last executing test programs: 22m2.110063426s ago: executing program 32 (id=3103): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x3, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x5e0}], 0x1}, 0x4) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002c40)={'ip6tnl0\x00', &(0x7f0000002bc0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x40, 0x7, 0x21, @empty, @mcast1, 0x80, 0x7800, 0x3ff, 0xffffffff}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r11}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5ab2e7a381329822}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c810}, 0x841) 22m0.620841404s ago: executing program 33 (id=3110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000040)='memory.events\x00', 0x60880, &(0x7f0000000180)={@_ha_fsid={[0x9, 0x200]}, {0x7, 0x5, 0x800, 0x63}}, 0x29, 0x0, &(0x7f0000000280)=0x1}, {[0x3, 0xfffffff8, 0xd, 0x3]}, 0x6, 0x3c, &(0x7f00000002c0)=""/60}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, 0x0) write$ppp(r2, &(0x7f0000000480)="1e", 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000003c0)={0x0, r2, 0x7, 0xfffffffffffffffd, 0x1, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20) 19m59.477961193s ago: executing program 34 (id=3844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x1}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 19m58.448782644s ago: executing program 35 (id=3853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xffed}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 19m58.415769297s ago: executing program 36 (id=3851): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x8, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x7, 0x19}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004811) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19m57.451366266s ago: executing program 37 (id=3857): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) r4 = accept4(r3, &(0x7f0000000280)=@caif=@rfm, &(0x7f0000000340)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r3) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x9d, &(0x7f0000000600)=""/157, 0x40f00, 0x40}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x40, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000340)={0x4, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000000c0)={r10, 0x1}, &(0x7f00000001c0)=0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_int(r3, 0x0, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="300000001a000100000000000000000081007feb000000000000000014000100fe80000000000000000000000000000c"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 11m45.045025806s ago: executing program 38 (id=6858): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0xc) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x7813, 0x3, 0xfffffffc, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r4 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) ftruncate(r4, 0x2008002) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) r6 = gettid() process_vm_writev(r6, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 11m42.430382255s ago: executing program 39 (id=6864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0xffffffffffffff19) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="b9", &(0x7f0000000ec0)="bbb891a57b9a7bb1d8cb60b24f000000006167c04807f35551eeeb262cb0f003b4f353fcc3c08ddf2a0c3b2b1f8b9fa4ece5fe86195d5795332b65a6baeb06d8004d06b98cf649ae47f770522b75493af1dc239cede58ee580077404fffdfe47348caf86127b95510a790eab26e6f71285be39f9085ba8ea3824d2d36507524e8824bcdb6ad7aa4fd9aab379a40ccab4997569b90b3f6ed770f079728d5828eac13acad4b7ade2bbef64ab643093", 0x402, r4}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000008", @ANYRES16=r6, @ANYBLOB="0d03000000000000000013000000"], 0x14}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6, r4}, 0x38) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 11m35.646417866s ago: executing program 4 (id=6879): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x800000, 0x0, 0xfb, "f7ffffff006af9fc1bffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x9ba3, 0x6, 0x9, 0x7, "b9bab465252158585bca4cacd4526ee1e684b8"}) 11m32.24758763s ago: executing program 4 (id=6881): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0x5, 0xa}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c011}, 0x8810) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 11m29.80697472s ago: executing program 4 (id=6883): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4f20, 0x1, @loopback, 0x5}, 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 11m26.646521428s ago: executing program 4 (id=6884): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0xfd}, {0x18, 0xff}, 0x8000000, 0x5, 0x9}) 11m25.360321455s ago: executing program 4 (id=6885): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xf71, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11m23.038192623s ago: executing program 4 (id=6887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x39f43, 0x3624e}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d848}, 0x4004004) 11m17.756909366s ago: executing program 40 (id=6880): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x6c0100fd, 0x4e22, 0x7, 0x0, 0xfffd, 0x0, 0x80}, {0x1, 0x0, 0x2, 0x6cc, 0xffffffffffffffa4, 0x400000000000}, {0x80000, 0x0, 0x0, 0x5}, 0xa9cc, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@loopback, 0x400000, 0x3c}, 0x2, @in=@private=0xa010102, 0x3503, 0x4, 0x3, 0x8, 0x0, 0x93}}, 0xe8) 11m9.222592514s ago: executing program 41 (id=6886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @random="5d3ec70048e8", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x73, 0x2, 0x2, 0xc, 0x0, [@empty]}]}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050186dd6000000000102c00fe80000000b800fcda0594c8893220ad3b4fb2a5ae00000000000000000000bbfe8000000000000000000000000000aa"], 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfffd}, {0xffff, 0xffff}, {0xfff1, 0xfffe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x72f1d88, @private1, 0x1}, @in6={0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10}], 0x54) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) copy_file_range(r7, 0x0, r7, &(0x7f0000000280)=0x1000000000000002, 0x2, 0x0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0xffffff20}}, 0x1006) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) accept(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000400000000000021274230f37c60667672200100937a6f55291487996f664b6513362a11005b91325b38", @ANYRESHEX=r2, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) lseek(r11, 0x6, 0x2) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x20081, 0x300}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000262000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="0f01bc00003e660fc7b5a75982c22d0fc73601000f01cbba4100ec0f20c06635000004000f22c0ba4100b80000ef440f20c0663509000000440f22c00f0d802db4", 0x41}], 0x1, 0x10, 0x0, 0x0) 11m7.574445736s ago: executing program 42 (id=6887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x39f43, 0x3624e}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d848}, 0x4004004) 6m54.495793729s ago: executing program 3 (id=7207): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000a0000000500000007"], 0x50) inotify_init() epoll_create(0x800) memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x2405c084) 6m54.129277014s ago: executing program 3 (id=7210): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x13c, 0x0, &(0x7f00000003c0)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715106eca76bf796a430e6c6a874a1602148380c5a6fcf022b0a04fcbefc0d85cdf5d0b97e6d6336b1742017dfd81f3ebc1b048e42b13e8f8486976acd9d7b9f50900dff445f7fa5e166f86db80a5022d4a325e208f57f534d397b00996c9b7a8ec126165847603201e39f0d9aa8ff5e67722c594a5d8bae0210aef032d3facd18db998014f0e10be9456d0090de35dc0c3ec1ba60d62330540086efd653b5336e8ac6ef838093da55d93b0b3ab0be5f07333d156930b4b4bb193112d582e4d57e60c67365429f03f5ac6951ca9865887027aeb1874955d47fe6f180f3e", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@any, 0xaeb}, 0x1, 0x0, 0x3ff}) 6m53.829337254s ago: executing program 3 (id=7212): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) 6m52.624557402s ago: executing program 3 (id=7216): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000038, 0x3, 0x2a8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x5, 0x7f, 0x3, 0x2, 0x7, 0x4]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, [0x0, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x5, 0x9, 0x0, 0x2, 0x6, 0xff, 0x0, 0xfffffeff}}) io_pgetevents(r4, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r4, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_getevents(r4, 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) r6 = socket(0x1, 0x803, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000380), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x44050) 6m50.608090802s ago: executing program 3 (id=7220): syz_usb_connect$uac2(0x5, 0x83, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100182e5e74033073004fb35000000010902120001000040400904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) 6m49.998260317s ago: executing program 5 (id=7222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0xc041) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 6m48.295131568s ago: executing program 5 (id=7224): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r2, 0x0, 0x0) dup2(r2, r0) 6m47.320450575s ago: executing program 5 (id=7227): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xea}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) 6m45.565072506s ago: executing program 5 (id=7233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0xc041) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 6m45.386223831s ago: executing program 3 (id=7234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x24060400) 6m40.009240253s ago: executing program 5 (id=7238): r0 = add_key$fscrypt_v1(&(0x7f0000000440), 0x0, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) keyctl$update(0x2, r0, &(0x7f0000000040)="b8", 0x1) 6m39.170687449s ago: executing program 5 (id=7239): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(0x0, 0x3) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000001c0)=ANY=[], 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) r6 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000006, 0x200000001f, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) rt_sigqueueinfo(r6, 0x21, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) pread64(r1, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r8, r7, 0x0, 0x8010002b) 6m27.152924412s ago: executing program 43 (id=7234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) sync_file_range(0xffffffffffffffff, 0x7fff, 0x5, 0xf) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @multicast1}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) unshare(0x24060400) 6m23.025976852s ago: executing program 44 (id=7239): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = memfd_create(0x0, 0x3) fsetxattr$system_posix_acl(r5, 0x0, &(0x7f00000001c0)=ANY=[], 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) r6 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20000000006, 0x200000001f, &(0x7f0000006680)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) rt_sigqueueinfo(r6, 0x21, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) pread64(r1, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r8, r7, 0x0, 0x8010002b) 6m12.294070013s ago: executing program 0 (id=7251): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) removexattr(&(0x7f00000190c0)='./file0\x00', &(0x7f0000019080)=@random={'user.', './binderfs/binder0\x00'}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003500)={&(0x7f00000003c0)={0x50, 0x0, 0x7fffffff, {0x7, 0x29, 0x4, 0x400000, 0x7, 0x80, 0x8, 0x9, 0x0, 0x0, 0x10, 0x247}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m10.330047339s ago: executing program 0 (id=7252): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x13c, 0x0, &(0x7f00000003c0)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@any, 0xaeb}, 0x1, 0x0, 0x3ff}) 6m7.616539819s ago: executing program 0 (id=7254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000140)={0xf0, {{0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x80000001}}}, 0x88) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) 6m3.360077412s ago: executing program 2 (id=7257): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c00028005000300010000000800024000000012080004400000000a0900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000340), &(0x7f0000000440)={'L+', 0x8}, 0x16, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x1, 'veth0_to_bond\x00', {}, 0xe1d}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) chdir(0x0) 5m57.620595878s ago: executing program 2 (id=7258): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x7f, 0x5, 0x17, 0x8000, 0xc, "03f37fe99f4da288"}) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r6, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0xfffffffd, @mcast1}}, 0x5c) r8 = socket$inet6(0xa, 0x400000000001, 0x100) sendto$inet6(r8, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 5m54.223357275s ago: executing program 0 (id=7259): r0 = userfaultfd(0x80801) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000980)=""/290, 0x122}, {&(0x7f0000000780)=""/168, 0xa8}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000080)=""/229, 0xe5}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000000)=""/33, 0x21}], 0xa}, 0x120c}], 0x2, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002000500010000000000240002800c00028005000100000000001400018008000100e000000108000200bc1e0001080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 5m45.12009125s ago: executing program 2 (id=7260): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m42.452320828s ago: executing program 0 (id=7261): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@any, 0xaeb}, 0x1, 0x0, 0x3ff}) 5m40.344289607s ago: executing program 0 (id=7262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0xc2f, &(0x7f0000000240)={0x0, 0x541, 0x10, 0x3, 0x59}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x180, &(0x7f0000000180)=[0x0, 0xec66, 0xff, 0x8, 0x98c1, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x4, 0x5, 0x2, 0x6, 0x8, 0x7, 0xffff, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7f, 0x96, 0xffffffff, 0x9, 0x4, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008890, 0x1, 0x8000000006, 0x43, 0xfffffffffffffffd, 0x2000003, 0xa3de, 0x2cc0000000000000, 0x8, 0x1, 0x1000000400, 0x6, 0xffffffffffffffb7, 0x5, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x200000000000101, 0x7ff, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0x6, 0x2, 0x7, 0x5e7, 0xcdc, 0xcd, 0x2, 0x3, 0x38a560a0, 0x2, 0xfff, 0x7, 0x2004, 0x7, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xfffffffffffffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x7f, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0xe61b, 0xa, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffd25, 0xb68c, 0x0, 0xb, 0x1000003]}) socket(0x10, 0x803, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioprio_set$pid(0x2, 0x0, 0xa000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @empty, 0x2}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x99, 0x9d, 0x31, 0x2b, 0x20, 0x6be, 0x8116, 0x8cf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x70, 0x2, "", [{{0x9, 0x4, 0x0, 0xe6, 0x0, 0xa7, 0x72, 0xc2, 0xe}}]}}]}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x583}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 5m40.180439883s ago: executing program 2 (id=7263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r4, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r7 = dup(r6) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32], 0x23c}}, 0x80c4) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$OCFS2_IOC_GROUP_EXTEND(r2, 0x40046f01, &(0x7f0000000040)=0xae7c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m31.181356587s ago: executing program 2 (id=7264): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00F'], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2a8, 0x1c0, 0xffffffff, 0x0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xffffffff, 'geneve0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x67, 0x3, 0x10}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0x17, 0x3}}, @common=@ttl={{0x28}, {0x2, 0x10}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0xe18c}}}}, {{@ip={@empty, @rand_addr=0x64010101, 0xff, 0x0, 'ip6gre0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x16, 0x0, 0x10}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x1, 0x1, 0x2, 0x3], 0x2, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @port=0x4e22, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="076de4f03a9a", 0xe25e, 0x4, [0x2c, 0x3b, 0x3a, 0x26, 0x19, 0x1, 0x36, 0x2c, 0x23, 0x21, 0x7, 0x3b, 0x29, 0x2a, 0x1, 0x3], 0x1, 0x7fff, 0xf4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 5m25.225213592s ago: executing program 2 (id=7265): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x40020, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000000fa9f,max_read=0x0000000000000001,max_read=0x0000000000000002,max_read=0x0000000000008000,blksize=0x0000000000001000,allow_other,blksize=0x0000000000001c00,blksize=0x0000000000000c00,seclabel,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c357a402c54a36673636f6e746578743d756e636f6e66696e6564"]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) file_setattr(r2, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000c00)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) 5m24.342551413s ago: executing program 