last executing test programs: 12m5.927026716s ago: executing program 1 (id=348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$video4linux(0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x2, 0x0, 0x2006, 0x0, 0x400000, 0x40000, 0xf4a, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12m5.766916431s ago: executing program 1 (id=349): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) kcmp(r3, r3, 0x0, r4, r4) r7 = socket$rds(0x15, 0x5, 0x0) inotify_init1(0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000380)=0xa49, 0x8000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r7, 0x0, 0x0, 0x0, 0x141, 0x1}) io_uring_enter(r4, 0x6e2, 0x8320, 0x1, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) openat$ubi_ctrl(0xffffff9c, 0x0, 0x111000, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) 12m4.744288017s ago: executing program 1 (id=353): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x26, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r2, 0x6, &(0x7f00000001c0)={&(0x7f00000002c0)=""/141, 0x8d}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = eventfd2(0xfffffffa, 0x80000) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r5, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000003c0)={r4, 0x5, 0x1, r5}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xe9f4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x3, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x440, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12m4.58433959s ago: executing program 1 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 12m4.515172698s ago: executing program 1 (id=355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r5 = epoll_create(0x802) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f00000002c0)=""/49, &(0x7f0000000440)=0x31) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100390086dd6012040800103afffe80000000000000000000000000907808000200000000000700"/67], 0x0) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x172, &(0x7f0000000480)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x138, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "00fa59", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing, @srh={0x3c, 0x8, 0x4, 0x4, 0x3, 0x48, 0x8, [@remote, @private1, @local, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x2e, 0xe, 0x3ebeada2da3e9a7a, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback]}, @routing={0x2b, 0x6, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r9, 0x5608) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 12m4.179617677s ago: executing program 1 (id=361): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) kcmp(r3, r3, 0x0, r4, r4) r7 = socket$rds(0x15, 0x5, 0x0) inotify_init1(0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000380)=0xa49, 0x8000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r7, 0x0, 0x0, 0x0, 0x141, 0x1}) io_uring_enter(r4, 0x6e2, 0x8320, 0x1, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) openat$ubi_ctrl(0xffffff9c, 0x0, 0x111000, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) 12m4.07293321s ago: executing program 32 (id=361): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) kcmp(r3, r3, 0x0, r4, r4) r7 = socket$rds(0x15, 0x5, 0x0) inotify_init1(0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000380)=0xa49, 0x8000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x38, 0x0, r7, 0x0, 0x0, 0x0, 0x141, 0x1}) io_uring_enter(r4, 0x6e2, 0x8320, 0x1, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) socket$inet(0x2, 0x3, 0x2) openat$ubi_ctrl(0xffffff9c, 0x0, 0x111000, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000200)={'\x00', 0xfffb, 0xc78b, 0x4, 0x9, 0x3}) ioctl$BLKTRACESTART(r10, 0x1274, 0x0) 7m16.979842164s ago: executing program 2 (id=2148): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) 7m15.99080154s ago: executing program 2 (id=2154): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff050024000000000105"], 0x58}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009002"]) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000804) sendmsg$NFT_BATCH(r2, 0x0, 0x4000010) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000018b9391f9392ffd04bc5e00000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) (fail_nth: 2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x20082, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r6, 0x40096100, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 7m15.889206222s ago: executing program 2 (id=2155): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x3, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000480)="99538e1b44f5f8acf8519857905277a02071c40cfd1b81c594952d2dce91656dba5dbbf5efaa07fd39c91d7441a93f3e6c5c34f128b1d0cf7d9a06e93e36f116297c8e424352ae6816b1ebbe4ca2511c77f2a3020598f322f88ad1eca41d59cb8434a55a7fcb0b2ea841d0d0c82bce8220f1252964efdde2d754fa7cd3373d775df7aee823d0feb85b0ce22f40d2656e0f26764e6dca1b28389ab6168ee507d146f03826c859ebd48d613d7bf0aa1ef98bc8137c09122f997a558e1f8e73", &(0x7f0000000540)=""/160}, 0x1c) r1 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9000, &(0x7f0000000200)={0x0, 0x85, 0x100000}, 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d1bf91b4d090955f70e06d038e7ff7fc6e5539b0d3f0e8b089b3f35076e090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d40)="1706184f78b8494cbb6ce1749901380da2f6121e0376ed9512a315578e", 0x1d}, {&(0x7f0000000100)="644183e6152f3eadf576ac37b5d9a70a4ae7acd89ec93104", 0x18}, {&(0x7f0000000740)="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", 0x34b}], 0x3, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) recvmsg$unix(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 7m14.807435723s ago: executing program 2 (id=2161): syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000040), 0x4) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x65, 0x2007, @fd_index=0x2, 0x9, 0x0, 0x0, 0x3, 0x1, {0x1, r5}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r6, 0x0, 0x0) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sync_file_range(r7, 0x8, 0x991, 0x7) 7m14.794163614s ago: executing program 2 (id=2162): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r2, 0x0) r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r6, 0xf, 0x0) faccessat2(r6, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340), 0x90000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r7}, 0x18) mlockall(0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x800000000000001) 7m14.781239199s ago: executing program 2 (id=2163): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) 6m59.346582106s ago: executing program 33 (id=2163): openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6c}) 4m49.091097506s ago: executing program 4 (id=3123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x4, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101000, 0x22) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36b, 0x10100, 0x0, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 4m48.91235178s ago: executing program 4 (id=3126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x0) 4m48.849349228s ago: executing program 4 (id=3127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000033b015312c60227977d00000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000f33800010326bd7002fadbdf2505000000"], 0x14}}, 0x40800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x8003, 0xccbe, @remote}, 0xff0d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newchain={0x2c, 0x64, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xb, 0xffff}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x56}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 4m47.766028995s ago: executing program 4 (id=3134): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000040000002000000001000000000000004ae52bb4810b7005327d4062cf26ea0c558e81d28dedccc4dd95a77f2404fd469554290c5d6fccbc8e03c55ba26c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000004000000040008000300000008040000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000800000002000", @ANYBLOB="2cc00533df95ecf28b0e29cf00599259dba81259a1e83c84ec019ca9f1e5d9e8ae82cf5f75c2dfb2682e703c47c147f09f142022623b8cef9f46025659540889263b6ed0b6349de5a628f4204e18804207f0763cc562cd7d6be7606760c03ab2a72d8a311cf1deb3716bf0772d026e6f72bcaed4855aab244ad1a56589288f306ce7f58b2e03649fbe12969f459e8ed9980b9fde37", @ANYRES64=r1, @ANYBLOB='\x00'/28, @ANYRES16=r3], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000be10e6b73682b8309565e2f8aa1d2cb03a3dbd0325bdb2c2b32d91dcca68bfb6ebb8ec3cdf8710769b152580daa89bcfec6ed7ba278a9fd308ef51af13cd20fbde8e0726369c8b484f4384d8a71499ac3c7767314420bd00734b13c9dff887b82e82dc67451eaf377c5e3afb5e7181aff672ef2b9b4a034edf4e"], 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000f800030000000000fb150000000052c23d"], 0x4000) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce5e764faf31e3f77b42eb2b26e3eccf89548e6286c7af59fbaf4d736a81b627b70f7280ca087e67ab1401ce4aaa61ff44c9a3550fbd8eaaefa2203653", 0x81, 0xce49}]) 4m46.684522272s ago: executing program 4 (id=3142): sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="0543092c9f0b480301020d00c535f7c25975e010b02f0800eb2b2ff0dac889", 0x1f, 0xc1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f010000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x58}}, 0x40408c4) memfd_create(&(0x7f0000000640)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6\xbe\xf4\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U\x82\xf3\x8c\x8d\x87\n\x17\xe8Ev\x00\xbc\xfa\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xcf\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\n_\xa6\xea<\x8c!L\x04\x87V\x8a\x93f\xa3\xf2\x9b\xca\xc4}\x1f \xa75=\b\xd9\xacq\xa7O!\x184\t', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000081e5fe95593aa1160c4069addf14d7abd8fdf7e098e6f38bb87e72f1d6dcf8149e92ffffffffbfd90a968f9a167411257c6f3ffca087d7e02bd075d90ac58a9e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='contention_end\x00', r3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) socket$kcm(0x10, 0x400000002, 0x0) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev(r5, &(0x7f00000014c0)=[{&(0x7f0000000200)='V', 0x1}], 0x1) 4m46.41857438s ago: executing program 4 (id=3143): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000c00)='scalable\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) openat(r4, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) signalfd(r2, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000000)={0xffffffff, 0x4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x10000000000, 0x800}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r5, 0x1, 0x8}, 0x14) 4m46.311971981s ago: executing program 34 (id=3143): r0 = socket$packet(0x11, 0x2, 0x300) r1 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000c00)='scalable\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) openat(r4, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) signalfd(r2, &(0x7f0000000080)={[0x8]}, 0x8) ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000000)={0xffffffff, 0x4}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x10000000000, 0x800}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x888e, r5, 0x1, 0x8}, 0x14) 43.44823183s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 41.823890983s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 35.76726777s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 33.01528793s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 27.646773202s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 26.672462382s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 19.176063182s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 19.043628786s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 11.996666293s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 10.434363569s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 4.104350954s ago: executing program 6 (id=5043): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x129000, 0x800}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x100000, 0x1800, 0x0, 0x1}, 0x20) 4.046179169s ago: executing program 6 (id=5044): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000200)=""/251) 4.04586125s ago: executing program 3 (id=4419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000002680)={0xc80, 0xf0, 0x500, 0x30, 0xe93f, 0x7, 0x0, 0x2, {0x1, 0x3f9a, 0x1}, {0xb, 0x7, 0x1}, {0x4, 0x9}, {0x7, 0x101}, 0x3, 0x100, 0x7, 0x1, 0x1, 0x3, 0x8001, 0x6, 0x3, 0x8, 0x4, 0x80000000, 0x8, 0x200, 0x1, 0x2}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close(r5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3c4, 0xffffffff, 0x234, 0x148, 0x148, 0xfeffffff, 0xffffffff, 0x2fc, 0x2fc, 0x2fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xdc, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x8, 0x82, 0xc, 0x0, 0x0, "be3a2516c16e4b0edc920f1bcba912c612a3203c17f6b434e32d2f7e0cc0cc9cecce7a625497dbb1a5b3422e7c7dac353a1c0926b5079abc0a38fba7e1bbd243"}}}, {{@ipv6={@loopback, @empty, [0xffffffff, 0x0, 0xff], [0x0, 0xff000000, 0x0, 0xff000000], 'sit0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@unspec=@connlabel={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x420) 4.045802942s ago: executing program 6 (id=5045): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x5, 0x0, 0x7, '\x00', 0xffffffffeffffffc}) 2.534360599s ago: executing program 6 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x0) 2.464952113s ago: executing program 6 (id=5048): epoll_create1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 2.443286739s ago: executing program 6 (id=5051): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.634131788s ago: executing program 0 (id=4492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r1 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) (async) io_uring_enter(r1, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @control}], 0x1c) (async) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) (async) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) (async) r9 = syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0xed3d7550fa0b5d7c, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2200}, 0x0, {0x0, r12}}) (async) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r12}}) 318.005415ms ago: executing program 5 (id=5054): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x2}) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000240)=@arm64={0x5, 0x0, 0x7, '\x00', 0xffffffffeffffffc}) 235.834283ms ago: executing program 5 (id=5055): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c", 0x48}, {&(0x7f0000000340)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2", 0x4e}, {&(0x7f0000000a00)="5be3b011e12323e4ab88c9472f0700000000000000e71ba6231f303d75cdd2df2d50854bf96cdcc0702db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600cbed4bfc64e114b342a51245a721eefd45a691e9fc799e7f83", 0x80}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000ac0)="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", 0x163}, {&(0x7f0000000740)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f6", 0xae}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1491bce5d1e3e87a1995bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4f9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a6462f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d9b006afb12f21a6723daadbb1ca5a0000e88d948ba3cbca85e7471ced46c453521b9fe5", 0xd5}, {&(0x7f0000000840)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c66fdf6256fc7503c8ecb4a11568f27df555586872d6bc53d5416d6094dcca85a8833870ebe0045b850349d2e5d33518e35e366fadac0514bf61b9c592a221c5401a426ebe47761ff54b08e58a2525f53e107bcfa04f2a6b99e0f2710f5941944f73246b4e52d6f49496cae51c61a338d706e40283ad9e1a13956b210d5ef02acb74054121f09273cd68395f7e89848cdbdc871190bf92965acb65e67f3a292a273ebe0cc7dc190dcabba1381e390e358f1f1c9964fccdb3d6dc088037af1ca526c1a58c27569d64ac1ef0a11044285", 0xf0}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 235.29461ms ago: executing program 5 (id=5056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 103.665052ms ago: executing program 5 (id=5057): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x805}, 0x0) 1.936178ms ago: executing program 5 (id=5058): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x8040480) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) 0s ago: executing program 5 (id=5059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12f}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x0) kernel console output (not intermixed with test programs): n: entered promiscuous mode [ 773.051226][T23015] veth0_macvtap: entered promiscuous mode [ 773.055934][T23015] veth1_macvtap: entered promiscuous mode [ 773.092651][T23015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.098843][T23015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.104293][T23015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.106929][T23015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.109488][T23015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.112124][T23015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.191849][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.195508][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.234731][ T1283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.237135][ T1283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.325653][ T1140] hsr_slave_0: left promiscuous mode [ 773.327769][ T1140] hsr_slave_1: left promiscuous mode [ 773.329774][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.332105][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.335122][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.337465][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.360438][ T1140] veth1_macvtap: left promiscuous mode [ 773.362276][ T1140] veth0_macvtap: left promiscuous mode [ 773.364011][ T1140] veth1_vlan: left promiscuous mode [ 773.365737][ T1140] veth0_vlan: left promiscuous mode [ 774.149800][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 774.247525][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 774.911342][T23063] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 774.915330][T23063] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 774.918996][T23063] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 774.923087][T23063] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 774.962848][ T5947] Bluetooth: hci1: command tx timeout [ 774.982727][T23063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.991687][T23063] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.999116][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.001481][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.009575][T20025] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.011892][T20025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.138238][T23063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.158365][T23063] veth0_vlan: entered promiscuous mode [ 775.162993][T23063] veth1_vlan: entered promiscuous mode [ 775.176970][T23063] veth0_macvtap: entered promiscuous mode [ 775.180860][T23063] veth1_macvtap: entered promiscuous mode [ 775.190074][T23063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.197862][T23063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.202482][T23063] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.205254][T23063] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.207949][T23063] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.211427][T23063] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.246798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.249289][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.269059][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.272022][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.294176][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.446423][T14548] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 775.449564][T14548] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 775.454080][T14548] asix 10-1:0.0: probe with driver asix failed with error -71 [ 775.460599][T14548] usb 10-1: USB disconnect, device number 13 [ 775.550128][T17658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.553536][T17658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.557752][T17658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.560632][T17658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.564951][T17658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.682722][T23164] chnl_net:caif_netlink_parms(): no params data found [ 775.757163][T23164] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.759298][T23164] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.761759][T23164] bridge_slave_0: entered allmulticast mode [ 775.765485][T23164] bridge_slave_0: entered promiscuous mode [ 775.769546][T23164] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.773064][T23164] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.775301][T23164] bridge_slave_1: entered allmulticast mode [ 775.777831][T23164] bridge_slave_1: entered promiscuous mode [ 775.864167][T23164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.871471][T23164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.927459][T23164] team0: Port device team_slave_0 added [ 775.935531][T23164] team0: Port device team_slave_1 added [ 776.005586][T23164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.008028][T23164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.017249][T23164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.026261][T23164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.028366][T23164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.041636][T23164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.128295][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.141710][T23164] hsr_slave_0: entered promiscuous mode [ 776.144493][T23164] hsr_slave_1: entered promiscuous mode [ 777.164985][T23215] Bluetooth: MGMT ver 1.23 [ 777.167617][T23215] Bluetooth: hci0: unsupported parameter 32767 [ 777.170263][T23215] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 777.612378][ T5947] Bluetooth: hci0: command tx timeout [ 777.646772][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.712381][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.831215][ T1140] bridge_slave_1: left allmulticast mode [ 777.834950][ T1140] bridge_slave_1: left promiscuous mode [ 777.837461][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.842166][ T1140] bridge_slave_0: left allmulticast mode [ 777.844406][ T1140] bridge_slave_0: left promiscuous mode [ 777.846823][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.969400][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4660'. [ 778.060809][T23237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 778.084543][T17658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 778.094570][T17658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 778.098371][T17658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 778.103641][T17658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 778.112264][T17658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 778.225849][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.230042][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.233816][ T1140] bond0 (unregistering): Released all slaves [ 778.480565][T23238] chnl_net:caif_netlink_parms(): no params data found [ 778.649767][T23238] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.652176][T23238] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.654523][T23238] bridge_slave_0: entered allmulticast mode [ 778.657263][T23238] bridge_slave_0: entered promiscuous mode [ 778.662944][T23238] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.665239][T23238] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.667510][T23238] bridge_slave_1: entered allmulticast mode [ 778.670179][T23238] bridge_slave_1: entered promiscuous mode [ 778.719802][ T1140] hsr_slave_0: left promiscuous mode [ 778.725221][ T1140] hsr_slave_1: left promiscuous mode [ 778.727290][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.729636][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.732360][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.734656][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.756424][ T1140] veth1_macvtap: left promiscuous mode [ 778.758269][ T1140] veth0_macvtap: left promiscuous mode [ 778.760034][ T1140] veth1_vlan: left promiscuous mode [ 778.761708][ T1140] veth0_vlan: left promiscuous mode [ 778.942537][T14425] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 779.104975][T14425] usb 11-1: config 0 interface 0 has no altsetting 0 [ 779.107102][T14425] usb 11-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 779.109863][T14425] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.114489][T14425] usb 11-1: config 0 descriptor?? [ 779.510177][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 779.522113][T14425] video4linux radio48: keene_cmd_main failed (-71) [ 779.528202][T14425] radio-keene 11-1:0.0: V4L2 device registered as radio48 [ 779.531294][T14425] usb 11-1: USB disconnect, device number 18 [ 779.604174][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 779.692228][T17658] Bluetooth: hci0: command tx timeout [ 780.163737][T17658] Bluetooth: hci1: command tx timeout [ 780.248693][T23238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.258768][T23238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.318544][T23238] team0: Port device team_slave_0 added [ 780.331301][T23238] team0: Port device team_slave_1 added [ 780.380045][T23238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.383407][T23238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.394708][T23238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.414754][T23291] netlink: 'syz.5.4680': attribute type 10 has an invalid length. [ 780.418333][T23238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.420897][T23238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.431117][T23238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.470092][T23291] team0: Device dummy0 is up. Set it down before adding it as a team port [ 780.536224][T23238] hsr_slave_0: entered promiscuous mode [ 780.543016][T23238] hsr_slave_1: entered promiscuous mode [ 780.548176][T23238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.557919][T23238] Cannot create hsr debugfs directory [ 780.559864][T23164] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 780.578335][T23164] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 780.594701][T23164] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 780.599493][T23164] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 780.741128][T23238] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.786682][T23164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.796677][T23164] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.827392][T23238] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.894534][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.897574][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.913904][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.916677][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.946163][T23238] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.026902][T23238] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.090510][T23164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.114467][ T1140] bridge_slave_1: left allmulticast mode [ 781.117178][ T1140] bridge_slave_1: left promiscuous mode [ 781.122158][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.126325][ T1140] bridge_slave_0: left allmulticast mode [ 781.128073][ T1140] bridge_slave_0: left promiscuous mode [ 781.129958][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.422181][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.428758][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.437076][ T1140] bond0 (unregistering): Released all slaves [ 781.489385][T23164] veth0_vlan: entered promiscuous mode [ 781.523592][T23164] veth1_vlan: entered promiscuous mode [ 781.564005][T23327] IPv6: syztnl0: Disabled Multicast RS [ 781.578428][T23238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.660303][T23238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 781.666952][T23238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 781.673737][T23238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 781.694660][T23164] veth0_macvtap: entered promiscuous mode [ 781.705441][T23164] veth1_macvtap: entered promiscuous mode [ 781.720169][T23164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.732970][T23164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.762236][T17658] Bluetooth: hci0: command tx timeout [ 781.796365][T23164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.799105][T23164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.803718][T23164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.807141][T23164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.861503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.864466][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.888213][T23238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.891634][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.895623][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.899053][ T1140] hsr_slave_0: left promiscuous mode [ 781.901948][ T1140] hsr_slave_1: left promiscuous mode [ 781.907311][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.910392][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.917925][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.920903][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.960554][ T1140] veth1_macvtap: left promiscuous mode [ 781.962754][ T1140] veth0_macvtap: left promiscuous mode [ 781.964560][ T1140] veth1_vlan: left promiscuous mode [ 781.966270][ T1140] veth0_vlan: left promiscuous mode [ 781.970586][T23357] netlink: 'syz.5.4700': attribute type 9 has an invalid length. [ 781.973943][T23357] netlink: 'syz.5.4700': attribute type 2 has an invalid length. [ 782.242298][T17658] Bluetooth: hci1: command tx timeout [ 782.485124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 782.739453][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 782.817952][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 783.528197][T23238] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.566803][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.569096][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.586221][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.588480][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.621934][T23238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 783.658338][T23391] bridge0: port 3(syz_tun) entered blocking state [ 783.660566][T23391] bridge0: port 3(syz_tun) entered disabled state [ 783.663643][T23391] syz_tun: entered allmulticast mode [ 783.666262][T23391] syz_tun: entered promiscuous mode [ 783.668315][T23391] bridge0: port 3(syz_tun) entered blocking state [ 783.670617][T23391] bridge0: port 3(syz_tun) entered forwarding state [ 783.810235][T23238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.840739][T23238] veth0_vlan: entered promiscuous mode [ 783.847863][T23238] veth1_vlan: entered promiscuous mode [ 783.860798][T23238] veth0_macvtap: entered promiscuous mode [ 783.865531][T23238] veth1_macvtap: entered promiscuous mode [ 783.879844][T23238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.890704][T23238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.895410][T23238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.895525][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4721'. [ 783.898108][T23238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.904596][T23238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.907263][T23238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.983074][ T1283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.985471][ T1283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.998069][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.001269][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.108086][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.681396][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.921044][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 784.926658][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 784.930964][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 784.934853][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 784.937643][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 785.087589][T23417] chnl_net:caif_netlink_parms(): no params data found [ 785.176423][T23417] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.179049][T23417] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.181307][T23417] bridge_slave_0: entered allmulticast mode [ 785.184237][T23417] bridge_slave_0: entered promiscuous mode [ 785.187249][T23417] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.190055][T23417] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.193170][T23417] bridge_slave_1: entered allmulticast mode [ 785.196265][T23417] bridge_slave_1: entered promiscuous mode [ 785.245260][T23417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.256823][T23417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.307954][T23417] team0: Port device team_slave_0 added [ 785.314566][T23417] team0: Port device team_slave_1 added [ 785.357594][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.397970][T23417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.400883][T23417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.411487][T23417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.418582][T23417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.421387][T23417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.431471][T23417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.486035][T23417] hsr_slave_0: entered promiscuous mode [ 785.488191][T23417] hsr_slave_1: entered promiscuous mode [ 785.490216][T23417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.492664][T23417] Cannot create hsr debugfs