last executing test programs: 3m8.017774354s ago: executing program 2 (id=3): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xff, 0x0, 0x4e9, 0x1, 0x6, 0x1}}, {0x4}}]}]}, 0x48}}, 0x0) 3m7.428528197s ago: executing program 2 (id=6): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 3m6.902070086s ago: executing program 1 (id=2): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) close_range(r0, r2, 0x0) 3m6.420269718s ago: executing program 2 (id=7): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r6, {0xb, 0x19}, {0xffe2, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4002810}, 0x0) 3m4.552229867s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000002080)=""/4086, 0xff6}, {&(0x7f0000000740)=""/181, 0xb5}], 0x2}, 0x7ff}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 3m3.810525334s ago: executing program 1 (id=9): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x2102, 0x24) 3m3.008696655s ago: executing program 2 (id=10): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000000)=0x1) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) 3m2.280967795s ago: executing program 1 (id=11): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x4, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2], 0xf000, 0x82106}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m1.81177358s ago: executing program 2 (id=14): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/50, 0x32}, {0x0}], 0x2}, 0xffff3435}], 0x1, 0x300, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m58.236715423s ago: executing program 32 (id=14): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/50, 0x32}, {0x0}], 0x2}, 0xffff3435}], 0x1, 0x300, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 2m58.111177148s ago: executing program 1 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2m57.127672819s ago: executing program 1 (id=19): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x0, 0x0, 0x5) 2m52.070143564s ago: executing program 1 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) close(0x3) 2m36.445411117s ago: executing program 33 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x3bb) dup(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) close(0x3) 1m12.231851116s ago: executing program 6 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) 1m11.180065283s ago: executing program 6 (id=177): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r0, 0x708, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0xd0, 0x3, &(0x7f0000000080)={0x13, "42cae8b3df20afbcfcdd178c50e5d84526580489979a473f112453b228922bd31c"}}) 1m10.335594484s ago: executing program 6 (id=181): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x6, 0x3ff, @empty, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 1m9.5276103s ago: executing program 6 (id=185): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$ppp(0xffffffffffffff9c, 0x0, 0x64703, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec23, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/202, 0xca}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m7.639688754s ago: executing program 5 (id=191): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xffffffffffffffff) 1m6.992708133s ago: executing program 6 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb5, 0x5, 0x6, 0x0, 0x7fffffff, 0x4, 0xf, 0xc0, 0x40, 0x4, 0x60, 0x6, 0x0, 0x6e8, 0xffffbfc3, 0xf0, 0x6, 0x0, 0x7, '\x00', 0xcb, 0xffffffffffffff59}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x8, 0x2}, {0x80, 0x0, 0xfe}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x8, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}]}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) 1m5.863202528s ago: executing program 5 (id=197): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002180)=ANY=[@ANYBLOB="10"], 0x110) ftruncate(r0, 0x3) 1m5.760464248s ago: executing program 6 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x68}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000002280)={0x90000004}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xfea, &(0x7f0000000780)={0x0, 0xe317, 0x1000, 0xfffffffe}, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 1m4.374741578s ago: executing program 5 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1m2.968147093s ago: executing program 5 (id=204): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="5200004eb54738640675088678a61608b51dce9b39860157e81d50ade97e00bb777c15e1435f53c72ccb16563baf03608cc8c505e0150f095ee2722341ec994767cce0db81df"]) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 1m1.601315573s ago: executing program 5 (id=207): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0xb, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m0.160867327s ago: executing program 4 (id=211): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000880)={0x1, 0xfffffffe, 0x8000, 0xb, 0xfffffffffffff000, 0x19b9, 0xfffffffffffffd2b, 0x0, 0xfffffffffffffff5, 0x4, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000540)) 59.971318293s ago: executing program 5 (id=213): socket$kcm(0xf, 0x5, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r5, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xea) syz_open_dev$midi(&(0x7f0000000040), 0x6, 0x14800) 58.579818879s ago: executing program 4 (id=217): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x58, &(0x7f0000000200)=ANY=[@ANYBLOB="5200004eb54738640675088678a61608b51dce9b39860157e81d50ade97e00bb777c15e1435f53c72ccb16563baf03608cc8c505e0150f095ee2722341ec994767cce0db81df"]) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) 56.767522044s ago: executing program 4 (id=219): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @private2}, r1, 0x8}}, 0x48) 54.049476732s ago: executing program 4 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) 53.002960816s ago: executing program 4 (id=222): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, &(0x7f0000000700)={0x40, 0xd, 0xf, {0xf, 0xa, "8d267c7b9fec856cbbc97b7d6a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000440)={0x2}) 49.72337723s ago: executing program 34 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x3, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) writev(r2, &(0x7f0000004900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$alg(0x26, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRESOCT=r5, @ANYRESDEC=r5], 0x68}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000002280)={0x90000004}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) syz_open_dev$mouse(&(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xfea, &(0x7f0000000780)={0x0, 0xe317, 0x1000, 0xfffffffe}, 0x0, 0x0) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) 49.516736231s ago: executing program 4 (id=228): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xdf0}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/68, 0x44}, {0x0}, {&(0x7f00000029c0)=""/174, 0xae}, {&(0x7f0000002a80)=""/230, 0xe6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7d}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x8, 0x20, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 44.062726489s ago: executing program 35 (id=213): socket$kcm(0xf, 0x5, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) chdir(0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r5, &(0x7f0000000c00), 0x0}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000008000, 0x0, 0xd4}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x10, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000980)=ANY=[], 0x24c) listen(0xffffffffffffffff, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xea) syz_open_dev$midi(&(0x7f0000000040), 0x6, 0x14800) 34.16925202s ago: executing program 36 (id=228): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xdf0}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/68, 0x44}, {0x0}, {&(0x7f00000029c0)=""/174, 0xae}, {&(0x7f0000002a80)=""/230, 0xe6}], 0x5}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x7d}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x8, 0x20, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x70) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 10.254370182s ago: executing program 0 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x0, 0x0, 0x3}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000f59ffc)=0x20024, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x4000) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @mcast2, 0x1}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x1, 0x1, 0x1d}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) fstat(r7, &(0x7f00000004c0)) 9.144161337s ago: executing program 0 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) 8.283053048s ago: executing program 0 (id=261): unshare(0x2c020400) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xc5000002) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0x9, 0x1, 0x0, {0x3, 0x69ec25ea, 0xfca, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0x0, 0xffffffffffffffff, 0x1008, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)) 5.903288476s ago: executing program 3 (id=263): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.090220901s ago: executing program 3 (id=264): r0 = epoll_create1(0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000000}) socket(0x2, 0x80805, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 4.611176296s ago: executing program 0 (id=265): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4.217263824s ago: executing program 3 (id=266): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @loopback, 0x4e24, 0x1, 'none\x00', 0x0, 0x32bb, 0x9}, {@remote, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 3.323542367s ago: executing program 3 (id=267): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002080)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x2b, 0x3, 0x3, 0x20}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tos={{0x28}, {0x8, 0x9, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 2.496666189s ago: executing program 0 (id=268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x44, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4f27f69b0218186e}, 0x10) 2.236807459s ago: executing program 3 (id=269): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f00000003c0)=[{0x0}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x6, 0x5, 0xfffb, 0x7fff, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @private0, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0) 1.764125441s ago: executing program 0 (id=270): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x835}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140643000000000e000a001000000086419820dd61", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000, 0x9, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa2, 0x2, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800000000000004, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000300)=0x3) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x20000f7e) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.455686857s ago: executing program 3 (id=271): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0xd0, 0x4, &(0x7f0000000080)={0x13, "42cae8b3df20afbcfcdd178c50e5d84526580489979a473f112453b228922bd31c"}}) 1.023298345s ago: executing program 7 (id=226): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002180)=ANY=[@ANYBLOB="10"], 0x110) ftruncate(r0, 0x3) 0s ago: executing program 7 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x2008040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 190.882125][ T5774] cgroup: Unknown subsys name 'net' [ 191.034719][ T5774] cgroup: Unknown subsys name 'cpuset' [ 191.053024][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.558175][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.565309][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.395732][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 