136][ T36] veth1_vlan: left promiscuous mode [ 287.626415][ T36] veth0_vlan: left promiscuous mode [ 287.773071][ T36] team0 (unregistering): Port device batadv5 removed [ 287.782632][ T36] team0 (unregistering): Port device batadv4 removed [ 287.798357][ T36] team0 (unregistering): Port device batadv3 removed [ 287.807441][ T36] team0 (unregistering): Port device batadv2 removed [ 287.816262][ T36] team0 (unregistering): Port device batadv1 removed [ 287.874060][ T36] team0 (unregistering): Port device team_slave_1 removed [ 287.895490][ T36] team0 (unregistering): Port device team_slave_0 removed [ 287.944337][ T36] team0 (unregistering): Port device batadv4 removed [ 287.958383][ T36] team0 (unregistering): Port device batadv3 removed [ 287.967537][ T36] team0 (unregistering): Port device batadv2 removed [ 287.976035][ T36] team0 (unregistering): Port device batadv1 removed [ 288.050153][ T36] team0 (unregistering): Port device team_slave_1 removed [ 288.074609][ T36] team0 (unregistering): Port device team_slave_0 removed [ 288.149453][ T36] team0 (unregistering): Port device batadv7 removed [ 288.160112][ T36] team0 (unregistering): Port device batadv6 removed [ 288.168673][ T36] team0 (unregistering): Port device batadv5 removed [ 288.177264][ T36] team0 (unregistering): Port device batadv4 removed [ 288.185642][ T36] team0 (unregistering): Port device batadv3 removed [ 288.195222][ T36] team0 (unregistering): Port device batadv2 removed [ 288.203930][ T36] team0 (unregistering): Port device batadv1 removed [ 288.284725][ T36] team0 (unregistering): Port device team_slave_1 removed [ 288.305139][ T36] team0 (unregistering): Port device team_slave_0 removed [ 288.373333][ T36] team0 (unregistering): Port device batadv7 removed [ 288.385745][ T36] team0 (unregistering): Port device batadv6 removed [ 288.394262][ T36] team0 (unregistering): Port device batadv5 removed [ 288.405056][ T36] team0 (unregistering): Port device batadv4 removed [ 288.415084][ T36] team0 (unregistering): Port device batadv3 removed [ 288.423563][ T36] team0 (unregistering): Port device batadv2 removed [ 288.433144][ T36] team0 (unregistering): Port device batadv1 removed [ 288.508948][ T36] team0 (unregistering): Port device team_slave_1 removed [ 288.522553][ T36] team0 (unregistering): Port device team_slave_0 removed