directory [ 785.511203][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.702983][ T1140] bridge_slave_1: left allmulticast mode [ 785.704840][ T1140] bridge_slave_1: left promiscuous mode [ 785.706677][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.717885][ T1140] bridge_slave_0: left allmulticast mode [ 785.719733][ T1140] bridge_slave_0: left promiscuous mode [ 785.727324][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.780779][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 785.794535][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 785.801321][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 785.811389][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 785.814286][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 785.873617][T23440] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 786.066260][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.070277][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.073834][ T1140] bond0 (unregistering): Released all slaves [ 786.262636][T23436] chnl_net:caif_netlink_parms(): no params data found [ 786.417042][T23436] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.420187][T23436] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.424142][T23436] bridge_slave_0: entered allmulticast mode [ 786.428509][T23436] bridge_slave_0: entered promiscuous mode [ 786.443166][ T1140] hsr_slave_0: left promiscuous mode [ 786.445189][ T1140] hsr_slave_1: left promiscuous mode [ 786.447130][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.449401][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.452407][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.455451][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.494132][ T1140] veth1_macvtap: left promiscuous mode [ 786.496190][ T1140] veth0_macvtap: left promiscuous mode [ 786.498009][ T1140] veth1_vlan: left promiscuous mode [ 786.499631][ T1140] veth0_vlan: left promiscuous mode [ 786.602204][T22752] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 786.753792][T22752] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.758347][T22752] usb 11-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 786.762179][T22752] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.767254][T22752] usb 11-1: config 0 descriptor?? [ 786.777117][T22752] pwc: Askey VC010 type 2 USB webcam detected. [ 786.962621][T17658] Bluetooth: hci0: command tx timeout [ 787.174646][T22752] pwc: recv_control_msg error -32 req 02 val 2b00 [ 787.177246][T22752] pwc: recv_control_msg error -32 req 02 val 2700 [ 787.268352][T23477] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 787.319965][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 787.382343][T22752] pwc: recv_control_msg error -71 req 04 val 1000 [ 787.384641][T22752] pwc: recv_control_msg error -71 req 04 val 1300 [ 787.386821][T22752] pwc: recv_control_msg error -71 req 04 val 1400 [ 787.389117][T22752] pwc: recv_control_msg error -71 req 02 val 2000 [ 787.391410][T22752] pwc: recv_control_msg error -71 req 02 val 2100 [ 787.398295][T22752] pwc: recv_control_msg error -71 req 04 val 1500 [ 787.400599][T22752] pwc: recv_control_msg error -71 req 02 val 2500 [ 787.402962][T22752] pwc: recv_control_msg error -71 req 02 val 2400 [ 787.405310][T22752] pwc: recv_control_msg error -71 req 02 val 2600 [ 787.407645][T22752] pwc: recv_control_msg error -71 req 02 val 2900 [ 787.407738][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 787.409818][T22752] pwc: recv_control_msg error -71 req 02 val 2800 [ 787.414764][T22752] pwc: recv_control_msg error -71 req 04 val 1100 [ 787.416987][T22752] pwc: recv_control_msg error -71 req 04 val 1200 [ 787.424173][T22752] pwc: Registered as video103. [ 787.427518][T22752] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb11/11-1/input/input33 [ 787.440647][T22752] usb 11-1: USB disconnect, device number 19 [ 787.845484][T17658] Bluetooth: hci1: command tx timeout [ 787.978665][ T40] audit: type=1800 audit(1750221989.570:2226): pid=23485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4745" name="nullb0" dev="devtmpfs" ino=4018 res=0 errno=0 [ 788.063946][T23436] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.066524][T23436] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.069001][T23436] bridge_slave_1: entered allmulticast mode [ 788.072470][T23436] bridge_slave_1: entered promiscuous mode [ 788.122446][T23436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.133170][T23436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.187223][T23436] team0: Port device team_slave_0 added [ 788.206098][T23436] team0: Port device team_slave_1 added [ 788.267628][T23436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.269870][T23436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.278688][T23436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.283201][T23436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.285813][T23436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.294621][T23436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.311114][T23417] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 788.312177][ T29] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 788.319339][T23417] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 788.324444][T23417] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 788.342842][T23417] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 788.363313][T23436] hsr_slave_0: entered promiscuous mode [ 788.365489][T23436] hsr_slave_1: entered promiscuous mode [ 788.462151][ T29] usb 11-1: Using ep0 maxpacket: 32 [ 788.469606][ T29] usb 11-1: string descriptor 0 read error: -22 [ 788.471670][ T29] usb 11-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 788.474625][ T29] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.478618][ T29] usb 11-1: config 0 descriptor?? [ 788.493136][T23436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.523446][T23417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.544832][T23417] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.549745][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.552007][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.557719][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.559940][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.579220][T23436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.658947][T23436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.680645][T23417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.684082][ T29] usb 11-1: USB disconnect, device number 20 [ 788.704039][T23417] veth0_vlan: entered promiscuous mode [ 788.708598][T23417] veth1_vlan: entered promiscuous mode [ 788.729890][T23436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.743337][T23417] veth0_macvtap: entered promiscuous mode [ 788.746980][T23417] veth1_macvtap: entered promiscuous mode [ 788.755004][T23417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.760816][T23417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.765964][T23417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.768679][T23417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.771495][T23417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.774474][T23417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.810938][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.813628][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.820153][ T1140] bridge_slave_1: left allmulticast mode [ 788.821971][ T1140] bridge_slave_1: left promiscuous mode [ 788.826080][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.829469][ T1140] bridge_slave_0: left allmulticast mode [ 788.831224][ T1140] bridge_slave_0: left promiscuous mode [ 788.833845][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.042892][T17658] Bluetooth: hci0: command tx timeout [ 789.091556][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.095738][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.101043][ T1140] bond0 (unregistering): Released all slaves [ 789.135666][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.138162][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.183983][T23436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 789.191791][T23436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 789.246074][T23436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 789.270652][T23436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 789.289225][T23517] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 789.325567][T23436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.371052][T23527] can0: slcan on ptm0. [ 789.374076][T23436] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.380681][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.382964][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.390059][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.393023][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.435906][ T1140] hsr_slave_0: left promiscuous mode [ 789.438797][ T1140] hsr_slave_1: left promiscuous mode [ 789.441216][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.444454][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.447105][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.449423][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.480596][ T1140] veth1_macvtap: left promiscuous mode [ 789.484000][ T1140] veth0_macvtap: left promiscuous mode [ 789.486816][ T1140] veth1_vlan: left promiscuous mode [ 789.489211][ T1140] veth0_vlan: left promiscuous mode [ 789.512871][T23526] can0 (unregistered): slcan off ptm0. [ 789.567747][T23532] overlayfs: failed to get inode (-116) [ 789.922257][T17658] Bluetooth: hci1: command tx timeout [ 790.314255][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 790.415076][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 791.212803][T23436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.239887][T23436] veth0_vlan: entered promiscuous mode [ 791.247399][T23436] veth1_vlan: entered promiscuous mode [ 791.263120][T23436] veth0_macvtap: entered promiscuous mode [ 791.267564][T23436] veth1_macvtap: entered promiscuous mode [ 791.277345][T23436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.284510][T23436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.292931][T23436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.296464][T23436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.299273][T23436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.303654][T23436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.355329][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.359769][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.370487][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.374987][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.479693][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.828272][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.832501][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.836264][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.839270][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.841796][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.968051][T23567] chnl_net:caif_netlink_parms(): no params data found [ 792.022220][T22399] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 792.053187][T23567] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.056060][T23567] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.058925][T23567] bridge_slave_0: entered allmulticast mode [ 792.062174][T23567] bridge_slave_0: entered promiscuous mode [ 792.066245][T23567] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.069136][T23567] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.071967][T23567] bridge_slave_1: entered allmulticast mode [ 792.075274][T23567] bridge_slave_1: entered promiscuous mode [ 792.116854][T23567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.122082][T23567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.161973][T23567] team0: Port device team_slave_0 added [ 792.176914][T23567] team0: Port device team_slave_1 added [ 792.183768][T22399] usb 11-1: config 0 has an invalid interface number: 69 but max is 0 [ 792.187007][T22399] usb 11-1: config 0 has no interface number 0 [ 792.189590][T22399] usb 11-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 792.193640][T22399] usb 11-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.199592][T22399] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 792.202897][T22399] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.206061][T22399] usb 11-1: Product: syz [ 792.207818][T22399] usb 11-1: Manufacturer: syz [ 792.209369][T22399] usb 11-1: SerialNumber: syz [ 792.212212][T22399] usb 11-1: config 0 descriptor?? [ 792.214496][T23564] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 792.221031][T22399] cyberjack 11-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 792.228420][T23567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.231197][T22399] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 792.231271][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.231310][T23567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.233383][T23567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.257895][T23567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.268484][T23567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.330067][T23567] hsr_slave_0: entered promiscuous mode [ 792.333376][T23567] hsr_slave_1: entered promiscuous mode [ 792.336347][T23567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.339463][T23567] Cannot create hsr debugfs directory [ 792.597292][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.645073][ T6027] usb 11-1: USB disconnect, device number 21 [ 792.651538][ T6027] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 792.655531][ T6027] cyberjack 11-1:0.69: device disconnected [ 793.079233][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.183318][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.304018][T17658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 793.315205][T17658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 793.319951][T17658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 793.325886][T17658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 793.327317][T23598] Invalid ELF header type: 65535 != 1 [ 793.328420][T17658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 793.332380][ T1140] bridge_slave_1: left allmulticast mode [ 793.334583][ T1140] bridge_slave_1: left promiscuous mode [ 793.349127][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.359639][ T1140] bridge_slave_0: left allmulticast mode [ 793.361461][ T1140] bridge_slave_0: left promiscuous mode [ 793.363667][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.661662][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.669830][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.674394][ T1140] bond0 (unregistering): Released all slaves [ 793.792231][ T40] audit: type=1326 audit(1750221995.390:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.800938][ T40] audit: type=1326 audit(1750221995.390:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.812349][ T40] audit: type=1326 audit(1750221995.390:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.822903][ T40] audit: type=1326 audit(1750221995.390:2230): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.823926][T22399] IPVS: starting estimator thread 0... [ 793.830757][ T40] audit: type=1326 audit(1750221995.390:2231): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.843375][ T40] audit: type=1326 audit(1750221995.390:2232): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.850220][ T40] audit: type=1326 audit(1750221995.390:2233): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.859032][ T40] audit: type=1326 audit(1750221995.390:2234): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.867248][ T40] audit: type=1326 audit(1750221995.390:2235): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.874134][ T40] audit: type=1326 audit(1750221995.390:2236): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=23611 comm="syz.5.4788" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 793.922198][T23614] IPVS: using max 45 ests per chain, 108000 per kthread [ 793.932276][ T5947] Bluetooth: hci0: command tx timeout [ 793.941200][T23591] chnl_net:caif_netlink_parms(): no params data found [ 793.992301][ T1140] hsr_slave_0: left promiscuous mode [ 793.994646][ T1140] hsr_slave_1: left promiscuous mode [ 793.996996][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.999606][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.002938][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.005086][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.026917][ T1140] veth1_macvtap: left promiscuous mode [ 794.028633][ T1140] veth0_macvtap: left promiscuous mode [ 794.030299][ T1140] veth1_vlan: left promiscuous mode [ 794.031857][ T1140] veth0_vlan: left promiscuous mode [ 794.904128][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 