last executing test programs: 15m51.525749249s ago: executing program 3 (id=22): syz_kvm_add_vcpu$x86(0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x141401, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000400)) 15m48.489089979s ago: executing program 32 (id=12): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @empty}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8d, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='veth1_to_bond\x00', 0x7, 0xd5, 0x3}) syz_emit_ethernet(0x3e, &(0x7f00000019c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000002", 0x8, 0x11, 0x1, @private1, @empty, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000280), &(0x7f0000000300), 0x2, 0x1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2, 0x2449, 0xfffffffffffffffd}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$peek(0x1, r4, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) ioctl$FIBMAP(r5, 0x1, &(0x7f00000003c0)=0x2) 15m45.582198033s ago: executing program 3 (id=30): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x83, 0x2}, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x31, 0xbd, {0xbd, 0xe, "2ecbda175303f055122d83b77974dfbd12a83d6bb5fc30e1bca5f991f343c2a45eb456eaffbaa8e27a71bb19763cd7f7ef56469b4d6e64fb1cdda362e421edfff2dd1b8bc4bf813fead9f31d0c3221a17ac80a31d5e72ca7d82a9bec486ad75f8e33b446c5967989a9a62ff93cc36a7f6ef00b5fc6508eb572bfaef22f976943edfd464379029dc359f0ecb9f93db93251e069aad224e366dc0b379355b99f29e4a5fb2293b1879c50c46283f3a0ca65496caca681ee5e3780e594"}}, 0x0, &(0x7f0000000280)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@generic={0xc, 0x10, 0x4, "1e25410bb8acbe0cb1"}]}}, 0x0, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x1, 0x2, 0x2, 0xa, 0xffff, 0x6}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 15m45.09950077s ago: executing program 2 (id=31): socket$nl_generic(0x10, 0x3, 0x10) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) landlock_restrict_self(r0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 15m44.458828902s ago: executing program 2 (id=32): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 15m43.879509153s ago: executing program 2 (id=33): fsopen(0x0, 0x0) r0 = getpgrp(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r7, 0x852ac000) 15m39.55084359s ago: executing program 2 (id=35): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe95b1d5b4e22a06662895c4d17a476b57a481d5cf05900646a29378be685539c12c562299679a0b283bb57257a03de500c90b4f9c738ba49abcf815137ce1b502040ec2b298001c1061f5d63c5d718cd995f360a06e04cbe59a440ef73f356ba", @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r0]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x7732561d5b88ce84}) r1 = socket$alg(0x26, 0x5, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c697479000000000000000000000000000000000000000000000000040000000d"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000203010100000001000000000400004a080001000100002a4ad0ddcd010cd9544f4cf7062a1bcbca33"], 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 15m34.729561594s ago: executing program 3 (id=37): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0xfffffffe, 0x14, 0x2000124, &(0x7f0000000580)}) 15m33.937562592s ago: executing program 3 (id=39): openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f00000016c0)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 15m27.965814951s ago: executing program 3 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15m27.547504322s ago: executing program 2 (id=44): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x200000, 0x8000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002840)='./file0\x00', 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)) 15m26.338798109s ago: executing program 2 (id=47): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 15m19.510875604s ago: executing program 3 (id=55): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m10.92242013s ago: executing program 33 (id=47): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 15m1.711472258s ago: executing program 34 (id=55): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 13m12.824836401s ago: executing program 0 (id=154): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000ec7da3d1fa70e9223955bbf631a52b12f775b69698d8d6d70f87a7677e0c99"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 13m11.580443721s ago: executing program 0 (id=156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000540)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000003c0)={r6, 0x40000000, 0x800, 0x200, 0x0, [], [0xffff, 0xd372, 0x3ff, 0x2], [0x3, 0x0, 0x5, 0x2], [0x0, 0x8, 0x6, 0x479]}) 13m8.894567537s ago: executing program 0 (id=158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000150a01010000000000000000000000200800034000000007"], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24044808) 13m8.288318506s ago: executing program 0 (id=159): syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000013880)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f000000d980)=[{&(0x7f000000b6c0)="a3a3d650a6c3b666f8035bc515c8f4f189df81771fdde4cf2026a8bd418b88c6075a97444030f037c7bbfb0cdc920ba9584d1cd2deab74b93fceda74a35eadcf9ff92aec1234e8ec6125eda396b5a4ef3f9b5bb54c5d2e71adf184ded1ca2d726554a6cd1f6bccca98db1f4e2d1dd2f55d89d0e20d4a6bd837be85ad612db87a2665cc8bd99dba5618e1d8f549ccf91ceaa96077695ef90a67f96b3bb8abbe2bef45eb479d6a284283732f4792935385b78feefc0887789204b2534f30fc99128b4d158f9c4d981e16d08451414d7c9a36cb5e85ea42bf9f972473293718b188efa122f8b43b979c", 0xe8}, {&(0x7f0000000380)="8483a4214d35a9d6799157dd35675fbc8d68d21e49d05a7adc19e7e900f3ad8e160ff5f58a8e53c29ab0bc4ef86adf6bbd1de53043c39e97f7c942e6f20c665b0566dc6a9ead555de3148845a18af1d3ece94674eccf2b0cd8cbf716333e523a4a8160ee670144568a6bd116aee999fe52c96df5a1a8f34f88ed27135f82e30656812b62d23c82358a17a7becfc9753a370e275c52dfb00a617410962a73ce69a2b01d0cad58f2db", 0xa8}, {&(0x7f000000b900)}], 0x3, &(0x7f000000da00)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr={{0x88, 0x29, 0x39, {0x6, 0xe, 0x0, 0x99, 0x0, [@local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f000000ef80)=[{&(0x7f000000db00)="86da027811644cb1328b879b5330ecc1a49829c4b13018e36bafbb5e0b76fb8cd0c22db76f34738e11ced46fa609f0226d0a6cdbe74e193b0cebf3dd6b56576d5e217bf81a0763347e55f9590a511f32a971f1b530a3d237b30419382537aa520a19fd1d4bcb5e9a199c70191f8c14094464b37cef7d051786c0b86f082ef31e48501b3f2e2af043f58da1bcc66f3aa730227a7c918efbddcdca7d6a766e73a832756faf1135329650b52f6349f07a22e11546ffa67d6c2af5ab3d2ddd6aca0511d324c7aa43172a5cdfe51fd5941cdc0c03e6a630d6d51285d003c4f3", 0xdd}, {0x0}, {&(0x7f000000dc40)="eb06350a0f86081f019444038c381bcdce4fb7a44178bebb2531ca16811700ad318627c75d9fec8047a656f3f99d541d779678a8aea41c4d71d8c807a6685bbdf2aec40d474222fd29ea54d3d262e16d04cab563aeb8d59064f826cd27b3ff5d3d4d72ee0cae062d5b7fd4613b3520ade854694e5506226feae93f7e8e51639185fbaaafa8f774f5cd7058f93ada34938bab41034ca8c9e6566f79e1da1c5b83312140e41361415002d1e2ab5847812c94331733e4d98f7d099557000e74e3a82fff89dd71", 0xc5}, {&(0x7f000000dd40)="657a678be0192db3452e8f5dd527b157acc0421274e294e0ed15679a063dfb4cb47dbba9b6a3c3961750f74fe61d776ada83adb7fe0dfc4ff1035465546a2b9f32793d8c34085a9739f0e6ff14a5407280f12bea416efc259c461de532b39110fa15b95af84fd563c5d4ef746e7c1e17e943c9892edfd1a6f6fd007c397cccff7e3b653f513cef635f8b27651bc1428d467273a5f313e779215dfb8e8d085ef8e5c688e6523870f0", 0xa8}, {&(0x7f000000de40)="7c00828e8c2184030c39eefa4b87a3e1ab97ac4838af141bd7c4e22a0d788e653d923131e4cbd0dda520ac2525cfe37f7f12a0d19dbb7422aea52542f185d6b08607018451a65c4f0fca29b778de4278997781212e0d86c4a0815c8c267c0fb64308b43d6099e27e764669b02b45afe66882e0468775a3baec10e8ca071dc409554720541cfb3062faf136993740d0ebccdfc8539a57bda773ab0a7ecc1724c0a1743415dcb57d06207dcec1cf8cb757330ea1f394a4d84ae28a4c", 0xbb}, {&(0x7f000000df40)="a55ee9b0199e629a8f38a0d01c54590b63277d054ea0f748a0", 0x19}, {&(0x7f000000df80)="fa2a0f1b6d1117c3c9a0e1cd2f2f179072142e5094b5e1130c5941992a2046df0533d2686554ecdce127a773f7222e79dad80772319257f8e0a68911a5343b234852c2f8c93d733431749ac4fc8f260600eb3e02b034e1b5b01cb672b07608ee49cd58dd1a3a19b73580eccd186081b787522621c9770bfe9f933f8ccd72884f2e1e884c04d25f812935bdc6e9ef4916a5ac3bc681af938cb604018f13c23f76c75fd67d38db01413163cb6937ed824db4fc7aa270a35f6aeb4e0c8e9122755850c4dbbfaf718406e009e35b8aa96df349ca438c3b68382d858bd85e88", 0xdd}], 0x7, &(0x7f000000f000)}}], 0x3, 0x8008) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 13m6.299579318s ago: executing program 0 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20071026}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m0.5916969s ago: executing program 0 (id=163): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000ec7da3d1fa70e9223955bbf631a52b12f775b69698d8d6d70f87a7677e0c99"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 12m44.033228584s ago: executing program 35 (id=163): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000ec7da3d1fa70e9223955bbf631a52b12f775b69698d8d6d70f87a7677e0c99"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 11m29.10604046s ago: executing program 4 (id=205): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0a40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 11m27.911332033s ago: executing program 4 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x100) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x8, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0xf]}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000003c0)={r5, 0x40000000, 0x800, 0x200, 0x0, [], [0xffff, 0xd372, 0x3ff, 0x2], [0x3, 0x0, 0x5, 0x2], [0x0, 0x8, 0x6, 0x479]}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, 0x0) 11m23.443408593s ago: executing program 4 (id=207): r0 = inotify_init() ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x2}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m22.560535379s ago: executing program 4 (id=208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x3, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 11m20.905416783s ago: executing program 4 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m19.029568167s ago: executing program 4 (id=210): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xe8e80) fsopen(&(0x7f0000000100)='proc\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) mincore(&(0x7f00001b5000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) 11m3.668656315s ago: executing program 36 (id=210): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0xe8e80) fsopen(&(0x7f0000000100)='proc\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) connect$inet6(r4, 0x0, 0x0) syz_open_dev$vivid(0x0, 0x0, 0x2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) mincore(&(0x7f00001b5000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) 8m19.130523851s ago: executing program 8 (id=360): syz_emit_ethernet(0x15, &(0x7f0000000240)={@empty, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x50, 0xf6}}}}, 0x0) r0 = socket$inet(0x2, 0x5, 0x1) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x6df26000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, 0x0) 8m17.887637359s ago: executing program 8 (id=362): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029", @ANYRES16=r0], 0x18}, 0x40c0) 8m17.442119611s ago: executing program 8 (id=363): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4db75f67208c7ddc, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x102, 0x0) r0 = socket$inet(0x2, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = gettid() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r4, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) write$rfkill(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000100)='\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 8m11.930157572s ago: executing program 8 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x841) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f00000001c0)}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) write$ppp(r6, &(0x7f0000000300)="5af9", 0x2) 8m7.40226073s ago: executing program 8 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) shutdown(r4, 0x0) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000000c0)='E', 0x1}], 0x1}}], 0x1, 0x4000081) fchdir(0xffffffffffffffff) 8m0.587480818s ago: executing program 8 (id=369): syz_emit_ethernet(0x15, &(0x7f0000000240)={@empty, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x50, 0xf6}}}}, 0x0) r0 = socket$inet(0x2, 0x5, 0x1) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x6df26000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, 0x0) 7m41.545359387s ago: executing program 37 (id=369): syz_emit_ethernet(0x15, &(0x7f0000000240)={@empty, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x50, 0xf6}}}}, 0x0) r0 = socket$inet(0x2, 0x5, 0x1) mmap(&(0x7f0000013000/0x4000)=nil, 0x4000, 0x4, 0x100010, r0, 0x6df26000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) dup(0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, 0x0) 2m32.678729983s ago: executing program 7 (id=685): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r4, 0x0, 0x0) epoll_create1(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001140)={0x24, &(0x7f0000000f80)={0x40, 0xd, 0x2, {0x2, 0x7}}, &(0x7f0000001080)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f00000010c0)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0x9, "3c241da5"}, @main=@item_012={0x0, 0x0, 0xa}]}}, 0x0}, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x40, 0x21, 0xdf, "a49cbc2f11a08a6938b431a2a242f513f22125ee9cc4ed7dbeab33b3b835ed40e8cd0ee32135de93ad747619dae13ceed7edfba1d578a33d3bb9fb3ccca323086e0066fd162a2b9bad8bd2b574e73c1648b797d7e786030d4cfb071d6ab87896ad888fe041aa1102b36f6851a99ffa7efbd2cd96a52478021fa4e58e73113ce71f972a6038bd30a0258b8fd9cdd8497b02d57cae866d783f4cdce2abbe8742c0025587792977ef715f6f3e3d9641b44a24633b37d6436cd11f1b60ab0e394593359b47f5dc6e78e60db597aa64962a740eb4a3a732ba13b07c1a8260fb31ef"}, 0x0, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x61}, &(0x7f0000001300), &(0x7f0000001340)={0x20, 0x3, 0x1, 0x40}}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x0, 0xd, 0x77, {0x77, 0xb, "610ccb9546a0e0b944cd6283c197da88ef4c79436483be1f77004f028e4d0ea5c5ddfe2e3c5da36fda7c83546d085e4266bd0d027f72b3b58def01afe1afa108f4cdf08747814d597618902fb1876ea94f5c9de347deb5b1d68de4f4aaebf0b6d17fcc39e322cab7961982c2d41e1449aca30f2018"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, 0x0, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0xe0, 0x8, 0x6, "4f9cca39", "136e37d7"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x8, 0x3, 0x8, 0x2, 0xfe00, 0x7}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a00)={0x20, 0x31, 0xca, "a0bf42c41de310e222378311ee9bb05cfbbe10bbd4958c1b5820322d0e55c715448478b56c0a8cb434bb25d18ad2c384146a8cae52f5b90566dd1a19f70b4a24029b5151f294e4a9380009eaf118b5bd968cafe4b54b61863cb25e257806b3fdc76eb1b03336be9711563ef403407dc2eb75a8c00729f3dc5aaf7b33de087f1bc6a2b6b3581a1a31c85b638ccc75abeb0b3fdf2156b6f02bc40876dd93d7eb81e960f94b66c4270f26130b53f8570a927b9f1544257d3b04bda34088c4db14c5b5ed2f421d8a03e7be2a"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xf1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x2, 0x4}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x20, 0x80, [0xf0]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0xf1}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "e13a"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x8426}, 0x0, &(0x7f0000000d00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "76c6"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0xfff}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0xe}}) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x62) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)='GPL\x00', 0xd7c, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x4, 0x10, 0x8}, {0x5, 0x2, 0xc, 0x1}, {0x4, 0x5, 0x10, 0x3}, {0x3, 0x1, 0xf, 0x3}, {0x5, 0x5, 0x9, 0x6}, {0x0, 0x5, 0x3}], 0x10, 0x9}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m30.051379362s ago: executing program 7 (id=689): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) unshare(0x22020600) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0}) 2m29.657242286s ago: executing program 7 (id=690): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x10, 0x32, 0x0, "dbad4ede", "26b13047"}}, 0x0}, 0x0) 2m26.105456096s ago: executing program 7 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r2 = fcntl$getown(r1, 0x9) prlimit64(r2, 0xe, &(0x7f0000000040)={0x8, 0xfe}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x53, 0xffff, 0x0, {0x7, 0x1}, {0x52, 0x2}, @period={0x59, 0x7, 0xc1f, 0x8000, 