45 (id=7262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0xc2f, &(0x7f0000000240)={0x0, 0x541, 0x10, 0x3, 0x59}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x1c0, 0x180, &(0x7f0000000180)=[0x0, 0xec66, 0xff, 0x8, 0x98c1, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x466c, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x4, 0x5, 0x2, 0x6, 0x8, 0x7, 0xffff, 0x1, 0x2, 0xffffffffffffffff, 0x4, 0x7f, 0x96, 0xffffffff, 0x9, 0x4, 0x5, 0x7, 0x4, 0x3, 0x9, 0x10000008890, 0x1, 0x8000000006, 0x43, 0xfffffffffffffffd, 0x2000003, 0xa3de, 0x2cc0000000000000, 0x8, 0x1, 0x1000000400, 0x6, 0xffffffffffffffb7, 0x5, 0x2, 0x1, 0x6, 0x4, 0xe6, 0x200000000000101, 0x7ff, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0xfffffffffffffff6, 0x6, 0x2, 0x7, 0x5e7, 0xcdc, 0xcd, 0x2, 0x3, 0x38a560a0, 0x2, 0xfff, 0x7, 0x2004, 0x7, 0xab6, 0x100, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xfffffffffffffffe, 0x80000008, 0x8061d, 0x0, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x7f, 0xfffffffffffffffb, 0x80000001, 0x7, 0x200000000dfd4, 0xfff9, 0x10, 0xe61b, 0xa, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffd25, 0xb68c, 0x0, 0xb, 0x1000003]}) socket(0x10, 0x803, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioprio_set$pid(0x2, 0x0, 0xa000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1, @empty, 0x2}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x99, 0x9d, 0x31, 0x2b, 0x20, 0x6be, 0x8116, 0x8cf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x7, 0x70, 0x2, "", [{{0x9, 0x4, 0x0, 0xe6, 0x0, 0xa7, 0x72, 0xc2, 0xe}}]}}]}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x583}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 5m9.568658497s ago: executing program 46 (id=7265): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, 0x0, 0x0) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x40020, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x000000000000fa9f,max_read=0x0000000000000001,max_read=0x0000000000000002,max_read=0x0000000000008000,blksize=0x0000000000001000,allow_other,blksize=0x0000000000001c00,blksize=0x0000000000000c00,seclabel,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c357a402c54a36673636f6e746578743d756e636f6e66696e6564"]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) file_setattr(r2, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000c00)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) 5.102627427s ago: executing program 6 (id=7818): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000100"/24], 0x30}, 0x0) 5.045040085s ago: executing program 6 (id=7819): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a00", @ANYRES32=r0], 0x24}}, 0x0) 4.935521236s ago: executing program 6 (id=7820): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x4e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.910828673s ago: executing program 7 (id=7821): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400, @empty, 0x6eb3}], 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 4.666181284s ago: executing program 7 (id=7822): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 4.415366231s ago: executing program 7 (id=7824): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b00188e21200"/23], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa9eaaaa0180c20000000800059000240000000000119078000000000000000000004e2000109078829c000080000000"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c20000030806000186dd0610000aaaaaaaaaaa35fe8000000000000000000000000000bbbbbbbbbbbbbb"], &(0x7f0000000180)={0x0, 0x3, [0xbff, 0x301, 0xbd1, 0xfe6]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x10, 0x1, 0x4, 0x7fffffff, {{0x2e, 0x4, 0x1, 0x0, 0xb8, 0x67, 0x0, 0x40, 0x4, 0x0, @local, @local, {[@generic={0x83, 0xc, "1cad0768220562149170"}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x2, [0x4, 0x6, 0x3, 0x80000000, 0x5, 0x5, 0x403, 0x4, 0x9]}, @end, @rr={0x7, 0x23, 0x8e, [@local, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x17, 0x17, [@dev={0xac, 0x14, 0x14, 0x35}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x21, 0x1, 0x5, [{@multicast2, 0x9}, {@remote, 0x7}, {@rand_addr=0x64010101}]}, @rr={0x7, 0x13, 0x5d, [@dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, @empty, @multicast2]}]}}}}}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="000100"/20, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="050000000200000002000000010000000000000300e7ffffff000000"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001000400000000000700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="05"], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000240)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000400000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000280)={r10, r10, 0x6, 0x1, &(0x7f0000000240)='>', 0x9, 0x2, 0xc45, 0x1010, 0x43, 0x0, 0x7, 'syz0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 3.777386675s ago: executing program 7 (id=7827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.545250205s ago: executing program 1 (id=7830): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000240)=""/136, 0x88}], 0x1}, 0x10042) 3.512995036s ago: executing program 6 (id=7831): sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0xfffffffe}}}}}, 0x0) 3.437300146s ago: executing program 7 (id=7832): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400, @empty, 0x6eb3}], 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 3.329166038s ago: executing program 1 (id=7833): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x78}}, 0x40000) 3.23765255s ago: executing program 7 (id=7835): syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) unshare(0x24060400) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900010000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.23675478s ago: executing program 6 (id=7836): unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000001a01"], 0x70}, 0x40) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00F'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x62, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x3a, 0xab, 0x13, 0x40, 0x19d2, 0xffe9, 0x4687, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0xf8, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0xd9, 0x81, 0x0, 0xff, 0xff, 0xff, 0x4, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "06"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xf, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x3b}}, @uac_control={{0xa, 0x24, 0x1, 0xfff, 0x20}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x3}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x40}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x403, 0x6, 0x6, 0x2, 0x8, 0xa5}]}]}}]}}]}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r3 = dup(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0xb) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[], 0xc8) write$char_usb(r3, &(0x7f00000004c0)="387fa589882f7f3306803e392e2c9c1dda4d486dcf80624c408aa56fb4ff701df27e3ea3fc568700035a1ddade29b4088c2f36193c8e1a9a5c9d01efb5adcaf060ddd4e9a5b6cb6e41038cda02930cc6ede792de8c7f13b775e78b39a1fbf5dbf6a151b15a048e34f0019aa23963", 0x6e) syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904ff"], 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2a8, 0x1c0, 0xffffffff, 0x0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x65, @icmp_id=0x68}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x0, 0xffffffff, 'geneve0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x67, 0x3, 0x10}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0x17, 0x3}}, @common=@ttl={{0x28}, {0x2, 0x10}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x8, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0xe18c}}}}, {{@ip={@empty, @rand_addr=0x64010101, 0xff, 0x0, 'ip6gre0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x16, 0x0, 0x10}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x1, 0x1, 0x2, 0x3], 0x2, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @port=0x4e22, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="076de4f03a9a", 0xe25e, 0x4, [0x2c, 0x3b, 0x3a, 0x26, 0x19, 0x1, 0x36, 0x2c, 0x23, 0x21, 0x7, 0x3b, 0x29, 0x2a, 0x1, 0x3], 0x1, 0x7fff, 0xf4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 3.056297479s ago: executing program 1 (id=7838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24040014) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "03"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2.955794751s ago: executing program 8 (id=7839): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x30}], 0x1}, 0x0) 2.817153241s ago: executing program 1 (id=7841): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x4e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.736133942s ago: executing program 8 (id=7842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.228712222s ago: executing program 8 (id=7844): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001002500000008000a00", @ANYRES32=r0], 0x24}}, 0x0) 2.039000612s ago: executing program 8 (id=7846): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)="55f0e46e7a", 0x5}, {&(0x7f0000000200)="d6503ccb6276fca31d52ba", 0xb}], 0x4}, 0x40011) 1.692289715s ago: executing program 8 (id=7848): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={0x0, &(0x7f0000001540)=""/62, 0x0, 0x3e, 0x1}, 0x28) 1.653293144s ago: executing program 9 (id=7849): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r2, 0x6}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000200)="d6503ccb6276fca31d52ba0a", 0xc}], 0x3}, 0x40011) 1.580374195s ago: executing program 8 (id=7850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000008000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xa, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1.522835032s ago: executing program 1 (id=7851): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000004e00)={0x0, 0x0, &(0x7f0000004dc0)={&(0x7f0000002000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) 1.405928224s ago: executing program 9 (id=7852): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000000", 0x30}], 0x1}, 0x0) 1.32842653s ago: executing program 1 (id=7853): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, 0x0, r0, &(0x7f00000002c0)='./file0\x00', 0x2) 1.211353374s ago: executing program 6 (id=7854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.196120721s ago: executing program 9 (id=7855): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000240)=""/136, 0x88}], 0x1}, 0x10042) 974.945617ms ago: executing program 9 (id=7856): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1, 0x1}, 0x4) 288.773732ms ago: executing program 9 (id=7857): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400, @empty, 0x6eb3}], 0x1c) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 0s ago: executing program 9 (id=7858): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000040)=@xdp={0x2c, 0x8, 0x0, 0x6}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59637ecdd8a174caf38d7adc18f6b256e8be", 0x24}, {&(0x7f0000000140)="55f0e46e7a", 0x5}, {&(0x7f0000000200)="d6503ccb6276fca31d52ba", 0xb}], 0x4}, 0x40011) kernel console output (not intermixed with test programs): tadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.024599][T28715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.180474][T28736] team0: Port device team_slave_0 added [ 1549.294373][T28692] hsr_slave_0: entered promiscuous mode [ 1549.313126][T28692] hsr_slave_1: entered promiscuous mode [ 1549.316023][T28692] debugfs: 'hsr0' already exists in 'hsr' [ 1549.316050][T28692] Cannot create hsr debugfs directory [ 1549.615575][T28736] team0: Port device team_slave_1 added [ 1549.995336][T28736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.995353][T28736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.995380][T28736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.384632][T28736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.384650][T28736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.384677][T28736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.403864][T16281] Bluetooth: hci5: command tx timeout [ 1550.598590][T28715] hsr_slave_0: entered promiscuous mode [ 1550.607870][T28715] hsr_slave_1: entered promiscuous mode [ 1550.616629][T28715] debugfs: 'hsr0' already exists in 'hsr' [ 1550.616659][T28715] Cannot create hsr debugfs directory [ 1552.354845][T28736] hsr_slave_0: entered promiscuous mode [ 1552.358659][T28736] hsr_slave_1: entered promiscuous mode [ 1552.376334][T28736] debugfs: 'hsr0' already exists in 'hsr' [ 1552.376370][T28736] Cannot create hsr debugfs directory [ 1552.473621][T16281] Bluetooth: hci5: command tx timeout [ 1553.940484][T16955] vxlan0: left allmulticast mode [ 1553.940814][T16955] vxlan0: left promiscuous mode [ 1553.941154][T16955] bridge0: port 3(vxlan0) entered disabled state [ 1554.061095][T16955] bridge_slave_1: left allmulticast mode [ 1554.061132][T16955] bridge_slave_1: left promiscuous mode [ 1554.061441][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.181231][T16955] bridge_slave_0: left allmulticast mode [ 1554.181268][T16955] bridge_slave_0: left promiscuous mode [ 1554.181545][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.430318][T16955] bridge_slave_1: left allmulticast mode [ 1554.430355][T16955] bridge_slave_1: left promiscuous mode [ 1554.430629][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.542649][T16955] bridge_slave_0: left allmulticast mode [ 1554.542685][T16955] bridge_slave_0: left promiscuous mode [ 1554.542943][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.077608][T16955] bond0 (unregistering): Released all slaves [ 1556.000716][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.060599][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.104640][T16955] bond0 (unregistering): Released all slaves [ 1557.210932][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1557.291396][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1557.311226][T16955] bond0 (unregistering): Released all slaves [ 1558.941225][T28824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.941529][T28824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.941893][T28824] bridge_slave_0: entered allmulticast mode [ 1558.945361][T28824] bridge_slave_0: entered promiscuous mode [ 1558.990996][T28824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.991295][T28824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.991668][T28824] bridge_slave_1: entered allmulticast mode [ 1558.995896][T28824] bridge_slave_1: entered promiscuous mode [ 1559.238442][T28824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.406227][T28824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.534186][T28824] team0: Port device team_slave_0 added [ 1559.545967][T28824] team0: Port device team_slave_1 added [ 1559.600727][T28824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.600746][T28824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.600773][T28824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.605181][T28824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.605198][T28824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.605225][T28824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.002568][T28824] hsr_slave_0: entered promiscuous mode [ 1560.006562][T28824] hsr_slave_1: entered promiscuous mode [ 1560.025852][T28824] debugfs: 'hsr0' already exists in 'hsr' [ 1560.025882][T28824] Cannot create hsr debugfs directory [ 1561.872507][ T5279] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1564.520547][T16955] hsr_slave_0: left promiscuous mode [ 1564.569623][T16955] hsr_slave_1: left promiscuous mode [ 1564.570858][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.570885][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.610668][T16955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.610696][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.769691][T16955] hsr_slave_0: left promiscuous mode [ 1564.829785][T16955] hsr_slave_1: left promiscuous mode [ 1564.836943][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.852266][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.961881][T16955] veth1_macvtap: left promiscuous mode [ 1564.961993][T16955] veth0_macvtap: left promiscuous mode [ 1564.962285][T16955] veth1_vlan: left promiscuous mode [ 1564.962473][T16955] veth0_vlan: left promiscuous mode [ 1566.029972][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1566.094352][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1567.070101][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1567.130157][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1568.883408][ T5279] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1570.287888][ T5279] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1571.608781][ T5279] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1579.754204][T16281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1579.808659][T16281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1579.861527][T16281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1579.862996][T16281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1579.863808][T16281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1581.925293][T16281] Bluetooth: hci3: command tx timeout [ 1584.109266][T28572] Bluetooth: hci3: command tx timeout [ 1586.236349][T28572] Bluetooth: hci3: command tx timeout [ 1587.132561][T16281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1587.195290][T16281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1587.197097][T16281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1587.198792][T16281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1587.234969][T16281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1588.319876][T28572] Bluetooth: hci3: command tx timeout [ 1589.595093][T28572] Bluetooth: hci0: command tx timeout [ 1590.284223][T16281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1590.368405][T16281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1590.378797][T16281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1590.380429][T16281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1590.381331][T16281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1591.669384][T28572] Bluetooth: hci0: command tx timeout [ 1592.469374][T16281] Bluetooth: hci6: command tx timeout [ 1592.494881][T16281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1592.573375][T16281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1592.598553][T16281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1592.603163][T16281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1592.604030][T16281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1593.751215][T28572] Bluetooth: hci0: command tx timeout [ 1594.550098][T28572] Bluetooth: hci6: command tx timeout [ 1595.273884][T28572] Bluetooth: hci7: command tx timeout [ 1595.844658][T28572] Bluetooth: hci0: command tx timeout [ 1596.634220][T28572] Bluetooth: hci6: command tx timeout [ 1597.349339][T16281] Bluetooth: hci7: command tx timeout [ 1597.372992][T29012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.373398][T29012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.373751][T29012] bridge_slave_0: entered allmulticast mode [ 1597.377189][T29012] bridge_slave_0: entered promiscuous mode [ 1597.480914][T29012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.481255][T29012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.481608][T29012] bridge_slave_1: entered allmulticast mode [ 1597.485040][T29012] bridge_slave_1: entered promiscuous mode [ 1598.710981][T16281] Bluetooth: hci6: command tx timeout [ 1599.431683][T16281] Bluetooth: hci7: command tx timeout [ 1599.433565][T29012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.548590][T29012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.813773][T29012] team0: Port device team_slave_0 added [ 1600.975007][T29012] team0: Port device team_slave_1 added [ 1601.509287][T16281] Bluetooth: hci7: command tx timeout [ 1602.428165][T29012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1602.428182][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.428208][T29012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1602.512788][T29012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1602.512807][T29012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1602.512833][T29012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.608491][T28572] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1604.710031][T28572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1604.714549][T28572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1604.716311][T28572] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1604.758534][T28572] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1605.242647][T29012] hsr_slave_0: entered promiscuous mode [ 1605.255988][T29012] hsr_slave_1: entered promiscuous mode [ 1606.870984][T28572] Bluetooth: hci1: command tx timeout [ 1607.513554][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.513658][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.720088][T16955] bridge_slave_1: left allmulticast mode [ 1607.720126][T16955] bridge_slave_1: left promiscuous mode [ 1607.720436][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.000930][T16955] bridge_slave_0: left allmulticast mode [ 1608.000966][T16955] bridge_slave_0: left promiscuous mode [ 1608.001259][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.291380][T16955] bridge_slave_1: left allmulticast mode [ 1608.291417][T16955] bridge_slave_1: left promiscuous mode [ 1608.291701][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.525011][T16955] bridge_slave_0: left allmulticast mode [ 1608.525048][T16955] bridge_slave_0: left promiscuous mode [ 1608.525307][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.974272][T16281] Bluetooth: hci1: command tx timeout [ 1609.009426][T16955] bridge_slave_1: left allmulticast mode [ 1609.009462][T16955] bridge_slave_1: left promiscuous mode [ 1609.009792][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.110957][T16955] bridge_slave_0: left allmulticast mode [ 1609.110992][T16955] bridge_slave_0: left promiscuous mode [ 1609.111256][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.309393][T16955] bridge_slave_1: left allmulticast mode [ 1609.309430][T16955] bridge_slave_1: left promiscuous mode [ 1609.309696][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.412565][T16955] bridge_slave_0: left allmulticast mode [ 1609.412602][T16955] bridge_slave_0: left promiscuous mode [ 1609.412867][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1610.420342][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.480149][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.520669][T16955] bond0 (unregistering): Released all slaves [ 1610.800157][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1610.883666][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1610.941771][T16955] bond0 (unregistering): Released all slaves [ 1611.038931][T16281] Bluetooth: hci1: command tx timeout [ 1611.738180][T16955] bond0 (unregistering): Released all slaves [ 1612.080058][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.150636][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1612.232411][T16955] bond0 (unregistering): Released all slaves [ 1612.530363][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1612.594408][T16955] bond0 (unregistering): Released all slaves [ 1612.848340][T16955] bond0 (unregistering): Released all slaves [ 1613.128530][T16281] Bluetooth: hci1: command tx timeout [ 1614.698213][T29087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.698818][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.714152][T29087] bridge_slave_0: entered allmulticast mode [ 1614.717707][T29087] bridge_slave_0: entered promiscuous mode [ 1614.899591][T29087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.899934][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.900309][T29087] bridge_slave_1: entered allmulticast mode [ 1614.905472][T29087] bridge_slave_1: entered promiscuous mode [ 1615.919724][T29117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.920152][T29117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.920542][T29117] bridge_slave_0: entered allmulticast mode [ 1615.928845][T29117] bridge_slave_0: entered promiscuous mode [ 1616.024249][T29087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1616.064223][T29117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.064590][T29117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.065049][T29117] bridge_slave_1: entered allmulticast mode [ 1616.137142][T29117] bridge_slave_1: entered promiscuous mode [ 1616.179563][T29087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.625257][T29147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.625608][T29147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.625989][T29147] bridge_slave_0: entered allmulticast mode [ 1617.662402][T29147] bridge_slave_0: entered promiscuous mode [ 1617.693581][T29117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.714497][T29087] team0: Port device team_slave_0 added [ 1617.715175][T29147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.715481][T29147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.715833][T29147] bridge_slave_1: entered allmulticast mode [ 1617.748755][T29147] bridge_slave_1: entered promiscuous mode [ 1617.782563][T29117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1617.787181][T29087] team0: Port device team_slave_1 added [ 1620.607949][T29147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.615338][T29117] team0: Port device team_slave_0 added [ 1620.792514][T29087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.792531][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1620.792559][T29087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.565513][T29117] team0: Port device team_slave_1 added [ 1621.691393][T29147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.693559][T29087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.693574][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1621.693601][T29087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1623.531998][T29117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1623.532017][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.532045][T29117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1623.594577][T29147] team0: Port device team_slave_0 added [ 1623.596870][T29117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1623.596887][T29117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1623.596913][T29117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.124287][T29147] team0: Port device team_slave_1 added [ 1624.418573][T29087] hsr_slave_0: entered promiscuous mode [ 1624.508556][T29087] hsr_slave_1: entered promiscuous mode [ 1624.511346][T29087] debugfs: 'hsr0' already exists in 'hsr' [ 1624.511375][T29087] Cannot create hsr debugfs directory [ 1624.929566][T29147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.929583][T29147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1624.929610][T29147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.090062][T29147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.090079][T29147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.090106][T29147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.151779][T29117] hsr_slave_0: entered promiscuous mode [ 1625.154013][T29117] hsr_slave_1: entered promiscuous mode [ 1625.155798][T29117] debugfs: 'hsr0' already exists in 'hsr' [ 1625.155823][T29117] Cannot create hsr debugfs directory [ 1627.701984][T29147] hsr_slave_0: entered promiscuous mode [ 1627.704448][T29147] hsr_slave_1: entered promiscuous mode [ 1627.706328][T29147] debugfs: 'hsr0' already exists in 'hsr' [ 1627.706354][T29147] Cannot create hsr debugfs directory [ 1628.016560][T29275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.016858][T29275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.017253][T29275] bridge_slave_0: entered allmulticast mode [ 1628.053760][T29275] bridge_slave_0: entered promiscuous mode [ 1628.315583][T29275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.315903][T29275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.316262][T29275] bridge_slave_1: entered allmulticast mode [ 1628.580606][T29275] bridge_slave_1: entered promiscuous mode [ 1629.555335][T29275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.887386][T29275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.557940][T29275] team0: Port device team_slave_0 added [ 1630.897570][T29275] team0: Port device team_slave_1 added [ 1631.409308][T16955] hsr_slave_0: left promiscuous mode [ 1631.449233][T16955] hsr_slave_1: left promiscuous mode [ 1631.451975][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.624527][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1633.460043][T16955] hsr_slave_0: left promiscuous mode [ 1633.559742][T16955] hsr_slave_1: left promiscuous mode [ 1633.560836][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.807970][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.019296][T16955] hsr_slave_0: left promiscuous mode [ 1634.041114][T16955] hsr_slave_1: left promiscuous mode [ 1634.823721][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1634.890343][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1635.780747][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1635.840441][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1637.089943][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1637.468854][T29012] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1637.517798][T29012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1637.557864][T29012] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1637.595168][T29012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1637.598504][T29275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.598520][T29275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.598545][T29275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.855646][T29012] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1637.933304][T29012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1637.935090][T29275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.935102][T29275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.935116][T29275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.947167][T29012] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1638.042393][T29012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1638.424371][T29275] hsr_slave_0: entered promiscuous mode [ 1638.425651][T29275] hsr_slave_1: entered promiscuous mode [ 1638.426659][T29275] debugfs: 'hsr0' already exists in 'hsr' [ 1638.426682][T29275] Cannot create hsr debugfs directory [ 1639.214022][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1641.125535][T28572] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1641.237434][T28572] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1641.260036][T28572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1641.261340][T28572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1641.263338][T28572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1641.780095][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1642.878931][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1643.461363][T29600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.461698][T29600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.461990][T29600] bridge_slave_0: entered allmulticast mode [ 1643.464897][T29600] bridge_slave_0: entered promiscuous mode [ 1643.468698][T29600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.469129][T29600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.469412][T29600] bridge_slave_1: entered allmulticast mode [ 1643.472314][T29600] bridge_slave_1: entered promiscuous mode [ 1643.574421][T29600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.583327][T29600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.703477][T28572] Bluetooth: hci2: command tx timeout [ 1643.993800][T29600] team0: Port device team_slave_0 added [ 1644.073392][T29600] team0: Port device team_slave_1 added [ 1644.732782][T29600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.732797][T29600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.732819][T29600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.743019][T29600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.743034][T29600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1644.743056][T29600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.165513][T29600] hsr_slave_0: entered promiscuous mode [ 1645.167666][T29600] hsr_slave_1: entered promiscuous mode [ 1645.169301][T29600] debugfs: 'hsr0' already exists in 'hsr' [ 1645.169326][T29600] Cannot create hsr debugfs directory [ 1645.789181][T28572] Bluetooth: hci2: command tx timeout [ 1646.798208][ T5279] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1647.293352][T16955] IPVS: stop unused estimator thread 0... [ 1647.834334][ T5624] Bluetooth: hci2: command tx timeout [ 1647.883325][T16281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1647.914029][T16281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1647.942193][T16281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1647.946663][T16281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1647.947317][T16281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1648.566416][T29087] netdevsim netdevsim9: probe with driver netdevsim failed with error -12 [ 1649.572978][T16281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1649.643523][T16281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1649.645120][T16281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1649.729767][T16281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1649.746809][T16281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1649.928860][T16281] Bluetooth: hci2: command tx timeout [ 1650.076040][T16281] Bluetooth: hci3: command tx timeout [ 1652.069306][T16281] Bluetooth: hci4: command tx timeout [ 1652.155668][T16281] Bluetooth: hci3: command tx timeout [ 1652.650776][T29713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.650946][T29713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.651224][T29713] bridge_slave_0: entered allmulticast mode [ 1652.653176][T29713] bridge_slave_0: entered promiscuous mode [ 1652.702938][T29713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.703250][T29713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.703607][T29713] bridge_slave_1: entered allmulticast mode [ 1652.705769][T29713] bridge_slave_1: entered promiscuous mode [ 1652.777482][T28572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1652.836010][T28572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1652.837454][T28572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1652.851197][T28572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1652.864386][T28572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1653.101019][T29713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1653.153741][T29713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1653.318974][T29713] team0: Port device team_slave_0 added [ 1653.335183][T29713] team0: Port device team_slave_1 added [ 