last executing test programs: 19m39.633766316s ago: executing program 2 (id=56): syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 19m38.732598225s ago: executing program 2 (id=58): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 19m37.955092089s ago: executing program 2 (id=61): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='loginuid\x00') r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet6(0xa, 0x803, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000400)={r1}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_setup(0x5aee, &(0x7f0000000200)={0x0, 0x6ac3, 0xc00, 0x2, 0xa0002f1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e8) open$dir(&(0x7f00000002c0)='./file0\x00', 0x880, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x31b8, &(0x7f0000000440)={0x0, 0xc3ad, 0x1000, 0x3, 0x278}, 0x0, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111, 0x6}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x2277e77d6087ccc6}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 19m35.954413495s ago: executing program 2 (id=67): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m30.670709526s ago: executing program 2 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 19m30.666974692s ago: executing program 4 (id=73): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x5f0}]}}]}, 0x38}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0x1, 0xa}, {0x7, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x2, 0x9, 0x4, 0xfffffe01, 0x200}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 19m29.369097462s ago: executing program 0 (id=74): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 19m28.64036846s ago: executing program 2 (id=75): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 19m28.419235869s ago: executing program 0 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x2) r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e1400"], 0x290}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04f20b20"], 0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40002000, 0x0) socket$unix(0x1, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 19m26.873443257s ago: executing program 0 (id=77): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) 19m26.784628829s ago: executing program 0 (id=78): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 19m25.899174148s ago: executing program 0 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000050000000000000f040000000800000002000004f7ffffff0400000001000000000000000300000001000000080000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28) dup(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 19m23.767463533s ago: executing program 0 (id=80): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19m23.638675085s ago: executing program 4 (id=82): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010101020000000000000000020000092000018006000340000200001400018008000100ac14141508000200ac1414bb1c0019800800010006000000080002008000bc000800010080"], 0x50}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100"], 0x78}}, 0x0) 19m21.968766874s ago: executing program 4 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 19m20.761195038s ago: executing program 4 (id=87): bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x1000) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x800, 0x3, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x8, "bf240fef"}, 0x3, 0x2, {0x0}, 0x96000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 19m18.721585813s ago: executing program 4 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000050000000000000f040000000800000002000004f7ffffff0400000001000000000000000300000001000000080000000030615f5f5f2e2e5f"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 19m16.612205842s ago: executing program 4 (id=92): syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 19m11.453610602s ago: executing program 32 (id=75): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$rxrpc(0x21, 0x2, 0xa) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 19m6.250584437s ago: executing program 33 (id=80): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x3}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19m1.294795609s ago: executing program 34 (id=92): syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000001c0)={0x0, 0x1, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) syz_open_procfs(0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 16m24.32953819s ago: executing program 1 (id=239): write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)={'#! ', '', [{0x20, '^'}, {0x20, '$!'}, {0x20, '/dev/ptmx\x00d\xc1\x80\x9e\xc1\v\x17\xc7K\x12\x9fI$\xf2o\xf0\xb9\x97J\xda\xf4\x946{\"y\x9e\xda\x93\x84\x00p\x87\xbb\n\xaa&\x9a\v\xf7\xfa\xdd|1\xc7YI2_J\x8b\xd2\x9b\x889\xbe_\xc4\x1c\xcc\xec{\x7f\xcc\x8f\xdd\x03~\x9fZ\x1er\xeb\x1f]\xe3:\x04\xf0S^q\xf3\x9cV>\xefRW+\x1b1:OE\xbc\x96\xbb|\xb3;n\x89\xb8\x15?\x14\f\x1d\x12x\x88\x858\xdc\xbe\xa5$U\v\xf6:\xf7\x94\x1b\x8c\x97z\x14\xc0\r;\x94D\xf0KY\x1a\xa3\xcc~!:z\xf9\xd9\x8b\xee\xbc.!Y\xe0\x02\xf7\xe8wO\xea\x16\x89\x1f`\x17\xb5\x82\x95\xaeE\xaa\xd2X^\xec\xe78\xd2;v\xdegn\x7f\x91\xb6\x1d\xc4G\'\xdd\xbe\xd0\x92\xd6\xf0I\xc2D^[\x91v\xed\xf0\xe5%\x8b\xa1\xdc\xd4\xe4F^{t\xca0X\xc7\xc8\xcf\x1d*\x00'/249}, {0x20, ')}:'}], 0xa, "595f5eb30d90f68ad8a75c0278a9145497e6c208a6968a160cd42d57d93f913ee2c82aa5d2301d8a6ea4573de95a1712bb413d739ad6d0a65101af527f206f678df9384b2ccc28586c7a59ea3fd996c636fd6c238d743300cf3380e484cf368425c66b59156ab90cd45ddd07b7f499bf909c4b25fde67c"}, 0x17e) close(0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000b7000/0x2000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) socket$inet6(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) 16m19.480375607s ago: executing program 1 (id=242): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000300"/28], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 16m13.467167223s ago: executing program 1 (id=244): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000300"/28], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 16m11.371418475s ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x280449c, &(0x7f00000006c0)=ANY=[]) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f00000002c0)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10000000, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40806685, &(0x7f0000000240)={0x7, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 16m9.266445214s ago: executing program 1 (id=248): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x8, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0x3, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xec4, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000002c0)=0x7) 16m8.143165702s ago: executing program 1 (id=250): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000300"/28], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 15m52.997362934s ago: executing program 35 (id=250): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000300"/28], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) 1m56.307522491s ago: executing program 3 (id=757): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) 1m55.855830855s ago: executing program 3 (id=758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1m54.713032986s ago: executing program 3 (id=760): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x3c1983, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1b7b, &(0x7f00000001c0)={0x0, 0xc89f, 0x400, 0x807, 0x1b5}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m53.853748183s ago: executing program 3 (id=761): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4e22, 0x8, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x1, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m52.99482042s ago: executing program 3 (id=764): syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000740)) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "bc86299ab62e97b6", "2125e44cdf02000000000000003297f0", "8fc203e0", "c40330604dc13bd4"}, 0x28) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3}, 0x20) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x0, @local, 0x4e21, 0x3, 'lblcr\x00', 0xc, 0x9, 0x6e}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x2}}, 0x44) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xffff) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m46.343768681s ago: executing program 3 (id=772): socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000001800)=0x7, 0x6, 0x1) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 28.762524137s ago: executing program 5 (id=936): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 26.730392357s ago: executing program 5 (id=940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x84}}, 0x0) 26.04912107s ago: executing program 5 (id=941): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 25.267109724s ago: executing program 5 (id=942): memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(r3, &(0x7f0000000000)=""/12, 0xc) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000180)) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 23.854188137s ago: executing program 5 (id=944): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0xddf}], 0x1, 0x40010002, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 17.12084931s ago: executing program 5 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 12.829959269s ago: executing program 7 (id=964): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x800, 0x0, 0x0, 0x0, 'syz0\x00', 0xb1}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xff, 0x2, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4000000000001, 0x7fffffffffffffff, 0xfc85, 0xffffff7ffffffffe, 0x40000000000b, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000fff, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x804, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000002, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x1000, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x1, 0x3, 0x0, 0x101, 0x1, 0x10001, 0x4000, 0x4, 0x2, 0x0, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x3, 0xc, 0x7, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x2000, 0x800002]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000040)="b2d8db54225d05cee90144ccaf20917c4cdaa0c47c09e42e86f662cfaad47b51"}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="2649099f98ee373ef287a27850f2bc5f4ec929d3dbfa419af74f65b3adb8654e76342053c3388a3b727faa84353fdacfebc2", 0x32) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x86400, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000680)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00002dc000/0x4000)=nil, 0x4000, 0x2000000, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffff00, 0x0, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xe776ab4dd4470d33, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x9, 0x7, 0xfffe, 0x9, 0x16, 'gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x1116e5cc8e8d249a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000000004"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d04006ad605000800ef92", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xcc93f1266b77583f}, 0x8044) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004804) shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) 10.830112171s ago: executing program 7 (id=965): memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 10.328395438s ago: executing program 7 (id=967): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r4) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) r6 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000021c08001740f6000000d868923191a7f2cb7e301037a246c411decfac6a3e65c92ec33af1773d36a8ad3637fe5317c10f103a57ed638db95b49137102d8c4f27d97c70d88cc8d799f36da6ede9150e5d97cbf6ae81fee7e32ac8517a473b95bf1d1759c8bdeef8b4504497d25e9e6b65ba7052df51af7249c8b04d21bf1a283039f963f0866ff4d2d5afea94c4c25785463e907000000000000007dcacf4e83bc7965d899ce622f4b02aaafea25f9f6d35240caf8382927d0aa569ddc2a9a313dd34952bf330f64a32cc934fa0a65eb3e87ff102ca5fa65dcbc041cbbe0ebce01e3da69d587f997997a7039"], 0x5c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x44004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x0) 9.177389124s ago: executing program 8 (id=968): r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x2, 0x1, 0xc5d, 0x1}}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.678417888s ago: executing program 6 (id=970): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x800, 0x0, 0x0, 0x0, 'syz0\x00', 0xb1}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xff, 0x2, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4000000000001, 0x7fffffffffffffff, 0xfc85, 0xffffff7ffffffffe, 0x40000000000b, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000fff, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x804, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000002, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x1000, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x1, 0x3, 0x0, 0x101, 0x1, 0x10001, 0x4000, 0x4, 0x2, 0x0, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x3, 0xc, 0x7, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x2000, 0x800002]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000040)="b2d8db54225d05cee90144ccaf20917c4cdaa0c47c09e42e86f662cfaad47b51"}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="2649099f98ee373ef287a27850f2bc5f4ec929d3dbfa419af74f65b3adb8654e76342053c3388a3b727faa84353fdacfebc2", 0x32) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x86400, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000680)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00002dc000/0x4000)=nil, 0x4000, 0x2000000, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffff00, 0x0, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xe776ab4dd4470d33, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x9, 0x7, 0xfffe, 0x9, 0x16, 'gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x1116e5cc8e8d249a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000000004"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d04006ad605000800ef92", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xcc93f1266b77583f}, 0x8044) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004804) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.625385611s ago: executing program 8 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.60055091s ago: executing program 6 (id=972): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r0 = socket$inet6(0xa, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.636184765s ago: executing program 7 (id=973): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) pipe2(0x0, 0x800) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x2000c801}, 0x40000c1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.201526628s ago: executing program 8 (id=974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3.711950064s ago: executing program 6 (id=975): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xc9d3, 0x0, 0x0, 0x2}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000740)={0x0, 0x1460, 0x420, 0x1, 0xb2, 0x0, r1}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x181c, 0x4000, 0x80, 0x2a9, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd576, 0x20, 0x1009, 0x27f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x100, 0xffffffff, 0xed}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8a5a, 0x1001, 0x2000003, 0x2a3, 0x0, r1}}], 0x4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x1, 0x487, 0x0, 0x0}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x3e}}, 0x7, 0x3, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) 3.711620021s ago: executing program 8 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x46e2}]}]}, 0x5c}}, 0x0) 3.465721996s ago: executing program 8 (id=977): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x800, 0x0, 0x0, 0x0, 'syz0\x00', 0xb1}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x404, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xff, 0x2, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4000000000001, 0x7fffffffffffffff, 0xfc85, 0xffffff7ffffffffe, 