0x5, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000300000000000018001280090001006970697000000000080002800400130008000a00", @ANYRES32=r5, @ANYBLOB="4bb39bde4d27c024053693627ff25aaf9500748cbf625c50ecafa2eb185b8b61fb2a145ec606ec9d5105a8dfb73efc0c4b6e095b6a804b9d9af9e4d6124d2d2f92d7915603225e"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 2m25.410615017s ago: executing program 7 (id=698): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) unshare(0x22020600) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, 0x0) 2m24.979803494s ago: executing program 7 (id=700): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x40c6, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000280), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003096ad00000000010000003000000002000000000000000000000d00000000c5116b3f53fd8a125bcaf461abdbc4000000000000000300000000030000000f1ccbbfd3eca4ae5b80850306428a9f467c58d05c92e37bad6b220114baeb5aef18fc0f7e7b57468313b36e74d70b62558fd77c7bae38f3e9b3f7bdd2001296c0b15a962a2251e6be67fa854e363f162d3495bbd160ddf52869670d36b5"], 0x0, 0x4a, 0x0, 0x1, 0xde9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x1) utimes(&(0x7f0000000240)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 2m6.416548814s ago: executing program 38 (id=700): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000640), 0x0, 0x40c6, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000280), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003096ad00000000010000003000000002000000000000000000000d00000000c5116b3f53fd8a125bcaf461abdbc4000000000000000300000000030000000f1ccbbfd3eca4ae5b80850306428a9f467c58d05c92e37bad6b220114baeb5aef18fc0f7e7b57468313b36e74d70b62558fd77c7bae38f3e9b3f7bdd2001296c0b15a962a2251e6be67fa854e363f162d3495bbd160ddf52869670d36b5"], 0x0, 0x4a, 0x0, 0x1, 0xde9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') umount2(&(0x7f0000000280)='./file0\x00', 0x1) utimes(&(0x7f0000000240)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 13.061876443s ago: executing program 1 (id=833): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 12.74005375s ago: executing program 1 (id=835): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x82) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) 8.803132052s ago: executing program 5 (id=840): socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff94"], 0x78) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) inotify_add_watch(0xffffffffffffffff, 0x0, 0x610003d5) close(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@local, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1}, @call={0x85, 0x0, 0x0, 0xcb}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 8.051596135s ago: executing program 5 (id=841): syz_socket_connect_nvme_tcp() symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 5.545596821s ago: executing program 5 (id=842): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 5.040292485s ago: executing program 5 (id=843): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000680)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x101, 0x4, 0x8, 0x5, {0x84, 0x7, 0x8, 0x8, 0x3, 0x3, 0x8000, 0x7, 0x9, 0xe154, 0x1000, 0x7f, 0x66, 0x7, "fe1d00003413000000000020b42717e47f00000794c0e800"}}) 4.408671091s ago: executing program 5 (id=844): pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) fgetxattr(r2, &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0xfffffe29) 2.876900946s ago: executing program 1 (id=845): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4004003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x280000a, 0x11, r5, 0x0) 1.590808044s ago: executing program 1 (id=846): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 988.14435ms ago: executing program 1 (id=847): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000fddbdf271700000008000300", @ANYRES32, @ANYBLOB="4c00308014000400403a050c5baee2004ef2b6d713459a7a2c00018008000100000000002000038006000100010000000c0004000202aaaaaaaaaaaa0877d80003000000050002"], 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x200440c4) 217.582902ms ago: executing program 1 (id=848): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x400, 0x0, 0x6, 0x0, 0x8e3], 0xffff1001, 0x43100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x8000000000000001, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x7, 0x8000000009, 0x803, 0x0, 0x978b], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=849): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000540)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7e", 0x7f, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) kernel console output (not intermixed with test programs): device number 15 using dummy_hcd [ 762.838197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.854231][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.030004][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 763.060046][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 763.090018][ T10] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.098599][ T12] team0 (unregistering): Port device team_slave_1 removed [ 763.110917][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 763.148975][ T12] team0 (unregistering): Port device team_slave_0 removed [ 763.156757][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 763.166409][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.186111][ T10] usb 6-1: Product: syz [ 763.195360][ T10] usb 6-1: Manufacturer: syz [ 763.201237][ T10] usb 6-1: SerialNumber: syz [ 764.293721][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.303629][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.074818][ T7543] Bluetooth: hci4: command tx timeout [ 765.075295][ T5785] Bluetooth: hci6: command tx timeout [ 767.283266][ T5785] Bluetooth: hci4: command tx timeout [ 767.283284][ T5789] Bluetooth: hci6: command tx timeout [ 771.565896][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input11 [ 772.195963][ T5115] bcm5974 6-1:1.0: could not read from device [ 772.215868][ T8281] team0: Port device team_slave_0 added [ 772.223512][ T10] usb 6-1: USB disconnect, device number 15 [ 772.392743][ T8286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.448982][ T8281] team0: Port device team_slave_1 added [ 772.613650][ T8286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.846129][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.855181][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.883275][ T8281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.900970][ T8281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.914417][ T8281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.951098][ T8281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.193592][ T8286] team0: Port device team_slave_0 added [ 773.265627][ T8286] team0: Port device team_slave_1 added [ 773.832481][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.875476][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.916330][ T8286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.024396][ T8286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.032748][ T8286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.066241][ T8286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.663686][ T8281] hsr_slave_0: entered promiscuous mode [ 774.701342][ T8281] hsr_slave_1: entered promiscuous mode [ 774.713073][ T8281] debugfs: 'hsr0' already exists in 'hsr' [ 774.735811][ T8281] Cannot create hsr debugfs directory [ 774.971096][ T8350] chnl_net:caif_netlink_parms(): no params data found [ 775.077496][ T8286] hsr_slave_0: entered promiscuous mode [ 775.088463][ T8286] hsr_slave_1: entered promiscuous mode [ 775.107170][ T8286] debugfs: 'hsr0' already exists in 'hsr' [ 775.114541][ T8286] Cannot create hsr debugfs directory [ 775.350996][ T8347] chnl_net:caif_netlink_parms(): no params data found [ 776.008183][ T8389] overlayfs: failed to resolve './file0': -2 [ 776.580780][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.600837][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.634029][ T8350] bridge_slave_0: entered allmulticast mode [ 776.653364][ T8350] bridge_slave_0: entered promiscuous mode [ 776.737223][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.747822][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.756908][ T8350] bridge_slave_1: entered allmulticast mode [ 776.768426][ T8350] bridge_slave_1: entered promiscuous mode [ 776.800125][ T5832] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 776.969941][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 776.986789][ T5832] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 776.997698][ T5832] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 777.012573][ T5832] usb 6-1: config 1 interface 0 has no altsetting 0 [ 777.027835][ T5832] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 777.054231][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.078626][ T5832] usb 6-1: Product: syz [ 777.084384][ T5832] usb 6-1: Manufacturer: syz [ 777.100981][ T5832] usb 6-1: SerialNumber: syz [ 777.156363][ T8347] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.164371][ T8347] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.172391][ T8347] bridge_slave_0: entered allmulticast mode [ 777.184104][ T8347] bridge_slave_0: entered promiscuous mode [ 777.208243][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.298981][ T8347] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.307805][ T8347] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.315803][ T8347] bridge_slave_1: entered allmulticast mode [ 777.325096][ T8347] bridge_slave_1: entered promiscuous mode [ 778.123980][ T8396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.134072][ T8396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.277266][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.344741][ T5832] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input12 [ 782.833318][ T5115] bcm5974 6-1:1.0: could not read from device [ 782.881455][ T5115] bcm5974 6-1:1.0: could not read from device [ 782.894756][ T5832] usb 6-1: USB disconnect, device number 16 [ 783.146007][ T8350] team0: Port device team_slave_0 added [ 783.428058][ T8350] team0: Port device team_slave_1 added [ 783.521860][ T8347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.658821][ T8347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.845510][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.854966][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.894231][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.055774][ T8347] team0: Port device team_slave_0 added [ 784.062632][ T8281] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.098634][ T8281] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 784.134240][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.143672][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.174298][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.278508][ T8347] team0: Port device team_slave_1 added [ 784.309818][ T8281] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 784.508064][ T8281] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 784.629280][ T12] bridge_slave_1: left allmulticast mode [ 784.641419][ T12] bridge_slave_1: left promiscuous mode [ 784.659575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.708627][ T12] bridge_slave_0: left allmulticast mode [ 784.731390][ T12] bridge_slave_0: left promiscuous mode [ 784.748677][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.785829][ T12] bridge_slave_1: left allmulticast mode [ 784.795899][ T12] bridge_slave_1: left promiscuous mode [ 784.808033][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.835494][ T12] bridge_slave_0: left allmulticast mode [ 784.860478][ T12] bridge_slave_0: left promiscuous mode [ 784.868826][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.402703][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.455771][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.474627][ T12] bond0 (unregistering): Released all slaves [ 785.775652][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.808440][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.823181][ T12] bond0 (unregistering): Released all slaves [ 786.025401][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.045271][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.075226][ T8347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.103702][ T8347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.111367][ T8347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.138262][ T8347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.203705][ T8350] hsr_slave_0: entered promiscuous mode [ 786.212914][ T8350] hsr_slave_1: entered promiscuous mode [ 786.221033][ T8350] debugfs: 'hsr0' already exists in 'hsr' [ 786.226949][ T8350] Cannot create hsr debugfs directory [ 786.281696][ T12] hsr_slave_0: left promiscuous mode [ 786.289493][ T12] hsr_slave_1: left promiscuous mode [ 786.302385][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.343060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.387910][ T12] hsr_slave_0: left promiscuous mode [ 786.397524][ T12] hsr_slave_1: left promiscuous mode [ 786.407221][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.418326][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.927220][ T8412] overlayfs: failed to resolve './file0': -2 [ 787.084550][ T12] team0 (unregistering): Port device team_slave_1 removed [ 787.151852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 788.004632][ T12] team0 (unregistering): Port device team_slave_1 removed [ 788.058381][ T12] team0 (unregistering): Port device team_slave_0 removed [ 789.470917][ T39] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 789.690801][ T39] usb 6-1: device descriptor read/64, error -71 [ 789.961774][ T39] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 790.170040][ T39] usb 6-1: device descriptor read/64, error -71 [ 790.291545][ T39] usb usb6-port1: attempt power cycle [ 791.206820][ T8347] hsr_slave_0: entered promiscuous mode [ 791.217103][ T8347] hsr_slave_1: entered promiscuous mode [ 791.228387][ T8347] debugfs: 'hsr0' already exists in 'hsr' [ 791.236061][ T8347] Cannot create hsr debugfs directory [ 791.508280][ T8286] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 791.653514][ T8286] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 791.785777][ T8286] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 791.908443][ T8286] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 793.280110][ T8281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.708414][ T8281] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.795526][ T8350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 793.865447][ T8350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 793.925267][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.932896][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.158759][ T8350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.188845][ T8350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.249138][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.256664][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.698324][ T8432] overlayfs: failed to resolve './file0': -2 [ 795.079488][ T8347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 795.162537][ T8347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 795.236417][ T8347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 795.393715][ T8286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.456104][ T8347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 795.856035][ T8286] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.968891][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.976504][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.370912][ T7024] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 796.540831][ T7024] usb 6-1: device descriptor read/64, error -71 [ 796.896405][ T7024] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 796.936835][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.944833][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.080427][ T7024] usb 6-1: device descriptor read/64, error -71 [ 797.194846][ T7024] usb usb6-port1: attempt power cycle [ 797.710141][ T7024] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 797.832574][ T7024] usb 6-1: device descriptor read/8, error -71 [ 798.182289][ T7024] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 798.422549][ T7024] usb 6-1: device descriptor read/8, error -71 [ 798.544730][ T7024] usb usb6-port1: unable to enumerate USB device [ 798.618676][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.068814][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.275316][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.282885][ T7339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.341350][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.348903][ T7339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.415742][ T8281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.611260][ T8347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.975458][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.151465][ T8286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.281768][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.289337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.452903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.460573][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.349521][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.216984][ T8350] veth0_vlan: entered promiscuous mode [ 804.464573][ T8347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.495812][ T8350] veth1_vlan: entered promiscuous mode [ 804.921015][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.955889][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.968874][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.989321][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.013956][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.228149][ T8350] veth0_macvtap: entered promiscuous mode [ 805.231324][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 805.246811][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 805.256003][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 805.268761][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 805.281172][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 805.353220][ T8350] veth1_macvtap: entered promiscuous mode [ 805.603099][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.827250][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.217922][ T6118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.262639][ T6118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.569876][ T6118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.776787][ T6118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.140774][ T5789] Bluetooth: hci0: command tx timeout [ 807.385511][ T5789] Bluetooth: hci1: command tx timeout [ 809.280312][ T5789] Bluetooth: hci0: command tx timeout [ 809.460246][ T5789] Bluetooth: hci1: command tx timeout [ 809.872972][ T7339] bridge_slave_1: left allmulticast mode [ 809.878811][ T7339] bridge_slave_1: left promiscuous mode [ 809.935537][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.998096][ T7339] bridge_slave_0: left allmulticast mode [ 810.048930][ T7339] bridge_slave_0: left promiscuous mode [ 810.102525][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.816265][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.873945][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.907465][ T7339] bond0 (unregistering): Released all slaves [ 810.931840][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 811.079028][ T8347] veth0_vlan: entered promiscuous mode [ 811.194345][ T8488] chnl_net:caif_netlink_parms(): no params data found [ 811.303236][ T5789] Bluetooth: hci0: command tx timeout [ 811.340122][ T7339] hsr_slave_0: left promiscuous mode [ 811.393385][ T7339] hsr_slave_1: left promiscuous mode [ 811.415275][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.478087][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.540018][ T5789] Bluetooth: hci1: command tx timeout [ 812.563823][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 812.622688][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 813.380167][ T5789] Bluetooth: hci0: command tx timeout [ 813.620534][ T5789] Bluetooth: hci1: command tx timeout [ 813.674878][ T8347] veth1_vlan: entered promiscuous mode [ 815.708859][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.755580][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.801639][ T8491] bridge_slave_0: entered allmulticast mode [ 815.843742][ T8491] bridge_slave_0: entered promiscuous mode [ 815.919494][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.955810][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.984657][ T8491] bridge_slave_1: entered allmulticast mode [ 816.004961][ T8491] bridge_slave_1: entered promiscuous mode [ 816.524277][ T8488] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.543937][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.575539][ T8488] bridge_slave_0: entered allmulticast mode [ 816.599121][ T8488] bridge_slave_0: entered promiscuous mode [ 816.821856][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.867889][ T8488] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.894821][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.920257][ T8488] bridge_slave_1: entered allmulticast mode [ 816.949753][ T8488] bridge_slave_1: entered promiscuous mode [ 817.175741][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.859496][ T8491] team0: Port device team_slave_0 added [ 817.943360][ T8488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.994258][ T8488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.062592][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.116977][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.192740][ T8491] team0: Port device team_slave_1 added [ 818.368007][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.410478][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.414757][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 818.426982][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 818.436331][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 818.455861][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 818.466976][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 818.892966][ T8488] team0: Port device team_slave_0 added [ 819.044720][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 819.054747][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 819.068712][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 819.087359][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.095640][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.123443][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 819.137106][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.158443][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 819.174237][ T7339] bridge_slave_1: left allmulticast mode [ 819.181103][ T7339] bridge_slave_1: left promiscuous mode [ 819.187621][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.294661][ T7339] bridge_slave_0: left allmulticast mode [ 819.301842][ T7339] bridge_slave_0: left promiscuous mode [ 819.310922][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.796566][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.840202][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.860449][ T7339] bond0 (unregistering): Released all slaves [ 819.914701][ T8488] team0: Port device team_slave_1 added [ 820.000528][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.007658][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.052139][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.535407][ T7339] hsr_slave_0: left promiscuous mode [ 820.549925][ T7339] hsr_slave_1: left promiscuous mode [ 820.557804][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.584605][ T5785] Bluetooth: hci2: command tx timeout [ 820.592358][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.240016][ T5785] Bluetooth: hci3: command tx timeout [ 821.761827][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 822.461156][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 822.660582][ T5785] Bluetooth: hci2: command tx timeout [ 823.087786][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.106516][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.146577][ T8488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.308904][ T8488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.316942][ T5785] Bluetooth: hci3: command tx timeout [ 823.363919][ T8488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.416683][ T8488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.494095][ T8491] hsr_slave_0: entered promiscuous mode [ 823.504704][ T8491] hsr_slave_1: entered promiscuous mode [ 823.515386][ T8491] debugfs: 'hsr0' already exists in 'hsr' [ 823.522552][ T8491] Cannot create hsr debugfs directory [ 824.741402][ T5785] Bluetooth: hci2: command tx timeout [ 824.937100][ T8488] hsr_slave_0: entered promiscuous mode [ 824.957754][ T8488] hsr_slave_1: entered promiscuous mode [ 824.972127][ T8488] debugfs: 'hsr0' already exists in 'hsr' [ 824.978213][ T8488] Cannot create hsr debugfs directory [ 825.061198][ T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.343385][ T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.381891][ T5785] Bluetooth: hci3: command tx timeout [ 825.585716][ T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.529497][ T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.819950][ T5785] Bluetooth: hci2: command tx timeout [ 827.470430][ T5785] Bluetooth: hci3: command tx timeout [ 827.724926][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 828.266087][ T8605] chnl_net:caif_netlink_parms(): no params data found [ 829.760061][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.775791][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.794112][ T8609] bridge_slave_0: entered allmulticast mode [ 829.804730][ T8609] bridge_slave_0: entered promiscuous mode [ 829.966233][ T8700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 829.998957][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.013159][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.036737][ T8605] bridge_slave_0: entered allmulticast mode [ 830.058272][ T8605] bridge_slave_0: entered promiscuous mode [ 830.101902][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.109408][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.160623][ T8609] bridge_slave_1: entered allmulticast mode [ 830.183840][ T8609] bridge_slave_1: entered promiscuous mode [ 830.302521][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.324517][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.358255][ T8605] bridge_slave_1: entered allmulticast mode [ 830.380533][ T8605] bridge_slave_1: entered promiscuous mode [ 830.699294][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.808921][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.902589][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.961546][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.268873][ T146] bridge_slave_1: left allmulticast mode [ 831.278098][ T146] bridge_slave_1: left promiscuous mode [ 831.286831][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.302888][ T146] bridge_slave_0: left allmulticast mode [ 831.309074][ T146] bridge_slave_0: left promiscuous mode [ 831.318081][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.345196][ T146] bridge_slave_1: left allmulticast mode [ 831.355872][ T146] bridge_slave_1: left promiscuous mode [ 831.368404][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.386797][ T146] bridge_slave_0: left allmulticast mode [ 831.393494][ T146] bridge_slave_0: left promiscuous mode [ 831.407355][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.498204][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.541463][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.568452][ T146] bond0 (unregistering): Released all slaves [ 833.888817][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.911046][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.936977][ T146] bond0 (unregistering): Released all slaves [ 833.968921][ T8609] team0: Port device team_slave_0 added [ 834.030353][ T8605] team0: Port device team_slave_0 added [ 834.113498][ T8609] team0: Port device team_slave_1 added [ 834.131633][ T8488] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 834.214933][ T8605] team0: Port device team_slave_1 added [ 834.291779][ T8488] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 834.316936][ T8488] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 834.480491][ T8488] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 834.554644][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.564711][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.594740][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.612462][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.632955][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.743053][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 834.788315][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.829367][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.861021][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.897544][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 834.905686][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.934195][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.160180][ T146] hsr_slave_0: left promiscuous mode [ 835.168628][ T146] hsr_slave_1: left promiscuous mode [ 835.179005][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.195128][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.217360][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.229399][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.271276][ T146] hsr_slave_0: left promiscuous mode [ 835.279568][ T146] hsr_slave_1: left promiscuous mode [ 835.291717][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.317126][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.393941][ T146] veth1_macvtap: left promiscuous mode [ 835.400438][ T146] veth0_macvtap: left promiscuous mode [ 835.406569][ T146] veth1_vlan: left promiscuous mode [ 835.417294][ T146] veth0_vlan: left promiscuous mode [ 835.428973][ T146] veth1_vlan: left promiscuous mode [ 835.439432][ T146] veth0_vlan: left promiscuous mode [ 836.516086][ T146] team0 (unregistering): Port device team_slave_1 removed [ 836.553025][ T146] team0 (unregistering): Port device team_slave_0 removed [ 837.009140][ T146] team0 (unregistering): Port device team_slave_1 removed [ 837.033219][ T146] team0 (unregistering): Port device team_slave_0 removed [ 837.338793][ T8750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 837.428279][ T8609] hsr_slave_0: entered promiscuous mode [ 837.448905][ T8609] hsr_slave_1: entered promiscuous mode [ 837.473033][ T8609] debugfs: 'hsr0' already exists in 'hsr' [ 837.492409][ T8609] Cannot create hsr debugfs directory [ 837.926053][ T8491] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 838.044421][ T8605] hsr_slave_0: entered promiscuous mode [ 838.063990][ T8605] hsr_slave_1: entered promiscuous mode [ 838.092657][ T8605] debugfs: 'hsr0' already exists in 'hsr' [ 838.098610][ T8605] Cannot create hsr debugfs directory [ 838.281186][ T8491] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 838.358951][ T8491] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 838.600065][ T8491] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 841.197637][ T8488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.783428][ T8609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.844607][ T8609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.921346][ T8609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.997076][ T8609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 842.118787][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.107498][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.115577][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.173958][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.181675][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.291342][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.415631][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.774821][ T8605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 845.060596][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.068071][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.107134][ T8605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 845.178428][ T8605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 845.296488][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.304061][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.361500][ T8605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 845.648190][ T8803] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 846.391191][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.626159][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.057207][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.064974][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.276747][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.284518][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.703292][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.785903][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.166719][ T8605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 848.211827][ T8605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.428230][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.435766][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.538995][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.546616][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.507707][ T8488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.914457][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.591007][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.597132][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.475'. [ 852.670175][ T8857] netlink: 'syz.5.475': attribute type 30 has an invalid length. [ 852.829103][ T8857] Zero length message leads to an empty skb [ 852.838371][ T3501] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.910829][ T3501] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.943090][ T3501] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.047589][ T3501] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.486497][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.494445][ T8609] veth0_vlan: entered promiscuous mode [ 854.584045][ T8605] veth0_vlan: entered promiscuous mode [ 854.714973][ T8488] veth0_vlan: entered promiscuous mode [ 854.766499][ T8609] veth1_vlan: entered promiscuous mode [ 854.816670][ T8491] veth0_vlan: entered promiscuous mode [ 854.854563][ T8605] veth1_vlan: entered promiscuous mode [ 854.929327][ T8488] veth1_vlan: entered promiscuous mode [ 855.133628][ T8491] veth1_vlan: entered promiscuous mode [ 855.452982][ T8605] veth0_macvtap: entered promiscuous mode [ 855.572228][ T8605] veth1_macvtap: entered promiscuous mode [ 855.643748][ T8609] veth0_macvtap: entered promiscuous mode [ 855.809304][ T8488] veth0_macvtap: entered promiscuous mode [ 855.911550][ T8609] veth1_macvtap: entered promiscuous mode [ 856.016865][ T8488] veth1_macvtap: entered promiscuous mode [ 856.118694][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.169030][ T8491] veth0_macvtap: entered promiscuous mode [ 856.258011][ T8491] veth1_macvtap: entered promiscuous mode [ 856.316321][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.458020][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.603342][ T6053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.616671][ T6053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.627061][ T6053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.636194][ T6053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.682653][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.714683][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.815301][ T8488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.927494][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.172907][ T3501] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.201674][ T3501] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.267811][ T1028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.275813][ T1028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.333071][ T1028] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.385737][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.481791][ T1028] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.539339][ T1028] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.724170][ T1028] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.889221][ T6053] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.971883][ T1028] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.047184][ T1028] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.093877][ T1028] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.041832][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.100452][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.407852][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.514038][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.070622][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.102041][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.091750][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.107458][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.724073][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 874.768347][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.854913][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.380325][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.388334][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.759850][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.812794][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.822326][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.854432][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.870965][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.278086][ T3501] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.186811][ T5785] Bluetooth: hci4: command tx timeout [ 878.489857][ T5785] Bluetooth: hci0: command tx timeout [ 879.390922][ T5785] Bluetooth: hci4: command tx timeout [ 879.810826][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.817626][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.317563][ T3501] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.500051][ T5785] Bluetooth: hci0: command tx timeout [ 881.085641][ T3501] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.467508][ T5785] Bluetooth: hci4: command tx timeout [ 881.825110][ T3501] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.579975][ T5785] Bluetooth: hci0: command tx timeout [ 883.540077][ T5785] Bluetooth: hci4: command tx timeout [ 884.773796][ T5785] Bluetooth: hci0: command tx timeout [ 888.152397][ T3501] bridge_slave_1: left allmulticast mode [ 888.158227][ T3501] bridge_slave_1: left promiscuous mode [ 888.661019][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.942968][ T3501] bridge_slave_0: left allmulticast mode [ 889.039257][ T3501] bridge_slave_0: left promiscuous mode [ 889.097735][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.269490][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.371687][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.425759][ T3501] bond0 (unregistering): Released all slaves [ 893.713408][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 894.025616][ T3501] hsr_slave_0: left promiscuous mode [ 894.672994][ T3501] hsr_slave_1: left promiscuous mode [ 894.728036][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.661280][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.727174][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.714551][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.058279][ T3501] veth1_macvtap: left promiscuous mode [ 898.089805][ T3501] veth0_macvtap: left promiscuous mode [ 898.117681][ T3501] veth1_vlan: left promiscuous mode [ 898.168102][ T3501] veth0_vlan: left promiscuous mode [ 901.149091][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 901.223734][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 901.697198][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 902.220325][ T9014] debugfs: 'netdev@ffff88802b6cb568' already exists in 'ref_tracker' [ 902.868723][ T9027] chnl_net:caif_netlink_parms(): no params data found [ 903.846045][ T3501] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.213642][ T3501] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.542261][ T3501] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.866731][ T3501] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.288632][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.315280][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.325841][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.7.530'. [ 905.370913][ T9014] bridge_slave_0: entered allmulticast mode [ 905.417526][ T9014] bridge_slave_0: entered promiscuous mode [ 905.466795][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.510361][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.518135][ T9014] bridge_slave_1: entered allmulticast mode [ 905.573152][ T9014] bridge_slave_1: entered promiscuous mode [ 906.097571][ T9027] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.125221][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.220753][ T9027] bridge_slave_0: entered allmulticast mode [ 906.265846][ T9027] bridge_slave_0: entered promiscuous mode [ 907.515139][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.563523][ T9027] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.450298][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.458101][ T9027] bridge_slave_1: entered allmulticast mode [ 909.483124][ T9027] bridge_slave_1: entered promiscuous mode [ 910.045851][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.732725][ T9027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.808758][ T9027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.900799][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 919.101950][ T9014] team0: Port device team_slave_0 added [ 919.272657][ T9014] team0: Port device team_slave_1 added [ 919.317407][ T9027] team0: Port device team_slave_0 added [ 919.423708][ T9027] team0: Port device team_slave_1 added [ 919.451214][ T3501] bridge_slave_1: left allmulticast mode [ 919.474781][ T3501] bridge_slave_1: left promiscuous mode [ 919.520886][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.595024][ T3501] bridge_slave_0: left allmulticast mode [ 919.649746][ T3501] bridge_slave_0: left promiscuous mode [ 919.656289][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.440098][ T7024] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 920.693599][ T7024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.758188][ T7024] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.844649][ T7024] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 920.940699][ T7024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.046543][ T7024] usb 2-1: config 0 descriptor?? [ 921.674226][ T7024] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 921.822856][ T7024] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 922.027287][ T7024] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 922.912819][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.821405][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.870196][ T7026] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 923.927480][ T3501] bond0 (unregistering): Released all slaves [ 926.565766][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.596113][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.636008][ T7024] usb 2-1: USB disconnect, device number 2 [ 926.723019][ T9027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.839345][ T3501] hsr_slave_0: left promiscuous mode [ 926.935945][ T3501] hsr_slave_1: left promiscuous mode [ 926.965284][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.981316][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.998224][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.018310][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.069165][ T3501] veth1_macvtap: left promiscuous mode [ 927.081141][ T3501] veth0_macvtap: left promiscuous mode [ 927.087332][ T3501] veth1_vlan: left promiscuous mode [ 927.094563][ T3501] veth0_vlan: left promiscuous mode [ 927.805853][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 927.846984][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 928.136004][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.551'. [ 928.360198][ T794] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 928.448775][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.457016][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.487009][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.859347][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 928.869202][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 928.879332][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 928.897892][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 928.929836][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 928.980239][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.035014][ T9027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.076591][ T794] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 929.109798][ T9027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.149837][ T794] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 929.159109][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.211630][ T9027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.218726][ T794] usb 2-1: config 0 descriptor?? [ 929.520002][ T7026] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 929.886363][ T7026] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 930.903583][ T7026] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.939762][ T7026] usb 6-1: Product: syz [ 930.944133][ T7026] usb 6-1: Manufacturer: syz [ 930.991013][ T5785] Bluetooth: hci1: command tx timeout [ 931.617784][ T794] usb 2-1: USB disconnect, device number 3 [ 931.904189][ T7026] usb 6-1: SerialNumber: syz [ 931.915099][ T7026] usb 6-1: config 0 descriptor?? [ 932.188811][ T7026] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 932.615761][ T7026] gspca_stk1135: reg_w 0x2 err -71 [ 932.660922][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 932.719822][ T7026] gspca_stk1135: Sensor write failed [ 932.738177][ T5789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 932.768893][ T5789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 932.778070][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 932.787277][ T5789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 932.819766][ T7026] gspca_stk1135: Sensor write failed [ 932.826115][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 932.838137][ T5789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 932.853887][ T5789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 932.867021][ T7026] gspca_stk1135: Sensor read failed [ 932.887494][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 932.971781][ T7026] gspca_stk1135: Sensor read failed [ 932.999273][ T7026] gspca_stk1135: Detected sensor type unknown (0x0) [ 933.021344][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 933.027857][ T7026] gspca_stk1135: Sensor read failed [ 933.059810][ T5789] Bluetooth: hci1: command tx timeout [ 933.101994][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 933.111088][ T7026] gspca_stk1135: Sensor read failed [ 933.116490][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 933.136628][ T7026] gspca_stk1135: Sensor write failed [ 933.143436][ T7026] gspca_stk1135: serial bus timeout: status=0x00 [ 933.155420][ T7026] gspca_stk1135: Sensor write failed [ 933.166577][ T7026] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 933.186198][ T7026] usb 6-1: USB disconnect, device number 24 [ 934.462910][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 934.900082][ T5789] Bluetooth: hci6: command tx timeout [ 935.143009][ T5789] Bluetooth: hci1: command tx timeout [ 935.318871][ T9340] Bluetooth: MGMT ver 1.23 [ 935.349995][ T9340] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 935.820066][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.7.560'. [ 937.013998][ T5789] Bluetooth: hci6: command tx timeout [ 937.231784][ T5789] Bluetooth: hci1: command tx timeout [ 937.579956][ T8165] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 937.773283][ T8165] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.813437][ T8165] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 937.840397][ T8165] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 937.896098][ T8165] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.027083][ T8165] usb 8-1: config 0 descriptor?? [ 938.306659][ T5979] bridge_slave_1: left allmulticast mode [ 938.385580][ T5979] bridge_slave_1: left promiscuous mode [ 938.437216][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.482444][ T5979] bridge_slave_0: left allmulticast mode [ 938.549774][ T5979] bridge_slave_0: left promiscuous mode [ 938.586383][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.627594][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.652353][ T5789] Bluetooth: hci6: command tx timeout [ 942.669867][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 944.673204][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 944.679424][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 944.685943][ T9362] Bluetooth: hci6: command tx timeout [ 