1653.561197][T29713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.561215][T29713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.561243][T29713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1653.673769][T29713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1653.673786][T29713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.673814][T29713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.159307][T16281] Bluetooth: hci4: command tx timeout [ 1654.235374][T28572] Bluetooth: hci3: command tx timeout [ 1654.260980][T29713] hsr_slave_0: entered promiscuous mode [ 1654.263257][T29713] hsr_slave_1: entered promiscuous mode [ 1654.265057][T29713] debugfs: 'hsr0' already exists in 'hsr' [ 1654.265082][T29713] Cannot create hsr debugfs directory [ 1654.549388][T16955] bridge_slave_1: left allmulticast mode [ 1654.549423][T16955] bridge_slave_1: left promiscuous mode [ 1654.549703][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.711759][T16955] bridge_slave_0: left allmulticast mode [ 1654.711795][T16955] bridge_slave_0: left promiscuous mode [ 1654.712064][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.953704][T28572] Bluetooth: hci0: command tx timeout [ 1654.999454][T16955] bridge_slave_1: left allmulticast mode [ 1654.999490][T16955] bridge_slave_1: left promiscuous mode [ 1654.999743][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.160779][T16955] bridge_slave_0: left allmulticast mode [ 1655.160816][T16955] bridge_slave_0: left promiscuous mode [ 1655.161071][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.420639][T16955] bridge_slave_1: left allmulticast mode [ 1655.420672][T16955] bridge_slave_1: left promiscuous mode [ 1655.420941][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.580111][T16955] bridge_slave_0: left allmulticast mode [ 1655.580144][T16955] bridge_slave_0: left promiscuous mode [ 1655.580316][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.779405][T16955] bridge_slave_1: left allmulticast mode [ 1655.779439][T16955] bridge_slave_1: left promiscuous mode [ 1655.779701][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.880947][T16955] bridge_slave_0: left allmulticast mode [ 1655.880973][T16955] bridge_slave_0: left promiscuous mode [ 1655.881156][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.079447][T16955] bridge_slave_1: left allmulticast mode [ 1656.079484][T16955] bridge_slave_1: left promiscuous mode [ 1656.079950][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.180216][T16955] bridge_slave_0: left allmulticast mode [ 1656.180242][T16955] bridge_slave_0: left promiscuous mode [ 1656.180411][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.229434][T28572] Bluetooth: hci4: command tx timeout [ 1656.309413][T28572] Bluetooth: hci3: command tx timeout [ 1656.399392][T16955] bridge_slave_1: left allmulticast mode [ 1656.399417][T16955] bridge_slave_1: left promiscuous mode [ 1656.399605][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.500305][T16955] bridge_slave_0: left allmulticast mode [ 1656.500329][T16955] bridge_slave_0: left promiscuous mode [ 1656.500494][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.029286][T28572] Bluetooth: hci0: command tx timeout [ 1657.080260][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.160314][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.221410][T16955] bond0 (unregistering): Released all slaves [ 1657.510508][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.589993][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.651605][T16955] bond0 (unregistering): Released all slaves [ 1657.860063][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.939978][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.001641][T16955] bond0 (unregistering): Released all slaves [ 1658.231491][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.312728][T28572] Bluetooth: hci4: command tx timeout [ 1658.313344][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.370864][T16955] bond0 (unregistering): Released all slaves [ 1658.599912][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.700248][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.761450][T16955] bond0 (unregistering): Released all slaves [ 1658.990368][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.069934][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.109438][T28572] Bluetooth: hci0: command tx timeout [ 1659.150798][T16955] bond0 (unregistering): Released all slaves [ 1660.836778][T29746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.837295][T29746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.837682][T29746] bridge_slave_0: entered allmulticast mode [ 1660.862076][T29746] bridge_slave_0: entered promiscuous mode [ 1660.880665][T29746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.880932][T29746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.881295][T29746] bridge_slave_1: entered allmulticast mode [ 1660.884608][T29746] bridge_slave_1: entered promiscuous mode [ 1661.252103][T28572] Bluetooth: hci0: command tx timeout [ 1661.337862][T29746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.431511][T29746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.958320][T29746] team0: Port device team_slave_0 added [ 1662.209477][T16955] hsr_slave_0: left promiscuous mode [ 1662.249432][T16955] hsr_slave_1: left promiscuous mode [ 1662.250301][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.290633][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.429415][T16955] hsr_slave_0: left promiscuous mode [ 1662.469703][T16955] hsr_slave_1: left promiscuous mode [ 1662.470896][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.490454][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.649435][T16955] hsr_slave_0: left promiscuous mode [ 1662.669417][T16955] hsr_slave_1: left promiscuous mode [ 1662.670220][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.710177][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.849344][T16955] hsr_slave_0: left promiscuous mode [ 1662.889337][T16955] hsr_slave_1: left promiscuous mode [ 1662.890103][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.912546][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.069572][T16955] hsr_slave_0: left promiscuous mode [ 1663.089378][T16955] hsr_slave_1: left promiscuous mode [ 1663.090112][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1663.130636][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.289446][T16955] hsr_slave_0: left promiscuous mode [ 1663.309451][T16955] hsr_slave_1: left promiscuous mode [ 1663.310249][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1663.350171][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.759808][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1663.820415][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1664.366493][T16281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1664.389887][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1664.430723][T16281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1664.431063][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1664.439472][T16281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1664.461977][T16281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1664.466785][T16281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1664.985977][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1665.039813][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1665.459781][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1665.509947][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1665.889966][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1665.940766][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1666.349795][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1666.389909][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1666.557044][T29746] team0: Port device team_slave_1 added [ 1666.641177][T28572] Bluetooth: hci5: command tx timeout [ 1666.735384][T29746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.735401][T29746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.735425][T29746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1666.800285][T29746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1666.800300][T29746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.800321][T29746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.017124][T29147] netdevsim netdevsim8: probe with driver netdevsim failed with error -12 [ 1667.263567][T29811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.264834][T29811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.265107][T29811] bridge_slave_0: entered allmulticast mode [ 1667.267800][T29811] bridge_slave_0: entered promiscuous mode [ 1667.385795][T29746] hsr_slave_0: entered promiscuous mode [ 1667.387957][T29746] hsr_slave_1: entered promiscuous mode [ 1667.420134][T29811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.420418][T29811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.420749][T29811] bridge_slave_1: entered allmulticast mode [ 1667.442849][T29811] bridge_slave_1: entered promiscuous mode [ 1667.936654][T29811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.977576][T29811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.709623][T28572] Bluetooth: hci5: command tx timeout [ 1668.775278][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1668.852518][T29811] team0: Port device team_slave_0 added [ 1668.930685][T29811] team0: Port device team_slave_1 added [ 1668.952223][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.952338][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.191134][T29811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.191146][T29811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.191161][T29811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.326208][T29811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.326219][T29811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.326243][T29811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.037914][T29811] hsr_slave_0: entered promiscuous mode [ 1670.040897][T29811] hsr_slave_1: entered promiscuous mode [ 1670.042655][T29811] debugfs: 'hsr0' already exists in 'hsr' [ 1670.042680][T29811] Cannot create hsr debugfs directory [ 1670.789393][T28572] Bluetooth: hci5: command tx timeout [ 1670.907186][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1671.043988][T29600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1671.138294][T29600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1671.181802][T29600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1671.276390][T29600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1671.301072][T29600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1671.345737][T29600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1671.601956][T29600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1671.633367][T29600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1672.035484][T29940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.035871][T29940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.036137][T29940] bridge_slave_0: entered allmulticast mode [ 1672.037960][T29940] bridge_slave_0: entered promiscuous mode [ 1672.176908][T29940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.177089][T29940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.177506][T29940] bridge_slave_1: entered allmulticast mode [ 1672.254527][T29940] bridge_slave_1: entered promiscuous mode [ 1672.347877][T29713] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1672.544538][T29713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1672.707887][T29713] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1672.806173][T29713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1672.874259][T28572] Bluetooth: hci5: command tx timeout [ 1672.875558][T29940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.115464][T29713] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1673.145189][T29713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1673.151083][T29940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.288604][ T5279] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1673.319856][T29713] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1673.364349][T29713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1673.492708][T29940] team0: Port device team_slave_0 added [ 1673.505648][T29940] team0: Port device team_slave_1 added [ 1673.771458][T29940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.771470][T29940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.771484][T29940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.833690][T29940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.833708][T29940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.833730][T29940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.212176][T29940] hsr_slave_0: entered promiscuous mode [ 1674.213455][T29940] hsr_slave_1: entered promiscuous mode [ 1674.214406][T29940] debugfs: 'hsr0' already exists in 'hsr' [ 1674.214429][T29940] Cannot create hsr debugfs directory [ 1674.962635][ T5279] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1675.654324][T29600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.896530][T29600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1675.978566][T29713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.994624][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.994869][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.067790][T18700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.067948][T18700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.340238][T29746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1676.384834][T29746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1676.416815][T29746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1676.495103][T29746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1676.498778][T29713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.520815][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1676.521144][T29746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1676.563120][T29746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.646358][T29746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1676.674311][T29746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1676.856521][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.856657][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.936918][T18699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.937086][T18699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.118393][T29811] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1677.145612][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1677.204604][T29811] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1677.243211][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1677.557963][T29811] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1677.592561][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1677.640503][T29811] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1677.686901][T29811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1678.095942][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1678.544411][T29746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1678.775512][T29746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1678.844693][ T1382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1678.844784][ T1382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1678.932322][T18699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.932497][T18699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.001268][T29811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.135030][T29600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.385205][T29811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.755969][T16955] bridge_slave_1: left allmulticast mode [ 1679.755993][T16955] bridge_slave_1: left promiscuous mode [ 1679.756191][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.890135][T16955] bridge_slave_0: left allmulticast mode [ 1679.890159][T16955] bridge_slave_0: left promiscuous mode [ 1679.890367][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.109466][T16955] bridge_slave_1: left allmulticast mode [ 1680.109495][T16955] bridge_slave_1: left promiscuous mode [ 1680.109670][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.231093][T16955] bridge_slave_0: left allmulticast mode [ 1680.231155][T16955] bridge_slave_0: left promiscuous mode [ 1680.231447][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.449420][T16955] bridge_slave_1: left allmulticast mode [ 1680.449446][T16955] bridge_slave_1: left promiscuous mode [ 1680.449659][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.551984][T16955] bridge_slave_0: left allmulticast mode [ 1680.552011][T16955] bridge_slave_0: left promiscuous mode [ 1680.552205][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.749532][T16955] bridge_slave_1: left allmulticast mode [ 1680.749556][T16955] bridge_slave_1: left promiscuous mode [ 1680.749733][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.850195][T16955] bridge_slave_0: left allmulticast mode [ 1680.850218][T16955] bridge_slave_0: left promiscuous mode [ 1680.850389][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.230020][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.319909][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.381306][T16955] bond0 (unregistering): Released all slaves [ 1681.641929][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.741560][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.831880][T16955] bond0 (unregistering): Released all slaves [ 