794.980931][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 795.377197][ T5947] Bluetooth: hci1: command tx timeout [ 795.452248][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 795.452414][T17658] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 795.636825][T23629] tap0: tun_chr_ioctl cmd 1074025677 [ 795.638587][T23629] tap0: linktype set to 773 [ 795.661259][T23591] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.664776][T23591] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.667061][T23591] bridge_slave_0: entered allmulticast mode [ 795.669787][T23591] bridge_slave_0: entered promiscuous mode [ 795.672997][T23591] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.675337][T23591] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.677698][T23591] bridge_slave_1: entered allmulticast mode [ 795.680589][T23591] bridge_slave_1: entered promiscuous mode [ 795.722637][T23636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4794'. [ 795.741668][T23591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.746415][T23591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.779136][T23638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4795'. [ 795.813880][T23591] team0: Port device team_slave_0 added [ 795.818363][T23591] team0: Port device team_slave_1 added [ 795.890505][T23591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.892753][T23591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.900891][T23591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.907912][T23591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.910161][T23591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.920125][T23591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.924963][T23638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4795'. [ 796.002252][T17658] Bluetooth: hci0: command tx timeout [ 796.011833][T23591] hsr_slave_0: entered promiscuous mode [ 796.015137][T23591] hsr_slave_1: entered promiscuous mode [ 796.017226][T23591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.019572][T23591] Cannot create hsr debugfs directory [ 796.043568][T23567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 796.063309][T23567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 796.071400][T23567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 796.082132][T23567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 796.211810][T23591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.250707][T23567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.278721][T23567] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.284907][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.287952][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.296820][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.299844][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.355390][T23591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.484953][T23591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.506905][T23567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.536320][T23567] veth0_vlan: entered promiscuous mode [ 796.541100][T23567] veth1_vlan: entered promiscuous mode [ 796.555263][T23567] veth0_macvtap: entered promiscuous mode [ 796.578812][T23591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.589610][T23567] veth1_macvtap: entered promiscuous mode [ 796.607954][T23567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.615069][T23567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.619616][T23567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.622401][T23567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.625125][T23567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.627997][T23567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.679996][T20025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.684821][T20025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.696480][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.699150][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.711939][ T1140] bridge_slave_1: left allmulticast mode [ 796.716697][ T1140] bridge_slave_1: left promiscuous mode [ 796.718927][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.729334][ T1140] bridge_slave_0: left allmulticast mode [ 796.731141][ T1140] bridge_slave_0: left promiscuous mode [ 796.735445][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.930948][T23712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4824'. [ 796.952219][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4824'. [ 797.141445][T23718] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 797.143525][T23718] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 797.148687][T23718] vhci_hcd vhci_hcd.0: Device attached [ 797.290891][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.296946][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.300962][ T1140] bond0 (unregistering): Released all slaves [ 797.395117][T22399] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 797.442781][T17658] Bluetooth: hci1: command tx timeout [ 797.517738][T23591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 797.523924][T23591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 797.536445][T23591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 797.544225][T23591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 797.620069][T23591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.633929][T23591] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.639129][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.641399][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.655398][T20025] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.657635][T20025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.711935][ T1140] hsr_slave_0: left promiscuous mode [ 797.714549][ T1140] hsr_slave_1: left promiscuous mode [ 797.716526][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.718860][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.721696][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.727502][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.753758][ T1140] veth1_macvtap: left promiscuous mode [ 797.755560][ T1140] veth0_macvtap: left promiscuous mode [ 797.757379][ T1140] veth1_vlan: left promiscuous mode [ 797.759147][ T1140] veth0_vlan: left promiscuous mode [ 797.830210][T23719] vhci_hcd: connection reset by peer [ 797.835294][T20025] vhci_hcd: stop threads [ 797.837100][T20025] vhci_hcd: release socket [ 797.840870][T20025] vhci_hcd: disconnect device [ 798.173812][T14425] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 798.322886][T14425] usb 11-1: Using ep0 maxpacket: 32 [ 798.335797][T14425] usb 11-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 798.338740][T14425] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.343592][T14425] usb 11-1: config 0 descriptor?? [ 798.555845][T14425] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 798.585845][T14425] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 798.597780][T14425] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 798.603647][T14425] usb 11-1: media controller created [ 798.656448][T14425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.757771][T14425] az6027: usb out operation failed. (-71) [ 798.763309][T14425] az6027: usb out operation failed. (-71) [ 798.765236][T14425] stb0899_attach: Driver disabled by Kconfig [ 798.767118][T14425] az6027: no front-end attached [ 798.767118][T14425] [ 798.773015][T14425] az6027: usb out operation failed. (-71) [ 798.774830][T14425] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 798.782183][T14425] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb11/11-1/input/input34 [ 798.811280][T14425] dvb-usb: schedule remote query interval to 400 msecs. [ 798.814067][T14425] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 798.815639][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 798.823333][T14425] usb 11-1: USB disconnect, device number 22 [ 798.910470][T14425] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 798.967097][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 799.496062][T23735] support for cryptoloop has been removed. Use dm-crypt instead. [ 799.529416][T17658] Bluetooth: hci1: command tx timeout [ 799.601534][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 799.613021][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 799.617060][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 799.622382][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 799.625834][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.780436][T23591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.791129][T23740] chnl_net:caif_netlink_parms(): no params data found [ 799.862640][T23591] veth0_vlan: entered promiscuous mode [ 799.884124][T23740] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.887370][T23740] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.890543][T23740] bridge_slave_0: entered allmulticast mode [ 799.895700][T23740] bridge_slave_0: entered promiscuous mode [ 799.900640][T23591] veth1_vlan: entered promiscuous mode [ 799.904072][T23740] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.906795][T23740] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.909204][T23740] bridge_slave_1: entered allmulticast mode [ 799.911936][T23740] bridge_slave_1: entered promiscuous mode [ 799.946116][T23740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.951066][T23740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.994917][T23740] team0: Port device team_slave_0 added [ 799.999112][T23740] team0: Port device team_slave_1 added [ 800.035592][T23740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.037994][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.046756][T23740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.052264][T23740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.054605][T23740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.065021][T23740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.119688][T23740] hsr_slave_0: entered promiscuous mode [ 800.122589][T23740] hsr_slave_1: entered promiscuous mode [ 800.126417][T23591] veth0_macvtap: entered promiscuous mode [ 800.150660][T23591] veth1_macvtap: entered promiscuous mode [ 800.183476][T23757] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 800.193250][T23757] kvm: pic: non byte read [ 800.196690][T23757] kvm: pic: level sensitive irq not supported [ 800.197197][T23757] kvm: pic: non byte read [ 800.203225][T23757] kvm: pic: level sensitive irq not supported [ 800.203532][T23757] kvm: pic: non byte read [ 800.219036][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.236358][T23591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.273413][T23591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.286923][T23591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.289649][T23591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.293359][T23591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.296187][T23591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.325681][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.328725][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.341468][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.343941][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.493656][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4840'. [ 800.496491][T23773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4840'. [ 800.686351][T23788] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4846'. [ 801.335737][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.386503][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.444924][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.550021][ T1140] bridge_slave_1: left allmulticast mode [ 801.551799][ T1140] bridge_slave_1: left promiscuous mode [ 801.554935][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.562499][ T1140] bridge_slave_0: left allmulticast mode [ 801.564292][ T1140] bridge_slave_0: left promiscuous mode [ 801.566168][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.694120][T17658] Bluetooth: hci0: command tx timeout [ 801.883293][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.887230][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.890695][ T1140] bond0 (unregistering): Released all slaves [ 802.169402][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.174420][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.177395][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.181417][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.186056][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 802.242091][ T1140] hsr_slave_0: left promiscuous mode [ 802.244856][ T1140] hsr_slave_1: left promiscuous mode [ 802.246978][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.249353][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.252541][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.254886][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.277107][ T1140] veth1_macvtap: left promiscuous mode [ 802.278988][ T1140] veth0_macvtap: left promiscuous mode [ 802.280786][ T1140] veth1_vlan: left promiscuous mode [ 802.282590][ T1140] veth0_vlan: left promiscuous mode [ 802.483928][T22399] vhci_hcd: vhci_device speed not set [ 802.635247][T14548] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 802.796433][T14548] usb 10-1: unable to get BOS descriptor or descriptor too short [ 802.800749][T14548] usb 10-1: no configurations [ 802.802726][T14548] usb 10-1: can't read configurations, error -22 [ 802.997192][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 803.081081][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 803.342198][T23858] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 803.762254][T17658] Bluetooth: hci0: command tx timeout [ 803.804152][T23830] chnl_net:caif_netlink_parms(): no params data found [ 803.872941][T23830] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.875255][T23830] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.877511][T23830] bridge_slave_0: entered allmulticast mode [ 803.880106][T23830] bridge_slave_0: entered promiscuous mode [ 803.884448][T23830] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.886802][T23830] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.889036][T23830] bridge_slave_1: entered allmulticast mode [ 803.891604][T23830] bridge_slave_1: entered promiscuous mode [ 803.892482][T14548] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 803.926729][T23830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.942537][T23830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.006282][T23830] team0: Port device team_slave_0 added [ 804.015573][T23830] team0: Port device team_slave_1 added [ 804.060333][T23830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.063862][T23830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.072639][T14548] usb 10-1: Using ep0 maxpacket: 32 [ 804.074494][T23830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.078514][T23740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 804.079779][T14548] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 804.084665][T14548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 804.086505][T23740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 804.088260][T14548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 804.096903][T23830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.096955][T14548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 804.099114][T23830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.102600][T14548] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 804.104274][T14548] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 804.110805][T23830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.114389][T14548] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.121708][T23740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 804.123151][T14548] usb 10-1: Product: syz [ 804.123162][T14548] usb 10-1: Manufacturer: syz [ 804.123169][T14548] usb 10-1: SerialNumber: syz [ 804.124510][T14548] usb 10-1: config 0 descriptor?? [ 804.134427][T23740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 804.186625][T23830] hsr_slave_0: entered promiscuous mode [ 804.188865][T23830] hsr_slave_1: entered promiscuous mode [ 804.191024][T23830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.193541][T23830] Cannot create hsr debugfs directory [ 804.242491][T17658] Bluetooth: hci1: command tx timeout [ 804.323582][T23830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.335900][T14548] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 804.340404][T23740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.342614][T14548] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 