947.221433][ T794] usb 8-1: USB disconnect, device number 2 [ 947.308739][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.462883][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.493645][ T5979] bond0 (unregistering): Released all slaves [ 947.545918][ T7050] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 947.789789][ T7050] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 947.799070][ T7050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.859362][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.864669][ T7050] usb 6-1: Product: syz [ 947.879851][ T7050] usb 6-1: Manufacturer: syz [ 947.884653][ T7050] usb 6-1: SerialNumber: syz [ 947.924265][ T7050] usb 6-1: config 0 descriptor?? [ 948.035861][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 948.071340][ T7050] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 948.112750][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 948.863573][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.7.571'. [ 949.069874][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.106421][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.153520][ T9301] bridge_slave_0: entered allmulticast mode [ 949.170918][ T7050] gspca_stk1135: reg_w 0x3 err -71 [ 949.186227][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.236760][ T7050] gspca_stk1135: Sensor write failed [ 949.238662][ T9301] bridge_slave_0: entered promiscuous mode [ 949.242472][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.242530][ T7050] gspca_stk1135: Sensor write failed [ 949.242630][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.242686][ T7050] gspca_stk1135: Sensor read failed [ 949.242786][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.242842][ T7050] gspca_stk1135: Sensor read failed [ 949.242886][ T7050] gspca_stk1135: Detected sensor type unknown (0x0) [ 949.243011][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.243063][ T7050] gspca_stk1135: Sensor read failed [ 949.567908][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.624142][ T7050] gspca_stk1135: Sensor read failed [ 949.669881][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.743337][ T7050] gspca_stk1135: Sensor write failed [ 949.830457][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 949.837020][ T7050] gspca_stk1135: Sensor write failed [ 949.933410][ T7050] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 950.069990][ T7050] usb 6-1: USB disconnect, device number 25 [ 951.130038][ T7050] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 951.188312][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.256265][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.286896][ T9301] bridge_slave_1: entered allmulticast mode [ 951.352346][ T7050] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 951.370354][ T9301] bridge_slave_1: entered promiscuous mode [ 951.424635][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.481722][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.539961][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.582087][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.609758][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.649782][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.700008][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.729988][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.760365][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 951.799106][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.888695][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 951.920157][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 951.980147][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.089154][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.151805][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.169424][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.199232][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.232777][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.269887][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.309244][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.361078][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.390174][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.409787][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.440455][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.494386][ T7050] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 952.534956][ T7050] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 952.590084][ T7050] usb 6-1: config 0 interface 0 has no altsetting 0 [ 952.625135][ T7050] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 952.636975][ T5979] bridge_slave_1: left allmulticast mode [ 952.645323][ T7050] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 952.674318][ T7050] usb 6-1: Product: syz [ 952.675316][ T5979] bridge_slave_1: left promiscuous mode [ 952.707394][ T7050] usb 6-1: Manufacturer: syz [ 952.710842][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.723542][ T7050] usb 6-1: SerialNumber: syz [ 952.744546][ T7050] usb 6-1: config 0 descriptor?? [ 952.770678][ T5979] bridge_slave_0: left allmulticast mode [ 952.809767][ T5979] bridge_slave_0: left promiscuous mode [ 952.816308][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.819799][ T7050] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 953.002588][ T7050] usb 6-1: USB disconnect, device number 26 [ 953.032266][ T7050] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 953.070448][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.580'. [ 953.607158][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.708753][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.746900][ T5979] bond0 (unregistering): Released all slaves [ 953.965378][ T9301] team0: Port device team_slave_0 added [ 954.012788][ T9301] team0: Port device team_slave_1 added [ 954.105395][ T9389] bridge1: entered promiscuous mode [ 954.111574][ T9389] bridge1: entered allmulticast mode [ 954.287464][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.406492][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.786110][ T5979] team0 (unregistering): Port device team_slave_1 removed [ 954.905279][ T5979] team0 (unregistering): Port device team_slave_0 removed [ 955.731668][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.750249][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.813636][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.012103][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.019318][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.120284][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.389822][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.414907][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.463900][ T9322] bridge_slave_0: entered allmulticast mode [ 956.476165][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.589'. [ 956.503429][ T9322] bridge_slave_0: entered promiscuous mode [ 956.542746][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.599480][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.684017][ T9322] bridge_slave_1: entered allmulticast mode [ 956.854415][ T9322] bridge_slave_1: entered promiscuous mode [ 959.463472][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.381857][ T9460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.300817][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.636978][ T9301] hsr_slave_0: entered promiscuous mode [ 968.690184][ T9301] hsr_slave_1: entered promiscuous mode [ 968.715105][ T9301] debugfs: 'hsr0' already exists in 'hsr' [ 968.759130][ T9301] Cannot create hsr debugfs directory [ 969.095633][ T9322] team0: Port device team_slave_0 added [ 969.214469][ T9322] team0: Port device team_slave_1 added [ 969.786335][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 969.799738][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 969.930197][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.197928][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.249270][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.424653][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.844291][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 971.356208][ T9322] hsr_slave_0: entered promiscuous mode [ 971.413179][ T9322] hsr_slave_1: entered promiscuous mode [ 971.490644][ T9322] debugfs: 'hsr0' already exists in 'hsr' [ 971.496553][ T9322] Cannot create hsr debugfs directory [ 977.617306][ T9301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 977.736550][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.609'. [ 977.790891][ T9301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 977.859066][ T9301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 977.988223][ T9301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 982.681035][ T9322] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 982.812466][ T9322] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 982.933407][ T9322] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 982.954914][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.619'. [ 983.040694][ T9322] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 983.348959][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.729020][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.831008][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.838474][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.069390][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.077013][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.174407][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.635226][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.058846][ T9322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 986.130224][ T9322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 986.305531][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.314316][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.465566][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.473305][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.232882][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.636'. [ 988.965747][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.921463][ T7024] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 990.166159][ T7024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.219831][ T7024] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 990.270411][ T7024] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 990.329730][ T7024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.414585][ T7024] usb 6-1: config 0 descriptor?? [ 990.426660][ T7024] hub 6-1:0.0: bad descriptor, ignoring hub [ 990.483553][ T7024] hub 6-1:0.0: probe with driver hub failed with error -5 [ 990.548935][ T7024] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 990.932865][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 990.976390][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 990.986813][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 991.002506][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 991.020578][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.499147][ T7543] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.521233][ T7543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.533050][ T7543] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.548543][ T7543] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.562781][ T7543] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 993.069702][ T7543] Bluetooth: hci0: command tx timeout [ 993.090608][ T8165] usb 6-1: USB disconnect, device number 27 [ 993.855005][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 994.418051][ T7339] bridge_slave_1: left allmulticast mode [ 994.455418][ T7339] bridge_slave_1: left promiscuous mode [ 994.490675][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.556522][ T7339] bridge_slave_0: left allmulticast mode [ 994.586565][ T7339] bridge_slave_0: left promiscuous mode [ 994.610509][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.660454][ T7543] Bluetooth: hci1: command tx timeout [ 995.140053][ T7543] Bluetooth: hci0: command tx timeout [ 995.472784][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.530461][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.583709][ T7339] bond0 (unregistering): Released all slaves [ 995.776268][ T9649] ipip0: entered promiscuous mode [ 995.781696][ T9649] ipip0: entered allmulticast mode [ 995.793439][ T9649] team0: Device ipip0 is of different type [ 996.098346][ T7339] hsr_slave_0: left promiscuous mode [ 996.274854][ T7339] hsr_slave_1: left promiscuous mode [ 996.299246][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.339411][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.740346][ T7543] Bluetooth: hci1: command tx timeout [ 996.916255][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.657'. [ 997.220166][ T7543] Bluetooth: hci0: command tx timeout [ 997.567611][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 997.671767][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 998.466183][ T9618] chnl_net:caif_netlink_parms(): no params data found [ 998.822962][ T7543] Bluetooth: hci1: command tx timeout [ 998.958483][ T9679] ipip0: entered promiscuous mode [ 998.963807][ T9679] ipip0: entered allmulticast mode [ 998.986165][ T9679] team0: Device ipip0 is of different type [ 999.304250][ T7543] Bluetooth: hci0: command tx timeout [ 999.779135][ T9628] chnl_net:caif_netlink_parms(): no params data found [ 999.932094][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'. [ 1000.323898][ T9695] netlink: 16 bytes leftover after parsing attributes in process `syz.7.668'. [ 1000.910053][ T7543] Bluetooth: hci1: command tx timeout [ 1000.920942][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.935643][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.955686][ T9618] bridge_slave_0: entered allmulticast mode [ 1001.000776][ T9618] bridge_slave_0: entered promiscuous mode [ 1001.106695][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.132358][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.180196][ T9618] bridge_slave_1: entered allmulticast mode [ 1001.217196][ T9618] bridge_slave_1: entered promiscuous mode [ 1001.654761][ T9714] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1001.668746][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1001.711325][ T7543] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1001.721445][ T7543] CPU: 1 UID: 0 PID: 7543 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1001.721586][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.721710][ T7543] Workqueue: hci2 hci_rx_work [ 1001.722051][ T7543] Call Trace: [ 1001.722101][ T7543] [ 1001.722148][ T7543] __dump_stack+0x26/0x30 [ 1001.722346][ T7543] dump_stack_lvl+0x14c/0x1c0 [ 1001.722499][ T7543] dump_stack+0x1e/0x25 [ 1001.722649][ T7543] sysfs_create_dir_ns+0x46c/0x540 [ 1001.722880][ T7543] kobject_add_internal+0x1084/0x19b0 [ 1001.723219][ T7543] kobject_add+0x2c1/0x410 [ 1001.723401][ T7543] ? kmsan_get_metadata+0xf1/0x160 [ 1001.723611][ T7543] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1001.723790][ T7543] device_add+0xa70/0x1c00 [ 1001.724045][ T7543] hci_conn_add_sysfs+0x159/0x2e0 [ 1001.724221][ T7543] le_conn_complete_evt+0x1d0a/0x2250 [ 1001.724479][ T7543] hci_le_enh_conn_complete_evt+0x158/0x260 [ 1001.724675][ T7543] hci_le_meta_evt+0x6eb/0x960 [ 1001.724831][ T7543] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1001.725029][ T7543] hci_event_packet+0xce2/0x1e40 [ 1001.725177][ T7543] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1001.725378][ T7543] hci_rx_work+0x8c3/0xfc0 [ 1001.725527][ T7543] ? kmsan_get_metadata+0xf1/0x160 [ 1001.725697][ T7543] ? __pfx_hci_rx_work+0x10/0x10 [ 1001.725842][ T7543] process_scheduled_works+0xb21/0x1e30 [ 1001.726122][ T7543] worker_thread+0xede/0x1580 [ 1001.726296][ T7543] kthread+0x53f/0x600 [ 1001.726479][ T7543] ? __pfx_worker_thread+0x10/0x10 [ 1001.726635][ T7543] ? __pfx_kthread+0x10/0x10 [ 1001.726795][ T7543] ret_from_fork+0x20f/0x910 [ 1001.726967][ T7543] ? __switch_to+0x51c/0x750 [ 1001.727170][ T7543] ? __pfx_kthread+0x10/0x10 [ 1001.727326][ T7543] ret_from_fork_asm+0x1a/0x30 [ 1001.727528][ T7543] [ 1001.727639][ T7543] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1001.927748][ T7543] Bluetooth: hci2: failed to register connection device [ 1002.207139][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.783188][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.925141][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.677'. [ 1003.009240][ T9717] ipip0: entered promiscuous mode [ 1003.014837][ T9717] ipip0: entered allmulticast