1682.090438][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.170189][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.230942][T16955] bond0 (unregistering): Released all slaves [ 1682.504025][T16955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.599912][T16955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.662191][T16955] bond0 (unregistering): Released all slaves [ 1682.688773][ T5279] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1682.731323][T25176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.731502][T25176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.972846][T25176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.973005][T25176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.217907][T29713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.449280][T29940] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1684.527652][T29940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1684.618985][T29940] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1684.700391][T29940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1684.797432][T29940] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1684.843693][T29940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1684.997801][T29940] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1685.034544][T29940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1685.239313][T16955] hsr_slave_0: left promiscuous mode [ 1685.279334][T16955] hsr_slave_1: left promiscuous mode [ 1685.280103][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.302501][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.459361][T16955] hsr_slave_0: left promiscuous mode [ 1685.479352][T16955] hsr_slave_1: left promiscuous mode [ 1685.480100][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.519969][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.679383][T16955] hsr_slave_0: left promiscuous mode [ 1685.701952][T16955] hsr_slave_1: left promiscuous mode [ 1685.702805][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.740134][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1685.879379][T16955] hsr_slave_0: left promiscuous mode [ 1685.904712][T16955] hsr_slave_1: left promiscuous mode [ 1685.906163][T16955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1685.939940][T16955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.330880][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1686.380639][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1686.790825][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1686.840127][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1687.271174][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1687.319732][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1687.729859][T16955] team0 (unregistering): Port device team_slave_1 removed [ 1687.781731][T16955] team0 (unregistering): Port device team_slave_0 removed [ 1687.954972][ T5279] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1688.049635][T29600] veth0_vlan: entered promiscuous mode [ 1688.226516][T29713] veth0_vlan: entered promiscuous mode [ 1688.298829][T29600] veth1_vlan: entered promiscuous mode [ 1688.314825][T29746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.435454][T29713] veth1_vlan: entered promiscuous mode [ 1688.972980][T29600] veth0_macvtap: entered promiscuous mode [ 1689.047420][T29600] veth1_macvtap: entered promiscuous mode [ 1689.053341][T29713] veth0_macvtap: entered promiscuous mode [ 1689.175283][T29713] veth1_macvtap: entered promiscuous mode [ 1689.193937][T29746] veth0_vlan: entered promiscuous mode [ 1689.332864][T29600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.352360][T29940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1689.453970][T29746] veth1_vlan: entered promiscuous mode [ 1689.464955][T29600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.483915][T29713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.654797][T29811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1689.675631][ T1139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.695001][T29713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.769414][ T1139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.804900][ T1139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.823523][T29940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.826393][ T1139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.838023][ T1139] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.838359][ T1139] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.838575][ T1139] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.851803][ T1139] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.067876][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.068046][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.417329][T18702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.417484][T18702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.778737][T29746] veth0_macvtap: entered promiscuous mode [ 1691.838794][T29746] veth1_macvtap: entered promiscuous mode [ 1692.522750][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.522770][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1692.811421][T29746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1692.990177][T25384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.990197][T25384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.249949][ T1559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.249970][ T1559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.252344][T29746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1693.620300][ T1559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.626029][T25384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.626048][T25384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.707271][ T1559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.725627][ T1559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1693.725844][T29811] veth0_vlan: entered promiscuous mode [ 1693.884699][ T1559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1694.039275][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1694.039361][ T37] audit: type=1326 audit(1779385863.928:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30180 comm="syz.6.6873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12736ece59 code=0x7fc00000 [ 1694.039407][ T37] audit: type=1326 audit(1779385863.928:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30180 comm="syz.6.6873" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f12736ece59 code=0x7fc00000 [ 1694.198660][T29811] veth1_vlan: entered promiscuous mode [ 1695.657498][T29811] veth0_macvtap: entered promiscuous mode [ 1696.196714][T29811] veth1_macvtap: entered promiscuous mode [ 1696.201775][T25220] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1696.361596][T25220] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.361651][T25220] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1696.361672][T25220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.371653][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.371674][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.440597][T25220] usb 7-1: config 0 descriptor?? [ 1696.627614][T29811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.747563][T29811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.940161][T18699] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.982845][T25220] ath6kl: Unsupported hardware version: 0x0 [ 1696.991308][T25220] ath6kl: Failed to init ath6kl core: -22 [ 1696.992111][T25220] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1697.026616][ T1559] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.040999][ T1559] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.064709][ T1559] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1697.086147][ T1559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.086161][ T1559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.170106][T25220] usb 7-1: USB disconnect, device number 2 [ 1697.736938][T29940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1698.602576][T24788] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1698.707104][T30232] binder: 30231:30232 ioctl c0306201 0 returned -14 [ 1698.918677][ T1382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1698.918698][ T1382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1698.930996][T24788] usb 7-1: Using ep0 maxpacket: 32 [ 1698.933097][T24788] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.933193][T24788] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1698.933214][T24788] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1698.933237][T24788] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1698.935575][T24788] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1698.935600][T24788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.935624][T24788] usb 7-1: Product: syz [ 1698.935636][T24788] usb 7-1: Manufacturer: syz [ 1698.935649][T24788] usb 7-1: SerialNumber: syz [ 1699.316529][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1699.344169][T24788] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input57 [ 1699.590709][T24788] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1699.590730][T24788] (id 0x00) [ 1699.889245][T24788] rc_core: IR keymap rc-imon-pad not found [ 1699.889265][T24788] Registered IR keymap rc-empty [ 1699.889337][T24788] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1699.889354][T24788] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1699.920529][T24788] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1699.950661][T24788] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input58 [ 1699.955521][T24788] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:3> initialized [ 1700.275898][T25146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1700.275917][T25146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.387475][T29940] veth0_vlan: entered promiscuous mode [ 1700.512402][T29940] veth1_vlan: entered promiscuous mode [ 1700.612854][T29940] veth0_macvtap: entered promiscuous mode [ 1700.683794][T29940] veth1_macvtap: entered promiscuous mode [ 1700.774826][T29940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.896536][T29940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.084207][T30249] imon:send_packet: task interrupted [ 1701.084227][T30249] imon:send_packet: packet tx failed (-512) [ 1701.084267][T30249] imon:vfd_write: send packet #2 failed [ 1701.085362][T30249] imon:send_packet: packet tx failed (-32) [ 1701.085459][T30249] imon:vfd_write: send packet #0 failed [ 1701.118314][T18699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.135918][T18699] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.138743][T18699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.140950][T18699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.223476][ T5893] usb 7-1: USB disconnect, device number 3 [ 1703.672416][T30286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7280'. [ 1704.167750][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.167773][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.351363][ T1559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.351385][ T1559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.459253][T24854] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1705.539529][T30337] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7288'. [ 1705.543211][T30337] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7288'. [ 1705.620638][T24854] usb 9-1: Using ep0 maxpacket: 32 [ 1705.628277][T30324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7285'. [ 1705.653461][T24854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1705.659281][T24854] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1705.659320][T24854] usb 9-1: can't read configurations, error -71 [ 1707.438810][T30374] fuse: Bad value for 'fd' [ 1707.605194][T30378] fuse: Bad value for 'fd' [ 1709.739647][T30418] fuse: Bad value for 'fd' [ 1710.444226][T30436] fuse: Bad value for 'fd' [ 1710.852688][T28572] Bluetooth: hci5: link tx timeout [ 1710.862829][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.877098][T28572] Bluetooth: hci5: link tx timeout [ 1710.877215][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.877307][T28572] Bluetooth: hci5: link tx timeout [ 1710.877319][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.877435][T28572] Bluetooth: hci5: link tx timeout [ 1710.877446][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.883523][T28572] Bluetooth: hci5: link tx timeout [ 1710.883541][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.917672][T28572] Bluetooth: hci5: link tx timeout [ 1710.917694][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.917823][T28572] Bluetooth: hci5: link tx timeout [ 1710.917834][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.917941][T28572] Bluetooth: hci5: link tx timeout [ 1710.917952][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.918705][T28572] Bluetooth: hci5: link tx timeout [ 1710.918726][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.918837][T28572] Bluetooth: hci5: link tx timeout [ 1710.918848][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.921941][T28572] Bluetooth: hci5: link tx timeout [ 1710.921961][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.922084][T28572] Bluetooth: hci5: link tx timeout [ 1710.922095][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.922202][T28572] Bluetooth: hci5: link tx timeout [ 1710.922213][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.922321][T28572] Bluetooth: hci5: link tx timeout [ 1710.922332][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.922436][T28572] Bluetooth: hci5: link tx timeout [ 1710.922447][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.923040][T28572] Bluetooth: hci5: link tx timeout [ 1710.923053][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.923163][T28572] Bluetooth: hci5: link tx timeout [ 1710.923174][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.923278][T28572] Bluetooth: hci5: link tx timeout [ 1710.923289][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1710.923394][T28572] Bluetooth: hci5: link tx timeout [ 1710.923416][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1711.013800][T28572] Bluetooth: hci5: link tx timeout [ 1711.013821][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1711.093581][T28572] Bluetooth: hci5: link tx timeout [ 1711.093603][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1711.105406][T28572] Bluetooth: hci5: link tx timeout [ 1711.105429][T28572] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1712.555610][T30468] fuse: Bad value for 'fd' [ 1712.807261][T30472] syzkaller1: entered promiscuous mode [ 1712.807288][T30472] syzkaller1: entered allmulticast mode [ 1712.949341][T28572] Bluetooth: hci5: command 0x0406 tx timeout [ 1713.475649][T30481] nbd0: detected capacity change from 0 to 63 [ 1713.650816][T28572] block nbd0: Receive control failed (result -32) [ 1713.858894][T30201] block nbd0: Dead connection, failed to find a fallback [ 1713.858922][T30201] block nbd0: shutting down sockets [ 1713.903074][T30201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.903395][T30201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1713.903856][T30201] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.903882][T30201] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1713.904022][T30201] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.904045][T30201] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1713.904180][T30201] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.904202][T30201] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1713.904391][T30201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.904413][T30201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1713.904549][T30201] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.906667][T30201] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1713.906836][T30201] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.906854][T30201] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1713.906957][T30201] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.906973][T30201] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1713.907085][T30201] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.907101][T30201] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1713.907198][T30201] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1713.907213][T30201] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1714.173924][T24854] hid-generic 0005:0C45:1010.0015: item fetching failed at offset 0/1 [ 1714.178229][T24854] hid-generic 0005:0C45:1010.0015: probe with driver hid-generic failed with error -22 [ 1714.192293][T30201] ldm_validate_partition_table(): Disk read failed. [ 1714.203583][T30201] Dev nbd0: unable to read RDB block 0 [ 1714.220534][T30201] nbd0: unable to read partition table [ 1714.293410][T30201] ldm_validate_partition_table(): Disk read failed. [ 1714.295897][T30201] Dev nbd0: unable to read RDB block 0 [ 1714.297993][T30201] nbd0: unable to read partition table [ 1715.436908][T30537] fuse: Bad value for 'fd' [ 1717.149285][ T5897] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1717.329218][ T5897] usb 9-1: Using ep0 maxpacket: 32 [ 1717.331499][ T5897] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.331565][ T5897] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1717.331590][ T5897] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1717.331614][ T5897] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1717.334440][ T5897] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1717.334470][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.334488][ T5897] usb 9-1: Product: syz [ 1717.334501][ T5897] usb 9-1: Manufacturer: syz [ 1717.334514][ T5897] usb 9-1: SerialNumber: syz [ 1717.464055][T30597] fuse: Bad value for 'fd' [ 1717.779040][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1717.901289][ T5897] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input59 [ 1718.098621][ T5897] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1718.098642][ T5897] (id 0x00) [ 1718.307886][ T5897] rc_core: IR keymap rc-imon-pad not found [ 1718.307906][ T5897] Registered IR keymap rc-empty [ 1718.307976][ T5897] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1718.307993][ T5897] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1718.384698][ T5897] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1718.411316][ T5897] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input60 [ 1718.437990][ T5897] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:43> initialized [ 1719.984156][T30649] fuse: Bad value for 'fd' [ 1720.092622][T30649] binder: BINDER_SET_CONTEXT_MGR already set [ 1720.092639][T30649] binder: 30646:30649 ioctl 4018620d 200000001000 returned -16 [ 1720.308037][T30628] imon:send_packet: task interrupted [ 1720.308057][T30628] imon:send_packet: packet tx failed (-512) [ 1720.308332][T30628] imon:vfd_write: send packet #2 failed [ 1720.538726][T14559] usb 9-1: USB disconnect, device number 43 [ 1721.859289][ T5352] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1722.015149][ T5352] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.015175][ T5352] usb 7-1: config 0 has no interfaces? [ 1722.015203][ T5352] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1722.015225][ T5352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.025162][ T5352] usb 7-1: config 0 descriptor?? [ 1722.409320][ T5352] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1722.472524][T30721] fuse: Bad value for 'fd' [ 1722.494490][T30721] binder: BINDER_SET_CONTEXT_MGR already set [ 1722.494506][T30721] binder: 30720:30721 ioctl 4018620d 200000001000 returned -16 [ 1722.561364][ T5352] usb 9-1: Using ep0 maxpacket: 32 [ 1722.566110][ T5352] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.566164][ T5352] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1722.566190][ T5352] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1722.566222][ T5352] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1722.583367][ T5352] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1722.583397][ T5352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.583415][ T5352] usb 9-1: Product: syz [ 1722.583430][ T5352] usb 9-1: Manufacturer: syz [ 1722.583444][ T5352] usb 9-1: SerialNumber: syz [ 1722.630499][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1722.755021][ T5352] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input61 [ 1722.839268][ T5352] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1722.839288][ T5352] (id 0x00) [ 1722.929194][ T5352] rc_core: IR keymap rc-imon-pad not found [ 1722.929214][ T5352] Registered IR keymap rc-empty [ 1722.929290][ T5352] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1722.929308][ T5352] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1723.071918][ T5352] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1723.073842][ T5352] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input62 [ 1723.127578][ T5352] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:44> initialized [ 1724.927026][T14559] usb 7-1: USB disconnect, device number 4 [ 1725.185385][T30756] imon:send_packet: task interrupted [ 1725.185404][T30756] imon:send_packet: packet tx failed (-512) [ 1725.185441][T30756] imon:vfd_write: send packet #2 failed [ 1725.336718][T30784] fuse: Bad value for 'fd' [ 1725.374026][T14559] usb 9-1: USB disconnect, device number 44 [ 1725.697496][T30796] sg_write: data in/out 262108/85 bytes for SCSI command 0x0-- guessing data in; [ 1725.697496][T30796] program syz.9.7396 not setting count and/or reply_len properly [ 1726.259191][T27955] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1726.485998][T27955] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1726.486025][T27955] usb 10-1: config 0 has no interfaces? [ 1726.486055][T27955] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1726.486077][T27955] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.537369][T27955] usb 10-1: config 0 descriptor?? [ 1726.819764][T30824] fuse: Bad value for 'fd' [ 1726.852908][T30824] binder: 30823:30824 ioctl c0306201 0 returned -14 [ 1727.719545][T24854] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1727.813944][T30842] fuse: Bad value for 'fd' [ 1727.869244][T24854] usb 9-1: Using ep0 maxpacket: 32 [ 1727.872259][T24854] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.872313][T24854] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1727.872341][T24854] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1727.872368][T24854] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1727.885468][T24854] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1727.885498][T24854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.885517][T24854] usb 9-1: Product: syz [ 1727.885530][T24854] usb 9-1: Manufacturer: syz [ 1727.885545][T24854] usb 9-1: SerialNumber: syz [ 1728.014417][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1728.017693][T24854] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input63 [ 1728.212809][T30846] fuse: Unknown parameter 'use00000000000000000000' [ 1728.239237][T24854] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1728.239259][T24854] (id 0x00) [ 1728.359312][T24854] rc_core: IR keymap rc-imon-pad not found [ 1728.359334][T24854] Registered IR keymap rc-empty [ 1728.359415][T24854] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1728.359434][T24854] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1728.461416][T24854] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1728.465766][T24854] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input64 [ 1728.513146][T24854] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:45> initialized [ 1729.100693][T24854] usb 10-1: USB disconnect, device number 24 [ 1729.655685][T30871] fuse: Bad value for 'fd' [ 1729.681952][T30871] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.681966][T30871] binder: 30870:30871 ioctl 4018620d 200000000100 returned -16 [ 1729.687278][T30871] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.687293][T30871] binder: 30870:30871 ioctl 4018620d 200000001000 returned -16 [ 1729.962823][T30878] fuse: Bad value for 'fd' [ 1729.967484][T30878] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.967531][T30878] binder: 30877:30878 ioctl 4018620d 200000000100 returned -16 [ 1729.973991][T30878] binder: BINDER_SET_CONTEXT_MGR already set [ 1729.974056][T30878] binder: 30877:30878 ioctl 4018620d 200000001000 returned -16 [ 1730.392331][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.392429][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.415461][T30882] fuse: Unknown parameter 'use00000000000000000000' [ 1730.687108][T30864] imon:send_packet: task interrupted [ 1730.687590][T30864] imon:send_packet: packet tx failed (-512) [ 1730.699597][T30864] imon:vfd_write: send packet #2 failed [ 1730.769298][T27955] usb 9-1: USB disconnect, device number 45 [ 1731.132569][T30902] fuse: Bad value for 'fd' [ 1731.624592][T30914] fuse: Unknown parameter 'use00000000000000000000' [ 1731.643146][T30916] fuse: Bad value for 'fd' [ 1731.660140][T30916] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.660155][T30916] binder: 30915:30916 ioctl 4018620d 200000000100 returned -16 [ 1731.668161][T30916] binder: BINDER_SET_CONTEXT_MGR already set [ 1731.668177][T30916] binder: 30915:30916 ioctl 4018620d 200000001000 returned -16 [ 1732.276471][T30924] syzkaller0: entered promiscuous mode [ 1732.276499][T30924] syzkaller0: entered allmulticast mode [ 1732.870526][T30579] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1732.933954][T30940] fuse: Bad value for 'fd' [ 1732.939307][T30940] binder: BINDER_SET_CONTEXT_MGR already set [ 1732.939322][T30940] binder: 30939:30940 ioctl 4018620d 200000000100 returned -16 [ 1732.955699][T30940] binder: BINDER_SET_CONTEXT_MGR already set [ 1732.955715][T30940] binder: 30939:30940 ioctl 4018620d 200000001000 returned -16 [ 1733.039626][T30579] usb 2-1: Using ep0 maxpacket: 32 [ 1733.050461][T30579] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.050513][T30579] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1733.050537][T30579] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1733.050563][T30579] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1733.096318][T30579] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1733.096349][T30579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.096370][T30579] usb 2-1: Product: syz [ 1733.096384][T30579] usb 2-1: Manufacturer: syz [ 1733.096396][T30579] usb 2-1: SerialNumber: syz [ 1733.148617][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1733.303639][T30949] fuse: Unknown parameter 'user_i00000000000000000000' [ 1733.357483][T30579] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input65 [ 1733.569229][T30579] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1733.569250][T30579] (id 0x00) [ 1733.646936][T30957] fuse: Bad value for 'fd' [ 1733.723310][T30957] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.723325][T30957] binder: 30955:30957 ioctl 4018620d 200000000100 returned -16 [ 1733.733517][T30957] binder: BINDER_SET_CONTEXT_MGR already set [ 1733.733533][T30957] binder: 30955:30957 ioctl 4018620d 200000001000 returned -16 [ 1733.737508][T30579] rc_core: IR keymap rc-imon-pad not found [ 1733.737528][T30579] Registered IR keymap rc-empty [ 1733.737613][T30579] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1733.737631][T30579] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1733.762009][T30579] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1733.776241][T30579] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input66 [ 1733.788460][T30579] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:46> initialized [ 1734.695665][T30983] fuse: Unknown parameter 'user_i00000000000000000000' [ 1734.790558][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7456'. [ 1734.791616][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7456'. [ 1734.792291][T30986] netlink: 'syz.7.7456': attribute type 11 has an invalid length. [ 1735.896765][T30981] imon:send_packet: task interrupted [ 1735.896786][T30981] imon:send_packet: packet tx failed (-512) [ 1735.896954][T30981] imon:vfd_write: send packet #2 failed [ 1735.958937][T30579] usb 2-1: USB disconnect, device number 46 [ 1736.014246][T31003] fuse: Bad value for 'fd' [ 1736.029531][T31003] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.029546][T31003] binder: 31002:31003 ioctl 4018620d 200000000100 returned -16 [ 1736.040543][T31003] binder: BINDER_SET_CONTEXT_MGR already set [ 1736.040557][T31003] binder: 31002:31003 ioctl 4018620d 200000001000 returned -16 [ 1736.555942][T31012] fuse: Unknown parameter 'user_i00000000000000000000' [ 1737.949289][T25220] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1738.110790][T25220] usb 7-1: device descriptor read/64, error -71 [ 1738.146684][T31043] fuse: Bad value for 'fd' [ 1738.382516][T31051] syzkaller0: entered promiscuous mode [ 1738.382545][T31051] syzkaller0: entered allmulticast mode [ 1738.793040][T31056] fuse: Bad value for 'fd' [ 1738.796403][T31056] binder: BINDER_SET_CONTEXT_MGR already set [ 1738.796418][T31056] binder: 31055:31056 ioctl 4018620d 200000000100 returned -16 [ 1738.798210][T31056] binder: BINDER_SET_CONTEXT_MGR already set [ 1738.798219][T31056] binder: 31055:31056 ioctl 4018620d 200000001000 returned -16 [ 1738.811021][T25220] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1738.939194][T25220] usb 7-1: device descriptor read/64, error -71 [ 1739.058674][T25220] usb usb7-port1: attempt power cycle [ 1739.146165][T31066] sg_write: data in/out 262108/172 bytes for SCSI command 0x0-- guessing data in; [ 1739.146165][T31066] program syz.8.7488 not setting count and/or reply_len properly [ 1739.353735][T28572] Bluetooth: hci5: command 0x0406 tx timeout [ 1739.400626][T25220] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1739.420171][T25220] usb 7-1: device descriptor read/8, error -71 [ 1739.526579][T31082] fuse: Bad value for 'fd' [ 1739.544063][T31082] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.544080][T31082] binder: 31079:31082 ioctl 4018620d 200000000100 returned -16 [ 1739.548000][T31082] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.548015][T31082] binder: 31079:31082 ioctl 4018620d 200000001000 returned -16 [ 1739.659195][T25220] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1739.693425][T25220] usb 7-1: device descriptor read/8, error -71 [ 1739.760794][T31087] fuse: Bad value for 'fd' [ 1739.766659][T31087] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.766675][T31087] binder: 31086:31087 ioctl 4018620d 200000000100 returned -16 [ 1739.791101][T31087] binder: BINDER_SET_CONTEXT_MGR already set [ 1739.791117][T31087] binder: 31086:31087 ioctl 4018620d 200000001000 returned -16 [ 1739.799869][T25220] usb usb7-port1: unable to enumerate USB device [ 1740.557587][T31094] syzkaller0: entered promiscuous mode [ 1740.557614][T31094] syzkaller0: entered allmulticast mode [ 1740.757580][T31096] sg_write: data in/out 262108/172 bytes for SCSI command 0x0-- guessing data in; [ 1740.757580][T31096] program syz.9.7501 not setting count and/or reply_len properly [ 1741.057288][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7504'. [ 1741.089661][T31101] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7504'. [ 1741.090551][T31101] netlink: 'syz.6.7504': attribute type 11 has an invalid length. [ 1741.384149][T31117] fuse: Bad value for 'fd' [ 1741.417492][T31117] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.417509][T31117] binder: 31113:31117 ioctl 4018620d 200000000100 returned -16 [ 1741.425157][T31117] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.425173][T31117] binder: 31113:31117 ioctl 4018620d 200000001000 returned -16 [ 1741.460833][T31106] syzkaller0: entered promiscuous mode [ 1741.460874][T31106] syzkaller0: entered allmulticast mode [ 1741.891604][T31128] fuse: Bad value for 'fd' [ 1741.895262][T31128] binder: BINDER_SET_CONTEXT_MGR already set [ 1741.895274][T31128] binder: 31127:31128 ioctl 4018620d 200000000100 returned -16 [ 1742.039695][T30579] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1742.086987][T31134] sg_write: data in/out 262108/172 bytes for SCSI command 0x0-- guessing data in; [ 1742.086987][T31134] program syz.7.7516 not setting count and/or reply_len properly [ 1742.279960][T25298] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1742.301725][T31142] syzkaller0: entered promiscuous mode [ 1742.301751][T31142] syzkaller0: entered allmulticast mode [ 1742.310689][T30579] usb 10-1: Using ep0 maxpacket: 8 [ 1742.313675][T30579] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1742.313730][T30579] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1742.313752][T30579] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1742.313774][T30579] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1742.313802][T30579] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1742.313840][T30579] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1742.313863][T30579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.449215][T25298] usb 2-1: device descriptor read/64, error -71 [ 1742.594848][T30579] usb 10-1: usb_control_msg returned -32 [ 1742.594898][T30579] usbtmc 10-1:16.0: can't read capabilities [ 1742.689246][T25298] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1742.947048][T25298] usb 2-1: device descriptor read/64, error -71 [ 1743.051736][T25298] usb usb2-port1: attempt power cycle [ 1743.490943][T25298] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1743.525872][T25298] usb 2-1: device descriptor read/8, error -71 [ 1743.759840][T25298] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1743.779903][T25298] usb 2-1: device descriptor read/8, error -71 [ 1743.877619][T31158] fuse: Bad value for 'fd' [ 1743.891131][T31158] binder: BINDER_SET_CONTEXT_MGR already set [ 1743.891147][T31158] binder: 31157:31158 ioctl 4018620d 200000000100 returned -16 [ 1743.891299][T25298] usb usb2-port1: unable to enumerate USB device [ 1744.297448][T31163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7526'. [ 1744.298722][T31163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7526'. [ 1744.320849][T31163] netlink: 'syz.6.7526': attribute type 11 has an invalid length. [ 1744.371986][T31165] sg_write: data in/out 262108/178 bytes for SCSI command 0x0-- guessing data in; [ 1744.371986][T31165] program syz.7.7527 not setting count and/or reply_len properly [ 1744.752823][T27955] usb 10-1: USB disconnect, device number 25 [ 1745.951481][T31182] fuse: Bad value for 'fd' [ 1746.165228][T31187] fuse: Bad value for 'fd' [ 1746.193805][T31187] binder: BINDER_SET_CONTEXT_MGR already set [ 1746.193815][T31187] binder: 31185:31187 ioctl 4018620d 200000000100 returned -16 [ 1746.523394][T31198] sg_write: data in/out 262108/175 bytes for SCSI command 0x0-- guessing data in; [ 1746.523394][T31198] program syz.8.7538 not setting count and/or reply_len properly [ 1747.269211][ T5893] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1747.342143][T31209] fuse: Bad value for 'fd' [ 1747.431161][ T5893] usb 9-1: Using ep0 maxpacket: 8 [ 