804.384414][T23740] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.389116][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.391385][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.398575][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.400853][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.425157][T23830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.515432][T23830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.540073][T23740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.545814][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.547982][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.550129][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.552294][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.554619][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.558562][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.559624][T23740] veth0_vlan: entered promiscuous mode [ 804.560743][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.567561][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.570013][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.572322][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.575448][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.578552][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.586502][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.589466][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.591675][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.593977][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.595528][T23830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.596239][T14548] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 804.601096][T14548] input input35: Timeout waiting for response from device. [ 804.605493][T14548] usb 10-1: USB disconnect, device number 15 [ 804.612199][T23740] veth1_vlan: entered promiscuous mode [ 804.625680][T23740] veth0_macvtap: entered promiscuous mode [ 804.632284][T23740] veth1_macvtap: entered promiscuous mode [ 804.634941][T23901] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4888'. [ 804.640600][T23740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.648762][T23740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.653055][T23740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.656204][T23740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.658914][T23740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.661577][T23740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.696546][ T1140] bridge_slave_1: left allmulticast mode [ 804.703225][ T1140] bridge_slave_1: left promiscuous mode [ 804.705098][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.708528][ T1140] bridge_slave_0: left allmulticast mode [ 804.710332][ T1140] bridge_slave_0: left promiscuous mode [ 804.712441][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.993819][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.997993][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.001578][ T1140] bond0 (unregistering): Released all slaves [ 805.040102][T20025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.042814][T20025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.055657][T23830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 805.059950][T23830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 805.066374][T23830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 805.066442][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.070917][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.072405][T23830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 805.161895][T23830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.171078][T23830] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.175961][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.178254][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.185033][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.187284][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.307886][T23830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.327585][T23830] veth0_vlan: entered promiscuous mode [ 805.332350][T23830] veth1_vlan: entered promiscuous mode [ 805.345913][T23830] veth0_macvtap: entered promiscuous mode [ 805.349551][T23830] veth1_macvtap: entered promiscuous mode [ 805.361033][T23830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.368376][T23830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.374792][T23830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.377279][T23830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.379834][T23830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.382465][T23830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.390328][ T1140] hsr_slave_0: left promiscuous mode [ 805.392900][ T1140] hsr_slave_1: left promiscuous mode [ 805.394891][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.397260][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.399966][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.402390][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.426114][ T1140] veth1_macvtap: left promiscuous mode [ 805.427939][ T1140] veth0_macvtap: left promiscuous mode [ 805.429740][ T1140] veth1_vlan: left promiscuous mode [ 805.431425][ T1140] veth0_vlan: left promiscuous mode [ 805.512194][ T5807] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 805.672274][ T5807] usb 10-1: Using ep0 maxpacket: 8 [ 805.678922][ T5807] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 805.683430][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.686560][ T5807] usb 10-1: Product: syz [ 805.688308][ T5807] usb 10-1: Manufacturer: syz [ 805.690212][ T5807] usb 10-1: SerialNumber: syz [ 805.696696][ T5807] usb 10-1: config 0 descriptor?? [ 805.906548][ T5807] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 806.167532][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 806.255081][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 806.325729][T17658] Bluetooth: hci1: command tx timeout [ 806.878153][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.883691][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.895940][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.898423][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.313695][ T5807] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 807.318626][ T5807] usb 10-1: USB disconnect, device number 16 [ 807.398040][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.579837][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 807.583035][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 807.586414][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 807.589680][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 807.593094][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 807.684932][T23940] chnl_net:caif_netlink_parms(): no params data found [ 807.749144][T23940] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.751443][T23940] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.754496][T23940] bridge_slave_0: entered allmulticast mode [ 807.757161][T23940] bridge_slave_0: entered promiscuous mode [ 807.760184][T23940] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.762621][T23940] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.764961][T23940] bridge_slave_1: entered allmulticast mode [ 807.767576][T23940] bridge_slave_1: entered promiscuous mode [ 807.798529][T23940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.803165][T23940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.837150][T23940] team0: Port device team_slave_0 added [ 807.840460][T23940] team0: Port device team_slave_1 added [ 807.871220][T23940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.873950][T23940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.881880][T23940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.886303][T23940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.888461][T23940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.896367][T23940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.941682][T23940] hsr_slave_0: entered promiscuous mode [ 807.945910][T23940] hsr_slave_1: entered promiscuous mode [ 807.947951][T23940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 807.950329][T23940] Cannot create hsr debugfs directory [ 808.485903][T17658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.490370][T17658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.493628][T17658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.497424][T17658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.500105][T17658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.594179][T23962] chnl_net:caif_netlink_parms(): no params data found [ 808.658921][T23962] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.661908][T23962] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.665114][T23962] bridge_slave_0: entered allmulticast mode [ 808.667881][T23962] bridge_slave_0: entered promiscuous mode [ 808.672720][T23962] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.675076][T23962] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.677410][T23962] bridge_slave_1: entered allmulticast mode [ 808.680095][T23962] bridge_slave_1: entered promiscuous mode [ 808.725923][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.735597][T23962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.740476][T23962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.773402][T23962] team0: Port device team_slave_0 added [ 808.777676][T23962] team0: Port device team_slave_1 added [ 808.816475][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.822011][T23962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.824268][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.832202][T23962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.836490][T23962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.838676][T23962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.847258][T23962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.887121][T23962] hsr_slave_0: entered promiscuous mode [ 808.889379][T23962] hsr_slave_1: entered promiscuous mode [ 808.891446][T23962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.894968][T23962] Cannot create hsr debugfs directory [ 808.905774][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.046900][ T1140] bridge_slave_1: left allmulticast mode [ 809.048740][ T1140] bridge_slave_1: left promiscuous mode [ 809.050629][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.054673][ T1140] bridge_slave_0: left allmulticast mode [ 809.056546][ T1140] bridge_slave_0: left promiscuous mode [ 809.058447][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.353902][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.358349][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.361930][ T1140] bond0 (unregistering): Released all slaves [ 809.372695][T23975] program syz.5.4908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 809.512283][ T5807] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 809.602285][ T5947] Bluetooth: hci0: command tx timeout [ 809.662326][ T5807] usb 11-1: Using ep0 maxpacket: 8 [ 809.673226][ T5807] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 809.676841][ T5807] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.680138][ T5807] usb 11-1: Product: syz [ 809.680242][ T1140] hsr_slave_0: left promiscuous mode [ 809.681506][ T5807] usb 11-1: Manufacturer: syz [ 809.684837][ T5807] usb 11-1: SerialNumber: syz [ 809.684948][ T1140] hsr_slave_1: left promiscuous mode [ 809.688432][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.688614][ T5807] usb 11-1: config 0 descriptor?? [ 809.690766][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.695203][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.697522][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.720715][ T1140] veth1_macvtap: left promiscuous mode [ 809.722789][ T1140] veth0_macvtap: left promiscuous mode [ 809.724629][ T1140] veth1_vlan: left promiscuous mode [ 809.726242][ T1140] veth0_vlan: left promiscuous mode [ 809.752511][ T6027] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 809.896627][ T5807] usb 11-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 809.902522][ T6027] usb 10-1: Using ep0 maxpacket: 16 [ 809.905487][ T6027] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 809.910270][ T6027] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 809.913307][ T6027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.915795][ T6027] usb 10-1: Product: syz [ 809.917142][ T6027] usb 10-1: Manufacturer: syz [ 809.918645][ T6027] usb 10-1: SerialNumber: syz [ 809.921417][ T6027] usb 10-1: config 0 descriptor?? [ 809.924956][ T6027] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 809.927846][ T6027] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 810.447952][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 810.531895][ T6027] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 810.536784][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 810.574007][ T5947] Bluetooth: hci1: command tx timeout [ 810.710821][ T5807] dvb_usb_rtl28xxu 11-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 810.714648][ T5807] usb 11-1: USB disconnect, device number 23 [ 811.151091][ T6027] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 811.153974][ T6027] em28xx 10-1:0.0: board has no eeprom [ 811.185256][T23962] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.212450][ T6027] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 811.214932][ T6027] em28xx 10-1:0.0: dvb set to bulk mode. [ 811.220734][T14537] em28xx 10-1:0.0: Binding DVB extension [ 811.228587][ T6027] usb 10-1: USB disconnect, device number 17 [ 811.231024][ T6027] em28xx 10-1:0.0: Disconnecting em28xx [ 811.247874][T14537] em28xx 10-1:0.0: Registering input extension [ 811.250010][ T6027] em28xx 10-1:0.0: Closing input extension [ 811.264419][ T6027] em28xx 10-1:0.0: Freeing device [ 811.286348][T23962] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.386773][T23962] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.468587][T23962] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.502184][ T6031] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 811.590878][T23940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.596733][T23940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 811.600832][T23940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 811.611883][T23940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 811.645552][ T1140] bridge_slave_1: left allmulticast mode [ 811.647433][ T1140] bridge_slave_1: left promiscuous mode [ 811.649282][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.653525][ T6031] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.660485][ T6031] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.664321][ T6031] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 811.667850][ T1140] bridge_slave_0: left allmulticast mode [ 811.668494][ T6031] usb 11-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 811.670643][ T1140] bridge_slave_0: left promiscuous mode [ 811.673695][ T6031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.675538][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.679868][ T6031] usb 11-1: config 0 descriptor?? [ 811.682907][ T5947] Bluetooth: hci0: command tx timeout [ 811.921684][T24004] 9pnet: Could not find request transport: f [ 811.983738][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.989683][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.994647][ T1140] bond0 (unregistering): Released all slaves [ 812.008722][T23962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 812.016743][T23962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 812.030998][T23962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 812.043637][T23962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 812.094563][T23940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.121734][T23940] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.130239][T20025] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.132667][T20025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.139286][T20025] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.141518][T20025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.171382][T23962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.207998][T23962] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.213868][T20025] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.216098][T20025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.221940][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.225120][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.253434][ T1140] hsr_slave_0: left promiscuous mode [ 812.255495][ T1140] hsr_slave_1: left promiscuous mode [ 812.257484][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.259803][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.263597][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.265936][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.287579][ T6031] usb 11-1: USB disconnect, device number 24 [ 812.288873][ T1140] veth1_macvtap: left promiscuous mode [ 812.291285][ T1140] veth0_macvtap: left promiscuous mode [ 812.296416][ T1140] veth1_vlan: left promiscuous mode [ 812.298154][ T1140] veth0_vlan: left promiscuous mode [ 812.302267][ T53] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 812.472156][ T53] usb 10-1: Using ep0 maxpacket: 32 [ 812.475818][ T53] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 812.479374][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 812.482920][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 812.486595][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 812.490235][ T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 812.495289][ T53] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 812.498139][ T53] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.500699][ T53] usb 10-1: Product: syz [ 812.502088][ T53] usb 10-1: Manufacturer: syz [ 812.503562][ T53] usb 10-1: SerialNumber: syz [ 812.506397][ T53] usb 10-1: config 0 descriptor?? [ 812.642268][ T5947] Bluetooth: hci1: command tx timeout [ 812.913197][ T53] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 812.915150][ T53] input input37: Device does not respond to id packet M [ 812.917951][ T53] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 812.919865][ T53] input input37: Device does not respond to id packet P [ 812.922651][ T53] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 812.924574][ T53] input input37: Device does not respond to id packet B [ 812.927247][ T53] input input37: Device does not respond to id packet N [ 813.028302][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 813.113250][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 813.128388][ T53] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 813.130637][ T53] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 813.132901][ T53] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 813.135082][ T53] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 813.144800][ T53] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input37 [ 813.156809][ T53] usb 10-1: USB disconnect, device number 18 [ 813.763028][ T5947] Bluetooth: hci0: command tx timeout [ 813.765964][T23940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.807036][T23940] veth0_vlan: entered promiscuous mode [ 813.818744][T23962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.849016][T23940] veth1_vlan: entered promiscuous mode [ 813.866505][T23962] veth0_vlan: entered promiscuous mode [ 813.875317][T23962] veth1_vlan: entered promiscuous mode [ 813.885800][T23940] veth0_macvtap: entered promiscuous mode [ 813.890148][T23940] veth1_macvtap: entered promiscuous mode [ 813.897943][T23962] veth0_macvtap: entered promiscuous mode [ 813.907083][T23962] veth1_macvtap: entered promiscuous mode [ 813.914732][T23940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.918599][ T60] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 813.921949][T23940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.935287][T23940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.938021][T23940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.940722][T23940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.944269][T23940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.954430][T23962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.964066][T23962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.982783][T23962] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.985550][T23962] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.994152][T23962] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.996888][T23962] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.011368][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.016758][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.046325][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.052191][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.062376][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 814.065691][ T60] usb 10-1: config 0 has an invalid interface number: 63 but max is 0 [ 814.068334][ T60] usb 10-1: config 0 has no interface number 0 [ 814.070293][ T60] usb 10-1: config 0 interface 63 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 814.074382][ T60] usb 10-1: config 0 interface 63 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 814.077760][ T60] usb 10-1: config 0 interface 63 has no altsetting 0 [ 814.078531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.081606][ T60] usb 10-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=d7.7b [ 814.082522][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.085405][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.090383][ T60] usb 10-1: Product: syz [ 814.091729][ T60] usb 10-1: Manufacturer: syz [ 814.093329][ T60] usb 10-1: SerialNumber: syz [ 814.095891][ T60] usb 10-1: config 0 descriptor?? [ 814.099993][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.103198][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.313126][ T60] belkin_sa 10-1:0.63: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 814.316497][ T60] usb 10-1: bcdDevice: d77b, bfc: 0 [ 814.318829][ T60] usb 10-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 814.325285][ T60] usb 10-1: USB disconnect, device number 19 [ 814.328832][ T60] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 814.332297][ T60] belkin_sa 10-1:0.63: device disconnected [ 814.400975][T24054] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 814.850576][ T60] kernel write not supported for file /822/attr/prev (pid: 60 comm: kworker/3:1) [ 814.956125][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.961465][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.963794][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.965954][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.968072][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.970192][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.972331][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.974457][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.976643][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 814.978775][T24062] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 815.211200][T17658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 815.215743][T17658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 815.220186][T17658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 815.232295][T17658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 815.238100][T17658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 815.345313][T24064] chnl_net:caif_netlink_parms(): no params data found [ 815.407037][T24064] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.409226][T24064] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.411372][T24064] bridge_slave_0: entered allmulticast mode [ 815.415097][T24064] bridge_slave_0: entered promiscuous mode [ 815.418062][T24064] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.420551][T24064] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.423012][T24064] bridge_slave_1: entered allmulticast mode [ 815.425576][T24064] bridge_slave_1: entered promiscuous mode [ 815.454852][T24064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.460507][T24064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.495991][T24064] team0: Port device team_slave_0 added [ 815.500944][T24064] team0: Port device team_slave_1 added [ 815.532973][T24064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.535097][T24064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.543336][T24064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.547781][T24064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.549829][T24064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.557898][T24064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.595612][T24064] hsr_slave_0: entered promiscuous mode [ 815.597821][T24064] hsr_slave_1: entered promiscuous mode [ 815.657533][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.168590][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.232397][T17658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 816.237085][T17658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 816.240605][T17658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 816.248032][T17658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 816.249644][T24091] binder: 24090:24091 ioctl 40046205 0 returned -22 [ 816.250795][T17658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 816.293520][T24095] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input38 [ 816.349307][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.358603][T24087] chnl_net:caif_netlink_parms(): no params data found [ 816.428841][T24087] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.431137][T24087] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.433606][T24087] bridge_slave_0: entered allmulticast mode [ 816.436337][T24087] bridge_slave_0: entered promiscuous mode [ 816.442674][T24087] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.445106][T24087] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.447348][T24087] bridge_slave_1: entered allmulticast mode [ 816.449972][T24087] bridge_slave_1: entered promiscuous mode [ 816.499465][T24087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.506435][T24087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.509747][ T13] bridge_slave_1: left allmulticast mode [ 816.511581][ T13] bridge_slave_1: left promiscuous mode [ 816.513629][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.517281][ T13] bridge_slave_0: left allmulticast mode [ 816.519051][ T13] bridge_slave_0: left promiscuous mode [ 816.520878][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.816354][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.822089][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.826641][ T13] bond0 (unregistering): Released all slaves [ 816.897179][T24087] team0: Port device team_slave_0 added [ 816.901238][T24087] team0: Port device team_slave_1 added [ 816.938656][T24087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.940753][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.948990][T24087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.953325][T24087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.955619][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 816.964368][T24087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.025001][T24087] hsr_slave_0: entered promiscuous mode [ 817.027146][T24087] hsr_slave_1: entered promiscuous mode [ 817.029106][T24087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.031331][T24087] Cannot create hsr debugfs directory [ 817.130205][ T13] hsr_slave_0: left promiscuous mode [ 817.135248][ T13] hsr_slave_1: left promiscuous mode [ 817.137905][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.140473][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.148114][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.150548][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.177770][ T13] veth1_macvtap: left promiscuous mode [ 817.179668][ T13] veth0_macvtap: left promiscuous mode [ 817.181534][ T13] veth1_vlan: left promiscuous mode [ 817.183723][ T13] veth0_vlan: left promiscuous mode [ 817.276826][T24118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4954'. [ 817.285875][T17658] Bluetooth: hci0: command tx timeout [ 817.452129][ T5807] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 817.623630][ T5807] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 817.627625][ T5807] usb 11-1: config 0 interface 0 has no altsetting 0 [ 817.633428][ T5807] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 817.636386][ T5807] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 817.639064][ T5807] usb 11-1: Product: syz [ 817.640489][ T5807] usb 11-1: Manufacturer: syz [ 817.642122][ T5807] usb 11-1: SerialNumber: syz [ 817.652873][ T5807] usb 11-1: config 0 descriptor?? [ 817.656749][ T5807] usb 11-1: selecting invalid altsetting 0 [ 817.860820][ T60] usb 11-1: USB disconnect, device number 25 [ 817.954401][ T13] team0 (unregistering): Port device team_slave_1 removed [ 818.035249][ T13] team0 (unregistering): Port device team_slave_0 removed [ 818.327053][T17658] Bluetooth: hci1: command tx timeout [ 818.771117][T17658] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 818.777105][T24064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 818.813649][T24087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.822837][T24064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 818.826978][T24064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.831234][T24064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.867537][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4965'. [ 818.870392][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4965'. [ 818.893440][T24064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.904322][T24064] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.914155][T20025] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.916403][T20025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.919526][T20025] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.921774][T20025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.957452][T24087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.027956][T24161] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 819.097916][T24087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.114260][T24064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.164523][T24087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.191272][T24064] veth0_vlan: entered promiscuous mode [ 819.241841][T24157] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4968'. [ 819.254234][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4977'. [ 819.257027][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4977'. [ 819.280526][T24064] veth1_vlan: entered promiscuous mode [ 819.285507][ T13] bridge_slave_1: left allmulticast mode [ 819.285801][T17658] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 819.287291][ T13] bridge_slave_1: left promiscuous mode [ 819.287400][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.297602][ T13] bridge_slave_0: left allmulticast mode [ 819.299322][ T13] bridge_slave_0: left promiscuous mode [ 819.301157][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.372574][T17658] Bluetooth: hci0: command tx timeout [ 819.656666][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.660831][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.664947][ T13] bond0 (unregistering): Released all slaves [ 819.741407][T24064] veth0_macvtap: entered promiscuous mode [ 819.755492][T24064] veth1_macvtap: entered promiscuous mode [ 819.791377][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 819.794872][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 819.808011][T24064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 819.810981][T24087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 819.831837][T24087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 819.878674][T24087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 819.895263][T24087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 820.087768][T24064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.107709][T24064] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.110667][T24064] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.115896][T24064] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.118676][T24064] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.220895][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.225665][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.251240][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.254770][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.276758][T24087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.281123][T24154] net_ratelimit: 3321 callbacks suppressed [ 820.281134][T24154] Set syz1 is full, maxelem 65536 reached [ 820.315334][ T13] hsr_slave_0: left promiscuous mode [ 820.322112][ T13] hsr_slave_1: left promiscuous mode [ 820.324284][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.326734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.329432][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.331808][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.358627][ T13] veth1_macvtap: left promiscuous mode [ 820.360643][ T13] veth0_macvtap: left promiscuous mode [ 820.362758][ T13] veth1_vlan: left promiscuous mode [ 820.364773][ T13] veth0_vlan: left promiscuous mode [ 820.407663][T17658] Bluetooth: hci1: command tx timeout [ 821.113380][T17658] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 821.253681][ T13] team0 (unregistering): Port device team_slave_1 removed [ 821.343079][ T13] team0 (unregistering): Port device team_slave_0 removed [ 821.981726][T24087] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.989415][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.992503][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.010763][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.012958][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.170494][T24087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.197879][T24087] veth0_vlan: entered promiscuous