248.776702][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.785000][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 248.793804][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.802171][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.811830][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.823874][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.825610][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 248.837151][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.840562][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.853995][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 248.862976][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.891070][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 248.900641][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.930521][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.941595][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.950110][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.958506][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.971221][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.987718][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 249.019551][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.027697][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.050221][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.061211][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.077697][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.099641][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.479071][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 250.671630][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 250.696187][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 250.993902][ T5798] Bluetooth: hci0: command tx timeout [ 251.052725][ T5798] Bluetooth: hci2: command tx timeout [ 251.058599][ T5798] Bluetooth: hci1: command tx timeout [ 251.144398][ T52] Bluetooth: hci3: command tx timeout [ 251.224263][ T52] Bluetooth: hci4: command tx timeout [ 251.372702][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.380428][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.388406][ T5792] bridge_slave_0: entered allmulticast mode [ 251.398270][ T5792] bridge_slave_0: entered promiscuous mode [ 251.446076][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.454076][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.461936][ T5792] bridge_slave_1: entered allmulticast mode [ 251.471936][ T5792] bridge_slave_1: entered promiscuous mode [ 251.536058][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 251.734479][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.874299][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.894517][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 251.916847][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.927353][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.935339][ T5796] bridge_slave_0: entered allmulticast mode [ 251.945143][ T5796] bridge_slave_0: entered promiscuous mode [ 252.147438][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.155709][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.163551][ T5796] bridge_slave_1: entered allmulticast mode [ 252.173198][ T5796] bridge_slave_1: entered promiscuous mode [ 252.185359][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.194872][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.202881][ T5791] bridge_slave_0: entered allmulticast mode [ 252.212760][ T5791] bridge_slave_0: entered promiscuous mode [ 252.281574][ T5792] team0: Port device team_slave_0 added [ 252.333171][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.340881][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.351162][ T5791] bridge_slave_1: entered allmulticast mode [ 252.361015][ T5791] bridge_slave_1: entered promiscuous mode [ 252.434272][ T5792] team0: Port device team_slave_1 added [ 252.712235][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.820114][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.828588][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.836719][ T5790] bridge_slave_0: entered allmulticast mode [ 252.846676][ T5790] bridge_slave_0: entered promiscuous mode [ 252.862691][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.870243][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.897362][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.928589][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.948616][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.997936][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.005802][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.013859][ T5790] bridge_slave_1: entered allmulticast mode [ 253.023673][ T5790] bridge_slave_1: entered promiscuous mode [ 253.034751][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.042127][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.068949][ T52] Bluetooth: hci0: command tx timeout [ 253.074653][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.096793][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.132928][ T52] Bluetooth: hci1: command tx timeout [ 253.138721][ T52] Bluetooth: hci2: command tx timeout [ 253.218330][ T52] Bluetooth: hci3: command tx timeout [ 253.293557][ T52] Bluetooth: hci4: command tx timeout [ 253.398105][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.406395][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.414429][ T5804] bridge_slave_0: entered allmulticast mode [ 253.424177][ T5804] bridge_slave_0: entered promiscuous mode [ 253.444188][ T5791] team0: Port device team_slave_0 added [ 253.460366][ T5796] team0: Port device team_slave_0 added [ 253.468337][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.476265][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.484250][ T5804] bridge_slave_1: entered allmulticast mode [ 253.494373][ T5804] bridge_slave_1: entered promiscuous mode [ 253.520220][ T5796] team0: Port device team_slave_1 added [ 253.578759][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.646902][ T5791] team0: Port device team_slave_1 added [ 253.748829][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.761114][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.768640][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.795195][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.852196][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.940400][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.947890][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.975867][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.032050][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.128653][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.136345][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.163251][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.224731][ T5792] hsr_slave_0: entered promiscuous mode [ 254.234800][ T5792] hsr_slave_1: entered promiscuous mode [ 254.261991][ T5790] team0: Port device team_slave_0 added [ 254.334727][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.341943][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.370091][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.426082][ T5790] team0: Port device team_slave_1 added [ 254.537054][ T5804] team0: Port device team_slave_0 added [ 254.656726][ T5804] team0: Port device team_slave_1 added [ 254.667715][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.675508][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.702471][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.826395][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.833748][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.860382][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.906417][ T5796] hsr_slave_0: entered promiscuous mode [ 254.916740][ T5796] hsr_slave_1: entered promiscuous mode [ 254.924778][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.932910][ T5796] Cannot create hsr debugfs directory [ 255.033375][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.040579][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.067322][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.132883][ T52] Bluetooth: hci0: command tx timeout [ 255.189121][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.197231][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.224132][ T52] Bluetooth: hci1: command tx timeout [ 255.230949][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.232993][ T52] Bluetooth: hci2: command tx timeout [ 255.259169][ T5791] hsr_slave_0: entered promiscuous mode [ 255.269365][ T5791] hsr_slave_1: entered promiscuous mode [ 255.278423][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.286683][ T5791] Cannot create hsr debugfs directory [ 255.292912][ T52] Bluetooth: hci3: command tx timeout [ 255.372766][ T52] Bluetooth: hci4: command tx timeout [ 255.598739][ T5790] hsr_slave_0: entered promiscuous mode [ 255.609121][ T5790] hsr_slave_1: entered promiscuous mode [ 255.618132][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.626050][ T5790] Cannot create hsr debugfs directory [ 255.892920][ T5804] hsr_slave_0: entered promiscuous mode [ 255.903126][ T5804] hsr_slave_1: entered promiscuous mode [ 255.912204][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.920426][ T5804] Cannot create hsr debugfs directory [ 256.369146][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 256.558515][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 256.643871][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 256.767471][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.212258][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.214305][ T52] Bluetooth: hci0: command tx timeout [ 257.289640][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.303955][ T52] Bluetooth: hci2: command tx timeout [ 257.309822][ T52] Bluetooth: hci1: command tx timeout [ 257.380905][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.388744][ T52] Bluetooth: hci3: command tx timeout [ 257.410423][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.457568][ T52] Bluetooth: hci4: command tx timeout [ 257.471829][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.496243][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.548149][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.620875][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.838713][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.999390][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.028031][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.094961][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.140224][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.178038][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 258.205073][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 258.239113][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 