mode [ 1003.026471][ T9717] team0: Device ipip0 is of different type [ 1003.265633][ T9618] team0: Port device team_slave_0 added [ 1003.333464][ T9618] team0: Port device team_slave_1 added [ 1003.377874][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.421612][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.442869][ T9628] bridge_slave_0: entered allmulticast mode [ 1003.495930][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.679'. [ 1003.508064][ T9628] bridge_slave_0: entered promiscuous mode [ 1003.737223][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.776996][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.821418][ T9628] bridge_slave_1: entered allmulticast mode [ 1003.874414][ T9628] bridge_slave_1: entered promiscuous mode [ 1004.038042][ T146] bridge_slave_1: left allmulticast mode [ 1004.056190][ T146] bridge_slave_1: left promiscuous mode [ 1004.083491][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.127093][ T146] bridge_slave_0: left allmulticast mode [ 1004.144580][ T146] bridge_slave_0: left promiscuous mode [ 1004.155753][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.937593][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.011445][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.035233][ T146] bond0 (unregistering): Released all slaves [ 1005.207014][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.257638][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.335638][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.365912][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.374653][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.412139][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.454797][ T9748] overlayfs: missing 'lowerdir' [ 1005.559939][ T146] hsr_slave_0: left promiscuous mode [ 1005.650582][ T146] hsr_slave_1: left promiscuous mode [ 1005.659441][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.714642][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.059817][ T8165] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1006.254263][ T8165] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1006.279720][ T8165] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.310349][ T8165] usb 8-1: config 0 descriptor?? [ 1006.369352][ T8165] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1006.677741][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1006.742083][ T8165] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 1006.758637][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1007.158339][ T8165] cpia1 8-1:0.0: only firmware version 1 is supported (got: 160) [ 1007.230923][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.277478][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.322208][ T9754] ipip0: entered promiscuous mode [ 1007.327426][ T9754] ipip0: entered allmulticast mode [ 1007.342760][ T9754] team0: Device ipip0 is of different type [ 1007.373746][ T8165] usb 8-1: USB disconnect, device number 3 [ 1007.679386][ T9628] team0: Port device team_slave_0 added [ 1007.779475][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 1007.859396][ T9628] team0: Port device team_slave_1 added [ 1008.139305][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.163297][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.282904][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.1.688'. [ 1008.289731][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.373427][ T9618] hsr_slave_0: entered promiscuous mode [ 1008.410761][ T9618] hsr_slave_1: entered promiscuous mode [ 1008.419341][ T9618] debugfs: 'hsr0' already exists in 'hsr' [ 1008.449781][ T9618] Cannot create hsr debugfs directory [ 1008.518786][ T9759] bond0: entered promiscuous mode [ 1008.535199][ T9759] bond_slave_0: entered promiscuous mode [ 1008.544871][ T9759] bond_slave_1: entered promiscuous mode [ 1008.602084][ T9759] gretap0: entered promiscuous mode [ 1008.629925][ T9759] hsr1: entered promiscuous mode [ 1008.650678][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.699261][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1008.798933][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.039797][ T794] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1009.240359][ T794] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.297054][ T794] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.349917][ T794] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.376366][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.472449][ T794] usb 8-1: config 0 descriptor?? [ 1009.562144][ T794] hub 8-1:0.0: bad descriptor, ignoring hub [ 1009.568267][ T794] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1009.636129][ T794] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1009.704954][ T9628] hsr_slave_0: entered promiscuous mode [ 1009.716210][ T9628] hsr_slave_1: entered promiscuous mode [ 1009.733877][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 1010.385112][ T9628] Cannot create hsr debugfs directory [ 1011.918985][ T9782] overlayfs: missing 'workdir' [ 1012.226673][ T7024] usb 8-1: USB disconnect, device number 4 [ 1012.620662][ T9784] ipip0: entered promiscuous mode [ 1012.625887][ T9784] ipip0: entered allmulticast mode [ 1012.637588][ T9784] team0: Device ipip0 is of different type [ 1012.704522][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.696'. [ 1013.044034][ T794] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1013.247515][ T794] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1013.258952][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.283182][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 1013.309310][ T794] usb 6-1: config 0 descriptor?? [ 1013.370643][ T794] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1013.787822][ T794] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1014.227111][ T9797] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.743110][ T794] gspca_cpia1: usb_control_msg 02, error -110 [ 1015.749369][ T794] cpia1 6-1:0.0: only firmware version 1 is supported (got: 160) [ 1020.859435][ T794] usb 6-1: USB disconnect, device number 28 [ 1021.509881][ T7025] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1021.540055][ T9628] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1021.636678][ T9628] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1021.745514][ T7025] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.779955][ T9628] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1021.809001][ T7025] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1021.840298][ T7025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.876197][ T7025] usb 6-1: config 0 descriptor?? [ 1021.937548][ T9628] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1021.947128][ T7025] hub 6-1:0.0: bad descriptor, ignoring hub [ 1021.979783][ T7025] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1022.052336][ T7025] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1022.206693][ T9618] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1022.310428][ T9618] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1022.374760][ T9618] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1022.451940][ T9618] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1023.118379][ T9821] overlayfs: missing 'workdir' [ 1023.631612][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.882031][ T8165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1023.900001][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.982572][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.039296][ T9289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.046961][ T9289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.078040][ T8165] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1024.116646][ T8165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.159165][ T8165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.180093][ T8165] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1024.204271][ T9289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.211875][ T9289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.246326][ T8165] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1024.294463][ T8165] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1024.314101][ T8165] usb 2-1: Manufacturer: syz [ 1024.345813][ T8165] usb 2-1: config 0 descriptor?? [ 1024.560745][ T794] usb 6-1: USB disconnect, device number 29 [ 1024.736055][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.846857][ T8165] appleir 0003:05AC:8243.000A: item fetching failed at offset 0/1 [ 1024.894352][ T8165] appleir 0003:05AC:8243.000A: parse failed [ 1024.899698][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.907730][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.930161][ T8165] appleir 0003:05AC:8243.000A: probe with driver appleir failed with error -22 [ 1025.047080][ T9831] ipip0: entered promiscuous mode [ 1025.052588][ T9831] ipip0: entered allmulticast mode [ 1025.066087][ T9831] team0: Device ipip0 is of different type [ 1025.318196][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.325817][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.404769][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.707'. [ 1026.556635][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.5.709'. [ 1026.696429][ T9846] bond0: entered promiscuous mode [ 1026.724064][ T9846] bond_slave_0: entered promiscuous mode [ 1026.754769][ T9846] bond_slave_1: entered promiscuous mode [ 1026.833581][ T9846] gretap0: entered promiscuous mode [ 1026.882827][ T794] usb 2-1: USB disconnect, device number 4 [ 1026.936300][ T9846] debugfs: 'hsr1' already exists in 'hsr' [ 1026.975403][ T9846] Cannot create hsr debugfs directory [ 1027.030995][ T9846] hsr1: entered promiscuous mode [ 1027.321677][ T9853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.873678][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.812643][ T9863] overlayfs: missing 'workdir' [ 1034.110098][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.941469][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.974079][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.984041][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.998721][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1036.015385][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1038.104748][ T7543] Bluetooth: hci4: command tx timeout [ 1038.442610][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 1039.248833][ T9909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1039.294154][ T39] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1040.687342][ T7543] Bluetooth: hci4: command tx timeout [ 1042.773292][ T7543] Bluetooth: hci4: command tx timeout [ 1043.963866][ T6053] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.825854][ T5785] Bluetooth: hci4: command tx timeout [ 1046.334855][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.720'. [ 1046.360557][ T39] usb 2-1: device descriptor read/all, error -71 [ 1046.509259][ T6053] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.698525][ T6053] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.995978][ T9628] veth0_vlan: entered promiscuous mode [ 1047.084050][ T6053] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.180629][ T9618] veth0_vlan: entered promiscuous mode [ 1047.475010][ T9618] veth1_vlan: entered promiscuous mode [ 1048.151441][ T9628] veth1_vlan: entered promiscuous mode [ 1048.731661][ T9881] chnl_net:caif_netlink_parms(): no params data found [ 1048.964377][ T6053] bridge_slave_1: left allmulticast mode [ 1048.990589][ T6053] bridge_slave_1: left promiscuous mode [ 1049.029088][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.178830][ T6053] bridge_slave_0: left allmulticast mode [ 1049.241723][ T6053] bridge_slave_0: left promiscuous mode [ 1049.269103][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.461191][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.496162][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.511634][ T6053] bond0 (unregistering): Released all slaves [ 1050.914571][ T9628] veth0_macvtap: entered promiscuous mode [ 1051.111178][ T9628] veth1_macvtap: entered promiscuous mode [ 1051.241178][ T6053] hsr_slave_0: left promiscuous mode [ 1051.250465][ T6053] hsr_slave_1: left promiscuous mode [ 1051.258180][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.290986][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.305727][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.313781][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.510326][ T6053] veth1_macvtap: left promiscuous mode [ 1051.516054][ T6053] veth0_macvtap: left promiscuous mode [ 1051.561465][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.725'. [ 1051.577579][ T6053] veth1_vlan: left promiscuous mode [ 1051.605038][ T6053] veth0_vlan: left promiscuous mode [ 1052.590276][ T7543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1052.611653][ T7543] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1052.631487][ T7543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1052.648778][ T7543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1052.660477][ T7543] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1052.967356][ T9965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.472029][ T5785] Bluetooth: hci2: command tx timeout [ 1058.470454][ T5785] Bluetooth: hci2: command tx timeout [ 1059.487739][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1059.584806][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1059.598363][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.612628][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.643840][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.655771][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1059.663930][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1059.948577][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 1060.504625][ T7543] Bluetooth: hci2: command tx timeout [ 1061.920909][ T7543] Bluetooth: hci0: command tx timeout [ 1062.579808][ T7543] Bluetooth: hci2: command tx timeout [ 1062.664017][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.703585][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.768050][ T9881] bridge_slave_0: entered allmulticast mode [ 1062.806615][ T9881] bridge_slave_0: entered promiscuous mode [ 1063.176972][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.226410][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.310419][ T9881] bridge_slave_1: entered allmulticast mode [ 1063.389624][ T9881] bridge_slave_1: entered promiscuous mode [ 1063.939322][T10002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.940134][ T7543] Bluetooth: hci0: command tx timeout [ 1065.358289][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1066.360218][ T7543] Bluetooth: hci0: command tx timeout [ 1066.360431][ T7010] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1066.387108][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.440459][ T7543] Bluetooth: hci0: command tx timeout [ 1070.781175][ T7010] usb 6-1: device descriptor read/all, error -71 [ 1070.964502][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.621855][ T9881] team0: Port device team_slave_0 added [ 1071.804967][ T9881] team0: Port device team_slave_1 added [ 1072.120642][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.127763][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.232982][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.311530][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.337922][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.368319][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.202275][ T9881] hsr_slave_0: entered promiscuous mode [ 1073.231484][ T9881] hsr_slave_1: entered promiscuous mode [ 1073.243571][ T9881] debugfs: 'hsr0' already exists in 'hsr' [ 1073.250316][ T9881] Cannot create hsr debugfs directory [ 1073.972383][ T794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1074.155399][ T794] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1074.179851][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.199849][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.239723][ T794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1074.272700][ T794] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1074.289731][ T794] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1074.298030][ T794] usb 2-1: Manufacturer: syz [ 1074.388265][ T6053] bridge_slave_1: left allmulticast mode [ 1074.389898][ T794] usb 2-1: config 0 descriptor?? [ 1074.399758][ T6053] bridge_slave_1: left promiscuous mode [ 1074.406302][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.505652][ T6053] bridge_slave_0: left allmulticast mode [ 1074.529947][ T6053] bridge_slave_0: left promiscuous mode [ 1074.560964][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.856466][ T794] appleir 0003:05AC:8243.000B: item fetching failed at offset 0/1 [ 1074.902999][ T794] appleir 0003:05AC:8243.000B: parse failed [ 1074.925408][ T794] appleir 0003:05AC:8243.000B: probe with driver appleir failed with error -22 [ 1075.311064][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.341378][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.383630][ T6053] bond0 (unregistering): Released all slaves [ 1075.561603][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 1075.754187][ T6053] hsr_slave_0: left promiscuous mode [ 1075.801195][ T6053] hsr_slave_1: left promiscuous mode [ 1075.828685][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.864097][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.922716][ T6053] veth1_vlan: left promiscuous mode [ 1075.928246][ T6053] veth0_vlan: left promiscuous mode [ 1076.941422][ T794] usb 2-1: USB disconnect, device number 7 [ 1082.221584][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1085.251229][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1086.207673][ T9955] chnl_net:caif_netlink_parms(): no params data found [ 1088.481659][ T9955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.494193][ T9955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.502087][ T9955] bridge_slave_0: entered allmulticast mode [ 1088.517827][ T9955] bridge_slave_0: entered promiscuous mode [ 1088.772751][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.794453][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.828742][ T9974] bridge_slave_0: entered allmulticast mode [ 1088.854517][ T9974] bridge_slave_0: entered promiscuous mode [ 1088.881752][ T9955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.889208][ T9955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.914999][ T9955] bridge_slave_1: entered allmulticast mode [ 1088.937906][ T9955] bridge_slave_1: entered promiscuous mode [ 1089.176120][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.203719][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.233541][ T9974] bridge_slave_1: entered allmulticast mode [ 1089.253181][ T9974] bridge_slave_1: entered promiscuous mode [ 1089.368488][ T9955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.741669][ T9955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.024860][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.068115][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.335579][ T9955] team0: Port device team_slave_0 added [ 1090.549674][ T7010] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1090.572053][ T9955] team0: Port device team_slave_1 added [ 1090.726270][ T7010] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1090.749828][ T7010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.789852][ T7010] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.827454][ T9974] team0: Port device team_slave_0 added [ 1090.833468][ T7010] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1090.865215][ T7010] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1090.875745][ T6053] bridge_slave_1: left allmulticast mode [ 1090.889764][ T6053] bridge_slave_1: left promiscuous mode [ 1090.896526][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.908006][ T7010] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1090.929895][ T7010] usb 6-1: Manufacturer: syz [ 1090.946378][ T6053] bridge_slave_0: left allmulticast mode [ 1090.951543][ T7010] usb 6-1: config 0 descriptor?? [ 1090.970415][ T6053] bridge_slave_0: left promiscuous mode [ 1090.990488][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.400876][ T7010] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1 [ 1091.433178][ T7010] appleir 0003:05AC:8243.000C: parse failed [ 1091.445873][ T7010] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22 [ 1091.756087][ T6053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.836551][ T6053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.863627][ T6053] bond0 (unregistering): Released all slaves [ 1091.941492][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.948606][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.978070][ T9955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.998800][ T9974] team0: Port device team_slave_1 added [ 1092.088872][ T9881] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1092.117859][ T9955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.129819][ T5832] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1092.137528][ T9955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.165549][ T9955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.283504][ T6053] hsr_slave_0: left promiscuous mode [ 1092.298070][ T6053] hsr_slave_1: left promiscuous mode [ 1092.307182][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.312371][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 1092.325328][ T6053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.349037][ T5832] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1092.369133][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.378946][ T5832] usb 2-1: Product: syz [ 1092.380362][ T6053] veth1_macvtap: left promiscuous mode [ 1092.394249][ T5832] usb 2-1: Manufacturer: syz [ 1092.399456][ T5832] usb 2-1: SerialNumber: syz [ 1092.416556][ T5832] usb 2-1: config 0 descriptor?? [ 1092.419281][ T6053] veth0_macvtap: left promiscuous mode [ 1092.441893][ T6053] veth1_vlan: left promiscuous mode [ 1092.447435][ T6053] veth0_vlan: left promiscuous mode [ 1092.463794][ T5832] gspca_main: se401-2.14.0 probing 047d:5003 [ 1092.883225][ T5832] gspca_se401: Bayer format not supported! [ 1093.118913][ T7025] usb 2-1: USB disconnect, device number 8 [ 1093.176205][ T6053] team0 (unregistering): Port device team_slave_1 removed [ 1093.212075][ T6053] team0 (unregistering): Port device team_slave_0 removed [ 1093.386029][ T5832] usb 6-1: USB disconnect, device number 32 [ 1093.677565][ T9881] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1093.869154][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.899693][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.993882][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.086249][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.160093][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.271034][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.610226][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1094.623043][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1094.632178][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.646467][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.741874][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.937904][T10153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1097.392767][ T7543] Bluetooth: hci1: command tx timeout [ 1100.350605][ T7543] Bluetooth: hci1: command tx timeout [ 1100.986300][ T9955] hsr_slave_0: entered promiscuous mode [ 1101.063664][ T9955] hsr_slave_1: entered promiscuous mode [ 1101.122972][ T9955] debugfs: 'hsr0' already exists in 'hsr' [ 1101.128875][ T9955] Cannot create hsr debugfs directory [ 1101.223885][T10158] fuse: Unknown parameter 'grou00000000000000000000' [ 1101.487151][ T9974] hsr_slave_0: entered promiscuous mode [ 1101.553851][ T9974] hsr_slave_1: entered promiscuous mode [ 1101.585531][ T9974] debugfs: 'hsr0' already exists in 'hsr' [ 1101.604971][ T9974] Cannot create hsr debugfs directory [ 1102.419818][ T7543] Bluetooth: hci1: command tx timeout [ 1102.519709][ T5832] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1102.603884][ T7543] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1102.893617][ T5832] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1102.936772][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.991853][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.060935][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1103.150016][ T5832] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1103.190224][ T5832] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1103.198524][ T5832] usb 6-1: Manufacturer: syz [ 1103.256018][ T5832] usb 6-1: config 0 descriptor?? [ 1103.789911][ T5832] appleir 0003:05AC:8243.000D: item fetching failed at offset 0/1 [ 1103.818042][ T5832] appleir 0003:05AC:8243.000D: parse failed [ 1103.848354][ T5832] appleir 0003:05AC:8243.000D: probe with driver appleir failed with error -22 [ 1104.502666][ T7543] Bluetooth: hci1: command tx timeout [ 1105.683269][ T5832] usb 6-1: USB disconnect, device number 33 [ 1105.810633][T10149] chnl_net:caif_netlink_parms(): no params data found [ 1105.854956][ T9955] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1105.967285][T10190] comedi comedi3: pcm3724: I/O port conflict (0x20024,16) [ 1106.006473][ T9955] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1106.083033][ T9955] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1106.221661][ T146] bridge_slave_1: left allmulticast mode [ 1106.235717][ T146] bridge_slave_1: left promiscuous mode [ 1106.255081][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.278481][ T146] bridge_slave_0: left allmulticast mode [ 1106.287774][ T146] bridge_slave_0: left promiscuous mode [ 1106.307545][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.627733][T10194] fuse: Unknown parameter 'grou00000000000000000000' [ 1106.674197][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1106.717965][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1106.745681][ T146] bond0 (unregistering): Released all slaves [ 1106.767416][ T9955] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1107.147264][ T146] hsr_slave_0: left promiscuous mode [ 1107.185105][ T146] hsr_slave_1: left promiscuous mode [ 1107.206628][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1107.241802][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1107.881726][ T146] team0 (unregistering): Port device team_slave_1 removed [ 1107.949100][ T146] team0 (unregistering): Port device team_slave_0 removed [ 1108.231228][ T7543] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1110.383166][ T9974] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1110.439292][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.463714][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.482981][T10149] bridge_slave_0: entered allmulticast mode [ 1110.517877][T10149] bridge_slave_0: entered promiscuous mode [ 1110.554502][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.600191][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.626393][T10149] bridge_slave_1: entered allmulticast mode [ 1110.646431][T10149] bridge_slave_1: entered promiscuous mode [ 1110.676099][ T9974] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1110.787946][ T9974] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1110.836886][ T9974] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1110.889918][ T7768] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1111.006482][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.052044][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.066540][ T7768] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1111.089198][ T7768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.118311][ T7768] usb 2-1: config 0 descriptor?? [ 1111.131989][ T7768] cp210x 2-1:0.0: cp210x converter detected [ 1111.265264][T10149] team0: Port device team_slave_0 added [ 1111.327325][T10149] team0: Port device team_slave_1 added [ 1111.347704][ T7768] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1111.645046][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.660024][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.720872][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.753228][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.761432][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.792779][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.070946][ T39] usb 2-1: USB disconnect, device number 9 [ 1112.140675][ T39] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1112.166655][T10149] hsr_slave_0: entered promiscuous mode [ 1112.169193][ T39] cp210x 2-1:0.0: device disconnected [ 1112.193784][T10149] hsr_slave_1: entered promiscuous mode [ 1112.247178][T10149] debugfs: 'hsr0' already exists in 'hsr' [ 1112.283713][T10149] Cannot create hsr debugfs directory [ 1112.937150][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.174966][T10219] comedi comedi3: pcm3724: I/O port conflict (0x20024,16) [ 1113.891207][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1113.902350][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1113.922364][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1113.954939][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1113.966566][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1114.404927][T10227] fuse: Unknown parameter 'grou00000000000000000000' [ 1114.629008][T10149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1114.701076][T10149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1114.797512][T10149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1114.884391][T10149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1115.566710][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1115.584430][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1115.595207][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1115.618521][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1115.633407][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1115.750719][ T34] bridge_slave_1: left allmulticast mode [ 1115.756550][ T34] bridge_slave_1: left promiscuous mode [ 1115.783044][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.800702][ T34] bridge_slave_0: left allmulticast mode [ 1115.816895][ T34] bridge_slave_0: left promiscuous mode [ 1115.834253][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.037196][ T5785] Bluetooth: hci2: command tx timeout [ 1116.345086][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.451053][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1116.509308][ T34] bond0 (unregistering): Released all slaves [ 1116.820424][ T34] hsr_slave_0: left promiscuous mode [ 1116.831030][ T34] hsr_slave_1: left promiscuous mode [ 1116.849207][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.862867][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1117.779939][ T5785] Bluetooth: hci4: command tx timeout [ 1117.803992][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1117.922049][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1118.046992][T10254] fuse: Unknown parameter 'group_i00000000000000000000' [ 1118.099916][ T5785] Bluetooth: hci2: command tx timeout [ 1119.248519][T10221] chnl_net:caif_netlink_parms(): no params data found [ 1119.859996][ T5785] Bluetooth: hci4: command tx timeout [ 1120.189881][ T5785] Bluetooth: hci2: command tx timeout [ 1120.869329][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.179939][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.187580][T10221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.224443][T10221] bridge_slave_0: entered allmulticast mode [ 1121.244814][T10221] bridge_slave_0: entered promiscuous mode [ 1121.280031][T10221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.287499][T10221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.302417][T10221] bridge_slave_1: entered allmulticast mode [ 1121.335994][T10221] bridge_slave_1: entered promiscuous mode [ 1121.350717][T10236] chnl_net:caif_netlink_parms(): no params data found [ 1121.498236][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.804570][T10221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.868453][T10221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.939967][ T5785] Bluetooth: hci4: command tx timeout [ 1121.952202][T10282] fuse: Unknown parameter 'group_i00000000000000000000' [ 1122.144118][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.151664][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.260503][ T5785] Bluetooth: hci2: command tx timeout [ 1122.481055][T10221] team0: Port device team_slave_0 added [ 1122.572134][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.579867][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.678663][T10221] team0: Port device team_slave_1 added [ 1122.693783][ T7339] bridge_slave_1: left allmulticast mode [ 1122.716027][ T7339] bridge_slave_1: left promiscuous mode [ 1122.738728][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.777160][ T7339] bridge_slave_0: left allmulticast mode [ 