1747.546051][T14559] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1747.570586][ T5893] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1747.570644][ T5893] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1747.570667][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1747.570691][ T5893] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1747.570714][ T5893] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1747.570755][ T5893] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1747.570777][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.740579][T14559] usb 2-1: device descriptor read/64, error -71 [ 1747.800615][ T5893] usb 9-1: usb_control_msg returned -32 [ 1747.800663][ T5893] usbtmc 9-1:16.0: can't read capabilities [ 1747.945849][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7547'. [ 1747.947282][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7547'. [ 1747.948103][T31220] netlink: 'syz.6.7547': attribute type 11 has an invalid length. [ 1747.980602][T14559] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1748.111968][T14559] usb 2-1: device descriptor read/64, error -71 [ 1748.219811][T14559] usb usb2-port1: attempt power cycle [ 1748.361248][T31226] fuse: Bad value for 'fd' [ 1748.387194][T31226] binder: 31223:31226 ioctl 4018620d 0 returned -22 [ 1748.670734][T14559] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1748.691504][T14559] usb 2-1: device descriptor read/8, error -71 [ 1748.950285][T14559] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1748.970058][T14559] usb 2-1: device descriptor read/8, error -71 [ 1749.080214][T14559] usb usb2-port1: unable to enumerate USB device [ 1749.723860][T14559] usb 9-1: USB disconnect, device number 46 [ 1750.035779][T31261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7562'. [ 1750.037147][T31261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7562'. [ 1750.038365][T31261] netlink: 'syz.6.7562': attribute type 11 has an invalid length. [ 1751.077577][T31274] fuse: Bad value for 'fd' [ 1751.114170][T31274] binder: BINDER_SET_CONTEXT_MGR already set [ 1751.114185][T31274] binder: 31273:31274 ioctl 4018620d 200000000100 returned -16 [ 1751.156080][T31274] binder: 31273:31274 ioctl 4018620d 0 returned -22 [ 1753.456109][T31329] fuse: Bad value for 'fd' [ 1753.500940][T31329] binder: 31328:31329 ioctl 4018620d 0 returned -22 [ 1754.441695][T30579] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1754.609248][T30579] usb 2-1: Using ep0 maxpacket: 32 [ 1754.618211][T30579] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.619956][T30579] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1754.619987][T30579] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1754.620013][T30579] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1754.660102][T30579] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1754.660132][T30579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.660151][T30579] usb 2-1: Product: syz [ 1754.660165][T30579] usb 2-1: Manufacturer: syz [ 1754.660184][T30579] usb 2-1: SerialNumber: syz [ 1754.695934][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1754.815194][T30579] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input67 [ 1755.066282][T30579] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1755.066305][T30579] (id 0x00) [ 1755.491820][T30579] rc_core: IR keymap rc-imon-pad not found [ 1755.491842][T30579] Registered IR keymap rc-empty [ 1755.491922][T30579] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1755.491941][T30579] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1755.542762][T30579] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1755.586951][T30579] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input68 [ 1755.708877][T30579] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:55> initialized [ 1756.015089][T31344] imon:send_packet: task interrupted [ 1756.015113][T31344] imon:send_packet: packet tx failed (-512) [ 1756.015156][T31344] imon:vfd_write: send packet #1 failed [ 1756.037601][T31344] imon:send_packet: packet tx failed (-32) [ 1756.050541][T31344] imon:vfd_write: send packet #0 failed [ 1756.061831][T25298] usb 2-1: USB disconnect, device number 55 [ 1756.492605][T31388] fuse: Bad value for 'fd' [ 1756.558459][T31388] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.558475][T31388] binder: 31385:31388 ioctl 4018620d 200000000100 returned -16 [ 1756.599401][T31388] binder: BINDER_SET_CONTEXT_MGR already set [ 1756.599417][T31388] binder: 31385:31388 ioctl 4018620d 200000001000 returned -16 [ 1756.599760][T31388] binder: 31385:31388 ioctl c0306201 0 returned -14 [ 1759.299271][T14559] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1759.330378][T30579] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1759.449338][T14559] usb 9-1: Using ep0 maxpacket: 8 [ 1759.455705][T14559] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1759.455763][T14559] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1759.455788][T14559] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1759.455813][T14559] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1759.455837][T14559] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1759.455879][T14559] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1759.455902][T14559] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.549482][T30579] usb 10-1: Using ep0 maxpacket: 32 [ 1759.552337][T30579] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.552388][T30579] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1759.552413][T30579] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1759.552441][T30579] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1759.590443][T30579] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1759.590474][T30579] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.590493][T30579] usb 10-1: Product: syz [ 1759.590505][T30579] usb 10-1: Manufacturer: syz [ 1759.590518][T30579] usb 10-1: SerialNumber: syz [ 1759.654587][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1759.657014][T30579] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input69 [ 1759.698509][T14559] usb 9-1: usb_control_msg returned -32 [ 1759.698555][T14559] usbtmc 9-1:16.0: can't read capabilities [ 1759.889189][T30579] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1759.889229][T30579] (id 0x00) [ 1759.989591][T30579] rc_core: IR keymap rc-imon-pad not found [ 1759.989609][T30579] Registered IR keymap rc-empty [ 1759.989685][T30579] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1759.989704][T30579] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1760.032827][T31427] tun0: tun_chr_ioctl cmd 2148553947 [ 1760.093688][T30579] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1760.095948][T30579] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input70 [ 1760.122400][T30579] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:26> initialized [ 1760.316425][T31432] fuse: Bad value for 'fd' [ 1760.339691][T31432] binder: BINDER_SET_CONTEXT_MGR already set [ 1760.339707][T31432] binder: 31431:31432 ioctl 4018620d 200000000100 returned -16 [ 1760.342118][T31432] binder: BINDER_SET_CONTEXT_MGR already set [ 1760.342132][T31432] binder: 31431:31432 ioctl 4018620d 200000001000 returned -16 [ 1760.342377][T31432] binder: 31431:31432 ioctl c0306201 0 returned -14 [ 1760.995891][T30579] usb 10-1: USB disconnect, device number 26 [ 1762.227289][T24854] usb 9-1: USB disconnect, device number 47 [ 1762.858659][T31418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1763.575579][T31476] fuse: Bad value for 'fd' [ 1763.588078][T31476] binder: BINDER_SET_CONTEXT_MGR already set [ 1763.588092][T31476] binder: 31475:31476 ioctl 4018620d 200000000100 returned -16 [ 1763.615087][T31476] binder: BINDER_SET_CONTEXT_MGR already set [ 1763.615103][T31476] binder: 31475:31476 ioctl 4018620d 200000001000 returned -16 [ 1763.615325][T31476] binder: 31475:31476 ioctl c0306201 0 returned -14 [ 1763.757487][T31483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7634'. [ 1763.789216][ T821] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1763.943668][T14559] hid-generic 0005:0C45:1010.0016: item fetching failed at offset 0/1 [ 1763.944301][T14559] hid-generic 0005:0C45:1010.0016: probe with driver hid-generic failed with error -22 [ 1763.949422][ T821] usb 10-1: Using ep0 maxpacket: 32 [ 1763.973231][ T821] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1763.973283][ T821] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1763.973297][ T821] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1763.973311][ T821] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1764.022230][ T821] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1764.022247][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.022258][ T821] usb 10-1: Product: syz [ 1764.022266][ T821] usb 10-1: Manufacturer: syz [ 1764.022274][ T821] usb 10-1: SerialNumber: syz [ 1764.066383][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1764.093552][ T821] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input71 [ 1764.149311][T27955] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1764.279616][ T821] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1764.279638][ T821] (id 0x00) [ 1764.304227][T27955] usb 7-1: Using ep0 maxpacket: 8 [ 1764.306767][T27955] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1764.306835][T27955] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1764.306858][T27955] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1764.306881][T27955] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1764.306905][T27955] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.306944][T27955] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1764.306967][T27955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.429206][ T821] rc_core: IR keymap rc-imon-pad not found [ 1764.429226][ T821] Registered IR keymap rc-empty [ 1764.429358][ T821] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1764.429377][ T821] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1764.544093][ T821] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 1764.571546][ T821] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input72 [ 1764.601526][T27955] usb 7-1: usb_control_msg returned -32 [ 1764.601569][T27955] usbtmc 7-1:16.0: can't read capabilities [ 1764.638059][ T821] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:27> initialized [ 1765.387441][T27955] usb 10-1: USB disconnect, device number 27 [ 1766.121174][T31527] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7646'. [ 1766.451971][T31536] fuse: Bad value for 'fd' [ 1766.458078][T31536] binder: BINDER_SET_CONTEXT_MGR already set [ 1766.458087][T31536] binder: 31535:31536 ioctl 4018620d 200000000100 returned -16 [ 1766.477291][T31536] binder: BINDER_SET_CONTEXT_MGR already set [ 1766.477308][T31536] binder: 31535:31536 ioctl 4018620d 200000001000 returned -16 [ 1766.949306][T27955] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1766.951602][T25298] usb 7-1: USB disconnect, device number 9 [ 1767.033043][T31556] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7657'. [ 1767.109500][T27955] usb 2-1: Using ep0 maxpacket: 32 [ 1767.112735][T27955] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.112781][T27955] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1767.112803][T27955] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1767.112826][T27955] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1767.134267][T27955] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1767.134286][T27955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.134297][T27955] usb 2-1: Product: syz [ 1767.134305][T27955] usb 2-1: Manufacturer: syz [ 1767.134313][T27955] usb 2-1: SerialNumber: syz [ 1767.218572][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1767.246948][T27955] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input73 [ 1767.459322][T27955] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1767.459343][T27955] (id 0x00) [ 1767.599370][T27955] rc_core: IR keymap rc-imon-pad not found [ 1767.599392][T27955] Registered IR keymap rc-empty [ 1767.599487][T27955] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1767.599504][T27955] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1767.651721][T27955] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1767.693473][T27955] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input74 [ 1767.816480][T27955] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:56> initialized [ 1768.309204][T28572] Bluetooth: hci2: command 0x0406 tx timeout [ 1768.551771][T31594] fuse: Bad value for 'fd' [ 1768.571246][T25298] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1768.608500][T27955] usb 2-1: USB disconnect, device number 56 [ 1768.649267][T14559] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1768.767800][T25298] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.767916][T25298] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1768.767954][T25298] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1768.767974][T25298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.829276][T14559] usb 7-1: Using ep0 maxpacket: 8 [ 1768.831649][T14559] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1768.831705][T14559] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1768.831724][T14559] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1768.831745][T14559] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1768.831767][T14559] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1768.831807][T14559] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1768.831828][T14559] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.006729][T25298] usb 9-1: config 0 descriptor?? [ 1769.183690][T14559] usb 7-1: usb_control_msg returned -32 [ 1769.183736][T14559] usbtmc 7-1:16.0: can't read capabilities [ 1770.583646][T31649] fuse: Bad value for 'fd' [ 1770.587060][T31649] binder: BINDER_SET_CONTEXT_MGR already set [ 1770.587070][T31649] binder: 31647:31649 ioctl 4018620d 200000000100 returned -16 [ 1770.624889][T31649] binder: BINDER_SET_CONTEXT_MGR already set [ 1770.624899][T31649] binder: 31647:31649 ioctl 4018620d 200000001000 returned -16 [ 1771.325271][T27955] usb 7-1: USB disconnect, device number 10 [ 1771.425878][T14559] usb 9-1: USB disconnect, device number 48 [ 1771.718899][T31674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7705'. [ 1772.691029][T27955] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1772.819377][T25220] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1772.839214][T27955] usb 2-1: Using ep0 maxpacket: 8 [ 1772.841782][T27955] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1772.841836][T27955] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1772.841858][T27955] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1772.841881][T27955] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1772.841904][T27955] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1772.841943][T27955] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1772.841965][T27955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.994937][T25220] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.994966][T25220] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1772.995002][T25220] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1772.995024][T25220] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.050010][T25220] usb 10-1: config 0 descriptor?? [ 1773.061423][T27955] usb 2-1: usb_control_msg returned -32 [ 1773.061471][T27955] usbtmc 2-1:16.0: can't read capabilities [ 1773.067330][T31709] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7718'. [ 1773.453076][T28572] Bluetooth: hci3: command 0x0406 tx timeout [ 1773.453108][T28572] Bluetooth: hci4: command 0x0406 tx timeout [ 1774.489296][ T821] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1774.650739][ T821] usb 7-1: Using ep0 maxpacket: 32 [ 1774.652625][ T821] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.652678][ T821] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1774.652704][ T821] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1774.652729][ T821] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1774.656198][ T821] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1774.656228][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.656247][ T821] usb 7-1: Product: syz [ 1774.656260][ T821] usb 7-1: Manufacturer: syz [ 1774.656274][ T821] usb 7-1: SerialNumber: syz [ 1774.696796][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1774.704649][ T821] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input75 [ 1774.919190][ T821] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1774.919204][ T821] (id 0x00) [ 1775.009976][ T821] rc_core: IR keymap rc-imon-pad not found [ 1775.009997][ T821] Registered IR keymap rc-empty [ 1775.010083][ T821] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1775.010101][ T821] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1775.123748][ T821] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1775.140028][ T821] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input76 [ 1775.158482][ T821] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:11> initialized [ 1775.332186][T31748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7731'. [ 1775.462288][ T5720] usb 2-1: USB disconnect, device number 57 [ 1775.697469][T25220] usb 10-1: USB disconnect, device number 28 [ 1775.707429][T27955] usb 7-1: USB disconnect, device number 11 [ 1776.368042][T31780] bridge_slave_0: left allmulticast mode [ 1776.368066][T31780] bridge_slave_0: left promiscuous mode [ 