0x40000000000b, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000fff, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x804, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000002, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x2000100, 0x80000000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x1000, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x1, 0x3, 0x0, 0x101, 0x1, 0x10001, 0x4000, 0x4, 0x2, 0x0, 0x3, 0xfffffffa, 0x0, 0x0, 0x0, 0x5c, 0x4, 0x0, 0x3, 0xc, 0x7, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x2000, 0x800002]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'veth1_vlan\x00', @ifru_data=&(0x7f0000000040)="b2d8db54225d05cee90144ccaf20917c4cdaa0c47c09e42e86f662cfaad47b51"}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000600)="2649099f98ee373ef287a27850f2bc5f4ec929d3dbfa419af74f65b3adb8654e76342053c3388a3b727faa84353fdacfebc2", 0x32) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x86400, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000680)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f00002dc000/0x4000)=nil, 0x4000, 0x2000000, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x418, 0x220, 0x110, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xffffff00, 0x0, 0x2, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0xe776ab4dd4470d33, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x9, 0x9, 0x7, 0xfffe, 0x9, 0x16, 'gretap0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x1116e5cc8e8d249a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x21}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @multicast1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000000004"], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d04006ad605000800ef92", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xcc93f1266b77583f}, 0x8044) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r9, 0x6, 0x1a, 0x0, &(0x7f0000000100)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r10, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.337403952s ago: executing program 7 (id=978): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000402505a8a44000010203010902240001010940570904007f020701030d09050102ff0307048f09058202ff0301ff2b"], &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xed, 0x1, 0x8, 0x6}, 0x3d, &(0x7f0000000a80)=ANY=[@ANYBLOB="050f3d000410100a5001001000800705573000ff000b300102140009b6000008091001e0ee1edeafa014100afd020100000ff007003fc00000ff3fff00bd83f1caa87ff6ab0a385cc1a75eb967fc52ade75c4beacfe3e3ab33fbb74865ba62eab9713435a203724a286ed9d7629730159243ec593314bcec723b6ff6a47cd6edf31a7de5ad79c4904b5d112e9954562eb088b15142b3360ac70b5428b5ec981bcfc7e344065840"], 0x8, [{0x9f, &(0x7f0000000100)=ANY=[@ANYBLOB="9f03528921bcd6babd4daf5014a60b4950ae50d95ab76fbfd31eca99476b290c01cdf382dfdf3d88ed6eb02c1cdddd1f8275ccc79e7d4a2137e75c9b19decc4ff4fce9d1a8ea747f01fb2a759888f9aff7e03a30daf2832d2592fa56a41a9bc40476045b1cd632df98c630e6efe4ccdeff3e2dc0491b3833f02cad9f0342e97daccb124bc7a3b8a9713b960929e9cd"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x300a}}, {0x9c, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1437}}, {0x9f, &(0x7f0000000380)=@string={0x9f, 0x3, "35d0e8975db290fe26a012b0a28e589f2d1236e27c8bd6f63615daf328ed282ae2d2d80cdcfad5487d8cbad3b450e12544d30d184ec8ee2bcd06e76c67511fd7f432c8144395f0220b9c90bdbc1c34ddb2460a3a6e28bcd4079fc89a0bfbf77e9e696da8d92978ed863a17e7d2b2f2238603c3648b161f00faf11e16e5dc27404a25d0e4c9afd6dfe474c5046ef9c90c3505f94ed50276bdde2b25a21a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x5103a4f4b2bbc228}}]}) syz_usb_control_io$printer(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000580)={0x20, 0x21, 0xb1, {0xb1, 0xa, "341892207c54dea6dea8c53ac1089dd648be58ab41d1e99f1a0decfdbbcca18bb270aa2905b3380221d4c199f6315532b2425df6fe35cde0d66e417619368efc776c8553f3ae5f91cfc801a3d538c996bc311135d4b15bd7599c90549b81dec8dc9cfff494959082cbe08c9bc363ff5969f678abe2a191a5384961c92e7325bac7243d79768b7c9fc4602740fd83b1d6c19e22ae41184759d54dfd872c1eb95d31b527a2be52facfef73cbd88cf5ec"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x0, 0x30, 0x2d, "aee68964a5f83b788931f847b3fac0a48eb4e77a4645256cd018824d5a5b0d3c23b74e8b47ea15d618469f5ac5"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000007c0)={0x20, 0x0, 0xca, {0xc8, "a35b984e21ce68ecad96abc971ae0f5356eedd1d7156c13cafa8c69af4b9bf2ac520d26303a054ac33b688955d8a3a4074216a7c17539c8d691faf394d7bdaf12e8e48da1af43d95a8e0b986768b38443c3c960fe4f655c561b74a848ae31a860ff4ed3498974921faaf610225160a1ee51e89d14a5c57553a5360e0536e1c8501ba0981c3f888530071cc12df0c0fa8ee71754e6e0673e3a8981d2811132ff921cbff2b55f8cea495326bbbfe608a027a9aff6ffed588275667d1b42e8b562492c44ff0760f8c22"}}, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf9}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x120000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000500)={0xc83, 0xb0d, 0x1, 0x8001, 0x6, 0x6bb, 0x81, 0x8}, &(0x7f0000000980)=0x20) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x1) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) 2.379756322s ago: executing program 6 (id=979): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x5, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)=@attr_riscv64=@attr_addr={0x0, 0x1, @imsic=0x5, &(0x7f0000000100)=0x1}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.115785224s ago: executing program 8 (id=980): r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@netfilter={0x2, 0x1, 0xc5d, 0x1}}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 459.914633ms ago: executing program 7 (id=981): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff08"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 212.303126ms ago: executing program 6 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14}}, 0x9c}}, 0x0) 0s ago: executing program 6 (id=983): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0x2, 0x2, 0x3c, 0x3, 0x8}) r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tered promiscuous mode [ 999.806646][T10748] netlink: 348 bytes leftover after parsing attributes in process `syz.3.600'. [ 999.806804][T10748] netlink: 348 bytes leftover after parsing attributes in process `syz.3.600'. [ 1000.088249][ T5617] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1000.666107][ T5617] Bluetooth: hci3: command tx timeout [ 1000.666119][ T5609] Bluetooth: hci0: command tx timeout [ 1000.878513][T10649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.878661][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.878911][T10649] bridge_slave_0: entered allmulticast mode [ 1000.890400][T10649] bridge_slave_0: entered promiscuous mode [ 1000.980654][T10649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.980889][T10649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.981088][T10649] bridge_slave_1: entered allmulticast mode [ 1000.984058][T10649] bridge_slave_1: entered promiscuous mode [ 1001.031194][T10643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.095230][T10643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1001.181375][T10649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.196317][T10649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.224359][T10643] team0: Port device team_slave_0 added [ 1002.269921][T10643] team0: Port device team_slave_1 added [ 1002.374385][T10649] team0: Port device team_slave_0 added [ 1002.437394][T10649] team0: Port device team_slave_1 added [ 1002.438589][T10643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.438603][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.438634][T10643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.530801][T10643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.530819][T10643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.530848][T10643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.657067][T10649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.657086][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.657115][T10649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.662000][T10649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.662018][T10649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.662048][T10649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.668858][ T5617] Bluetooth: hci3: command tx timeout [ 1002.846564][T10643] hsr_slave_0: entered promiscuous mode [ 1002.854393][T10643] hsr_slave_1: entered promiscuous mode [ 1002.969256][T10649] hsr_slave_0: entered promiscuous mode [ 1002.972271][T10649] hsr_slave_1: entered promiscuous mode [ 1002.974817][T10649] debugfs: 'hsr0' already exists in 'hsr' [ 1002.974843][T10649] Cannot create hsr debugfs directory [ 1011.146050][T10787] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1011.146112][T10787] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1011.156695][T10787] vhci_hcd vhci_hcd.0: Device attached [ 1011.890776][T10788] vhci_hcd: connection closed [ 1011.927591][ T100] vhci_hcd vhci_hcd.3: stop threads [ 1011.928638][ T100] vhci_hcd vhci_hcd.3: release socket [ 1011.935146][ T100] vhci_hcd vhci_hcd.3: disconnect device [ 1012.065519][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.065746][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.065950][T10689] bridge_slave_0: entered allmulticast mode [ 1012.089063][T10689] bridge_slave_0: entered promiscuous mode [ 1012.122766][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.122907][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.123163][T10689] bridge_slave_1: entered allmulticast mode [ 1012.126158][T10689] bridge_slave_1: entered promiscuous mode [ 1012.154315][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.154442][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.154695][T10702] bridge_slave_0: entered allmulticast mode [ 1012.169114][T10702] bridge_slave_0: entered promiscuous mode [ 1012.523507][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.523624][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.523782][T10702] bridge_slave_1: entered allmulticast mode [ 1012.525757][T10702] bridge_slave_1: entered promiscuous mode [ 1012.811985][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.873761][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.921244][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.006406][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.634282][T10689] team0: Port device team_slave_0 added [ 1014.110740][T10689] team0: Port device team_slave_1 added [ 1014.339328][T10702] team0: Port device team_slave_0 added [ 1014.398577][T10702] team0: Port device team_slave_1 added [ 1014.505160][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.505174][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.505194][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.605646][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.605677][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.605725][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.811623][T10702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.811638][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.811658][T10702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.866457][T10702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.866471][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1014.866492][T10702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.251436][T10689] hsr_slave_0: entered promiscuous mode [ 1015.252664][T10689] hsr_slave_1: entered promiscuous mode [ 1015.253523][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 1015.253551][T10689] Cannot create hsr debugfs directory [ 1015.333424][T10702] hsr_slave_0: entered promiscuous mode [ 1015.345934][T10702] hsr_slave_1: entered promiscuous mode [ 1015.361216][T10702] debugfs: 'hsr0' already exists in 'hsr' [ 1015.361265][T10702] Cannot create hsr debugfs directory [ 1019.587148][ T9626] bridge_slave_1: left allmulticast mode [ 1019.587185][ T9626] bridge_slave_1: left promiscuous mode [ 1019.587487][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.695688][ T9626] bridge_slave_0: left allmulticast mode [ 1020.695729][ T9626] bridge_slave_0: left promiscuous mode [ 1020.696025][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.937261][ T9626] bridge_slave_1: left allmulticast mode [ 1020.937300][ T9626] bridge_slave_1: left promiscuous mode [ 1020.937581][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.158978][ T9626] bridge_slave_0: left allmulticast mode [ 1022.159015][ T9626] bridge_slave_0: left promiscuous mode [ 1022.159262][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.541446][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.657774][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.739371][ T9626] bond0 (unregistering): Released all slaves [ 1027.107108][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.422446][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.643373][ T9626] bond0 (unregistering): Released all slaves [ 1029.948459][ T9626] hsr_slave_0: left promiscuous mode [ 1030.007124][ T9626] hsr_slave_1: left promiscuous mode [ 1030.009711][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.057059][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.507123][ T5793] page_pool_release_retry() stalled pool shutdown: id 103, 22 inflight 121 sec [ 1033.157219][ T9626] hsr_slave_0: left promiscuous mode [ 1033.210515][ T9626] hsr_slave_1: left promiscuous mode [ 1033.211616][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.263412][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.069326][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1035.131930][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1036.529060][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1036.781413][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1037.223420][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1039.640513][T10643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1039.666677][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1039.677574][T10643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1039.704338][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1039.720621][T10643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1039.773472][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1039.774681][T10643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1039.851653][T10643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1047.108235][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1047.188455][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1047.205530][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1047.214438][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1047.218399][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1048.124756][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1048.171608][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1048.174384][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1048.175819][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1048.201360][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1049.530431][ T5617] Bluetooth: hci4: command tx timeout [ 1050.133467][T10897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.133596][T10897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.133795][T10897] bridge_slave_0: entered allmulticast mode [ 1050.136074][T10897] bridge_slave_0: entered promiscuous mode [ 1050.165729][T10897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.166019][T10897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.166231][T10897] bridge_slave_1: entered allmulticast mode [ 1050.251313][T10897] bridge_slave_1: entered promiscuous mode [ 1050.427862][ T5617] Bluetooth: hci2: command tx timeout [ 1050.903629][T10897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.926042][T10897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.183147][T10897] team0: Port device team_slave_0 added [ 1051.200318][T10897] team0: Port device team_slave_1 added [ 1051.426170][T10897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.426189][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.426212][T10897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.490296][T10897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.490314][T10897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.490343][T10897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.546970][ T5617] Bluetooth: hci4: command tx timeout [ 