mode [ 822.211088][T24087] veth1_vlan: entered promiscuous mode [ 822.232697][T24087] veth0_macvtap: entered promiscuous mode [ 822.236480][T24087] veth1_macvtap: entered promiscuous mode [ 822.247333][T24087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.253224][T24087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.257607][T24087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.260289][T24087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.263300][T24087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.265999][T24087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.298521][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.301800][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.312686][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.315125][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.515078][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.541777][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.655271][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.658693][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.663789][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.675170][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.679797][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.788590][T24251] chnl_net:caif_netlink_parms(): no params data found [ 823.853384][T24251] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.856282][T24251] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.858818][T24251] bridge_slave_0: entered allmulticast mode [ 823.861439][T24251] bridge_slave_0: entered promiscuous mode [ 823.866564][T24251] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.868723][T24251] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.870895][T24251] bridge_slave_1: entered allmulticast mode [ 823.874953][T24251] bridge_slave_1: entered promiscuous mode [ 823.891235][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.929122][T24251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.934117][T24251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.973858][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.983940][T24251] team0: Port device team_slave_0 added [ 823.988131][T24251] team0: Port device team_slave_1 added [ 824.018788][T24251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.020878][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.029280][T24251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.034754][T24251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.037579][T24251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.048079][T24251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.099591][T24251] hsr_slave_0: entered promiscuous mode [ 824.102715][T24251] hsr_slave_1: entered promiscuous mode [ 824.105605][T24251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.107993][T24251] Cannot create hsr debugfs directory [ 824.167267][ T13] bridge_slave_1: left allmulticast mode [ 824.169185][ T13] bridge_slave_1: left promiscuous mode [ 824.171114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.174995][ T13] bridge_slave_0: left allmulticast mode [ 824.176859][ T13] bridge_slave_0: left promiscuous mode [ 824.178766][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.449634][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.453938][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.458460][ T13] bond0 (unregistering): Released all slaves [ 824.757023][ T13] hsr_slave_0: left promiscuous mode [ 824.759092][ T13] hsr_slave_1: left promiscuous mode [ 824.761152][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.763564][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.766212][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.768550][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.791500][ T13] veth1_macvtap: left promiscuous mode [ 824.794601][ T13] veth0_macvtap: left promiscuous mode [ 824.796563][ T13] veth1_vlan: left promiscuous mode [ 824.798447][ T13] veth0_vlan: left promiscuous mode [ 824.935890][T24263] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 825.037283][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 825.047708][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 825.053458][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 825.063555][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 825.070954][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 825.621828][ T13] team0 (unregistering): Port device team_slave_1 removed [ 825.728148][ T13] team0 (unregistering): Port device team_slave_0 removed [ 825.775768][ T5947] Bluetooth: hci0: command tx timeout [ 826.436092][T24284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5016'. [ 826.498363][T24267] chnl_net:caif_netlink_parms(): no params data found [ 826.618302][T24267] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.621357][T24267] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.624564][T24267] bridge_slave_0: entered allmulticast mode [ 826.628452][T24267] bridge_slave_0: entered promiscuous mode [ 826.654080][T24267] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.657221][T24267] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.660399][T24267] bridge_slave_1: entered allmulticast mode [ 826.665732][T24267] bridge_slave_1: entered promiscuous mode [ 826.669308][T24251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 826.673481][T24251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 826.707578][T24251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 826.711984][T24251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 826.717274][T24267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.721564][T24267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.763917][T24267] team0: Port device team_slave_0 added [ 826.769634][T24267] team0: Port device team_slave_1 added [ 826.803715][T24267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.805881][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.813751][T24267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.818482][T24267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.820669][T24267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.829904][T24267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.872438][T24267] hsr_slave_0: entered promiscuous mode [ 826.874684][T24267] hsr_slave_1: entered promiscuous mode [ 826.977766][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.010722][T24251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.032125][T24251] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.037927][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.040844][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.057056][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.071559][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.074569][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.122292][ T5947] Bluetooth: hci1: command tx timeout [ 827.149759][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.221612][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.231698][T24251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.254232][T24251] veth0_vlan: entered promiscuous mode [ 827.259199][T24251] veth1_vlan: entered promiscuous mode [ 827.272563][T24251] veth0_macvtap: entered promiscuous mode [ 827.276241][T24251] veth1_macvtap: entered promiscuous mode [ 827.284676][T24251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.288881][T24251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.296647][T24251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.299441][T24251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.304129][T24251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.306894][T24251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.347463][T24307] netlink: 392 bytes leftover after parsing attributes in process `syz.6.5020'. [ 827.362232][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.364987][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.378732][ T13] bridge_slave_1: left allmulticast mode [ 827.381680][ T13] bridge_slave_1: left promiscuous mode [ 827.384253][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.388848][ T13] bridge_slave_0: left allmulticast mode [ 827.390623][ T13] bridge_slave_0: left promiscuous mode [ 827.392671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.682864][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.687005][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.690534][ T13] bond0 (unregistering): Released all slaves [ 827.697850][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.703051][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.836981][T24324] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5028'. [ 828.080846][ T13] hsr_slave_0: left promiscuous mode [ 828.084525][ T13] hsr_slave_1: left promiscuous mode [ 828.087071][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.089961][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.093867][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.096765][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.129398][ T13] veth1_macvtap: left promiscuous mode [ 828.131256][ T13] veth0_macvtap: left promiscuous mode [ 828.136618][ T13] veth1_vlan: left promiscuous mode [ 828.138336][ T13] veth0_vlan: left promiscuous mode [ 828.152255][ T6010] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 828.323464][ T6010] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 828.326542][ T6010] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 828.331533][ T6010] usb 11-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 828.334475][ T6010] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.337006][ T6010] usb 11-1: Product: syz [ 828.338373][ T6010] usb 11-1: Manufacturer: syz [ 828.339853][ T6010] usb 11-1: SerialNumber: syz [ 828.342694][ T6010] usb 11-1: config 0 descriptor?? [ 828.344792][T24330] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.347098][T24330] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.551854][T24330] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.554242][T24330] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 828.848898][ T13] team0 (unregistering): Port device team_slave_1 removed [ 828.943159][ T13] team0 (unregistering): Port device team_slave_0 removed [ 828.965096][ T6010] Error reading MAC address [ 828.969974][ T6010] usb 11-1: USB disconnect, device number 26 [ 829.203997][ T5947] Bluetooth: hci1: command tx timeout [ 829.697680][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5034'. [ 829.701107][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5034'. [ 829.708477][T24267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.712551][T24267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 829.716906][T24267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 829.722637][T24267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 829.775496][T24267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.785399][T24267] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.790654][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.793537][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.806406][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.808687][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.835088][ T5947] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 829.977293][T24267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.001105][T24267] veth0_vlan: entered promiscuous mode [ 830.005926][T24267] veth1_vlan: entered promiscuous mode [ 830.020679][T24267] veth0_macvtap: entered promiscuous mode [ 830.024378][T24267] veth1_macvtap: entered promiscuous mode [ 830.032617][T24267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.038123][T24267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.046645][T24267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.049230][T24267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.051784][T24267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.055695][T24267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.156138][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.180410][T20025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.184287][T20025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.201631][T20025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.204273][T20025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.401493][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.516876][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.621199][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.661163][T24377] 9pnet_fd: Insufficient options for proto=fd [ 831.713759][T17658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 831.719612][T17658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 831.732563][ T13] bridge_slave_1: left allmulticast mode [ 831.733931][T17658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 831.734424][ T13] bridge_slave_1: left promiscuous mode [ 831.737773][T17658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 831.738322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.741073][T17658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 831.747616][ T13] bridge_slave_0: left allmulticast mode [ 831.749396][ T13] bridge_slave_0: left promiscuous mode [ 831.751190][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.952284][T14548] usb 11-1: new full-speed USB device number 27 using dummy_hcd [ 832.090059][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.094340][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.097956][ T13] bond0 (unregistering): Released all slaves [ 832.116131][T14548] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 832.120042][T14548] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.123714][T14548] usb 11-1: Product: syz [ 832.125636][T14548] usb 11-1: Manufacturer: syz [ 832.127670][T14548] usb 11-1: SerialNumber: syz [ 832.132950][T14548] usb 11-1: config 0 descriptor?? [ 832.234082][T24382] chnl_net:caif_netlink_parms(): no params data found [ 832.339184][T14548] usb 11-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 832.353984][T24382] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.356971][T24382] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.360030][T24382] bridge_slave_0: entered allmulticast mode [ 832.365631][T24382] bridge_slave_0: entered promiscuous mode [ 832.370150][T24382] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.374596][T24382] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.377442][T24382] bridge_slave_1: entered allmulticast mode [ 832.380689][T24382] bridge_slave_1: entered promiscuous mode [ 832.429361][T24382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.434087][T24382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.478877][T24382] team0: Port device team_slave_0 added [ 832.485389][ T13] hsr_slave_0: left promiscuous mode [ 832.487436][ T13] hsr_slave_1: left promiscuous mode [ 832.489345][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.492437][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.495097][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.497273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.524425][ T13] veth1_macvtap: left promiscuous mode [ 832.526155][ T13] veth0_macvtap: left promiscuous mode [ 832.527875][ T13] veth1_vlan: left promiscuous mode [ 832.529529][ T13] veth0_vlan: left promiscuous mode [ 833.350927][ T13] team0 (unregistering): Port device team_slave_1 removed [ 833.436561][ T13] team0 (unregistering): Port device team_slave_0 removed [ 833.772210][ T5947] Bluetooth: hci0: command tx timeout [ 833.846397][ T5947] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 833.851255][ T5947] Bluetooth: hci3: Injecting HCI hardware error event [ 833.864628][T17658] Bluetooth: hci3: hardware error 0x00 [ 833.951484][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.963998][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.975570][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.979104][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.984893][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.184688][T24382] team0: Port device team_slave_1 added [ 834.249443][T24382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.251527][T24382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.259093][T24382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.265529][T24382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.267596][T24382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.276478][T24382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.296521][T24410] [ 834.297311][T24410] ====================================================== [ 834.299389][T24410] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc [ 834.301438][T24410] 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 Not tainted [ 834.304518][T24410] ------------------------------------------------------ [ 834.307251][T24410] syz.5.5059/24410 is trying to acquire lock: [ 834.309101][T24410] ffffffff8e72eaa8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 