258.694536][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.020836][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.085123][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.109722][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.146049][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.153957][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.307411][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.348532][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.356475][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.464504][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.507144][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.515004][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.590382][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.667475][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.675715][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.694623][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.702798][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.727818][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.735577][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.956055][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.160567][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.168399][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.245387][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.325127][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.395390][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.403380][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.641820][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.781984][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.789855][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.926221][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.934035][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.805147][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.338697][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.377966][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.486240][ T5792] veth0_vlan: entered promiscuous mode [ 262.636586][ T5792] veth1_vlan: entered promiscuous mode [ 262.767553][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.896652][ T5796] veth0_vlan: entered promiscuous mode [ 263.082159][ T5792] veth0_macvtap: entered promiscuous mode [ 263.098923][ T5796] veth1_vlan: entered promiscuous mode [ 263.285333][ T5792] veth1_macvtap: entered promiscuous mode [ 263.313583][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.332100][ T5790] veth0_vlan: entered promiscuous mode [ 263.491234][ T5790] veth1_vlan: entered promiscuous mode [ 263.517199][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.566540][ T5796] veth0_macvtap: entered promiscuous mode [ 263.600501][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.640200][ T5796] veth1_macvtap: entered promiscuous mode [ 263.736507][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.746295][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.755554][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.765070][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.990879][ T5804] veth0_vlan: entered promiscuous mode [ 264.036794][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.048637][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.064412][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.092266][ T5790] veth0_macvtap: entered promiscuous mode [ 264.142047][ T5804] veth1_vlan: entered promiscuous mode [ 264.225410][ T5790] veth1_macvtap: entered promiscuous mode [ 264.247704][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.260581][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.276005][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.404684][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.415415][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.424991][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.434280][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.541303][ T5804] veth0_macvtap: entered promiscuous mode [ 264.587734][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.600389][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.611173][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.621961][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.637448][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.676090][ T5804] veth1_macvtap: entered promiscuous mode [ 264.806283][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.818488][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.829023][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.839915][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.850725][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.861692][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.877334][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.914715][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.926610][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.936990][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.947786][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.963317][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.050937][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.063120][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.073389][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.084732][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.094986][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.106058][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.121813][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.147521][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.156901][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.166167][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.175328][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.327020][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.338348][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.349002][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.358960][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.472103][ T5791] veth0_vlan: entered promiscuous mode [ 265.619712][ T5791] veth1_vlan: entered promiscuous mode [ 266.058892][ T5791] veth0_macvtap: entered promiscuous mode [ 266.160703][ T5791] veth1_macvtap: entered promiscuous mode [ 266.408764][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.422182][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.433649][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.445072][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.455426][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.466356][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.477091][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.488166][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.503901][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.613818][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.624877][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.635406][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.646364][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.656662][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.667500][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.678048][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.689024][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.707000][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.029975][ T5791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.039517][ T5791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.048890][ T5791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.059768][ T5791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.688073][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.697651][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.874184][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.883146][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.018422][ T3945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.027395][ T3945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.332947][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.341363][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.728821][ T3945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.737946][ T3945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.755996][ T5792] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 272.177179][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.186003][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.261684][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.270996][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.607404][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.616257][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.976769][ T1552] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 273.242841][ T1552] usb 4-1: config 0 has no interfaces? [ 273.369190][ T1552] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 273.380688][ T1552] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.390929][ T1552] usb 4-1: Product: syz [ 273.395842][ T1552] usb 4-1: Manufacturer: syz [ 273.400840][ T1552] usb 4-1: SerialNumber: syz [ 273.453627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 273.597442][ T1552] usb 4-1: config 0 descriptor?? [ 273.873050][ T5874] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 274.013566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 274.073301][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 274.145745][ T5874] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.157402][ T5874] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.171037][ T5874] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.180587][ T5874] usb 1-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 274.190780][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.383057][ T5874] usb 1-1: config 0 descriptor?? [ 274.752819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 274.796000][ T191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.804818][ T191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.856564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 274.930240][ T5985] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 275.183867][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.193050][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.593681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 278.177165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 278.303594][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 278.310615][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 278.513078][ T5874] usb 1-1: USB disconnect, device number 2 [ 278.578373][ T3612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.815087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 278.826745][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 278.883749][ T3612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.113534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.188287][ T3612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.314954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.459216][ T3612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.686357][ T6019] Zero length message leads to an empty skb [ 280.257574][ T3612] bridge_slave_1: left allmulticast mode [ 280.264645][ T3612] bridge_slave_1: left promiscuous mode [ 280.271625][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.404669][ T3612] bridge_slave_0: left allmulticast mode [ 280.410631][ T3612] bridge_slave_0: left promiscuous mode [ 280.417720][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.784319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 281.474675][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.500990][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.583638][ T3612] bond0 (unregistering): Released all slaves [ 282.382633][ T3612] hsr_slave_0: left promiscuous mode [ 282.413026][ T3612] hsr_slave_1: left promiscuous mode [ 282.421381][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.433039][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.515787][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.523835][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.773511][ T3612] veth1_macvtap: left promiscuous mode [ 282.779489][ T3612] veth0_macvtap: left promiscuous mode [ 282.786112][ T3612] veth1_vlan: left promiscuous mode [ 282.791665][ T3612] veth0_vlan: left promiscuous mode [ 284.094770][ T3612] team0 (unregistering): Port device team_slave_1 removed [ 284.127860][ T3612] team0 (unregistering): Port device team_slave_0 removed [ 284.606582][ T6032] bridge1: entered promiscuous mode [ 