last executing test programs: 3m35.779962906s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10020, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0xf, "8a3cbf486f32911394b1e232cb29264dea6102b2cba6185380a0ffe8b25fe8bfe6ab3f8be7ec543684c331e7b9832ff50c9b3f5c81221d430f06ee79a7becb", 0x3c}, 0x80) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) listen(r4, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) 3m32.808017642s ago: executing program 4 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$packet(0x11, 0x2, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x43, @multicast, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x8, 0x45) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000100)=0x7) 3m31.863201283s ago: executing program 4 (id=119): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44011, &(0x7f0000000040)={0x11, 0x19, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 3m31.1799074s ago: executing program 4 (id=120): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 3m30.664651062s ago: executing program 3 (id=121): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write(r0, 0x0, 0x0) 3m30.356573444s ago: executing program 4 (id=122): syz_emit_vhci(0x0, 0x0) 3m29.780680927s ago: executing program 4 (id=123): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000002c4719b26a00000000000000", @ANYRES32=0x0], 0x48) 3m29.079552402s ago: executing program 4 (id=125): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x780, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[]) socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x16) 3m28.919916897s ago: executing program 3 (id=126): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x14) 3m28.031428138s ago: executing program 3 (id=128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 3m27.24881819s ago: executing program 3 (id=129): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{0x0, 0x1}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xffffffff}, {}, {}, @control={0x6, 0x3, 0x8}}, {0x0, 0x0, 0x6, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x9}}, {0x47, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b50000000000000006221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x18, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x4, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xe0) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) 3m26.604517683s ago: executing program 3 (id=131): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) 3m17.610712724s ago: executing program 32 (id=114): openat$adsp1(0xffffffffffffff9c, 0x0, 0x18b801, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 3m13.50686278s ago: executing program 33 (id=125): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x780, 0xa0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x1000000, {0x3, 0x6fb4}, {}, {}, {0x0, 0x0, 0x400}, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xecfe, 0x0, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102376, 0x18fe8) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)=ANY=[]) socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x16) 3m10.96008935s ago: executing program 34 (id=131): socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r4, 0x9dffffff}}, 0x48) 2m40.91980564s ago: executing program 0 (id=187): bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_procfs(0x0, 0x0) socket(0x1a, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xc0002000}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0xc4100, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0xedf47000) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m39.291590471s ago: executing program 0 (id=189): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff7a}) close_range(r3, 0xffffffffffffffff, 0x0) 2m37.553099113s ago: executing program 0 (id=191): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) 2m36.535357741s ago: executing program 0 (id=193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0xfffffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0xc048aeca, &(0x7f0000000140)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 2m34.882134898s ago: executing program 0 (id=195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) 2m33.776115851s ago: executing program 0 (id=197): r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001c80)="b12a", 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r1, 0x8905, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', r4, 0x7, 0x7800, 0x2, 0x10000, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x4, 0x3, 0x3, 0x7}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x107100) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) 2m18.480931874s ago: executing program 35 (id=197): r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000001c80)="b12a", 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r1, 0x8905, 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'ip_vti0\x00', r4, 0x7, 0x7800, 0x2, 0x10000, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x67, 0x0, 0x2, 0x2f, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x4, 0x3, 0x3, 0x7}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(&(0x7f0000000000), 0x1f, 0x107100) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0x4, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) 2m16.622910795s ago: executing program 7 (id=222): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44011, &(0x7f0000000040)={0x11, 0x19, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2m15.421441336s ago: executing program 7 (id=226): faccessat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1cc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4008, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(0x0) 2m11.055569354s ago: executing program 7 (id=233): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) fanotify_init(0x0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x31, &(0x7f0000000040)={@empty, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@arp={0x806, @generic={0x300, 0x88f8, 0x6, 0x6, 0xc, @multicast, "9706c6f17346", @empty, "7a7d4af7b5"}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b14010000000000000000000800030001fc00000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m8.008250586s ago: executing program 7 (id=240): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 2m6.72547574s ago: executing program 7 (id=243): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x4, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000001c0)=0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x27fd}, 