1122.788357][ T7339] bridge_slave_0: left promiscuous mode [ 1122.800929][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.322990][ T7339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.408004][ T7339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.487394][ T7339] bond0 (unregistering): Released all slaves [ 1125.033839][ T5785] Bluetooth: hci4: command tx timeout [ 1127.231085][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1132.355825][ T7339] hsr_slave_0: left promiscuous mode [ 1132.370930][ T7339] hsr_slave_1: left promiscuous mode [ 1132.394654][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.412096][ T7339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.428745][T10311] fuse: Unknown parameter 'group_i00000000000000000000' [ 1133.171976][ T7339] team0 (unregistering): Port device team_slave_1 removed [ 1133.241482][ T7339] team0 (unregistering): Port device team_slave_0 removed [ 1134.392050][T10236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.410688][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.435191][T10236] bridge_slave_0: entered allmulticast mode [ 1134.445349][T10236] bridge_slave_0: entered promiscuous mode [ 1134.496108][T10221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.550293][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.578309][T10221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.628140][T10221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.645383][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1134.675427][T10221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.812027][T10236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.845098][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.884043][T10236] bridge_slave_1: entered allmulticast mode [ 1135.023499][T10236] bridge_slave_1: entered promiscuous mode [ 1137.519348][T10236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.619121][T10332] fuse: Unknown parameter 'group_id00000000000000000000' [ 1137.630067][T10236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1138.027405][T10221] hsr_slave_0: entered promiscuous mode [ 1138.082280][T10221] hsr_slave_1: entered promiscuous mode [ 1138.092794][T10221] debugfs: 'hsr0' already exists in 'hsr' [ 1138.104760][T10221] Cannot create hsr debugfs directory [ 1138.227572][T10236] team0: Port device team_slave_0 added [ 1138.440925][T10236] team0: Port device team_slave_1 added [ 1139.008600][T10236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.049785][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.115444][T10236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.208566][T10236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.236608][T10236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.294317][T10236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.212034][T10236] hsr_slave_0: entered promiscuous mode [ 1140.221902][T10354] fuse: Unknown parameter 'group_id00000000000000000000' [ 1140.248057][T10236] hsr_slave_1: entered promiscuous mode [ 1140.275358][T10236] debugfs: 'hsr0' already exists in 'hsr' [ 1140.281505][T10236] Cannot create hsr debugfs directory [ 1141.047285][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.016891][T10373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.826'. [ 1143.229940][T10148] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1143.409894][T10148] usb 2-1: Using ep0 maxpacket: 32 [ 1143.443598][T10148] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1143.488727][T10148] usb 2-1: config 0 has no interface number 0 [ 1143.522445][T10148] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1143.567744][T10148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.609805][T10148] usb 2-1: Product: syz [ 1143.614162][T10148] usb 2-1: Manufacturer: syz [ 1143.618986][T10148] usb 2-1: SerialNumber: syz [ 1143.739442][T10148] usb 2-1: config 0 descriptor?? [ 1144.070811][T10221] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1144.172831][T10221] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1144.183949][T10378] fuse: Unknown parameter 'group_id00000000000000000000' [ 1144.265301][T10221] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1144.308380][T10221] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1144.444547][T10148] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1144.531001][T10148] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1144.597373][T10148] usb 2-1: USB disconnect, device number 10 [ 1144.707577][T10149] veth0_vlan: entered promiscuous mode [ 1144.935870][T10149] veth1_vlan: entered promiscuous mode [ 1146.329884][T10236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1146.436558][T10236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1146.478439][T10149] veth0_macvtap: entered promiscuous mode [ 1146.524118][T10236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1146.669167][T10236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1147.085616][T10149] veth1_macvtap: entered promiscuous mode [ 1147.405738][T10221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.638455][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.789038][T10221] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.094763][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.275322][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.283079][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.421252][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.428701][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.476172][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.513142][T10401] fuse: Bad value for 'user_id' [ 1148.518198][T10401] fuse: Bad value for 'user_id' [ 1148.589959][ T3501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.623941][ T3501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.685638][ T3501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.360863][T10236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.629240][T10236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.836306][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.843902][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.886700][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.894365][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.094709][T10221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.746809][T10236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.526830][ T7543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1155.541628][ T7543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1155.552228][ T7543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1155.594783][ T7543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1155.617418][ T7543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1155.994037][T10221] veth0_vlan: entered promiscuous mode [ 1156.324079][T10221] veth1_vlan: entered promiscuous mode [ 1157.394869][T10236] veth0_vlan: entered promiscuous mode [ 1157.587325][T10221] veth0_macvtap: entered promiscuous mode [ 1157.700128][ T7543] Bluetooth: hci0: command tx timeout [ 1157.925708][T10221] veth1_macvtap: entered promiscuous mode [ 1158.009070][T10236] veth1_vlan: entered promiscuous mode [ 1158.191861][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.498409][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.645840][ C1] ===================================================== [ 1158.653159][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1158.661902][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1158.668283][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1158.675358][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1158.681507][ C1] sysvec_call_function_single+0x7c/0x90 [ 1158.687331][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1158.693448][ C1] __msan_metadata_ptr_for_load_8+0x2c/0x40 [ 1158.699492][ C1] is_last_task_frame+0x2e/0x370 [ 1158.704676][ C1] unwind_next_frame+0x60/0x350 [ 1158.709853][ C1] arch_stack_walk+0x1b0/0x280 [ 1158.714831][ C1] stack_trace_save+0xc2/0x100 [ 1158.719788][ C1] kmsan_save_stack_with_flags+0x2f/0x60 [ 1158.725550][ C1] kmsan_alloc_page+0x169/0x210 [ 1158.730536][ C1] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1158.736648][ C1] alloc_pages_mpol+0x328/0x860 [ 1158.741677][ C1] folio_alloc_mpol_noprof+0x56/0x1d0 [ 1158.747210][ C1] shmem_alloc_and_add_folio+0xc54/0x1bd0 [ 1158.753162][ C1] shmem_get_folio_gfp+0xad3/0x1fc0 [ 1158.758516][ C1] shmem_fault+0x1e4/0x6b0 [ 1158.763080][ C1] __do_fault+0x136/0x5c0 [ 1158.767605][ C1] do_pte_missing+0x1874/0x73d0 [ 1158.772582][ C1] handle_mm_fault+0x2d96/0x6fc0 [ 1158.777644][ C1] __get_user_pages+0x2eff/0x5f00 [ 1158.782827][ C1] __mm_populate+0x626/0xab0 [ 1158.787529][ C1] vm_mmap_pgoff+0x577/0x760 [ 1158.792244][ C1] ksys_mmap_pgoff+0x16b/0x7d0 [ 1158.797119][ C1] __x64_sys_mmap+0x19c/0x260 [ 1158.801983][ C1] x64_sys_call+0x18cd/0x3ea0 [ 1158.806810][ C1] do_syscall_64+0x134/0xf80 [ 1158.811564][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.817575][ C1] [ 1158.820034][ C1] Local variable reuse.i created at: [ 1158.825375][ C1] mas_wr_store_entry+0x14bd/0x96d0 [ 1158.830694][ C1] mas_store_prealloc+0x1834/0x1e60 [ 1158.836066][ C1] [ 1158.838454][ C1] CPU: 1 UID: 0 PID: 10492 Comm: syz.5.849 Not tainted syzkaller #0 PREEMPT(full) [ 1158.847873][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1158.858035][ C1] ===================================================== [ 1158.865022][ C1] Disabling lock debugging due to kernel taint [ 1158.871241][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1158.877753][ C1] CPU: 1 UID: 0 PID: 10492 Comm: syz.5.849 Tainted: G B syzkaller #0 PREEMPT(full) [ 1158.888754][ C1] Tainted: [B]=BAD_PAGE [ 1158.892967][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1158.903284][ C1] Call Trace: [ 1158.906638][ C1] [ 1158.909553][ C1] __dump_stack+0x26/0x30 [ 1158.914025][ C1] dump_stack_lvl+0x50/0x1c0 [ 1158.918755][ C1] ? dump_stack+0x12/0x25 [ 1158.923221][ C1] dump_stack+0x1e/0x25 [ 1158.927508][ C1] vpanic+0x7b4/0x1430 [ 1158.931771][ C1] panic+0x15d/0x160 [ 1158.935881][ C1] kmsan_report+0x31a/0x320 [ 1158.940549][ C1] ? __msan_warning+0x1b/0x30 [ 1158.945367][ C1] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1158.951923][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1158.959180][ C1] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1158.965390][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 1158.971320][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1158.977624][ C1] ? __msan_metadata_ptr_for_load_8+0x2c/0x40 [ 1158.983872][ C1] ? is_last_task_frame+0x2e/0x370 [ 1158.989416][ C1] ? unwind_next_frame+0x60/0x350 [ 1158.994627][ C1] ? arch_stack_walk+0x1b0/0x280 [ 1158.999733][ C1] ? stack_trace_save+0xc2/0x100 [ 1159.004834][ C1] ? kmsan_save_stack_with_flags+0x2f/0x60 [ 1159.010797][ C1] ? kmsan_alloc_page+0x169/0x210 [ 1159.015971][ C1] ? __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1159.022182][ C1] ? alloc_pages_mpol+0x328/0x860 [ 1159.027369][ C1] ? folio_alloc_mpol_noprof+0x56/0x1d0 [ 1159.033064][ C1] ? shmem_alloc_and_add_folio+0xc54/0x1bd0 [ 1159.039155][ C1] ? shmem_get_folio_gfp+0xad3/0x1fc0 [ 1159.044694][ C1] ? shmem_fault+0x1e4/0x6b0 [ 1159.049440][ C1] ? __do_fault+0x136/0x5c0 [ 1159.054077][ C1] ? do_pte_missing+0x1874/0x73d0 [ 1159.059247][ C1] ? handle_mm_fault+0x2d96/0x6fc0 [ 1159.064494][ C1] ? __get_user_pages+0x2eff/0x5f00 [ 1159.069822][ C1] ? __mm_populate+0x626/0xab0 [ 1159.074889][ C1] ? vm_mmap_pgoff+0x577/0x760 [ 1159.079787][ C1] ? ksys_mmap_pgoff+0x16b/0x7d0 [ 1159.084840][ C1] ? __x64_sys_mmap+0x19c/0x260 [ 1159.089830][ C1] ? x64_sys_call+0x18cd/0x3ea0 [ 1159.094834][ C1] ? do_syscall_64+0x134/0xf80 [ 1159.099762][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.106049][ C1] ? clockevents_program_event+0x58d/0xcb0 [ 1159.112164][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.117436][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.122704][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1159.129212][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.134508][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1159.140678][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.145986][ C1] __msan_warning+0x1b/0x30 [ 1159.150649][ C1] __flush_smp_call_function_queue+0x362/0x18e0 [ 1159.157065][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1159.164230][ C1] __sysvec_call_function_single+0x4b/0x3e0 [ 1159.170371][ C1] sysvec_call_function_single+0x7c/0x90 [ 1159.176215][ C1] [ 1159.179205][ C1] [ 1159.182209][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1159.188334][ C1] RIP: 0010:__msan_metadata_ptr_for_load_8+0x2c/0x40 [ 1159.195171][ C1] Code: 1e fa 55 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 08 00 00 00 31 d2 e8 2c 27 00 00 48 89 5d f0 ff 75 f0 9d <48> 83 c4 10 5b 5d e9 c9 14 5c 0e cc 0f 1f 84 00 00 00 00 00 90 90 [ 1159.214920][ C1] RSP: 0018:ffff88812c906dc8 EFLAGS: 00000282 [ 1159.221132][ C1] RAX: ffff88812c106ee0 RBX: 0000000000000282 RCX: 00000000005dd91e [ 1159.229218][ C1] RDX: ffff88812c506ee0 RSI: 0000000000000001 RDI: ffff88812c906ee0 [ 1159.237325][ C1] RBP: ffff88812c906de0 R08: ffffea000000000f R09: ffff88812c908000 [ 1159.245497][ C1] R10: ffff88812c904000 R11: ffffffff81dcd6d0 R12: 0000000000000000 [ 1159.253572][ C1] R13: ffff88812c906f00 R14: ffff88810076cd78 R15: ffff88812c906ea8 [ 1159.261663][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1159.268024][ C1] is_last_task_frame+0x2e/0x370 [ 1159.273137][ C1] unwind_next_frame+0x60/0x350 [ 1159.278153][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1159.284480][ C1] arch_stack_walk+0x1b0/0x280 [ 1159.289400][ C1] ? kmsan_save_stack_with_flags+0x2f/0x60 [ 1159.295371][ C1] stack_trace_save+0xc2/0x100 [ 1159.300286][ C1] kmsan_save_stack_with_flags+0x2f/0x60 [ 1159.306069][ C1] ? kmsan_save_stack_with_flags+0x2f/0x60 [ 1159.312033][ C1] ? rmqueue_pcplist+0x235/0x3c0 [ 1159.317145][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.322414][ C1] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1159.328400][ C1] ? prep_new_page+0x9f/0x1b0 [ 1159.333219][ C1] ? get_page_from_freelist+0x18e0/0x1990 [ 1159.339199][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.344474][ C1] kmsan_alloc_page+0x169/0x210 [ 1159.349484][ C1] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1159.355554][ C1] alloc_pages_mpol+0x328/0x860 [ 1159.360573][ C1] folio_alloc_mpol_noprof+0x56/0x1d0 [ 1159.366092][ C1] ? get_task_policy+0xf6/0x140 [ 1159.371082][ C1] shmem_alloc_and_add_folio+0xc54/0x1bd0 [ 1159.376993][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1159.382971][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1159.389764][ C1] shmem_get_folio_gfp+0xad3/0x1fc0 [ 1159.395162][ C1] shmem_fault+0x1e4/0x6b0 [ 1159.399777][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 1159.404871][ C1] __do_fault+0x136/0x5c0 [ 1159.409334][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.414598][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1159.420579][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1159.426305][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1159.431934][ C1] do_pte_missing+0x1874/0x73d0 [ 1159.436965][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1159.442279][ C1] handle_mm_fault+0x2d96/0x6fc0 [ 1159.447415][ C1] ? follow_page_pte+0x4e7/0x15b0 [ 1159.452617][ C1] __get_user_pages+0x2eff/0x5f00 [ 1159.457796][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1159.463923][ C1] __mm_populate+0x626/0xab0 [ 1159.468689][ C1] vm_mmap_pgoff+0x577/0x760 [ 1159.473469][ C1] ksys_mmap_pgoff+0x16b/0x7d0 [ 1159.478386][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1159.484371][ C1] __x64_sys_mmap+0x19c/0x260 [ 1159.489225][ C1] x64_sys_call+0x18cd/0x3ea0 [ 1159.494081][ C1] do_syscall_64+0x134/0xf80 [ 1159.498817][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1159.503639][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1159.509679][ C1] RIP: 0033:0x7f535c79bf79 [ 1159.514229][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1159.533989][ C1] RSP: 002b:00007f535d70c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1159.542566][ C1] RAX: ffffffffffffffda RBX: 00007f535ca15fa0 RCX: 00007f535c79bf79 [ 1159.550662][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1159.558742][ C1] RBP: 00007f535c8327e0 R08: ffffffffffffffff R09: 0000000000000000 [ 1159.566818][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1159.574898][ C1] R13: 00007f535ca16038 R14: 00007f535ca15fa0 R15: 00007ffdf986b638 [ 1159.583026][ C1] [ 1159.586566][ C1] Kernel Offset: disabled [ 1159.590928][ C1] Rebooting in 86400 seconds..