284.994115][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.054314][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.077566][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.091646][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.108498][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.355626][ T6044] chnl_net:caif_netlink_parms(): no params data found [ 286.623603][ T5874] usb 4-1: USB disconnect, device number 2 [ 287.217740][ T52] Bluetooth: hci3: command tx timeout [ 287.350449][ T6060] program syz.3.20 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.784701][ T6064] loop2: detected capacity change from 0 to 7 [ 287.835329][ T6064] Dev loop2: unable to read RDB block 7 [ 287.841479][ T6064] loop2: AHDI p1 p2 p3 [ 287.847999][ T6064] loop2: partition table partially beyond EOD, truncated [ 287.856672][ T6064] loop2: p1 start 1601398130 is beyond EOD, truncated [ 287.868730][ T6064] loop2: p2 start 1702059890 is beyond EOD, truncated [ 288.240169][ T6044] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.248339][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.257897][ T6044] bridge_slave_0: entered allmulticast mode [ 288.275743][ T6044] bridge_slave_0: entered promiscuous mode [ 288.340132][ T6044] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.348916][ T6044] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.357264][ T6044] bridge_slave_1: entered allmulticast mode [ 288.367645][ T6044] bridge_slave_1: entered promiscuous mode [ 289.098937][ T6044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.276760][ T6044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.303847][ T52] Bluetooth: hci3: command tx timeout [ 290.415879][ T6044] team0: Port device team_slave_0 added [ 290.440541][ T6044] team0: Port device team_slave_1 added [ 291.122019][ T6072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.456405][ T52] Bluetooth: hci3: command tx timeout [ 293.132493][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.139487][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 293.537520][ T52] Bluetooth: hci3: command tx timeout [ 293.612320][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.620400][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.647120][ T6044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.857630][ T6044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.865597][ T6044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.892023][ T6044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.508106][ T6044] hsr_slave_0: entered promiscuous mode [ 294.522085][ T6044] hsr_slave_1: entered promiscuous mode [ 294.530077][ T6044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.538127][ T6044] Cannot create hsr debugfs directory [ 296.108509][ T6115] loop2: detected capacity change from 0 to 7 [ 296.118479][ T6115] Dev loop2: unable to read RDB block 7 [ 296.125724][ T6115] loop2: AHDI p1 p2 p3 [ 296.130396][ T6115] loop2: partition table partially beyond EOD, truncated [ 296.138913][ T6115] loop2: p1 start 1601398130 is beyond EOD, truncated [ 296.146279][ T6115] loop2: p2 start 1702059890 is beyond EOD, truncated [ 296.182187][ T6044] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 296.224104][ T6044] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 296.301472][ T6044] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 296.428186][ T6044] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.422886][ T6129] sctp: failed to load transform for md5: -2 [ 301.079722][ T6044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.521341][ T6044] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.721179][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.729164][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.914848][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.922747][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.271159][ T6044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.281984][ T6044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.940535][ T6159] bond_slave_0: entered promiscuous mode [ 302.947279][ T6159] bond_slave_1: entered promiscuous mode [ 302.953635][ T6159] vlan2: entered promiscuous mode [ 302.959125][ T6159] bond0: entered promiscuous mode [ 304.543016][ T6167] loop2: detected capacity change from 0 to 7 [ 304.739992][ T6167] Dev loop2: unable to read RDB block 7 [ 304.746912][ T6167] loop2: AHDI p1 p2 p3 [ 304.751602][ T6167] loop2: partition table partially beyond EOD, truncated [ 304.763940][ T6167] loop2: p1 start 1601398130 is beyond EOD, truncated [ 304.771400][ T6167] loop2: p2 start 1702059890 is beyond EOD, truncated [ 304.956423][ T6044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.218666][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.264996][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.279942][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.300836][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.312022][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.712931][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 308.013268][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 308.046049][ T45] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 308.055188][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.067388][ T45] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.079833][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.091511][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 308.422679][ T5798] Bluetooth: hci5: command tx timeout [ 308.534876][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 308.562876][ T45] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 308.570772][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 308.583502][ T45] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.595856][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.607666][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.009705][ T45] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 309.017970][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 309.030087][ T45] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 309.042472][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 309.058022][ T45] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 309.729875][ T6044] veth0_vlan: entered promiscuous mode [ 309.927866][ T6044] veth1_vlan: entered promiscuous mode [ 309.993774][ T45] usb 5-1: string descriptor 0 read error: -71 [ 310.000794][ T45] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 310.010447][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.213271][ T45] usb 5-1: can't set config #168, error -71 [ 310.341464][ T45] usb 5-1: USB disconnect, device number 2 [ 310.503015][ T5798] Bluetooth: hci5: command tx timeout [ 310.656553][ T6044] veth0_macvtap: entered promiscuous mode [ 310.790491][ T6044] veth1_macvtap: entered promiscuous mode [ 311.442793][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 311.672757][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 311.690956][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.699559][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.707819][ T6174] bridge_slave_0: entered allmulticast mode [ 311.722686][ T6174] bridge_slave_0: entered promiscuous mode [ 311.748850][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.760367][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.771325][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.782576][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.793009][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.804010][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.814116][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.827851][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.843426][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.966491][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.972957][ T45] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 311.974651][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.983541][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.991556][ T6174] bridge_slave_1: entered allmulticast mode [ 312.008348][ T6174] bridge_slave_1: entered promiscuous mode [ 312.178490][ T45] usb 5-1: config 0 descriptor?? [ 312.237311][ T45] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 312.453642][ T45] usb 5-1: Detected FT232B [ 312.613491][ T5798] Bluetooth: hci5: command tx timeout [ 312.631435][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.715509][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.893154][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 312.984601][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 313.009848][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.018860][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 313.021009][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.039587][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.054661][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.066553][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.077880][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.088449][ T6044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.099640][ T6044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.115830][ T6044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.250388][ T45] usb 5-1: USB disconnect, device number 3 [ 313.270968][ T6174] team0: Port device team_slave_0 added [ 313.375530][ T6174] team0: Port device team_slave_1 added [ 313.423531][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 313.435160][ T45] ftdi_sio 5-1:0.0: device disconnected [ 313.474494][ T6219] capability: warning: `syz.3.53' uses 32-bit capabilities (legacy support in use) [ 313.947351][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.955241][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.985681][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.159542][ T6044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.169166][ T6044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.183192][ T6044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.193872][ T6044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.294230][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.301547][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.328891][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.682962][ T5798] Bluetooth: hci5: command tx timeout [ 315.393698][ T6174] hsr_slave_0: entered promiscuous mode [ 315.410771][ T6174] hsr_slave_1: entered promiscuous mode [ 315.419011][ T6174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.427516][ T6174] Cannot create hsr debugfs directory [ 315.746810][ T4114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.797170][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.059111][ T5874] usb 5-1: config 0 has no interfaces? [ 316.113113][ T5874] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 316.126166][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.136295][ T5874] usb 5-1: Product: syz [ 316.140732][ T5874] usb 5-1: Manufacturer: syz [ 316.145817][ T5874] usb 5-1: SerialNumber: syz [ 316.279240][ T4114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.356207][ T5874] usb 5-1: config 0 descriptor?? [ 316.553118][ T4114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.813356][ T6236] Cannot find add_set index 0 as target [ 316.900904][ T6247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.038104][ T4114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.606277][ T6253] tipc: Failed to remove unknown binding: 66,1,1/0:2859979841/2859979843 [ 317.615452][ T6253] tipc: Failed to remove unknown binding: 66,1,1/0:2859979841/2859979843 [ 318.444864][ T4114] bridge_slave_1: left allmulticast mode [ 318.450981][ T4114] bridge_slave_1: left promiscuous mode [ 318.459509][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.621107][ T4114] bridge_slave_0: left allmulticast