1052.309431][T10897] hsr_slave_0: entered promiscuous mode [ 1052.310891][T10897] hsr_slave_1: entered promiscuous mode [ 1052.311993][T10897] debugfs: 'hsr0' already exists in 'hsr' [ 1052.312018][T10897] Cannot create hsr debugfs directory [ 1052.509296][ T5617] Bluetooth: hci2: command tx timeout [ 1052.994989][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.995117][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.995371][T10905] bridge_slave_0: entered allmulticast mode [ 1053.004914][T10905] bridge_slave_0: entered promiscuous mode [ 1053.063934][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.064165][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.064402][T10905] bridge_slave_1: entered allmulticast mode [ 1053.072801][T10905] bridge_slave_1: entered promiscuous mode [ 1053.227696][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.252063][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.462109][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1053.465123][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1053.466454][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1053.491754][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1053.492759][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1053.626862][ T5617] Bluetooth: hci4: command tx timeout [ 1053.633289][ T9626] bridge_slave_1: left allmulticast mode [ 1053.633340][ T9626] bridge_slave_1: left promiscuous mode [ 1053.633635][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.748138][ T9626] bridge_slave_0: left allmulticast mode [ 1053.748167][ T9626] bridge_slave_0: left promiscuous mode [ 1053.748437][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.977290][ T9626] bridge_slave_1: left allmulticast mode [ 1053.977319][ T9626] bridge_slave_1: left promiscuous mode [ 1053.977516][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.088269][ T9626] bridge_slave_0: left allmulticast mode [ 1054.088297][ T9626] bridge_slave_0: left promiscuous mode [ 1054.088575][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.317234][ T9626] bridge_slave_1: left allmulticast mode [ 1054.317273][ T9626] bridge_slave_1: left promiscuous mode [ 1054.317484][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.448786][ T9626] bridge_slave_0: left allmulticast mode [ 1054.448834][ T9626] bridge_slave_0: left promiscuous mode [ 1054.449089][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.580386][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1054.589236][T10297] Bluetooth: hci2: command tx timeout [ 1054.611538][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1054.613836][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1054.616116][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1054.644230][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1055.080655][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.080724][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.319033][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.481017][ T5617] Bluetooth: hci6: command tx timeout [ 1056.481042][T10297] Bluetooth: hci4: command tx timeout [ 1056.608425][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.674880][ T5617] Bluetooth: hci2: command tx timeout [ 1056.837736][ T5617] Bluetooth: hci7: command tx timeout [ 1057.181405][ T9626] bond0 (unregistering): Released all slaves [ 1057.406558][T10962] loop5: detected capacity change from 0 to 7 [ 1057.569232][T10962] Dev loop5: unable to read RDB block 7 [ 1057.569280][T10962] loop5: AHDI p1 p2 p3 [ 1057.569302][T10962] loop5: partition table partially beyond EOD, truncated [ 1057.664946][T10962] loop5: p1 start 1601398130 is beyond EOD, truncated [ 1057.664969][T10962] loop5: p2 start 1702059890 is beyond EOD, truncated [ 1058.427559][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1058.506941][ T5617] Bluetooth: hci6: command tx timeout [ 1058.509465][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.560228][ T9626] bond0 (unregistering): Released all slaves [ 1058.916990][ T5617] Bluetooth: hci7: command tx timeout [ 1058.948348][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.027685][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.090668][ T9626] bond0 (unregistering): Released all slaves [ 1059.477977][T10905] team0: Port device team_slave_0 added [ 1059.583898][T10905] team0: Port device team_slave_1 added [ 1059.937208][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.937227][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.937256][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.991757][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.991783][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.991812][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.587040][ T5617] Bluetooth: hci6: command tx timeout [ 1061.005538][ T5617] Bluetooth: hci7: command tx timeout [ 1062.667903][ T5617] Bluetooth: hci6: command tx timeout [ 1063.224565][ T5617] Bluetooth: hci7: command tx timeout [ 1063.366034][T10905] hsr_slave_0: entered promiscuous mode [ 1063.374759][T10905] hsr_slave_1: entered promiscuous mode [ 1063.375822][T10905] debugfs: 'hsr0' already exists in 'hsr' [ 1063.375848][T10905] Cannot create hsr debugfs directory [ 1063.422541][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1065.330387][ T9626] hsr_slave_0: left promiscuous mode [ 1066.069752][ T9626] hsr_slave_1: left promiscuous mode [ 1066.070872][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.258636][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.260770][T11015] netlink: 348 bytes leftover after parsing attributes in process `syz.3.634'. [ 1066.260789][T11015] netlink: 348 bytes leftover after parsing attributes in process `syz.3.634'. [ 1066.310958][ T5617] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1066.546943][ T9626] hsr_slave_0: left promiscuous mode [ 1067.650644][ T9626] hsr_slave_1: left promiscuous mode [ 1067.656129][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.712006][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.920506][ T9626] hsr_slave_0: left promiscuous mode [ 1067.957197][ T9626] hsr_slave_1: left promiscuous mode [ 1067.958254][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.008049][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.168237][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1073.218051][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1074.069185][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1074.121958][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1074.579276][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1074.616419][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1082.224832][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1082.565130][T11071] tipc: Can't bind to reserved service type 1 [ 1083.987733][T11083] netlink: 348 bytes leftover after parsing attributes in process `syz.3.642'. [ 1083.987763][T11083] netlink: 348 bytes leftover after parsing attributes in process `syz.3.642'. [ 1084.097008][ T5617] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1084.696337][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.696583][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.711937][T10949] bridge_slave_0: entered allmulticast mode [ 1084.714824][T10949] bridge_slave_0: entered promiscuous mode [ 1084.733361][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1084.816431][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.816566][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.816908][T10949] bridge_slave_1: entered allmulticast mode [ 1084.829144][T10949] bridge_slave_1: entered promiscuous mode [ 1086.635834][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.649337][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.652070][T10940] bridge_slave_0: entered allmulticast mode [ 1087.217725][T10940] bridge_slave_0: entered promiscuous mode [ 1087.224815][T10949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.771902][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.855316][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.949331][T10940] bridge_slave_1: entered allmulticast mode [ 1089.017164][T10940] bridge_slave_1: entered promiscuous mode [ 1089.252953][T10949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.120209][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.126261][T10949] team0: Port device team_slave_0 added [ 1090.280368][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.284908][T10949] team0: Port device team_slave_1 added [ 1090.285897][T11116] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1090.285925][T11116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1090.286023][T11116] vhci_hcd vhci_hcd.0: Device attached [ 1090.503440][T10940] team0: Port device team_slave_0 added [ 1090.505642][T10949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.505660][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.505690][T10949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.651726][T10940] team0: Port device team_slave_1 added [ 1090.654793][T10949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.654811][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.654840][T10949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.842799][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.842819][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.842846][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.847976][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.847995][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.848022][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.908104][T11117] vhci_hcd: connection closed [ 1090.917295][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 1090.917390][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1090.958589][ T6813] vhci_hcd vhci_hcd.3: stop threads [ 1090.958671][ T6813] vhci_hcd vhci_hcd.3: release socket [ 1091.015206][ T6813] vhci_hcd vhci_hcd.3: disconnect device [ 1091.346322][T10949] hsr_slave_0: entered promiscuous mode [ 1091.351312][T10949] hsr_slave_1: entered promiscuous mode [ 1091.615528][T10940] hsr_slave_0: entered promiscuous mode [ 1091.623875][T10940] hsr_slave_1: entered promiscuous mode [ 1091.625227][T10940] debugfs: 'hsr0' already exists in 'hsr' [ 1091.625256][T10940] Cannot create hsr debugfs directory [ 1092.015201][T11123] netlink: 348 bytes leftover after parsing attributes in process `syz.3.648'. [ 1092.015314][T11123] netlink: 348 bytes leftover after parsing attributes in process `syz.3.648'. [ 1092.015542][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 1092.298678][ T5617] Bluetooth: hci1: unexpected event for opcode 0x200b [ 1092.917073][ T5793] page_pool_release_retry() stalled pool shutdown: id 103, 22 inflight 181 sec [ 1096.445877][ T9] usb 40-1: device descriptor read/8, error -110 [ 1098.279086][ T9] usb usb40-port1: attempt power cycle [ 1098.951218][ T9] usb usb40-port1: unable to enumerate USB device [ 1100.194546][T11166] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1100.194602][T11166] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1100.194697][T11166] vhci_hcd vhci_hcd.0: Device attached [ 1100.645174][T11167] vhci_hcd: connection closed [ 1100.650289][ T6149] vhci_hcd vhci_hcd.3: stop threads [ 1100.650322][ T6149] vhci_hcd vhci_hcd.3: release socket [ 1100.650398][ T6149] vhci_hcd vhci_hcd.3: disconnect device [ 1100.685350][ T5721] usb 40-1: enqueue for inactive port 0 [ 1101.205147][ T5721] usb usb40-port1: attempt power cycle [ 1101.829031][ T5721] usb usb40-port1: unable to enumerate USB device [ 1102.271440][T11194] netlink: 348 bytes leftover after parsing attributes in process `syz.3.652'. [ 1102.271474][T11194] netlink: 348 bytes leftover after parsing attributes in process `syz.3.652'. [ 1103.458935][T10897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1103.533788][T10897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1103.535636][T10897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1103.594673][T10897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.947944][T10897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1103.994808][T10897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1104.010510][T10897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1104.056205][T10897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.583382][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1108.326655][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1108.496550][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1108.550613][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1108.553635][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1108.554488][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1108.826070][ T9626] bridge_slave_1: left allmulticast mode [ 1108.826112][ T9626] bridge_slave_1: left promiscuous mode [ 1108.826420][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.098575][ T9626] bridge_slave_0: left allmulticast mode [ 1109.098613][ T9626] bridge_slave_0: left promiscuous mode [ 1109.098901][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.337108][ T9626] bridge_slave_1: left allmulticast mode [ 1109.337139][ T9626] bridge_slave_1: left promiscuous mode [ 1109.337426][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.458563][ T9626] bridge_slave_0: left allmulticast mode [ 1109.458595][ T9626] bridge_slave_0: left promiscuous mode [ 1109.458838][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.688722][ T9626] bridge_slave_1: left allmulticast mode [ 1109.688772][ T9626] bridge_slave_1: left promiscuous mode [ 1109.689169][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.856492][ T5793] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1109.882411][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.906800][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.909073][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.910651][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.911408][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1109.951572][ T9626] bridge_slave_0: left allmulticast mode [ 1109.951609][ T9626] bridge_slave_0: left promiscuous mode [ 1109.951855][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.219441][ T5793] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1110.219487][ T5793] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1110.222768][ T5793] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1110.222845][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1110.222868][ T5793] usb 4-1: Product: syz [ 1110.222883][ T5793] usb 4-1: Manufacturer: syz [ 1110.222898][ T5793] usb 4-1: SerialNumber: syz [ 1110.317101][ T5793] usb 4-1: config 0 descriptor?? [ 1110.318732][T11258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.367409][ T5793] usb 4-1: selecting invalid altsetting 0 [ 1110.771805][ T5609] Bluetooth: hci0: command tx timeout [ 1112.197750][ T5609] Bluetooth: hci3: command tx timeout [ 1112.843749][ T5609] Bluetooth: hci0: command tx timeout [ 1113.058122][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1113.063665][ T5793] usb 4-1: USB disconnect, device number 15 [ 1113.208426][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1113.310907][ T9626] bond0 (unregistering): Released all slaves [ 1113.840877][T11191] udevd[11191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1114.007780][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.087951][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.149886][ T9626] bond0 (unregistering): Released all slaves [ 1114.267554][ T5609] Bluetooth: hci3: command tx timeout [ 1114.428926][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.528743][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.591871][ T9626] bond0 (unregistering): Released all slaves [ 1114.664928][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1114.957463][ T5609] Bluetooth: hci0: command tx timeout [ 1115.519194][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1115.522424][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1115.528171][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1115.611883][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1115.632067][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1116.401082][ T5609] Bluetooth: hci3: command tx timeout [ 1116.587489][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.587564][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.986955][ T5609] Bluetooth: hci0: command tx timeout [ 1117.231803][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1117.297981][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1117.360048][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1117.480146][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1117.541592][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1117.987028][ T9626] hsr_slave_0: left promiscuous mode [ 1118.027064][ T5609] Bluetooth: hci4: command tx timeout [ 1118.427684][ T5609] Bluetooth: hci3: command tx timeout [ 1119.787017][ T5609] Bluetooth: hci5: command tx timeout [ 1120.110942][ T5609] Bluetooth: hci4: command tx timeout [ 1121.861144][ T9626] hsr_slave_1: left promiscuous mode [ 1121.867057][ T5609] Bluetooth: hci5: command tx timeout [ 1121.884626][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.138885][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.187090][ T5609] Bluetooth: hci4: command tx timeout [ 1122.377018][ T9626] hsr_slave_0: left promiscuous mode [ 1122.440629][ T9626] hsr_slave_1: left promiscuous mode [ 1122.442444][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.499577][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.907864][T11321] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 1123.827031][ T9626] hsr_slave_0: left promiscuous mode [ 1123.870217][ T9626] hsr_slave_1: left promiscuous mode [ 1123.871338][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.917960][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.947539][ T5609] Bluetooth: hci5: command tx timeout [ 1124.267303][ T5609] Bluetooth: hci4: command tx timeout [ 1124.937872][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1124.998553][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1125.659392][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1125.717865][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1126.027250][ T5609] Bluetooth: hci5: command tx timeout [ 1126.327821][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1126.387800][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1126.649631][ C1] Unknown status report in ack skb [ 1134.858433][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.858737][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.859027][T11245] bridge_slave_0: entered allmulticast mode [ 1134.863636][T11245] bridge_slave_0: entered promiscuous mode [ 1135.142699][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.142905][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.143195][T11245] bridge_slave_1: entered allmulticast mode [ 1135.185816][T11245] bridge_slave_1: entered promiscuous mode [ 1135.358714][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.358822][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.359059][T11259] bridge_slave_0: entered allmulticast mode [ 1135.366057][T11259] bridge_slave_0: entered promiscuous mode [ 1135.494658][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.494795][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.495461][T11259] bridge_slave_1: entered allmulticast mode [ 1135.523097][T11259] bridge_slave_1: entered promiscuous mode [ 1135.665688][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.829138][T11276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.829284][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.829700][T11276] bridge_slave_0: entered allmulticast mode [ 1135.855918][T11276] bridge_slave_0: entered promiscuous mode [ 1135.897888][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.399665][T11276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.399870][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.400074][T11276] bridge_slave_1: entered allmulticast mode [ 1136.404506][T11276] bridge_slave_1: entered promiscuous mode [ 1136.497019][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.368311][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.368476][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.368768][T11298] bridge_slave_0: entered allmulticast mode [ 1137.371842][T11298] bridge_slave_0: entered promiscuous mode [ 1137.498220][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.559439][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.559751][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.559991][T11298] bridge_slave_1: entered allmulticast mode [ 1137.562205][T11298] bridge_slave_1: entered promiscuous mode [ 1137.617969][T11245] team0: Port device team_slave_0 added [ 1137.894755][T11276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.912404][T11245] team0: Port device team_slave_1 added [ 1138.132889][T11276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.163220][T11259] team0: Port device team_slave_0 added [ 1138.179082][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.229522][T11259] team0: Port device team_slave_1 added [ 1138.480970][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.544654][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.544676][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.544711][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.900034][T11276] team0: Port device team_slave_0 added [ 1138.901201][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.901218][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.901247][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.016560][T11276] team0: Port device team_slave_1 added [ 1139.035808][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.035822][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.035843][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.457747][T11298] team0: Port device team_slave_0 added [ 1139.500883][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.500898][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.501050][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.852431][T11298] team0: Port device team_slave_1 added [ 1139.955122][T11276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.955144][T11276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.955167][T11276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.090079][T11276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.090099][T11276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.090129][T11276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.198594][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.198608][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.198629][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.302760][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.302779][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.302806][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.406145][T11245] hsr_slave_0: entered promiscuous mode [ 1140.424640][T11245] hsr_slave_1: entered promiscuous mode [ 1140.426045][T11245] debugfs: 'hsr0' already exists in 'hsr' [ 1140.426070][T11245] Cannot create hsr debugfs directory [ 1140.516579][T11259] hsr_slave_0: entered promiscuous mode [ 1140.538933][T11259] hsr_slave_1: entered promiscuous mode [ 1140.541918][T11259] debugfs: 'hsr0' already exists in 'hsr' [ 1140.541948][T11259] Cannot create hsr debugfs directory [ 1140.627025][ T5720] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1140.719134][T11276] hsr_slave_0: entered promiscuous mode [ 1140.722421][T11276] hsr_slave_1: entered promiscuous mode [ 1140.723578][T11276] debugfs: 'hsr0' already exists in 'hsr' [ 1140.723605][T11276] Cannot create hsr debugfs directory [ 1140.787145][ T5720] usb 4-1: Using ep0 maxpacket: 8 [ 1140.804728][ T5720] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1140.804762][ T5720] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1140.804785][ T5720] usb 4-1: Product: syz [ 1140.804801][ T5720] usb 4-1: Manufacturer: syz [ 1140.804816][ T5720] usb 4-1: SerialNumber: syz [ 1140.913350][ T5720] usb 4-1: config 0 descriptor?? [ 1140.930387][ T5720] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1141.303410][T11298] hsr_slave_0: entered promiscuous mode [ 1141.305007][T11298] hsr_slave_1: entered promiscuous mode [ 1141.306182][T11298] debugfs: 'hsr0' already exists in 'hsr' [ 1141.306208][T11298] Cannot create hsr debugfs directory [ 1141.333913][ T5720] gspca_zc3xx: reg_r err -32 [ 1141.334010][ T5720] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1142.365381][T11449] block device autoloading is deprecated and will be removed. [ 1142.547261][ T5720] usb 4-1: USB disconnect, device number 16 [ 1142.868912][ T9626] bridge_slave_1: left allmulticast mode [ 1142.868945][ T9626] bridge_slave_1: left promiscuous mode [ 1142.869178][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.969334][ T9626] bridge_slave_0: left allmulticast mode [ 1142.969368][ T9626] bridge_slave_0: left promiscuous mode [ 1142.969634][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.187271][ T9626] bridge_slave_1: left allmulticast mode [ 1143.187316][ T9626] bridge_slave_1: left promiscuous mode [ 1143.187599][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.371307][ T9626] bridge_slave_0: left allmulticast mode [ 1143.371339][ T9626] bridge_slave_0: left promiscuous mode [ 1143.371562][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.037266][ T37] audit: type=1326 audit(1784466845.450:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11457 comm="syz.3.682" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea95cde99 code=0x0 [ 1144.197863][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.277993][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.354873][ T9626] bond0 (unregistering): Released all slaves [ 1144.758937][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.867748][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.929895][ T9626] bond0 (unregistering): Released all slaves [ 1146.237354][ T9626] hsr_slave_0: left promiscuous mode [ 1146.258150][ T9626] hsr_slave_1: left promiscuous mode [ 1146.259059][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.288669][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.427178][ T9626] hsr_slave_0: left promiscuous mode [ 1146.447132][ T9626] hsr_slave_1: left promiscuous mode [ 1146.448135][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.497857][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.998484][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1147.069660][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1147.657594][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1147.708275][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1153.236940][T11035] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1153.397147][T11035] usb 4-1: Using ep0 maxpacket: 8 [ 1153.402024][T11035] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1153.402060][T11035] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1153.402075][T11035] usb 4-1: Product: syz [ 1153.402087][T11035] usb 4-1: Manufacturer: syz [ 1153.402098][T11035] usb 4-1: SerialNumber: syz [ 1153.418008][T11035] usb 4-1: config 0 descriptor?? [ 1153.509463][T11035] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1153.547122][ T5770] page_pool_release_retry() stalled pool shutdown: id 103, 22 inflight 242 sec [ 1153.915812][T11035] gspca_zc3xx: reg_r err -32 [ 1153.915891][T11035] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1154.332361][T11035] usb 4-1: USB disconnect, device number 17 [ 1154.977686][ T9626] bridge_slave_1: left allmulticast mode [ 1154.977747][ T9626] bridge_slave_1: left promiscuous mode [ 1154.978054][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.169648][ T9626] bridge_slave_0: left allmulticast mode [ 1155.169680][ T9626] bridge_slave_0: left promiscuous mode [ 1155.169925][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.461313][ T9626] bridge_slave_1: left allmulticast mode [ 1155.461344][ T9626] bridge_slave_1: left promiscuous mode [ 1155.461545][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.600781][ T9626] bridge_slave_0: left allmulticast mode [ 1155.600824][ T9626] bridge_slave_0: left promiscuous mode [ 1155.602201][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.163799][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.260085][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.322963][ T9626] bond0 (unregistering): Released all slaves [ 1156.758389][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.838997][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.900906][ T9626] bond0 (unregistering): Released all slaves [ 1156.960570][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1158.227183][ T9626] hsr_slave_0: left promiscuous mode [ 1158.275464][ T9626] hsr_slave_1: left promiscuous mode [ 1158.279146][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.310551][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.311327][ T37] audit: type=1326 audit(1784466859.730:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11536 comm="syz.3.692" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faea95cde99 code=0x0 [ 1158.527021][ T9626] hsr_slave_0: left promiscuous mode [ 1158.566931][ T9626] hsr_slave_1: left promiscuous mode [ 1158.568067][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.618674][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.099960][T11035] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1159.270271][T11035] usb 4-1: config 0 has no interfaces? [ 1159.270314][T11035] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1159.270339][T11035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.279127][T11035] usb 4-1: config 0 descriptor?? [ 1159.288111][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1159.407788][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1160.169328][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1160.217642][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1160.461865][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1161.762298][T11035] usb 4-1: USB disconnect, device number 18 [ 1162.513551][T11035] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1162.763639][T11035] usb 4-1: Using ep0 maxpacket: 8 [ 1162.842849][T11035] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1162.842884][T11035] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1162.842899][T11035] usb 4-1: Product: syz [ 1162.842909][T11035] usb 4-1: Manufacturer: syz [ 1162.842919][T11035] usb 4-1: SerialNumber: syz [ 1162.849782][T11035] usb 4-1: config 0 descriptor?? [ 1162.883203][T11035] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1163.284815][T11035] gspca_zc3xx: reg_r err -32 [ 1163.284910][T11035] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1163.804109][T11245] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1163.918738][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.942325][T11245] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1164.033119][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.051624][T11245] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1164.140337][ T5720] usb 4-1: USB disconnect, device number 19 [ 1164.208647][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1164.263769][T11245] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1164.300247][T11245] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1164.721495][T11259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1164.780138][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1164.819804][T11259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1164.922147][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.935346][T11259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1165.013382][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.038156][T11259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1165.071574][T11259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.245983][ T37] audit: type=1326 audit(1784466866.660:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11613 comm="syz.3.699" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faea95cde99 code=0x0 [ 