1776.368234][T31780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.409260][T25298] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1776.556102][T31780] bridge_slave_1: left allmulticast mode [ 1776.556136][T31780] bridge_slave_1: left promiscuous mode [ 1776.556388][T31780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.579618][T25298] usb 10-1: Using ep0 maxpacket: 8 [ 1776.581353][T25298] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1776.581387][T25298] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1776.581399][T25298] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1776.581412][T25298] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1776.581424][T25298] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1776.581448][T25298] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1776.581460][T25298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.760041][T31780] bond0: (slave bond_slave_0): Releasing backup interface [ 1776.835696][T25298] usb 10-1: usb_control_msg returned -32 [ 1776.835757][T25298] usbtmc 10-1:16.0: can't read capabilities [ 1777.021799][T31780] bond0: (slave bond_slave_1): Releasing backup interface [ 1777.129514][T31780] team0: Port device team_slave_0 removed [ 1777.240429][T31780] team0: Port device team_slave_1 removed [ 1777.241133][T31780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1777.241149][T31780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1777.295037][T31780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1777.295056][T31780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1777.337804][T31780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1777.361101][T25220] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1777.542732][T25220] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1777.542758][T25220] usb 7-1: config 0 has no interface number 0 [ 1777.542794][T25220] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.542815][T25220] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.542832][T25220] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1777.545432][T25220] usb 7-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1777.545465][T25220] usb 7-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 1777.545487][T25220] usb 7-1: Product: syz [ 1777.628347][T25220] usb 7-1: config 0 descriptor?? [ 1778.549368][T16281] Bluetooth: hci0: command 0x0406 tx timeout [ 1778.656497][T25220] chicony 0003:04F2:1421.0017: collection stack underflow [ 1778.656532][T25220] chicony 0003:04F2:1421.0017: item 0 1 0 12 parsing failed [ 1778.657342][T25220] chicony 0003:04F2:1421.0017: Chicony hid parse failed: -22 [ 1778.699252][T25220] chicony 0003:04F2:1421.0017: probe with driver chicony failed with error -22 [ 1778.714004][T25220] usb 7-1: USB disconnect, device number 12 [ 1779.177990][T27955] usb 10-1: USB disconnect, device number 29 [ 1779.827632][T31855] bridge_slave_0: left allmulticast mode [ 1779.827666][T31855] bridge_slave_0: left promiscuous mode [ 1779.827949][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.186893][T31855] bridge_slave_1: left allmulticast mode [ 1780.186930][T31855] bridge_slave_1: left promiscuous mode [ 1780.187186][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.239207][ T5893] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1780.389276][ T5893] usb 7-1: Using ep0 maxpacket: 8 [ 1780.417314][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.417347][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1780.417367][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1780.417405][ T5893] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1780.417425][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.476403][ T5893] usb 7-1: config 0 descriptor?? [ 1780.504747][T31855] bond0: (slave bond_slave_0): Releasing backup interface [ 1780.724647][T31855] bond0: (slave bond_slave_1): Releasing backup interface [ 1780.939393][T31855] team0: Port device team_slave_0 removed [ 1780.946657][ T5893] hid_parser_main: 5 callbacks suppressed [ 1780.946682][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946713][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946737][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946761][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946787][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946812][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946838][ T5893] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 1780.946863][ T5893] elecom 0003:056E:00FE.0018: item fetching failed at offset 12/70 [ 1780.947587][ T5893] elecom 0003:056E:00FE.0018: probe with driver elecom failed with error -22 [ 1781.083558][T31855] team0: Port device team_slave_1 removed [ 1781.087306][T31855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.087326][T31855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.123133][T31855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.123153][T31855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.166349][T31855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1781.181052][T31861] qrtr: Invalid version 0 [ 1781.206109][T31861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.206655][T31861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.249537][T27955] usb 7-1: USB disconnect, device number 13 [ 1781.955134][T31886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7768'. [ 1782.699410][T27955] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1782.862728][T27955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1782.862756][T27955] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1782.862800][T27955] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1782.862817][T27955] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.876073][T27955] usb 9-1: config 0 descriptor?? [ 1783.099814][T24854] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1783.211655][T31929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7786'. [ 1783.283435][T24854] usb 2-1: Using ep0 maxpacket: 8 [ 1783.287714][T24854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.287733][T24854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.287745][T24854] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1783.287768][T24854] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1783.287780][T24854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.308904][T24854] usb 2-1: config 0 descriptor?? [ 1783.884238][T24854] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 1783.884263][T24854] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 1783.884291][T24854] elecom 0003:056E:00FE.0019: unknown main item tag 0x0 [ 1783.884334][T24854] elecom 0003:056E:00FE.0019: item fetching failed at offset 12/70 [ 1783.884762][T24854] elecom 0003:056E:00FE.0019: probe with driver elecom failed with error -22 [ 1784.043396][T31916] qrtr: Invalid version 0 [ 1784.053653][T31916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.063275][T31916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.095921][T27955] usb 2-1: USB disconnect, device number 58 [ 1785.160036][ T5626] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1785.319136][ T5626] usb 10-1: Using ep0 maxpacket: 8 [ 1785.326931][ T5626] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1785.326991][ T5626] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1785.327015][ T5626] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1785.327038][ T5626] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1785.327060][ T5626] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.327101][ T5626] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1785.327123][ T5626] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.554251][T24854] usb 9-1: USB disconnect, device number 49 [ 1785.615178][ T5626] usb 10-1: usb_control_msg returned -32 [ 1785.615227][ T5626] usbtmc 10-1:16.0: can't read capabilities [ 1786.059262][ T5626] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1786.209479][ T5626] usb 9-1: Using ep0 maxpacket: 8 [ 1786.213131][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.213163][ T5626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.213185][ T5626] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1786.213233][ T5626] usb 9-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1786.213256][ T5626] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.287353][ T5626] usb 9-1: config 0 descriptor?? [ 1786.738198][ T5626] hid_parser_main: 4 callbacks suppressed [ 1786.738222][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738253][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738275][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738427][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738453][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738478][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738505][ T5626] elecom 0003:056E:00FE.001A: unknown main item tag 0x0 [ 1786.738529][ T5626] elecom 0003:056E:00FE.001A: item fetching failed at offset 12/70 [ 1786.806648][ T5626] elecom 0003:056E:00FE.001A: probe with driver elecom failed with error -22 [ 1786.947624][T31981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.948215][T31981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1786.996110][T31981] qrtr: Invalid version 0 [ 1787.000437][T31981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1787.016159][T31981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.373848][T27955] usb 9-1: USB disconnect, device number 50 [ 1787.980604][ T5626] usb 10-1: USB disconnect, device number 30 [ 1788.072257][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7824'. [ 1788.312070][ T5893] hid-generic 0005:0C45:1010.001B: item fetching failed at offset 0/1 [ 1788.314487][ T5893] hid-generic 0005:0C45:1010.001B: probe with driver hid-generic failed with error -22 [ 1789.368494][T24854] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1789.532458][T24854] usb 7-1: Using ep0 maxpacket: 8 [ 1789.585495][T24854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.585528][T24854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.585549][T24854] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1789.585589][T24854] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1789.585613][T24854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.632439][T24854] usb 7-1: config 0 descriptor?? [ 1790.087836][T24854] elecom 0003:056E:00FE.001C: unknown main item tag 0x0 [ 1790.087877][T24854] elecom 0003:056E:00FE.001C: unknown main item tag 0x0 [ 1790.087904][T24854] elecom 0003:056E:00FE.001C: unknown main item tag 0x0 [ 1790.087971][T24854] elecom 0003:056E:00FE.001C: item fetching failed at offset 12/70 [ 1790.088720][T24854] elecom 0003:056E:00FE.001C: probe with driver elecom failed with error -22 [ 1790.283160][T32053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.283814][T32053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.357489][T32053] qrtr: Invalid version 0 [ 1790.367474][T32053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1790.395881][T32053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1790.409921][ T5893] usb 7-1: USB disconnect, device number 14 [ 1792.018561][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.018678][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.269349][ T5893] ------------[ cut here ]------------ [ 1793.269364][ T5893] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1793.269387][ T5893] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3d5/0x590, CPU#0: kworker/0:6/5893 [ 1793.269434][ T5893] Modules linked in: [ 1793.269466][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1793.269521][ T5893] Tainted: [L]=SOFTLOCKUP [ 1793.269529][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1793.269543][ T5893] Workqueue: events drm_fb_helper_damage_work [ 1793.269575][ T5893] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590 [ 1793.269669][ T5893] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 94 fd c8 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff [ 1793.269733][ T5893] RSP: 0000:ffffc90005f7f920 EFLAGS: 00010246 [ 1793.269782][ T5893] RAX: 1ffff11004c9b800 RBX: ffffffff8f96f7d0 RCX: 0000000000000000 [ 1793.269798][ T5893] RDX: ffffffff8bc18d60 RSI: ffffffff8bc35ae0 RDI: ffffffff8f96f7d0 [ 1793.269814][ T5893] RBP: ffffc90005f7fa08 R08: 0000000000000000 R09: 0000000000000000 [ 1793.269828][ T5893] R10: dffffc0000000000 R11: fffffbfff1f1751f R12: ffffffff8bc35ae0 [ 1793.269843][ T5893] R13: ffff8880264dc000 R14: 0000000000000000 R15: ffffffff8bc18d60 [ 1793.269858][ T5893] FS: 0000000000000000(0000) GS:ffff888125ef4000(0000) knlGS:0000000000000000 [ 1793.269876][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1793.269890][ T5893] CR2: 00007fadd625f010 CR3: 00000000439d8000 CR4: 00000000003526f0 [ 1793.269910][ T5893] Call Trace: [ 1793.269960][ T5893] [ 1793.270034][ T5893] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1793.270116][ T5893] ? rt_spin_unlock+0x14f/0x200 [ 1793.270137][ T5893] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1793.270159][ T5893] ? rt_spin_unlock+0x160/0x200 [ 1793.270180][ T5893] ? drm_vblank_get+0x147/0x280 [ 1793.270205][ T5893] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1793.270239][ T5893] drm_fb_helper_damage_work+0x131/0x720 [ 1793.270268][ T5893] ? process_one_work+0x8be/0x1630 [ 1793.270304][ T5893] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1793.270340][ T5893] ? process_one_work+0x8be/0x1630 [ 1793.270368][ T5893] process_one_work+0x98b/0x1630 [ 1793.270421][ T5893] ? __pfx_process_one_work+0x10/0x10 [ 1793.270449][ T5893] ? do_raw_spin_lock+0x12b/0x2f0 [ 1793.270523][ T5893] worker_thread+0xb49/0x1140 [ 1793.270566][ T5893] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1793.270608][ T5893] kthread+0x389/0x470 [ 1793.270633][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 1793.270662][ T5893] ? __pfx_kthread+0x10/0x10 [ 1793.270687][ T5893] ret_from_fork+0x514/0xb70 [ 1793.270725][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.270778][ T5893] ? __switch_to+0xc79/0x1410 [ 1793.270804][ T5893] ? __pfx_kthread+0x10/0x10 [ 1793.270830][ T5893] ret_from_fork_asm+0x1a/0x30 [ 1793.270877][ T5893] [ 1793.270898][ T5893] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1793.270917][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1793.270945][ T5893] Tainted: [L]=SOFTLOCKUP [ 1793.270953][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1793.270967][ T5893] Workqueue: events drm_fb_helper_damage_work [ 1793.270993][ T5893] Call Trace: [ 1793.271001][ T5893] [ 1793.271010][ T5893] vpanic+0x56c/0xa60 [ 1793.271040][ T5893] ? __pfx__printk+0x10/0x10 [ 1793.271061][ T5893] ? __pfx_vpanic+0x10/0x10 [ 1793.271086][ T5893] ? is_bpf_text_address+0x292/0x2b0 [ 1793.271113][ T5893] ? is_bpf_text_address+0x26/0x2b0 [ 1793.271147][ T5893] panic+0xc5/0xd0 [ 1793.271252][ T5893] ? __pfx_panic+0x10/0x10 [ 1793.271280][ T5893] ? ret_from_fork_asm+0x1a/0x30 [ 1793.271311][ T5893] __warn+0x315/0x4c0 [ 1793.271337][ T5893] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 1793.271363][ T5893] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 1793.271388][ T5893] __report_bug+0x339/0x540 [ 1793.271420][ T5893] ? drm_crtc_wait_one_vblank+0x3d5/0x590 [ 1793.271445][ T5893] ? __pfx___report_bug+0x10/0x10 [ 1793.271490][ T5893] report_bug_entry+0x19a/0x290 [ 1793.271517][ T5893] ? drm_crtc_wait_one_vblank+0x53c/0x590 [ 1793.271542][ T5893] ? drm_crtc_wait_one_vblank+0x541/0x590 [ 1793.271566][ T5893] handle_bug+0xce/0x200 [ 1793.271596][ T5893] exc_invalid_op+0x1a/0x50 [ 1793.271622][ T5893] asm_exc_invalid_op+0x1a/0x20 [ 1793.271645][ T5893] RIP: 0010:drm_crtc_wait_one_vblank+0x53c/0x590 [ 1793.271672][ T5893] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 94 fd c8 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 13 f4 ff ff b8 92 ff ff ff [ 1793.271690][ T5893] RSP: 0000:ffffc90005f7f920 EFLAGS: 00010246 [ 1793.271708][ T5893] RAX: 1ffff11004c9b800 RBX: ffffffff8f96f7d0 RCX: 0000000000000000 [ 1793.271725][ T5893] RDX: ffffffff8bc18d60 RSI: ffffffff8bc35ae0 RDI: ffffffff8f96f7d0 [ 1793.271741][ T5893] RBP: ffffc90005f7fa08 R08: 0000000000000000 R09: 0000000000000000 [ 1793.271756][ T5893] R10: dffffc0000000000 R11: fffffbfff1f1751f R12: ffffffff8bc35ae0 [ 1793.271772][ T5893] R13: ffff8880264dc000 R14: 0000000000000000 R15: ffffffff8bc18d60 [ 1793.271810][ T5893] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1793.271833][ T5893] ? rt_spin_unlock+0x14f/0x200 [ 1793.271855][ T5893] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1793.271882][ T5893] ? rt_spin_unlock+0x160/0x200 [ 1793.271907][ T5893] ? drm_vblank_get+0x147/0x280 [ 1793.271933][ T5893] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1793.271969][ T5893] drm_fb_helper_damage_work+0x131/0x720 [ 1793.271998][ T5893] ? process_one_work+0x8be/0x1630 [ 1793.272033][ T5893] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1793.272070][ T5893] ? process_one_work+0x8be/0x1630 [ 1793.272139][ T5893] process_one_work+0x98b/0x1630 [ 1793.272193][ T5893] ? __pfx_process_one_work+0x10/0x10 [ 1793.272221][ T5893] ? do_raw_spin_lock+0x12b/0x2f0 [ 1793.272262][ T5893] worker_thread+0xb49/0x1140 [ 1793.272304][ T5893] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1793.272346][ T5893] kthread+0x389/0x470 [ 1793.272370][ T5893] ? __pfx_worker_thread+0x10/0x10 [ 1793.272400][ T5893] ? __pfx_kthread+0x10/0x10 [ 1793.272433][ T5893] ret_from_fork+0x514/0xb70 [ 1793.272464][ T5893] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.272490][ T5893] ? __switch_to+0xc79/0x1410 [ 1793.272516][ T5893] ? __pfx_kthread+0x10/0x10 [ 1793.272540][ T5893] ret_from_fork_asm+0x1a/0x30 [ 1793.272587][ T5893] [ 1793.273044][ T5893] Kernel Offset: disabled