834.311937][T24410] [ 834.311937][T24410] but task is already holding lock: [ 834.314317][T24410] ffff888042303190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 834.317713][T24410] [ 834.317713][T24410] which lock already depends on the new lock. [ 834.317713][T24410] [ 834.320797][T24410] [ 834.320797][T24410] the existing dependency chain (in reverse order) is: [ 834.323516][T24410] [ 834.323516][T24410] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 834.326057][T24410] blk_alloc_queue+0x619/0x760 [ 834.327636][T24410] blk_mq_alloc_queue+0x175/0x290 [ 834.329315][T24410] __blk_mq_alloc_disk+0x29/0x120 [ 834.330955][T24410] nbd_dev_add+0x4a0/0xbc0 [ 834.332430][T24410] nbd_init+0x181/0x320 [ 834.333856][T24410] do_one_initcall+0x120/0x6e0 [ 834.335408][T24410] kernel_init_freeable+0x5c2/0x900 [ 834.337117][T24410] kernel_init+0x1c/0x2b0 [ 834.338581][T24410] ret_from_fork+0x5d7/0x6f0 [ 834.340099][T24410] ret_from_fork_asm+0x1a/0x30 [ 834.341663][T24410] [ 834.341663][T24410] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 834.343752][T24410] fs_reclaim_acquire+0x102/0x150 [ 834.345359][T24410] prepare_alloc_pages+0x162/0x610 [ 834.347046][T24410] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 834.349004][T24410] __alloc_pages_noprof+0xb/0x1b0 [ 834.350686][T24410] pcpu_populate_chunk+0x110/0xb00 [ 834.352384][T24410] pcpu_alloc_noprof+0x86a/0x1470 [ 834.354027][T24410] iommu_dma_init_fq+0x202/0x8a0 [ 834.355632][T24410] iommu_setup_dma_ops+0x1336/0x1700 [ 834.357531][T24410] bus_iommu_probe+0x23e/0x530 [ 834.359151][T24410] iommu_device_register+0x1af/0x280 [ 834.360894][T24410] intel_iommu_init+0x25e7/0x3780 [ 834.362618][T24410] pci_iommu_init+0x2e/0x90 [ 834.364126][T24410] do_one_initcall+0x120/0x6e0 [ 834.365779][T24410] kernel_init_freeable+0x5c2/0x900 [ 834.367464][T24410] kernel_init+0x1c/0x2b0 [ 834.368938][T24410] ret_from_fork+0x5d7/0x6f0 [ 834.370478][T24410] ret_from_fork_asm+0x1a/0x30 [ 834.372089][T24410] [ 834.372089][T24410] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 834.374439][T24410] __lock_acquire+0x126f/0x1c90 [ 834.376033][T24410] lock_acquire+0x179/0x350 [ 834.377582][T24410] __mutex_lock+0x199/0xb90 [ 834.379109][T24410] pcpu_alloc_noprof+0xb4c/0x1470 [ 834.380795][T24410] sbitmap_init_node+0x2fd/0x770 [ 834.382424][T24410] sbitmap_queue_init_node+0x41/0x560 [ 834.384214][T24410] blk_mq_init_tags+0x12d/0x2b0 [ 834.385862][T24410] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 834.387682][T24410] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 834.389565][T24410] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 834.391417][T24410] nbd_start_device+0x172/0xcd0 [ 834.393045][T24410] nbd_genl_connect+0x120e/0x1c20 [ 834.394872][T24410] genl_family_rcv_msg_doit+0x206/0x2f0 [ 834.396846][T24410] genl_rcv_msg+0x55c/0x800 [ 834.398350][T24410] netlink_rcv_skb+0x155/0x420 [ 834.399962][T24410] genl_rcv+0x28/0x40 [ 834.401381][T24410] netlink_unicast+0x53d/0x7f0 [ 834.402975][T24410] netlink_sendmsg+0x8d1/0xdd0 [ 834.404658][T24410] ____sys_sendmsg+0xa98/0xc70 [ 834.406217][T24410] ___sys_sendmsg+0x134/0x1d0 [ 834.407798][T24410] __sys_sendmsg+0x16d/0x220 [ 834.409372][T24410] __do_fast_syscall_32+0x7c/0x3a0 [ 834.411055][T24410] do_fast_syscall_32+0x32/0x80 [ 834.412698][T24410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.414713][T24410] [ 834.414713][T24410] other info that might help us debug this: [ 834.414713][T24410] [ 834.417766][T24410] Chain exists of: [ 834.417766][T24410] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 834.417766][T24410] [ 834.421736][T24410] Possible unsafe locking scenario: [ 834.421736][T24410] [ 834.423947][T24410] CPU0 CPU1 [ 834.425558][T24410] ---- ---- [ 834.427161][T24410] lock(&q->q_usage_counter(io)#49); [ 834.428805][T24410] lock(fs_reclaim); [ 834.430725][T24410] lock(&q->q_usage_counter(io)#49); [ 834.433031][T24410] lock(pcpu_alloc_mutex); [ 834.434360][T24410] [ 834.434360][T24410] *** DEADLOCK *** [ 834.434360][T24410] [ 834.436993][T24410] 7 locks held by syz.5.5059/24410: [ 834.438539][T24410] #0: ffffffff903f30f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 834.440955][T24410] #1: ffffffff903f31a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 834.443707][T24410] #2: ffff888020672230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xa1a/0x1c20 [ 834.446740][T24410] #3: ffff888020672188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x32/0xcb0 [ 834.450176][T24410] #4: ffff8880206720d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x45/0xcb0 [ 834.453475][T24410] #5: ffff888042303190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 834.456887][T24410] #6: ffff8880423031c8 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_mq_update_nr_hw_queues+0x275/0xcb0 [ 834.460363][T24410] [ 834.460363][T24410] stack backtrace: [ 834.462149][T24410] CPU: 0 UID: 0 PID: 24410 Comm: syz.5.5059 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(full) [ 834.462164][T24410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 834.462171][T24410] Call Trace: [ 834.462176][T24410] [ 834.462182][T24410] dump_stack_lvl+0x116/0x1f0 [ 834.462200][T24410] print_circular_bug+0x275/0x350 [ 834.462215][T24410] check_noncircular+0x14c/0x170 [ 834.462231][T24410] __lock_acquire+0x126f/0x1c90 [ 834.462248][T24410] lock_acquire+0x179/0x350 [ 834.462262][T24410] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 834.462276][T24410] ? __pfx___might_resched+0x10/0x10 [ 834.462287][T24410] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 834.462303][T24410] __mutex_lock+0x199/0xb90 [ 834.462313][T24410] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 834.462326][T24410] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 834.462339][T24410] ? __pfx___mutex_lock+0x10/0x10 [ 834.462348][T24410] ? kasan_save_track+0x14/0x30 [ 834.462362][T24410] ? __kasan_kmalloc+0xaa/0xb0 [ 834.462375][T24410] ? blk_mq_init_tags+0x87/0x2b0 [ 834.462389][T24410] ? blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 834.462402][T24410] ? nbd_start_device+0x172/0xcd0 [ 834.462417][T24410] ? netlink_unicast+0x53d/0x7f0 [ 834.462428][T24410] ? netlink_sendmsg+0x8d1/0xdd0 [ 834.462438][T24410] ? ____sys_sendmsg+0xa98/0xc70 [ 834.462449][T24410] ? ___sys_sendmsg+0x134/0x1d0 [ 834.462462][T24410] ? __sys_sendmsg+0x16d/0x220 [ 834.462476][T24410] ? __do_fast_syscall_32+0x7c/0x3a0 [ 834.462485][T24410] ? do_fast_syscall_32+0x32/0x80 [ 834.462493][T24410] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.462507][T24410] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 834.462519][T24410] pcpu_alloc_noprof+0xb4c/0x1470 [ 834.462540][T24410] sbitmap_init_node+0x2fd/0x770 [ 834.462552][T24410] sbitmap_queue_init_node+0x41/0x560 [ 834.462564][T24410] blk_mq_init_tags+0x12d/0x2b0 [ 834.462580][T24410] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 834.462595][T24410] ? lockdep_hardirqs_on+0x7c/0x110 [ 834.462613][T24410] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 834.462628][T24410] blk_mq_update_nr_hw_queues+0x4ab/0xcb0 [ 834.462644][T24410] ? nbd_add_socket+0x6d0/0xbe0 [ 834.462659][T24410] nbd_start_device+0x172/0xcd0 [ 834.462675][T24410] ? __nla_parse+0x40/0x60 [ 834.462686][T24410] nbd_genl_connect+0x120e/0x1c20 [ 834.462703][T24410] ? __pfx_nbd_genl_connect+0x10/0x10 [ 834.462719][T24410] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 834.462732][T24410] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 834.462747][T24410] genl_family_rcv_msg_doit+0x206/0x2f0 [ 834.462760][T24410] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 834.462772][T24410] ? genl_get_cmd+0x194/0x580 [ 834.462785][T24410] ? __do_fast_syscall_32+0x7c/0x3a0 [ 834.462794][T24410] ? do_fast_syscall_32+0x32/0x80 [ 834.462802][T24410] ? __radix_tree_lookup+0x21f/0x2c0 [ 834.462818][T24410] genl_rcv_msg+0x55c/0x800 [ 834.462831][T24410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.462844][T24410] ? __pfx_nbd_genl_connect+0x10/0x10 [ 834.462859][T24410] ? __lock_acquire+0x622/0x1c90 [ 834.462872][T24410] netlink_rcv_skb+0x155/0x420 [ 834.462883][T24410] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.462895][T24410] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 834.462908][T24410] ? netlink_deliver_tap+0x1ae/0xd30 [ 834.462918][T24410] ? is_vmalloc_addr+0x86/0xa0 [ 834.462933][T24410] genl_rcv+0x28/0x40 [ 834.462944][T24410] netlink_unicast+0x53d/0x7f0 [ 834.462955][T24410] ? __pfx_netlink_unicast+0x10/0x10 [ 834.462968][T24410] netlink_sendmsg+0x8d1/0xdd0 [ 834.462980][T24410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.462991][T24410] ? __import_iovec+0x1dd/0x650 [ 834.463002][T24410] ____sys_sendmsg+0xa98/0xc70 [ 834.463013][T24410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.463025][T24410] ? get_compat_msghdr+0x11a/0x170 [ 834.463036][T24410] ? __pfx_futex_wake_mark+0x10/0x10 [ 834.463052][T24410] ___sys_sendmsg+0x134/0x1d0 [ 834.463069][T24410] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.463087][T24410] ? find_held_lock+0x2b/0x80 [ 834.463101][T24410] __sys_sendmsg+0x16d/0x220 [ 834.463116][T24410] ? __pfx___sys_sendmsg+0x10/0x10 [ 834.463131][T24410] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 834.463146][T24410] ? rcu_is_watching+0x12/0xc0 [ 834.463157][T24410] __do_fast_syscall_32+0x7c/0x3a0 [ 834.463167][T24410] do_fast_syscall_32+0x32/0x80 [ 834.463176][T24410] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.463188][T24410] RIP: 0023:0xf703e579 [ 834.463197][T24410] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 834.463207][T24410] RSP: 002b:00000000f502e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 834.463217][T24410] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001ac0 [ 834.463224][T24410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 834.463230][T24410] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.463236][T24410] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 834.463242][T24410] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.463251][T24410] [ 834.614741][T14548] dvb_usb_rtl28xxu 11-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 834.618821][T14548] usb 11-1: USB disconnect, device number 27 [ 834.808564][ T5305] block nbd0: Receive control failed (result -32) [ 834.812143][ T5947] block nbd0: Receive control failed (result -32) [ 835.015916][ T1144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.095184][ T1144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.184975][ T1144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.247774][ T1144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.301847][ T1144] bridge_slave_1: left allmulticast mode [ 835.303721][ T1144] bridge_slave_1: left promiscuous mode [ 835.305573][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.308066][ T1144] bridge_slave_0: left allmulticast mode [ 835.309641][ T1144] bridge_slave_0: left promiscuous mode [ 835.311203][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.314947][ T1144] bridge_slave_1: left allmulticast mode [ 835.316691][ T1144] bridge_slave_1: left promiscuous mode [ 835.318488][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.321256][ T1144] bridge_slave_0: left allmulticast mode [ 835.323233][ T1144] bridge_slave_0: left promiscuous mode [ 835.325015][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.409497][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.413848][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.417394][ T1144] bond0 (unregistering): Released all slaves [ 835.483388][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.487412][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.490881][ T1144] bond0 (unregistering): Released all slaves [ 835.746909][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.749982][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.755233][ T1144] hsr_slave_0: left promiscuous mode [ 835.757651][ T1144] hsr_slave_1: left promiscuous mode [ 835.759996][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.762258][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.764608][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.766632][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.770502][ T1144] veth1_macvtap: left promiscuous mode [ 835.772137][ T1144] veth0_macvtap: left promiscuous mode [ 835.773897][ T1144] veth1_vlan: left promiscuous mode [ 835.775430][ T1144] veth0_vlan: left promiscuous mode [ 835.849674][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 835.889777][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 835.932251][T17658] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 836.207306][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 836.251612][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 836.466804][T24381] bridge0: port 3(syz_tun) entered disabled state [ 836.469764][T24381] syz_tun (unregistering): left allmulticast mode [ 836.471703][T24381] syz_tun (unregistering): left promiscuous mode [ 836.473685][T24381] bridge0: port 3(syz_tun) entered disabled state [ 837.118894][ T1144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.123183][ T1144] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 837.237069][ T1144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.241134][ T1144] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 837.345989][ T1144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.350134][ T1144] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 837.428069][ T1144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.431210][ T1144] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 837.503110][ T1144] bridge_slave_1: left allmulticast mode [ 837.505137][ T1144] bridge_slave_1: left promiscuous mode [ 837.507778][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.510919][ T1144] bridge_slave_0: left allmulticast mode [ 837.513173][ T1144] bridge_slave_0: left promiscuous mode [ 837.515098][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.648219][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.651760][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.655329][ T1144] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 837.659743][ T1144] bond0 (unregistering): Released all slaves [ 838.047117][ T1144] hsr_slave_0: left promiscuous mode [ 838.050248][ T1144] hsr_slave_1: left promiscuous mode [ 838.052932][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.055871][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.059232][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.062333][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.067918][ T1144] veth1_macvtap: left promiscuous mode [ 838.070184][ T1144] veth0_macvtap: left promiscuous mode [ 838.072516][ T1144] veth1_vlan: left promiscuous mode [ 838.074636][ T1144] veth0_vlan: left promiscuous mode [ 838.109176][ T1144] pim6reg (unregistering): left allmulticast mode VM DIAGNOSIS: 04:43:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582055 RDI=ffffffff9b06da40 RBP=ffffffff9b06da00 RSP=ffffc900030fe8d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b06da00 R15=ffffffff85581ff0 RIP=ffffffff8558207f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f55c9435 CR3=00000000702a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b33d000 RCX=ffffffff81af8c73 RDX=ffff88801dea4880 RSI=ffffffff81af8c4d RDI=0000000000000005 RBP=ffffc9000044fd08 RSP=ffffc9000044fbc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9ebe R12=1ffff92000089f80 R13=0000000000000002 R14=0000000000000001 R15=ffffed1005667a01 RIP=ffffffff81af8c4f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097661000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033f02ff8 CR3=000000004d272000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000af9e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90007260000 RBX=ffff888043bb8000 RCX=ffffffff819c24b7 RDX=1ffff1100877725a RSI=ffffffff86a4b94f RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc90000538eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000538ff8 R12=ffffffff90a82d60 R13=dffffc0000000000 R14=ffff888043bb92d0 R15=0000000000000000 RIP=ffffffff86a4b977 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097761000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f56e40 CR3=000000004b3cd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000af9e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73f2ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000078e28c RBX=0000000000000003 RCX=ffffffff8b7c4be9 RDX=ffffed10056a6646 RSI=ffffffff8c156360 RDI=ffffffff81918571 RBP=ffffed1003860000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=0000000000000000 R12=0000000000000003 R13=ffff88801c300000 R14=ffffffff90a83050 R15=0000000000000000 RIP=ffffffff8b7c374f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097861000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f502cc40 CR3=00000000632b9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000af9e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 00315f6576616c73 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000