mode [ 318.627892][ T4114] bridge_slave_0: left promiscuous mode [ 318.634991][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.891191][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.974258][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.007663][ T4114] bond0 (unregistering): Released all slaves [ 320.062754][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 320.293076][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 320.328782][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 320.338238][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.446996][ T24] usb 4-1: config 0 descriptor?? [ 320.502322][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 320.673284][ T24] usb 4-1: Detected FT232B [ 321.182919][ T6174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 321.296223][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 321.366025][ T6174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.376625][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 321.466969][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 321.532851][ T4114] hsr_slave_0: left promiscuous mode [ 321.554068][ T24] usb 4-1: USB disconnect, device number 3 [ 321.581994][ T4114] hsr_slave_1: left promiscuous mode [ 321.592581][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.600458][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.647206][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 321.661391][ T24] ftdi_sio 4-1:0.0: device disconnected [ 321.716268][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.726473][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.893332][ T4114] veth1_macvtap: left promiscuous mode [ 321.899199][ T4114] veth0_macvtap: left promiscuous mode [ 321.905804][ T4114] veth1_vlan: left promiscuous mode [ 321.911438][ T4114] veth0_vlan: left promiscuous mode [ 323.190256][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 323.355356][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 323.618312][ T6174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.782100][ T6174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.603787][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.972764][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.128635][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.136339][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.237269][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.244980][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.071493][ T6174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.216996][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.226413][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.509808][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.518122][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.437795][ T24] usb 5-1: USB disconnect, device number 4 [ 329.101146][ T6313] xt_hashlimit: max too large, truncated to 1048576 [ 329.347968][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.854012][ T6335] loop7: detected capacity change from 0 to 16384 [ 331.204546][ T45] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 331.273207][ T5874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 331.502111][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 331.515847][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.526752][ T45] usb 5-1: config 0 has no interfaces? [ 331.569687][ T5874] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 331.580128][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.677601][ T5874] usb 4-1: config 0 descriptor?? [ 331.895742][ T45] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 331.905483][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.913945][ T45] usb 5-1: Product: syz [ 331.918429][ T45] usb 5-1: Manufacturer: syz [ 331.923270][ T45] usb 5-1: SerialNumber: syz [ 331.958990][ T5874] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 332.015633][ T45] usb 5-1: config 0 descriptor?? [ 332.189903][ T5874] usb 4-1: Detected FT232B [ 332.451790][ T6335] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 332.568177][ T6335] I/O error, dev loop7, sector 1320 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 332.585714][ T6335] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.598972][ T6335] Buffer I/O error on dev loop7, logical block 133, async page read [ 332.683766][ T6335] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.694262][ T6335] Buffer I/O error on dev loop7, logical block 133, async page read [ 332.787525][ T6335] I/O error, dev loop7, sector 1064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 332.789471][ T5874] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 332.800236][ T6335] Buffer I/O error on dev loop7, logical block 133, async page read [ 332.900523][ T5874] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 332.965175][ T5874] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 332.979079][ T45] usb 5-1: USB disconnect, device number 5 [ 333.044446][ T6174] veth0_vlan: entered promiscuous mode [ 333.087562][ T5874] usb 4-1: USB disconnect, device number 4 [ 333.093966][ T6332] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 333.106355][ T6332] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 333.116968][ T6332] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 333.134085][ T6332] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 333.143084][ T6332] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 333.152093][ T6332] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 333.161463][ T6332] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 333.170539][ T6332] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 333.185965][ T5874] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 333.199020][ T5874] ftdi_sio 4-1:0.0: device disconnected [ 333.246809][ T6332] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 333.350221][ T6174] veth1_vlan: entered promiscuous mode [ 333.933704][ T6174] veth0_macvtap: entered promiscuous mode [ 334.100485][ T6174] veth1_macvtap: entered promiscuous mode [ 335.027566][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.038727][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.049220][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.060506][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.075403][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.088009][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.098605][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.109583][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.125271][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.965035][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.976571][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.991448][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.003781][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.014284][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.025183][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.035480][ T6174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.046376][ T6174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.061788][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.596543][ T6174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.610087][ T6174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.620883][ T6174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.630121][ T6174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.755519][ T5874] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 339.080166][ T5874] usb 4-1: config 0 has no interfaces? [ 339.192309][ T5874] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 339.203846][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.212308][ T5874] usb 4-1: Product: syz [ 339.217290][ T5874] usb 4-1: Manufacturer: syz [ 339.222151][ T5874] usb 4-1: SerialNumber: syz [ 339.386943][ T5874] usb 4-1: config 0 descriptor?? [ 339.881238][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.891925][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.713621][ T5874] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 344.985763][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 345.095117][ T5874] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.108687][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.118162][ T5874] usb 6-1: Product: syz [ 345.123229][ T5874] usb 6-1: Manufacturer: syz [ 345.128137][ T5874] usb 6-1: SerialNumber: syz [ 345.300476][ T5874] usb 6-1: config 0 descriptor?? [ 345.521133][ T5874] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.083193][ T5874] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 346.192658][ T5874] usb 6-1: USB disconnect, device number 2 [ 347.807494][ T4114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.816131][ T4114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.176329][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 348.204539][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.213575][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.363187][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 348.446358][ T5874] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 348.455973][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.518406][ T5874] usb 6-1: config 0 descriptor?? [ 348.571981][ T5874] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 348.773881][ T5874] usb 6-1: Detected FT232B [ 349.333792][ T5874] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 349.388401][ T5874] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 349.446436][ T5874] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 349.523299][ T5874] usb 6-1: USB disconnect, device number 3 [ 349.586671][ T5874] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 349.599388][ T5874] ftdi_sio 6-1:0.0: device disconnected [ 350.542113][ T45] usb 4-1: USB disconnect, device number 5 [ 350.978371][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.91'. [ 350.988206][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.91'. [ 352.453653][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.462796][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.520277][ T6478] veth1_macvtap: left promiscuous mode [ 352.526280][ T6478] macsec0: entered promiscuous mode [ 352.620031][ T6483] veth1_macvtap: entered promiscuous mode [ 352.628269][ T6483] macsec0: left promiscuous mode [ 352.863253][ T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 352.904823][ T6478] netlink: 340 bytes leftover after parsing attributes in process `syz.5.94'. [ 352.914478][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.94'. [ 353.245186][ T45] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 353.256127][ T45] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.269889][ T45] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 353.279338][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.733942][ T45] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.205745][ T45] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 354.328382][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 354.558607][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 354.701230][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 354.710675][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.865794][ T24] usb 4-1: config 0 descriptor?? [ 354.876030][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.954221][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 355.099312][ T24] usb 4-1: Detected FT232B [ 355.652056][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 355.680604][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 355.747596][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 355.866522][ T24] usb 4-1: USB disconnect, device number 6 [ 355.945919][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 355.966322][ T24] ftdi_sio 4-1:0.0: device disconnected [ 362.764869][ T5874] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 362.972729][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 363.014104][ T5874] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 363.026592][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.181505][ T5874] usb 4-1: config 0 descriptor?? [ 363.248962][ T5874] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 363.427737][ T5874] usb 4-1: Detected FT232B [ 363.744879][ T5874] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 363.994834][ T5874] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 364.062919][ T5874] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 364.216004][ T5874] usb 4-1: USB disconnect, device number 7 [ 364.328787][ T5874] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 364.341011][ T5874] ftdi_sio 4-1:0.0: device disconnected [ 365.063561][ T5874] usb 7-1: USB disconnect, device number 2 [ 365.091169][ T6484] delete_channel: no stack [ 366.657077][ T6592] use of bytesused == 0 is deprecated and will be removed in the future, [ 366.666842][ T6592] use the actual size instead. [ 369.066101][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 369.293854][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 369.393525][ T45] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 369.404078][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.601378][ T45] usb 7-1: config 0 descriptor?? [ 369.690015][ T45] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 369.816709][ T45] usb 7-1: Detected FT232B [ 370.411139][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 370.445043][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 370.475218][ T45] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 370.638421][ T45] usb 7-1: USB disconnect, device number 3 [ 370.726448][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 370.738308][ T45] ftdi_sio 7-1:0.0: device disconnected [ 370.901857][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.134'. [ 370.923387][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 371.182962][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 371.227651][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 371.237963][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.354388][ T24] usb 1-1: config 0 descriptor?? [ 371.627866][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 371.671461][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.766159][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 371.775470][ T24] usb 1-1: media controller created [ 371.866264][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.418417][ T24] az6027: usb out operation failed. (-71) [ 372.488415][ T24] az6027: usb out operation failed. (-71) [ 372.495084][ T24] stb0899_attach: Driver disabled by Kconfig [ 372.501299][ T24] az6027: no front-end attached [ 372.501299][ T24] [ 372.643435][ T24] az6027: usb out operation failed. (-71) [ 372.657542][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 372.670708][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 372.898939][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 372.906690][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 373.061191][ T24] usb 1-1: USB disconnect, device number 3 [ 373.729606][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.984706][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 374.985308][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 374.991668][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 375.630667][ T6654] could not allocate digest TFM handle poly1305-simd [ 377.124341][ T1552] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 377.362754][ T1552] usb 7-1: Using ep0 maxpacket: 16 [ 377.435122][ T1552] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 377.445375][ T1552] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.543497][ T1552] usb 7-1: config 0 descriptor?? [ 377.601468][ T1552] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 377.777285][ T1552] usb 7-1: Detected FT232B [ 378.338472][ T1552] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 378.407802][ T1552] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 378.467047][ T1552] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 378.580352][ T1552] usb 7-1: USB disconnect, device number 4 [ 378.720386][ T1552] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 378.733260][ T1552] ftdi_sio 7-1:0.0: device disconnected [ 380.740152][ T6711] capability: warning: `syz.0.154' uses deprecated v2 capabilities in a way that may be insecure [ 383.288805][ T1552] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 383.552676][ T1552] usb 6-1: Using ep0 maxpacket: 32 [ 383.572288][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 383.626946][ T1552] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 383.636692][ T1552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.732893][ T1552] usb 6-1: config 0 descriptor?? [ 383.832763][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 383.923519][ T24] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 383.933366][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.984469][ T1552] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 383.991625][ T24] usb 7-1: config 0 descriptor?? [ 384.044522][ T1552] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 384.059952][ T24] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 384.143112][ T1552] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 384.150982][ T1552] usb 6-1: media controller created [ 384.214803][ T24] usb 7-1: Detected FT232B [ 384.346545][ T1552] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.656956][ T1552] az6027: usb out operation failed. (-71) [ 384.742250][ T1552] az6027: usb out operation failed. (-71) [ 384.743970][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 384.759364][ T1552] stb0899_attach: Driver disabled by Kconfig [ 384.766189][ T1552] az6027: no front-end attached [ 384.766189][ T1552] [ 384.793002][ T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 384.868681][ T24] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 384.954472][ T1552] az6027: usb out operation failed. (-71) [ 384.960554][ T1552] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 384.971804][ T1552] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6 [ 384.983033][ T24] usb 7-1: USB disconnect, device number 5 [ 385.056230][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 385.069001][ T24] ftdi_sio 7-1:0.0: device disconnected [ 385.214832][ T1552] dvb-usb: schedule remote query interval to 400 msecs. [ 385.222216][ T1552] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 385.424069][ T1552] usb 6-1: USB disconnect, device number 4 [ 386.120187][ T1552] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 390.404475][ T1552] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 390.623891][ T1552] usb 1-1: Using ep0 maxpacket: 16 [ 390.688188][ T1552] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 390.699329][ T1552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.818160][ T1552] usb 1-1: config 0 descriptor?? [ 390.853337][ T1552] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 391.033938][ T1552] usb 1-1: Detected FT232B [ 391.342656][ T1552] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 391.379060][ T1552] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 391.424225][ T1552] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 391.569654][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 391.580386][ T1552] usb 1-1: USB disconnect, device number 4 [ 391.685356][ T1552] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 391.702940][ T1552] ftdi_sio 1-1:0.0: device disconnected [ 391.839750][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.850600][ T24] usb 7-1: config 0 has no interfaces? [ 391.857060][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.867059][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.015060][ T24] usb 7-1: config 0 descriptor?? [ 392.478924][ T24] usb 7-1: USB disconnect, device number 6 [ 395.772764][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 395.882828][ T45] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 396.075893][ T24] usb 7-1: config 0 has no interfaces? [ 396.154430][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 396.195383][ T24] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 396.211365][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.221148][ T24] usb 7-1: Product: syz [ 396.225702][ T24] usb 7-1: Manufacturer: syz [ 396.230682][ T24] usb 7-1: SerialNumber: syz [ 396.275819][ T45] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 396.285863][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.410527][ T45] usb 5-1: config 0 descriptor?? [ 396.493004][ T45] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 396.520229][ T24] usb 7-1: config 0 descriptor?? [ 396.658046][ T45] usb 5-1: Detected FT232B [ 397.305934][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 397.360120][ T45] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 397.404708][ T45] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 397.546091][ T45] usb 5-1: USB disconnect, device number 6 [ 397.596439][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 397.610138][ T45] ftdi_sio 5-1:0.0: device disconnected [ 398.611817][ T6893] netlink: 188 bytes leftover after parsing attributes in process `syz.4.206'. [ 401.854460][ T45] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 402.113009][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 402.688301][ T45] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.699375][ T45] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.709396][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 402.719219][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.900226][ T45] usb 6-1: config 0 descriptor?? [ 403.083155][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 403.339375][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 403.373702][ T24] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 403.382784][ T24] usb 4-1: config 252 has no interface number 0 [ 403.442999][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 403.453159][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.461462][ T24] usb 4-1: Product: syz [ 403.473792][ T24] usb 4-1: Manufacturer: syz [ 403.478683][ T24] usb 4-1: SerialNumber: syz [ 403.966988][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 405.535885][ T56] usb 4-1: Failed to submit usb control message: -110 [ 405.543230][ T56] usb 4-1: unable to send the bmi data to the device: -110 [ 405.550749][ T56] usb 4-1: unable to get target info from device [ 405.558071][ T56] usb 4-1: could not get target info (-110) [ 405.564635][ T56] usb 4-1: could not probe fw (-110) [ 405.877135][ T5874] usb 4-1: USB disconnect, device number 8 [ 406.780770][ T6954] netlink: 'syz.4.221': attribute type 4 has an invalid length. [ 406.789481][ T6954] netlink: 'syz.4.221': attribute type 2 has an invalid length. [ 408.257832][ T5874] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 408.507332][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 408.519721][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 408.531491][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 408.543430][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 408.556990][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 408.566391][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.956481][ T5874] usb 5-1: config 0 descriptor?? [ 408.964904][ T6961] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 409.530666][ T5874] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 409.651387][ T5874] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 409.806475][ T5874] usb 5-1: USB disconnect, device number 7 [ 