1165.414094][T11276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1165.449908][T11276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1165.455011][T11276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1165.508932][T11276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1165.543663][T11276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1165.584043][T11276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1165.610489][T11276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1165.657796][T11276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.697250][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.942050][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.007894][ T9626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.008029][ T9626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.015940][T11298] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1166.061427][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.065955][T11298] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1166.091132][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.128458][T11298] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1166.175234][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1166.186612][T11298] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1166.241115][T11298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.262474][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.262629][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.443822][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.570795][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.610633][T11276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.613772][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.613964][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.699934][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.700163][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.761494][T11276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.878351][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.885519][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.004004][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.004136][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.044384][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.273696][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.348189][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.348399][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.427479][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.427616][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.946345][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.908444][T11276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.992485][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.289884][T11298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.441206][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1170.473670][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1170.505305][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1170.516176][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1170.526199][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1171.407280][T11276] veth0_vlan: entered promiscuous mode [ 1171.811992][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1171.894255][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1171.895561][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1171.928509][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1171.929679][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1171.946924][T11035] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1172.107816][T11035] usb 4-1: Using ep0 maxpacket: 8 [ 1172.115088][T11035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1172.115135][T11035] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1172.115156][T11035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.180842][T11276] veth1_vlan: entered promiscuous mode [ 1172.194411][T11035] usb 4-1: config 0 descriptor?? [ 1172.302224][T11298] veth0_vlan: entered promiscuous mode [ 1172.433250][T11035] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1172.463758][T11035] usb 4-1: USB disconnect, device number 20 [ 1172.666984][ T5609] Bluetooth: hci0: command tx timeout [ 1172.742936][T11298] veth1_vlan: entered promiscuous mode [ 1173.163908][T11276] veth0_macvtap: entered promiscuous mode [ 1173.260146][T11276] veth1_macvtap: entered promiscuous mode [ 1173.354992][T11298] veth0_macvtap: entered promiscuous mode [ 1173.432494][T11298] veth1_macvtap: entered promiscuous mode [ 1173.633520][T11276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.764893][T11276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.910793][T11298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1174.034606][ T163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.107522][ T5609] Bluetooth: hci2: command tx timeout [ 1174.151671][ T163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.185724][T11298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1174.193900][ T163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.240435][ T163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.492313][ T5822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.559196][T11742] bridge12: entered promiscuous mode [ 1174.559302][T11742] bridge12: entered allmulticast mode [ 1174.683580][ T5822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.712732][ T5822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.747203][ T5609] Bluetooth: hci0: command tx timeout [ 1174.817222][ T6813] bridge_slave_1: left allmulticast mode [ 1174.817261][ T6813] bridge_slave_1: left promiscuous mode [ 1174.817648][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.972697][ T6813] bridge_slave_0: left allmulticast mode [ 1174.972726][ T6813] bridge_slave_0: left promiscuous mode [ 1174.972917][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.038815][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.117729][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.159943][ T6813] bond0 (unregistering): Released all slaves [ 1176.186919][ T5609] Bluetooth: hci2: command tx timeout [ 1176.386798][ T5822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.560023][T11752] bridge13: entered promiscuous mode [ 1176.560047][T11752] bridge13: entered allmulticast mode [ 1176.830690][ T5609] Bluetooth: hci0: command tx timeout [ 1176.973976][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.974107][T11706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.974361][T11706] bridge_slave_0: entered allmulticast mode [ 1177.022011][T11706] bridge_slave_0: entered promiscuous mode [ 1177.062868][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.062999][T11706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.063248][T11706] bridge_slave_1: entered allmulticast mode [ 1177.065602][T11706] bridge_slave_1: entered promiscuous mode [ 1177.316464][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1177.398342][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1177.399398][ T6813] hsr_slave_0: left promiscuous mode [ 1177.400854][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1177.465940][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1177.480245][ T6813] hsr_slave_1: left promiscuous mode [ 1177.481205][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1177.504913][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1177.528664][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1177.952684][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.952757][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.267316][ T5617] Bluetooth: hci2: command tx timeout [ 1178.367583][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 1178.417830][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 1178.662135][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1178.733635][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1178.755774][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1178.773549][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1178.791616][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1178.916859][T10297] Bluetooth: hci0: command tx timeout [ 1179.532704][T11706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.580983][T11706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.727160][ T5617] Bluetooth: hci3: command tx timeout [ 1179.940580][T11706] team0: Port device team_slave_0 added [ 1180.072086][T11706] team0: Port device team_slave_1 added [ 1180.268358][T11721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.268921][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.269130][T11721] bridge_slave_0: entered allmulticast mode [ 1180.298754][T11721] bridge_slave_0: entered promiscuous mode [ 1180.350487][ T5617] Bluetooth: hci2: command tx timeout [ 1180.415485][T11721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.415646][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.415861][T11721] bridge_slave_1: entered allmulticast mode [ 1180.419824][T11721] bridge_slave_1: entered promiscuous mode [ 1180.425069][T11706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.425086][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.425115][T11706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.592431][T11706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.592449][T11706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.592480][T11706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.988165][ T5617] Bluetooth: hci4: command tx timeout [ 1181.095591][T11721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.215862][T11721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.236270][T11706] hsr_slave_0: entered promiscuous mode [ 1181.251608][T11706] hsr_slave_1: entered promiscuous mode [ 1181.519236][T11721] team0: Port device team_slave_0 added [ 1181.552175][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1181.580469][T11721] team0: Port device team_slave_1 added [ 1181.676843][T11726] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1181.790552][ T5617] Bluetooth: hci3: command tx timeout [ 1181.827975][T11726] usb 4-1: Using ep0 maxpacket: 8 [ 1181.829962][T11726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.830012][T11726] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1181.830042][T11726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.835950][T11726] usb 4-1: config 0 descriptor?? [ 1182.015025][ T6813] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.143358][T11721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.143377][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.143405][T11721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.154350][T11726] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1182.251152][T11726] usb 4-1: USB disconnect, device number 21 [ 1182.276078][T11721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.276097][T11721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.276126][T11721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.732868][ T6813] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.850585][T11721] hsr_slave_0: entered promiscuous mode [ 1182.851834][T11721] hsr_slave_1: entered promiscuous mode [ 1182.852689][T11721] debugfs: 'hsr0' already exists in 'hsr' [ 1182.852710][T11721] Cannot create hsr debugfs directory [ 1183.069098][ T5617] Bluetooth: hci4: command tx timeout [ 1183.411512][ T6813] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.866896][ T5617] Bluetooth: hci3: command tx timeout [ 1184.448468][ T6813] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.655173][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1185.146928][ T5617] Bluetooth: hci4: command tx timeout [ 1185.946946][ T5617] Bluetooth: hci3: command tx timeout [ 1186.598847][T11757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.599002][T11757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.599205][T11757] bridge_slave_0: entered allmulticast mode [ 1186.606584][T11757] bridge_slave_0: entered promiscuous mode [ 1186.726307][T11757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.726439][T11757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.726649][T11757] bridge_slave_1: entered allmulticast mode [ 1186.742354][T11757] bridge_slave_1: entered promiscuous mode [ 1186.986001][T11766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.986149][T11766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.986422][T11766] bridge_slave_0: entered allmulticast mode [ 1187.019216][T11766] bridge_slave_0: entered promiscuous mode [ 1187.144619][T11757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.154270][T11766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.154613][T11766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.155230][T11766] bridge_slave_1: entered allmulticast mode [ 1187.220249][T11766] bridge_slave_1: entered promiscuous mode [ 1187.241580][ T5617] Bluetooth: hci4: command tx timeout [ 1187.284094][T11757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.657469][T11766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.903908][ T6813] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.968823][T11757] team0: Port device team_slave_0 added [ 1187.974850][T11766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.993675][T11757] team0: Port device team_slave_1 added [ 1188.541670][T11766] team0: Port device team_slave_0 added [ 1188.742970][ T6813] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.812968][T11757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.813004][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.813050][T11757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.868353][T11766] team0: Port device team_slave_1 added [ 1188.870799][T11757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.870833][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.870882][T11757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.401190][T11766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.401210][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.401239][T11766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.634094][ T6813] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.670821][T11766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.672771][T11766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.672795][T11766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.050458][T11757] hsr_slave_0: entered promiscuous mode [ 1190.053480][T11757] hsr_slave_1: entered promiscuous mode [ 1190.054228][T11757] debugfs: 'hsr0' already exists in 'hsr' [ 1190.054319][T11757] Cannot create hsr debugfs directory [ 1190.302558][ T6813] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.458245][T11766] hsr_slave_0: entered promiscuous mode [ 1190.459860][T11766] hsr_slave_1: entered promiscuous mode [ 1190.461010][T11766] debugfs: 'hsr0' already exists in 'hsr' [ 1190.461036][T11766] Cannot create hsr debugfs directory [ 1191.426417][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1191.587225][T11634] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1191.767676][T11634] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.767760][T11634] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1191.767789][T11634] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1191.767835][T11634] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1191.767859][T11634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.888198][T11634] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1191.913437][T11634] usb 4-1: invalid MIDI out EP 0 [ 1192.102933][ T6813] bridge_slave_1: left allmulticast mode [ 1192.102967][ T6813] bridge_slave_1: left promiscuous mode [ 1192.103212][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.280347][ T6813] bridge_slave_0: left allmulticast mode [ 1192.280385][ T6813] bridge_slave_0: left promiscuous mode [ 1192.280664][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.416148][T11634] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1192.454055][T11634] usb 4-1: USB disconnect, device number 22 [ 1192.577422][ T6813] bridge_slave_1: left allmulticast mode [ 1192.577450][ T6813] bridge_slave_1: left promiscuous mode [ 1192.577658][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.708229][ T6813] bridge_slave_0: left allmulticast mode [ 1192.708258][ T6813] bridge_slave_0: left promiscuous mode [ 1192.708506][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.957247][ T6813] bridge_slave_1: left allmulticast mode [ 1192.957278][ T6813] bridge_slave_1: left promiscuous mode [ 1192.957465][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.068565][ T6813] bridge_slave_0: left allmulticast mode [ 1193.068594][ T6813] bridge_slave_0: left promiscuous mode [ 1193.068936][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.397590][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1194.477477][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1194.519423][ T6813] bond0 (unregistering): Released all slaves [ 1195.069643][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.147923][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.169498][ T6813] bond0 (unregistering): Released all slaves [ 1195.758564][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1195.837724][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1195.861279][ T6813] bond0 (unregistering): Released all slaves [ 1196.082539][T11706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.245516][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.293935][T11706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1196.425671][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.498037][T11706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1196.604121][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.119605][T11706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1197.152068][T11706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1197.727659][ T6813] hsr_slave_0: left promiscuous mode [ 1197.767480][ T6813] hsr_slave_1: left promiscuous mode [ 1197.770759][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.770827][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.875224][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.875255][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.092479][ T6813] hsr_slave_0: left promiscuous mode [ 1198.112694][ T6813] hsr_slave_1: left promiscuous mode [ 1198.114991][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1198.115019][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.157681][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1198.157701][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.210776][T11928] kvm: kvm [11927]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100008099 [ 1198.356957][ T6813] hsr_slave_0: left promiscuous mode [ 1198.399122][ T6813] hsr_slave_1: left promiscuous mode [ 1198.402516][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1198.450784][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.570597][ T6813] veth1_macvtap: left promiscuous mode [ 1198.570685][ T6813] veth0_macvtap: left promiscuous mode [ 1198.570917][ T6813] veth1_vlan: left promiscuous mode [ 1198.571045][ T6813] veth0_vlan: left promiscuous mode [ 1198.628013][ T6813] veth1_macvtap: left promiscuous mode [ 1198.628124][ T6813] veth0_macvtap: left promiscuous mode [ 1198.628455][ T6813] veth1_vlan: left promiscuous mode [ 1198.628618][ T6813] veth0_vlan: left promiscuous mode [ 1198.676917][ T5721] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1198.837499][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 1198.844166][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.844218][ T5721] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1198.844242][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.924052][ T5721] usb 4-1: config 0 descriptor?? [ 1199.149403][ T5721] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1199.172316][ T5721] usb 4-1: USB disconnect, device number 23 [ 1199.788835][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 1199.847549][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 1200.739457][ T5721] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1200.898397][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 1200.941644][ T5721] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1200.941668][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.941682][ T5721] usb 4-1: Product: syz [ 1200.941692][ T5721] usb 4-1: Manufacturer: syz [ 1200.941702][ T5721] usb 4-1: SerialNumber: syz [ 1200.946166][ T5721] usb 4-1: config 0 descriptor?? [ 1201.009012][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 1201.189145][ T5721] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1201.677636][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 1201.749107][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 1201.813755][ T5721] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1201.847061][ T5721] usb 4-1: USB disconnect, device number 24 [ 1202.067175][ T5256] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1202.292352][T11721] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1202.334518][T11721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1202.355318][T11721] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1202.464298][T11721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1202.728362][T11721] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1202.761769][T11721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1202.765697][T11721] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1202.808081][T11721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1202.867097][T11726] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1203.020876][T11726] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1203.020907][T11726] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1203.020927][T11726] usb 4-1: Product: syz [ 1203.020940][T11726] usb 4-1: SerialNumber: syz [ 1203.097041][T11726] usb 4-1: config 0 descriptor?? [ 1203.604148][T11726] usb 4-1: USB disconnect, device number 25 [ 1203.620522][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.032187][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.082199][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.082410][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.129836][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.129965][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.789082][T11721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.963550][T11721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.998656][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.998751][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.222710][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.233425][ T5822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.384642][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 1209.236133][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.000856][T11721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.421320][T11706] veth0_vlan: entered promiscuous mode [ 1210.443124][T12061] binder: 12060:12061 ioctl c0306201 200000000680 returned -14 [ 1210.601615][T11706] veth1_vlan: entered promiscuous mode [ 1210.944685][T11706] veth0_macvtap: entered promiscuous mode [ 1210.990594][T11706] veth1_macvtap: entered promiscuous mode [ 1211.394058][T11757] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1211.480947][T11757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.557439][T11706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.570010][T11757] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1211.677215][T11757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.709634][T11757] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1211.781147][T11757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.824389][T11757] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1211.888795][T11757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.892692][T11706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.089775][ T5822] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.096172][T11721] veth0_vlan: entered promiscuous mode [ 1212.101254][ T5822] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.184001][ T5822] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.199281][ T5822] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.372306][T11721] veth1_vlan: entered promiscuous mode [ 1212.467029][ T5793] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1212.774939][ T5793] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1212.774969][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.774989][ T5793] usb 4-1: Product: syz [ 1212.775003][ T5793] usb 4-1: Manufacturer: syz [ 1212.775017][ T5793] usb 4-1: SerialNumber: syz [ 1212.892735][ T5793] usb 4-1: config 0 descriptor?? [ 1213.113292][ T5793] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1213.486831][ T5822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.486856][ T5822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.532808][T11766] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1213.702464][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.746173][ T5793] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1213.813170][ T5793] usb 4-1: USB disconnect, device number 26 [ 1213.823336][T11766] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1213.856587][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.867427][ T8100] page_pool_release_retry() stalled pool shutdown: id 103, 22 inflight 302 sec [ 1213.876645][T11766] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1213.921881][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1213.954004][T11766] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1213.990762][T11766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.052417][T11721] veth0_macvtap: entered promiscuous mode [ 1214.066344][ T5822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.066366][ T5822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.107407][T11721] veth1_macvtap: entered promiscuous mode [ 1214.234687][T11721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.275622][T11757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.342880][T11721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1214.466063][ T5822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.522445][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.95'. [ 1214.522464][T12117] netlink: 14 bytes leftover after parsing attributes in process `syz.5.95'. [ 1214.530186][ T5822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.582410][T12120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1214.688757][ T5822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.695372][ T5822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.733177][T11757] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.879183][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.879325][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.423151][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.423258][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.273472][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.273494][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.275918][T11766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.479876][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1216.479897][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.509524][T11766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.602482][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.604186][ T6142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.677441][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.678107][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.286503][T11757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.765809][T11766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.213289][T12200] binder: BINDER_SET_CONTEXT_MGR already set [ 1220.213301][T12200] binder: 12196:12200 ioctl 4018620d 200000001000 returned -16 [ 1220.669265][T12206] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1222.339808][T11757] veth0_vlan: entered promiscuous mode [ 1222.383218][T11766] veth0_vlan: entered promiscuous mode [ 1222.599137][T11766] veth1_vlan: entered promiscuous mode [ 1222.632345][T11757] veth1_vlan: entered promiscuous mode [ 1222.758078][T12214] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1223.022207][T11757] veth0_macvtap: entered promiscuous mode [ 1223.213664][T11757] veth1_macvtap: entered promiscuous mode [ 1223.243355][T11766] veth0_macvtap: entered promiscuous mode [ 1223.356330][T11766] veth1_macvtap: entered promiscuous mode [ 1223.543152][T11726] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1223.703878][T11757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.732329][T11766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.770305][T11726] usb 7-1: config 0 has no interfaces? [ 1223.770335][T11726] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1223.770353][T11726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.811328][T11726] usb 7-1: config 0 descriptor?? [ 1223.863410][T11757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.912913][T11766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.005677][ T6142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.094265][ T5822] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.253016][ T5822] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.287396][ T5822] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.314661][ T5822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.331574][ T5822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.392926][ T5822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.409354][ T5822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.738329][ T5821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.738351][ T5821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.989588][ T5821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.989606][ T5821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.298156][ T8101] usb 7-1: USB disconnect, device number 2 [ 1227.328529][ T9626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.328553][ T9626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.659560][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.659577][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.595691][ T5617] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1231.829039][T12254] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1232.232852][T12297] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1233.126858][T11035] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1233.302257][T11035] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1233.302294][T11035] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.302308][T11035] usb 8-1: Product: syz [ 1233.302319][T11035] usb 8-1: Manufacturer: syz [ 1233.302329][T11035] usb 8-1: SerialNumber: syz [ 1233.434078][T11035] usb 8-1: config 0 descriptor?? [ 1233.670595][T11035] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1233.769961][T12306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1233.893881][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1233.894124][T11035] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1233.929009][T11035] usb 8-1: USB disconnect, device number 2 [ 1234.699700][T11427] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1234.853258][T11427] usb 6-1: Using ep0 maxpacket: 32 [ 1234.972263][T11427] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1234.972296][T11427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.972316][T11427] usb 6-1: Product: syz [ 1234.972331][T11427] usb 6-1: Manufacturer: syz [ 1234.972345][T11427] usb 6-1: SerialNumber: syz [ 1235.074358][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1235.116949][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1235.121323][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1235.192580][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1235.193412][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.312249][T11427] usb 6-1: config 0 descriptor?? [ 1235.335269][T11427] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1235.335795][T11427] dvb-usb: bulk message failed: -22 (4/0) [ 1235.335817][T11427] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1235.335948][T11427] dvb-usb: bulk message failed: -22 (5/0) [ 1235.335963][T11427] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1235.772163][T11427] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1235.773273][T11427] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1235.773380][T11427] usb 