410.845442][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 411.604700][ T6985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 412.788383][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.798944][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.814828][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.865439][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.877145][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.887028][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.894125][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.992973][ T52] Bluetooth: hci4: command tx timeout [ 415.293672][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 417.133804][ T52] Bluetooth: hci4: command tx timeout [ 417.799938][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.808132][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.816476][ T6991] bridge_slave_0: entered allmulticast mode [ 417.825428][ T6991] bridge_slave_0: entered promiscuous mode [ 418.126634][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.134302][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.142255][ T6991] bridge_slave_1: entered allmulticast mode [ 418.151658][ T6991] bridge_slave_1: entered promiscuous mode [ 418.216966][ T5874] usb 7-1: USB disconnect, device number 7 [ 418.348102][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.868905][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.891878][ T7019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.200396][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.218878][ T5797] Bluetooth: hci4: command tx timeout [ 419.226153][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.254789][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.283858][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.304240][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.327835][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.365053][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.410498][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.439293][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.644622][ T6991] team0: Port device team_slave_0 added [ 419.729481][ T6991] team0: Port device team_slave_1 added [ 421.055500][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.065471][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.092757][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.201447][ T14] bridge_slave_1: left allmulticast mode [ 421.208099][ T14] bridge_slave_1: left promiscuous mode [ 421.214945][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.303619][ T5797] Bluetooth: hci4: command tx timeout [ 421.310931][ T14] bridge_slave_0: left allmulticast mode [ 421.318251][ T14] bridge_slave_0: left promiscuous mode [ 421.325378][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.673382][ T5797] Bluetooth: hci5: command tx timeout [ 422.106004][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.172624][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.276336][ T14] bond0 (unregistering): Released all slaves [ 422.497160][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.504881][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.531554][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.092983][ T6920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.216327][ T5874] usb 6-1: USB disconnect, device number 5 [ 423.603743][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 423.692767][ T5797] Bluetooth: hci5: command tx timeout [ 423.767815][ T6991] hsr_slave_0: entered promiscuous mode [ 423.779729][ T6991] hsr_slave_1: entered promiscuous mode [ 423.788751][ T6991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.796633][ T6991] Cannot create hsr debugfs directory [ 423.863296][ T14] hsr_slave_0: left promiscuous mode [ 423.899231][ T14] hsr_slave_1: left promiscuous mode [ 423.907970][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.915878][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.990920][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.999552][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.115741][ T14] veth1_macvtap: left promiscuous mode [ 424.121582][ T14] veth0_macvtap: left promiscuous mode [ 424.128216][ T14] veth1_vlan: left promiscuous mode [ 424.134152][ T14] veth0_vlan: left promiscuous mode [ 425.155174][ T14] team0 (unregistering): Port device team_slave_1 removed [ 425.194608][ T14] team0 (unregistering): Port device team_slave_0 removed [ 425.863952][ T5797] Bluetooth: hci5: command tx timeout [ 426.426869][ T7055] netlink: 'syz.0.242': attribute type 10 has an invalid length. [ 426.518960][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.534030][ T7055] team0: Port device batadv0 added [ 427.218609][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.757970][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.869383][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 427.941657][ T52] Bluetooth: hci5: command tx timeout [ 427.983344][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.004129][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.046684][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.072025][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.130014][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.193892][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.201623][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.210838][ T7022] bridge_slave_0: entered allmulticast mode [ 428.220907][ T7022] bridge_slave_0: entered promiscuous mode [ 428.408202][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.620981][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.628817][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.636954][ T7022] bridge_slave_1: entered allmulticast mode [ 428.646883][ T7022] bridge_slave_1: entered promiscuous mode [ 429.500621][ T6991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 429.620509][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.806316][ T14] bridge_slave_1: left allmulticast mode [ 429.812172][ T14] bridge_slave_1: left promiscuous mode [ 429.818676][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.918792][ T14] bridge_slave_0: left allmulticast mode [ 429.926161][ T14] bridge_slave_0: left promiscuous mode [ 429.933133][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.173013][ T5797] Bluetooth: hci3: command tx timeout [ 431.250216][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.305472][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.351008][ T14] bond0 (unregistering): Released all slaves [ 431.453926][ T6991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 431.533014][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.578893][ T6991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 431.627801][ T7088] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 431.821928][ T7085] syzkaller1: entered promiscuous mode [ 431.829092][ T7085] syzkaller1: entered allmulticast mode [ 432.293669][ T5797] Bluetooth: hci3: command tx timeout [ 432.413263][ T7088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.464414][ T6991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 432.603711][ T7092] bond1: (slave veth3): Enslaving as an active interface with a down link [ 432.705678][ T7022] team0: Port device team_slave_0 added [ 432.845172][ T7022] team0: Port device team_slave_1 added [ 433.164648][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.172048][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.199349][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.372050][ T14] hsr_slave_0: left promiscuous mode [ 433.395194][ T14] hsr_slave_1: left promiscuous mode [ 433.403727][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.411455][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.440739][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.448784][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.516545][ T14] veth1_macvtap: left promiscuous mode [ 433.522999][ T14] veth0_macvtap: left promiscuous mode [ 433.529052][ T14] veth1_vlan: left promiscuous mode [ 433.535169][ T14] veth0_vlan: left promiscuous mode [ 434.124315][ T14] team0 (unregistering): Port device team_slave_1 removed [ 434.178943][ T14] team0 (unregistering): Port device team_slave_0 removed [ 434.378706][ T5797] Bluetooth: hci3: command tx timeout [ 434.826658][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.834258][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.861376][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.276890][ T7100] fuse: Bad value for 'fd' [ 435.565920][ T7022] hsr_slave_0: entered promiscuous mode [ 435.576819][ T7022] hsr_slave_1: entered promiscuous mode [ 435.585946][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.593923][ T7022] Cannot create hsr debugfs directory [ 435.688372][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 436.098628][ T4114] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.412812][ T5797] Bluetooth: hci3: command tx timeout [ 436.425922][ T4114] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.697588][ T4114] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.908086][ T4114] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.160995][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.934902][ T4114] bridge_slave_1: left allmulticast mode [ 437.941217][ T4114] bridge_slave_1: left promiscuous mode [ 437.948549][ T4114] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.034573][ T4114] bridge_slave_0: left allmulticast mode [ 438.040624][ T4114] bridge_slave_0: left promiscuous mode [ 438.049011][ T4114] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.627252][ T7130] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 438.713056][ T4114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.772713][ T4114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.800324][ T4114] bond0 (unregistering): Released all slaves [ 439.018863][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.028463][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.036640][ T7070] bridge_slave_0: entered allmulticast mode [ 439.046386][ T7070] bridge_slave_0: entered promiscuous mode [ 439.151710][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.553565][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.561276][ T3808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.572788][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.580862][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.588867][ T7070] bridge_slave_1: entered allmulticast mode [ 439.599113][ T7070] bridge_slave_1: entered promiscuous mode [ 439.610342][ T7022] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.017954][ T7022] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.057005][ T7022] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 440.109353][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.117495][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.141492][ T7022] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 440.271365][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.437103][ T4114] hsr_slave_0: left promiscuous mode [ 440.458532][ T4114] hsr_slave_1: left promiscuous mode [ 440.467783][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.475571][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.552522][ T4114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.560553][ T4114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.650603][ T4114] veth1_macvtap: left promiscuous mode [ 440.658249][ T4114] veth0_macvtap: left promiscuous mode [ 440.664390][ T4114] veth1_vlan: left promiscuous mode [ 440.669960][ T4114] veth0_vlan: left promiscuous mode [ 441.317675][ T4114] team0 (unregistering): Port device team_slave_1 removed [ 441.381780][ T4114] team0 (unregistering): Port device team_slave_0 removed [ 