6-1: media controller created [ 1236.185149][T11427] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1237.110728][T11427] usb 6-1: selecting invalid altsetting 3 [ 1237.110743][T11427] ttusb2: set interface to alts=3 failed [ 1237.468824][T11427] DVB: Unable to find symbol tda10086_attach() [ 1237.468901][T11427] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1237.469986][T11427] dvb-usb: bulk message failed: -22 (4/0) [ 1237.470001][T11427] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1237.470087][T11427] dvb-usb: bulk message failed: -22 (5/0) [ 1237.470097][T11427] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1237.470143][T11427] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1237.482241][ T5609] Bluetooth: hci5: command tx timeout [ 1237.569498][T11427] usb 6-1: USB disconnect, device number 2 [ 1237.707431][T11427] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1238.250740][ T9626] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.177236][T12243] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1239.328469][T12243] usb 6-1: Using ep0 maxpacket: 8 [ 1239.334090][T12243] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1239.334114][T12243] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1239.334129][T12243] usb 6-1: Product: syz [ 1239.334139][T12243] usb 6-1: Manufacturer: syz [ 1239.334149][T12243] usb 6-1: SerialNumber: syz [ 1239.350525][T12243] usb 6-1: config 0 descriptor?? [ 1239.413664][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.413889][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.459507][T12243] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1239.547617][ T5609] Bluetooth: hci5: command tx timeout [ 1239.767666][T12243] gspca_zc3xx: reg_r err -32 [ 1239.767746][T12243] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1239.814585][T12243] usb 6-1: USB disconnect, device number 3 [ 1239.968831][ T9626] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.936836][ T5793] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1241.038324][ T9626] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.116799][ T5793] usb 6-1: Using ep0 maxpacket: 8 [ 1241.125843][ T5793] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1241.125876][ T5793] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1241.125897][ T5793] usb 6-1: Product: syz [ 1241.125912][ T5793] usb 6-1: Manufacturer: syz [ 1241.125927][ T5793] usb 6-1: SerialNumber: syz [ 1241.199916][ T5793] usb 6-1: config 0 descriptor?? [ 1241.231366][ T5793] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1241.626814][ T5609] Bluetooth: hci5: command tx timeout [ 1241.650087][ T5793] gspca_zc3xx: reg_r err -32 [ 1241.650158][ T5793] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1241.684724][ T5793] usb 6-1: USB disconnect, device number 4 [ 1241.905205][ T9626] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.706909][ T5609] Bluetooth: hci5: command tx timeout [ 1244.070976][T12388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.453271][ T5793] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1244.609951][ T5793] usb 9-1: Using ep0 maxpacket: 32 [ 1244.646045][ T5793] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1244.646078][ T5793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.646099][ T5793] usb 9-1: Product: syz [ 1244.646115][ T5793] usb 9-1: Manufacturer: syz [ 1244.646130][ T5793] usb 9-1: SerialNumber: syz [ 1244.701807][ T5793] usb 9-1: config 0 descriptor?? [ 1244.717837][ T5793] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1244.717947][ T5793] dvb-usb: bulk message failed: -22 (4/0) [ 1244.717965][ T5793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1244.718091][ T5793] dvb-usb: bulk message failed: -22 (5/0) [ 1244.718107][ T5793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1244.861270][T12400] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1244.970776][ T5793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1244.974136][ T5793] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1244.974196][ T5793] usb 9-1: media controller created [ 1245.066898][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1245.094587][ T5793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1245.133755][ T5793] usb 9-1: selecting invalid altsetting 3 [ 1245.133777][ T5793] ttusb2: set interface to alts=3 failed [ 1245.223278][ T5793] DVB: Unable to find symbol tda10086_attach() [ 1245.223294][ T5793] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1245.226527][ T5793] dvb-usb: bulk message failed: -22 (4/0) [ 1245.226549][ T5793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1245.227291][ T5793] dvb-usb: bulk message failed: -22 (5/0) [ 1245.227311][ T5793] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1245.227381][ T5793] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1245.296860][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1245.320317][ T5793] usb 9-1: USB disconnect, device number 2 [ 1245.374105][ T9] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1245.374129][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.374144][ T9] usb 7-1: Product: syz [ 1245.374155][ T9] usb 7-1: Manufacturer: syz [ 1245.374165][ T9] usb 7-1: SerialNumber: syz [ 1245.542850][ T9] usb 7-1: config 0 descriptor?? [ 1245.591379][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1245.591469][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1245.591487][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1245.591607][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1245.591623][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1245.727047][ T5793] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1245.932441][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1245.933225][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1245.933290][ T9] usb 7-1: media controller created [ 1246.015361][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.156908][ T8101] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1246.254663][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.254805][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.255013][T12311] bridge_slave_0: entered allmulticast mode [ 1246.283538][T12311] bridge_slave_0: entered promiscuous mode [ 1246.326871][ T8101] usb 8-1: config 0 has no interfaces? [ 1246.326909][ T8101] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1246.326932][ T8101] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.388067][ T8101] usb 8-1: config 0 descriptor?? [ 1246.402597][ T5793] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1246.508995][ T9626] bridge_slave_1: left allmulticast mode [ 1246.509024][ T9626] bridge_slave_1: left promiscuous mode [ 1246.509207][ T9626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.566794][ T5793] usb 6-1: Using ep0 maxpacket: 8 [ 1246.570688][ T9] usb 7-1: selecting invalid altsetting 3 [ 1246.570714][ T9] ttusb2: set interface to alts=3 failed [ 1246.574526][ T5793] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1246.574559][ T5793] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1246.574581][ T5793] usb 6-1: Product: syz [ 1246.574596][ T5793] usb 6-1: Manufacturer: syz [ 1246.574611][ T5793] usb 6-1: SerialNumber: syz [ 1246.643530][ T5793] usb 6-1: config 0 descriptor?? [ 1246.702719][ T5793] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1246.743898][ T9] DVB: Unable to find symbol tda10086_attach() [ 1246.743924][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1246.744795][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 1246.744816][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.744953][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1246.744969][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1246.745035][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1246.767323][ T9] usb 7-1: USB disconnect, device number 3 [ 1246.863764][ T9626] bridge_slave_0: left allmulticast mode [ 1246.863799][ T9626] bridge_slave_0: left promiscuous mode [ 1246.864166][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.997947][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1247.055541][ T5793] gspca_zc3xx: reg_r err -32 [ 1247.055640][ T5793] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 1247.313940][ T8101] usb 6-1: USB disconnect, device number 5 [ 1247.500251][ T9626] veth0: left allmulticast mode [ 1248.777694][ T9626] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1248.974452][T11635] usb 8-1: USB disconnect, device number 3 [ 1251.988418][ T9000] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1252.259016][ T9000] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1252.259133][ T9000] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1252.259211][ T9000] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1253.160221][ T9000] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1253.160292][ T9000] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.160363][ T9000] usb 8-1: Product: 呻컛敫ಂ②昏겑ﯚ슽봖ⲑ紳䊹봵ᰈᰜᇔ鲰渭粴癤ꅱ繗Ѭ燎㰥皣࢛붽耴ⶔ缾stꇂ쬝뚜傪궟ꎓ㣍ᗥ썸䩚⫏퍔铬썡ﱼ㨪頊ⅻ뎀ˤ쿍㣻뾊槱ᬫ붣࿸ꄐ藲᩷풚⾞ [ 1253.160404][ T9000] usb 8-1: Manufacturer: 《 [ 1253.160420][ T9000] usb 8-1: SerialNumber: Ь [ 1255.583004][ T9000] usb 8-1: can't set config #1, error -71 [ 1255.616969][ T9000] usb 8-1: USB disconnect, device number 4 [ 1257.251437][T12478] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1257.640931][ T9626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.700898][ T9626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.744315][ T9626] bond0 (unregistering): Released all slaves [ 1257.794771][ T9626] bond1 (unregistering): Released all slaves [ 1257.853629][ T9626] bond2 (unregistering): Released all slaves [ 1258.305892][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.306049][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.306303][T12311] bridge_slave_1: entered allmulticast mode [ 1258.346917][T12311] bridge_slave_1: entered promiscuous mode [ 1258.885902][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.930703][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.330538][T12311] team0: Port device team_slave_0 added [ 1261.426410][T12311] team0: Port device team_slave_1 added [ 1261.914979][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.914993][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.915013][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.988732][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.988749][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1261.988780][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.242267][T12514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1262.526845][ T8101] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1262.751704][ T8101] usb 7-1: Using ep0 maxpacket: 32 [ 1264.044897][ T8101] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1264.044923][ T8101] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.044938][ T8101] usb 7-1: Product: syz [ 1264.044948][ T8101] usb 7-1: Manufacturer: syz [ 1264.044959][ T8101] usb 7-1: SerialNumber: syz [ 1265.527061][ T8101] usb 7-1: config 0 descriptor?? [ 1266.049513][ T8101] usb 7-1: can't set config #0, error -71 [ 1266.185242][ T8101] usb 7-1: USB disconnect, device number 4 [ 1266.761665][T12539] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.761682][T12539] binder: 12538:12539 ioctl 4018620d 200000001000 returned -16 [ 1267.283484][T12550] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1267.892430][ T9626] hsr_slave_0: left promiscuous mode [ 1267.932163][ T9626] hsr_slave_1: left promiscuous mode [ 1267.933403][ T9626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.933432][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.069706][ T9626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.069936][ T9626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.445490][ T9626] veth1_macvtap: left promiscuous mode [ 1268.445570][ T9626] veth0_macvtap: left promiscuous mode [ 1268.445751][ T9626] veth1_vlan: left promiscuous mode [ 1268.451150][ T9626] veth0_vlan: left promiscuous mode [ 1268.732163][T12571] netlink: 20 bytes leftover after parsing attributes in process `syz.7.857'. [ 1272.647556][T12579] netlink: 92 bytes leftover after parsing attributes in process `syz.7.860'. [ 1273.266222][T12584] binder: BINDER_SET_CONTEXT_MGR already set [ 1273.266239][T12584] binder: 12583:12584 ioctl 4018620d 200000001000 returned -16 [ 1273.960112][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1274.301874][T12596] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1274.324546][ T9626] team0 (unregistering): Port device team_slave_1 removed [ 1274.326845][T11035] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1274.478348][ T9626] team0 (unregistering): Port device team_slave_0 removed [ 1274.507220][T11035] usb 6-1: Using ep0 maxpacket: 32 [ 1274.519516][T11035] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1274.519548][T11035] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.519567][T11035] usb 6-1: Product: syz [ 1274.519580][T11035] usb 6-1: Manufacturer: syz [ 1274.519595][T11035] usb 6-1: SerialNumber: syz [ 1274.563786][T11035] usb 6-1: config 0 descriptor?? [ 1274.579506][T11035] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1274.579629][T11035] dvb-usb: bulk message failed: -22 (4/0) [ 1274.579647][T11035] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1274.579790][T11035] dvb-usb: bulk message failed: -22 (5/0) [ 1274.579806][T11035] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1274.675210][T11035] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.675857][T11035] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1274.675899][T11035] usb 6-1: media controller created [ 1274.724729][T11035] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.814056][T11035] usb 6-1: selecting invalid altsetting 3 [ 1274.814091][T11035] ttusb2: set interface to alts=3 failed [ 1274.838275][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.867'. [ 1275.015586][T11035] DVB: Unable to find symbol tda10086_attach() [ 1275.015604][T11035] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1275.016570][T11035] dvb-usb: bulk message failed: -22 (4/0) [ 1275.016590][T11035] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1275.054784][T11035] dvb-usb: bulk message failed: -22 (5/0) [ 1275.054809][T11035] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1275.054882][T11035] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1275.589860][T12311] hsr_slave_0: entered promiscuous mode [ 1275.591365][T12311] hsr_slave_1: entered promiscuous mode [ 1275.592463][T12311] debugfs: 'hsr0' already exists in 'hsr' [ 1275.592488][T12311] Cannot create hsr debugfs directory [ 1275.640286][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1275.804304][T10475] usb 6-1: USB disconnect, device number 6 [ 1276.082102][T10475] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1279.695445][T12625] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1280.424349][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.877'. [ 1281.141553][T12651] netlink: 92 bytes leftover after parsing attributes in process `syz.8.881'. [ 1281.878926][T12659] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 1282.289335][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1284.033802][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.8.888'. [ 1284.320362][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1284.498163][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1284.515749][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1284.515782][ T9] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1284.515804][ T9] usb 6-1: Product: syz [ 1284.515818][ T9] usb 6-1: Manufacturer: syz [ 1284.515834][ T9] usb 6-1: SerialNumber: syz [ 1284.598424][ T9] usb 6-1: config 0 descriptor?? [ 1284.634294][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1284.809888][ T9] gspca_zc3xx: reg_w_i err -71 [ 1284.809971][ T9] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1284.841040][ T9] usb 6-1: USB disconnect, device number 7 [ 1285.646317][T12707] netlink: 92 bytes leftover after parsing attributes in process `syz.5.894'. [ 1287.126956][ T8101] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1287.276809][ T8101] usb 8-1: Using ep0 maxpacket: 16 [ 1287.285078][ T8101] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.285108][ T8101] usb 8-1: config 0 has no interfaces? [ 1287.328386][ T8101] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1287.328419][ T8101] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.328441][ T8101] usb 8-1: Product: syz [ 1287.328456][ T8101] usb 8-1: Manufacturer: syz [ 1287.328470][ T8101] usb 8-1: SerialNumber: syz [ 1287.372439][ T8101] usb 8-1: config 0 descriptor?? [ 1287.631041][ T8101] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1287.685836][T12740] loop2: detected capacity change from 0 to 7 [ 1287.801231][ T8101] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.801282][ T8101] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1287.801305][ T8101] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1287.801345][ T8101] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1287.801371][ T8101] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.941397][ T8101] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1288.359377][T12740] Dev loop2: unable to read RDB block 7 [ 1288.359439][T12740] loop2: unable to read partition table [ 1288.359665][T12740] loop2: partition table beyond EOD, truncated [ 1288.359704][T12740] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1288.460486][T11035] usb 8-1: USB disconnect, device number 5 [ 1289.377469][ T8101] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1289.454423][ T8101] usb 6-1: USB disconnect, device number 8 [ 1292.668922][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1292.685072][ T8100] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1292.825637][ T9] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.825693][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1292.825721][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1292.825744][ T9] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.825789][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1292.825812][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.904600][ T8100] usb 8-1: Using ep0 maxpacket: 8 [ 1292.944913][ T8100] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1292.944944][ T8100] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1292.944961][ T8100] usb 8-1: Product: syz [ 1292.944973][ T8100] usb 8-1: Manufacturer: syz [ 1292.944985][ T8100] usb 8-1: SerialNumber: syz [ 1292.989557][ T8100] usb 8-1: config 0 descriptor?? [ 1293.033620][ T8100] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1293.188635][T12311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1293.200982][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1293.231668][ T8100] gspca_zc3xx: reg_w_i err -71 [ 1293.231751][ T8100] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1293.252079][ T9] usb 7-1: invalid MIDI out EP 0 [ 1293.323222][ T8100] usb 8-1: USB disconnect, device number 6 [ 1293.513378][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1293.516604][T12311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1293.702029][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1293.715347][T12311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1293.867272][ T8101] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1294.028892][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1294.028926][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1294.028950][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1294.028977][ T8101] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1294.034680][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1294.099610][ T8101] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1294.099644][ T8101] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.099665][ T8101] usb 9-1: Product: syz [ 1294.099680][ T8101] usb 9-1: Manufacturer: syz [ 1294.099695][ T8101] usb 9-1: SerialNumber: syz [ 1294.100058][T12311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1294.368984][ T8101] usb 9-1: config 0 descriptor?? [ 1294.688353][T12311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1294.756503][ T8101] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1295.183449][T12243] usb 9-1: USB disconnect, device number 3 [ 1296.901001][T10297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1297.053741][T12836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1297.098130][T12836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1297.161904][T12836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1297.225465][T12836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1297.787533][T12836] Bluetooth: hci2: command 0x0406 tx timeout [ 1297.809455][T12828] Bluetooth: hci0: command 0x0406 tx timeout [ 1298.052733][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1298.346044][ T9] usb 7-1: USB disconnect, device number 5 [ 1299.386895][ T5609] Bluetooth: hci1: command tx timeout [ 1300.891758][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.891817][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.467026][T12836] Bluetooth: hci1: command tx timeout [ 1302.926156][T12836] Bluetooth: hci4: command 0x0406 tx timeout [ 1302.948566][T12828] Bluetooth: hci3: command 0x0406 tx timeout [ 1303.548830][ T5617] Bluetooth: hci1: command tx timeout [ 1303.733831][T12885] netlink: 64 bytes leftover after parsing attributes in process `syz.6.933'. [ 1305.626954][ T5617] Bluetooth: hci1: command tx timeout [ 1306.500785][ T8101] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1306.800563][ T8101] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1306.800591][ T8101] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1306.800609][ T8101] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1306.802531][ T8101] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1306.802551][ T8101] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.802566][ T8101] usb 8-1: Product: 呻컛敫ಂ②昏겑ﯚ슽봖ⲑ紳䊹봵ᰈᰜᇔ鲰渭粴癤ꅱ繗Ѭ燎㰥皣࢛붽耴ⶔ缾stꇂ쬝뚜傪궟ꎓ㣍ᗥ썸䩚⫏퍔铬썡ﱼ㨪頊ⅻ뎀ˤ쿍㣻뾊槱ᬫ붣࿸ꄐ藲᩷풚⾞ [ 1306.802587][ T8101] usb 8-1: Manufacturer: 《 [ 1306.802597][ T8101] usb 8-1: SerialNumber: Ь [ 1306.941606][T12908] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1306.941768][T12908] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1307.599480][T12911] netlink: 'syz.7.939': attribute type 1 has an invalid length. [ 1308.864841][T12916] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.869818][T12916] binder: 12915:12916 ioctl 4018620d 200000001000 returned -16 [ 1310.001360][ T8101] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 127 proto 3 vid 0x0525 pid 0xA4A8 [ 1310.046427][ T8101] usb 8-1: USB disconnect, device number 7 [ 1310.116089][ T8101] usblp0: removed [ 1310.211230][T12523] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1310.431448][T12523] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.431505][T12523] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1310.431530][T12523] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1310.431552][T12523] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1310.431595][T12523] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1310.431618][T12523] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.661665][T12523] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1310.675350][T12523] usb 7-1: invalid MIDI out EP 0 [ 1312.555583][T12523] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1312.581864][T12523] usb 7-1: USB disconnect, device number 6 [ 1313.497780][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.497889][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.498329][T12829] bridge_slave_0: entered allmulticast mode [ 1313.553795][T12829] bridge_slave_0: entered promiscuous mode [ 1313.621587][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.621694][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.621917][T12829] bridge_slave_1: entered allmulticast mode [ 1313.663972][T12829] bridge_slave_1: entered promiscuous mode [ 1314.491248][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.196962][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.140630][T12829] team0: Port device team_slave_0 added [ 1317.184918][T12829] team0: Port device team_slave_1 added [ 1317.727065][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.830130][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.852344][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.875480][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.920309][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1319.240500][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.240514][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.240534][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.356315][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.356335][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.356365][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.508474][ T5617] Bluetooth: hci0: command tx timeout [ 1320.842994][ T42] bridge_slave_1: left allmulticast mode [ 1320.843034][ T42] bridge_slave_1: left promiscuous mode [ 1320.843343][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.000876][ T42] bridge_slave_0: left allmulticast mode [ 1321.000919][ T42] bridge_slave_0: left promiscuous mode [ 1321.001233][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.932932][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.082174][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.152540][ T42] bond0 (unregistering): Released all slaves [ 1322.417859][T12829] hsr_slave_0: entered promiscuous mode [ 1322.421933][T12829] hsr_slave_1: entered promiscuous mode [ 1322.449075][T12829] debugfs: 'hsr0' already exists in 'hsr' [ 1322.449107][T12829] Cannot create hsr debugfs directory [ 1322.624604][ T5617] Bluetooth: hci0: command tx timeout [ 1323.549597][ T42] hsr_slave_0: left promiscuous mode [ 1324.481077][ T42] hsr_slave_1: left promiscuous mode [ 1324.481899][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.547958][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.666799][ T5617] Bluetooth: hci0: command tx timeout [ 1325.571561][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1325.700330][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1326.491093][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1326.788890][ T5617] Bluetooth: hci0: command tx timeout [ 1330.616764][T10475] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1330.681002][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1330.805477][T10475] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1330.805513][T10475] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1330.805540][T10475] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1330.876884][T10475] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1330.876918][T10475] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.876938][T10475] usb 8-1: Product: 呻컛敫ಂ②昏겑ﯚ슽봖ⲑ紳䊹봵ᰈᰜᇔ鲰渭粴癤ꅱ繗Ѭ燎㰥皣࢛붽耴ⶔ缾stꇂ쬝뚜傪궟ꎓ㣍ᗥ썸䩚⫏퍔铬썡ﱼ㨪頊ⅻ뎀ˤ쿍㣻뾊槱ᬫ붣࿸ꄐ藲᩷풚⾞ [ 1330.876963][T10475] usb 8-1: Manufacturer: 《 [ 1330.876977][T10475] usb 8-1: SerialNumber: Ь [ 1331.083288][T13076] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1331.083424][T13076] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1331.574668][T13088] netlink: 'syz.7.978': attribute type 1 has an invalid length. [ 1332.110082][T13076] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1332.694364][T10475] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 127 proto 3 vid 0x0525 pid 0xA4A8 [ 1332.748828][T10475] usb 8-1: USB disconnect, device number 8 [ 1332.809498][T10475] usblp0: removed [ 1333.355404][ T42] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.521382][T12523] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1333.668249][T12523] usb 8-1: Using ep0 maxpacket: 8 [ 1333.669294][T12523] usb 8-1: no configurations [ 1333.669313][T12523] usb 8-1: can't read configurations, error -22 [ 1333.796760][T12523] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1333.907223][T11035] 1024-page vmalloc region starting at 0xffffc9001536c000 allocated at kcov_ioctl+0x58/0x650 [ 1333.907417][T11035] list_del corruption. next->prev should be ffffc9001bb80000, but was 0000000000000000. (next=ffffc9001536c000) [ 1333.908001][T11035] ------------[ cut here ]------------ [ 1333.908010][T11035] kernel BUG at lib/list_debug.c:67! [ 1333.908048][T11035] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1333.908153][T11035] CPU: 0 UID: 0 PID: 11035 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1333.908175][T11035] Tainted: [L]=SOFTLOCKUP [ 1333.908181][T11035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1333.908191][T11035] Workqueue: usb_hub_wq hub_event [ 1333.908263][T11035] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1333.908368][T11035] Code: bc da 40 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 1d 3b 61 fd 49 8b 56 08 48 c7 c7 c0 6a ca 8b 48 89 de 4c 89 f1 e8 c7 f6 59 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1333.908382][T11035] RSP: 0018:ffffc90003b977b8 EFLAGS: 00010246 [ 1333.908421][T11035] RAX: 000000000000006d RBX: ffffc9001bb80000 RCX: e3d8deb609b40500 [ 1333.908435][T11035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.908447][T11035] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.908457][T11035] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92002a6d801 [ 1333.908468][T11035] R13: dffffc0000000000 R14: ffffc9001536c000 R15: ffffc9001536c008 [ 1333.908481][T11035] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 1333.908493][T11035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1333.908504][T11035] CR2: 00007fd229bd7000 CR3: 000000004062e000 CR4: 00000000003526f0 [ 1333.908518][T11035] Call Trace: [ 1333.908543][T11035] [ 1333.908590][T11035] kcov_remote_start+0x295/0x6f0 [ 1333.908638][T11035] hub_event+0x15d/0x4cf0 [ 1333.908653][T11035] ? rt_spin_unlock+0x163/0x200 [ 1333.908744][T11035] ? __lock_acquire+0x683/0x2ce0 [ 1333.908790][T11035] ? register_lock_class+0x31/0x2e0 [ 1333.908806][T11035] ? __lock_acquire+0x683/0x2ce0 [ 1333.908825][T11035] ? do_raw_spin_lock+0x12b/0x2f0 [ 1333.908864][T11035] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1333.908887][T11035] ? __pfx_hub_event+0x10/0x10 [ 1333.908901][T11035] ? process_scheduled_works+0xa20/0x14e0 [ 1333.908949][T11035] ? rcu_is_watching+0x15/0xb0 [ 1333.908990][T11035] ? process_scheduled_works+0xa20/0x14e0 [ 1333.909008][T11035] process_scheduled_works+0xa8e/0x14e0 [ 1333.909036][T11035] ? __pfx_process_scheduled_works+0x10/0x10 [ 1333.909056][T11035] ? assign_work+0x3cf/0x5d0 [ 1333.909074][T11035] worker_thread+0xa47/0xfb0 [ 1333.909097][T11035] ? __kthread_parkme+0x71/0x1f0 [ 1333.909137][T11035] kthread+0x388/0x470 [ 1333.909159][T11035] ? __pfx_worker_thread+0x10/0x10 [ 1333.909176][T11035] ? __pfx_kthread+0x10/0x10 [ 1333.909199][T11035] ret_from_fork+0x514/0xb70 [ 1333.909266][T11035] ? __pfx_ret_from_fork+0x10/0x10 [ 1333.909289][T11035] ? __switch_to+0xc89/0x1420 [ 1333.909339][T11035] ? __pfx_kthread+0x10/0x10 [ 1333.909361][T11035] ret_from_fork_asm+0x1a/0x30 [ 1333.909394][T11035] [ 1333.909402][T11035] Modules linked in: [ 1333.909435][T11035] ---[ end trace 0000000000000000 ]--- [ 1333.909815][T11035] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1333.911875][T11035] Code: bc da 40 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 1d 3b 61 fd 49 8b 56 08 48 c7 c7 c0 6a ca 8b 48 89 de 4c 89 f1 e8 c7 f6 59 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1333.911893][T11035] RSP: 0018:ffffc90003b977b8 EFLAGS: 00010246 [ 1333.911908][T11035] RAX: 000000000000006d RBX: ffffc9001bb80000 RCX: e3d8deb609b40500 [ 1333.911920][T11035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.911935][T11035] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.911945][T11035] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92002a6d801 [ 1333.911957][T11035] R13: dffffc0000000000 R14: ffffc9001536c000 R15: ffffc9001536c008 [ 1333.911969][T11035] FS: 0000000000000000(0000) GS:ffff888125c46000(0000) knlGS:0000000000000000 [ 1333.911982][T11035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1333.911993][T11035] CR2: 00007fd229bd7000 CR3: 00000000604c2000 CR4: 00000000003526f0 [ 1333.912061][T11035] Kernel panic - not syncing: Fatal exception [ 1333.912671][T11035] Kernel Offset: disabled