441.689058][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.199279][ T7070] team0: Port device team_slave_0 added [ 442.278182][ T7070] team0: Port device team_slave_1 added [ 442.608595][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.616573][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.643571][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.963903][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.971352][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.998643][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.452996][ T7070] hsr_slave_0: entered promiscuous mode [ 443.461996][ T7070] hsr_slave_1: entered promiscuous mode [ 443.470106][ T7070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.478210][ T7070] Cannot create hsr debugfs directory [ 443.842917][ T7022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.099573][ T7022] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.280870][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.289080][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.630857][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.638851][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.153070][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.499499][ T7070] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 445.584351][ T7070] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.728733][ T7070] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 445.817270][ T7070] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 447.287852][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.330093][ T7022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.533475][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.654377][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.662070][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.847257][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.855093][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.658561][ T6991] veth0_vlan: entered promiscuous mode [ 448.857227][ T6991] veth1_vlan: entered promiscuous mode [ 449.229846][ T6991] veth0_macvtap: entered promiscuous mode [ 449.349936][ T6991] veth1_macvtap: entered promiscuous mode [ 449.623380][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.635545][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.646135][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.657006][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.670970][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.969930][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.981397][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.991721][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.002744][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.016980][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.264919][ T6991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.275078][ T6991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.284336][ T6991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.293728][ T6991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.794389][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.044676][ T7022] veth0_vlan: entered promiscuous mode [ 451.159317][ T7022] veth1_vlan: entered promiscuous mode [ 451.551087][ T7022] veth0_macvtap: entered promiscuous mode [ 451.746442][ T7022] veth1_macvtap: entered promiscuous mode [ 451.978660][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.990219][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.000781][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.012980][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.023705][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.034963][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.052160][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.389656][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.400726][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.411600][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.425660][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.436114][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.447183][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.463521][ T7022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.800069][ T7022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.810676][ T7022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.820355][ T7022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.829976][ T7022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.092516][ T7231] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 453.119756][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.134919][ T7231] team0: Port device batadv0 added [ 454.164974][ T7070] veth0_vlan: entered promiscuous mode [ 454.303406][ T7070] veth1_vlan: entered promiscuous mode [ 454.742245][ T7070] veth0_macvtap: entered promiscuous mode [ 454.867817][ T7070] veth1_macvtap: entered promiscuous mode [ 455.096684][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.112939][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.123797][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.134720][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.145216][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.158582][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.169299][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.180655][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.197068][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.264844][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.276671][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.287202][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.298987][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.309732][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.327694][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.338551][ T7070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.349518][ T7070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.365618][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.734067][ T7070] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.747170][ T7070] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.757232][ T7070] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.766753][ T7070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.222107][ T7287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.230493][ T7287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.491372][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.500504][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.424547][ T7302] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 459.566107][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 459.797636][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 459.845904][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 459.857358][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.977050][ T9] usb 4-1: config 0 descriptor?? [ 460.178901][ T3765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.188120][ T3765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.305445][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 460.329461][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.379506][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 460.387484][ T9] usb 4-1: media controller created [ 460.494886][ T7306] ===================================================== [ 460.502248][ T7306] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x23e7/0x2f60 [ 460.512816][ T7306] __i2c_smbus_xfer+0x23e7/0x2f60 [ 460.518093][ T7306] i2c_smbus_xfer+0x31d/0x4d0 [ 460.519093][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.524171][ T7306] i2cdev_ioctl_smbus+0x4a1/0x660 [ 460.538108][ T7306] i2cdev_ioctl+0xa14/0xf40 [ 460.542985][ T7306] __se_sys_ioctl+0x239/0x400 [ 460.548006][ T7306] __x64_sys_ioctl+0x97/0xe0 [ 460.553061][ T7306] x64_sys_call+0x1ebe/0x3db0 [ 460.558000][ T7306] do_syscall_64+0xd9/0x1b0 [ 460.563057][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.569473][ T7306] [ 460.571925][ T7306] Local variable msgbuf1.i created at: [ 460.579519][ T7306] __i2c_smbus_xfer+0x86a/0x2f60 [ 460.584814][ T7306] i2c_smbus_xfer+0x31d/0x4d0 [ 460.589710][ T7306] [ 460.592213][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.3.271 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 460.605254][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.618647][ T7306] ===================================================== [ 460.626499][ T7306] Disabling lock debugging due to kernel taint [ 460.632980][ T7306] Kernel panic - not syncing: kmsan.panic set ... [ 460.640410][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.3.271 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 460.654424][ T7306] Tainted: [B]=BAD_PAGE [ 460.658718][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.668979][ T7306] Call Trace: [ 460.672453][ T7306] [ 460.675550][ T7306] __dump_stack+0x26/0x30 [ 460.680400][ T7306] dump_stack_lvl+0x53/0x270 [ 460.685959][ T7306] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.692312][ T7306] dump_stack+0x1e/0x25 [ 460.696811][ T7306] panic+0x4bd/0xd50 [ 460.701146][ T7306] kmsan_report+0x29d/0x2a0 [ 460.706021][ T7306] ? __msan_warning+0x96/0x120 [ 460.711301][ T7306] ? __i2c_smbus_xfer+0x23e7/0x2f60 [ 460.717104][ T7306] ? i2c_smbus_xfer+0x31d/0x4d0 [ 460.722262][ T7306] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 460.727815][ T7306] ? i2cdev_ioctl+0xa14/0xf40 [ 460.732747][ T7306] ? __se_sys_ioctl+0x239/0x400 [ 460.738034][ T7306] ? __x64_sys_ioctl+0x97/0xe0 [ 460.743349][ T7306] ? x64_sys_call+0x1ebe/0x3db0 [ 460.748538][ T7306] ? do_syscall_64+0xd9/0x1b0 [ 460.753640][ T7306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.760306][ T7306] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 460.766210][ T7306] ? kmsan_get_metadata+0x105/0x1b0 [ 460.771757][ T7306] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 460.778341][ T7306] ? kmsan_get_metadata+0x105/0x1b0 [ 460.783908][ T7306] ? kmsan_get_metadata+0x105/0x1b0 [ 460.789366][ T7306] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.795608][ T7306] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 460.800970][ T7306] __msan_warning+0x96/0x120 [ 460.805960][ T7306] __i2c_smbus_xfer+0x23e7/0x2f60 [ 460.811260][ T7306] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 460.817873][ T7306] ? rt_mutex_lock+0x3e/0x70 [ 460.822808][ T7306] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 460.828902][ T7306] i2c_smbus_xfer+0x31d/0x4d0 [ 460.833923][ T7306] i2cdev_ioctl_smbus+0x4a1/0x660 [ 460.839379][ T7306] i2cdev_ioctl+0xa14/0xf40 [ 460.844348][ T7306] ? kmsan_get_shadow_origin_ptr+0x30/0xb0 [ 460.850562][ T7306] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 460.856294][ T7306] __se_sys_ioctl+0x239/0x400 [ 460.861385][ T7306] __x64_sys_ioctl+0x97/0xe0 [ 460.866254][ T7306] x64_sys_call+0x1ebe/0x3db0 [ 460.871556][ T7306] do_syscall_64+0xd9/0x1b0 [ 460.876412][ T7306] ? irqentry_exit+0x16/0x60 [ 460.881428][ T7306] ? clear_bhb_loop+0x25/0x80 [ 460.886543][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.892873][ T7306] RIP: 0033:0x7f828858e969 [ 460.897663][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.917976][ T7306] RSP: 002b:00007f8289430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.927080][ T7306] RAX: ffffffffffffffda RBX: 00007f82887b5fa0 RCX: 00007f828858e969 [ 460.935576][ T7306] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004 [ 460.944328][ T7306] RBP: 00007f8288610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 460.952535][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.960888][ T7306] R13: 0000000000000000 R14: 00007f82887b5fa0 R15: 00007ffdd8a54e98 [ 460.969275][ T7306] [ 460.973013][ T7306] Kernel Offset: disabled [ 460.977456][ T7306] Rebooting in 86400 seconds..