0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002fc0)={'ip6tnl0\x00', &(0x7f0000002f40)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x40, 0x5, 0x69, @mcast2, @loopback, 0x1, 0x40, 0xe1, 0x9}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x38}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x82}, 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 2m4.885697263s ago: executing program 7 (id=245): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r1, &(0x7f0000000300)=""/154, 0x9a) 1m49.43942182s ago: executing program 36 (id=245): syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r1, &(0x7f0000000300)=""/154, 0x9a) 1m21.673679995s ago: executing program 5 (id=320): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x48401, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m13.37257802s ago: executing program 5 (id=334): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 1m12.428534782s ago: executing program 5 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000740)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x27) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) r3 = open(0x0, 0x145842, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m11.599192198s ago: executing program 5 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000a0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1m10.929318947s ago: executing program 5 (id=338): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 55.923531904s ago: executing program 1 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x90, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x81, 0x800, 0xa}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x842, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}, @NL80211_ATTR_IE={0x12, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x902a}}, @ssid={0x0, 0x6, @default_ap_ssid}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x0) 55.63468236s ago: executing program 37 (id=338): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 54.589747147s ago: executing program 1 (id=381): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r0, &(0x7f0000000f80)=ANY=[]) r1 = userfaultfd(0x801) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f000052b000/0x4000)=nil, 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x22, 0x1, 0xfffffffc, 0xfffffffc, {0x2}}, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f00000000c0)=0x7fff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 51.264303168s ago: executing program 1 (id=386): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc", 0xc}], 0x1}, 0x80890) pipe(&(0x7f0000000580)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f00000003c0)=[{r2, 0x4000}, {r4, 0x1}], 0x2, 0x0, 0x0, 0x0) shutdown(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000001840)=[{0x3, 0x34, 0x10000, &(0x7f00000000c0)=""/52}, {0x8000, 0x0, 0xcddb, 0x0}, {0x101, 0x0, 0x1, 0x0}, {0x8, 0x18, 0x9, &(0x7f0000000340)=""/24}, {0xfffffff7, 0x1000, 0x9, &(0x7f0000002580)=""/4096}, {0x40, 0x0, 0x3, 0x0}, {0x7, 0x0, 0x5, 0x0}, {0x3, 0xfb, 0x58, &(0x7f0000001740)=""/251}]}) r7 = getpid() process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001"], 0x1e4}}, 0x0) 47.840342757s ago: executing program 1 (id=389): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44011, &(0x7f0000000040)={0x11, 0x19, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 45.517215802s ago: executing program 1 (id=394): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x3c) writev(r6, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000180)={r8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 38.607521898s ago: executing program 1 (id=405): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x404142, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_create_resource$binfmt(&(0x7f0000001280)='./file0\x00') recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.639657202s ago: executing program 38 (id=405): r0 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, &(0x7f0000009c80)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x404142, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_create_resource$binfmt(&(0x7f0000001280)='./file0\x00') recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 21.213224134s ago: executing program 8 (id=434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000340)=[{0x6, 0x80, 0x3, 0x67d}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e26, 0x0, @loopback}, 0x1c) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3fd}, &(0x7f0000000240)=0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='highspeed\x00', 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) close(r5) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0xa002a008}) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r3, 0x0, 0x8000002b) 18.163299355s ago: executing program 9 (id=438): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000b79e71b70a61a1be00000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 17.233588444s ago: executing program 8 (id=440): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x84) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 14.628627843s ago: executing program 9 (id=445): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @pic={0x7, 0xf, 0x4, 0x46, 0x4, 0xc4, 0x7f, 0x3, 0x7, 0x17, 0x3, 0xfb, 0x6, 0x4, 0xf5, 0xf7}}) 12.634767327s ago: executing program 9 (id=449): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socket(0x28, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x5602, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) 12.359231629s ago: executing program 8 (id=451): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) 10.516256906s ago: executing program 6 (id=454): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000b79e71b70a61a1be00000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 10.250089505s ago: executing program 8 (id=456): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x83, 0x2, "68bb"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.872058634s ago: executing program 6 (id=457): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7400000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0000000004000000540012800b000100697036746e6c00004400028006000f003e"], 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 7.704230757s ago: executing program 6 (id=460): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) syz_open_dev$loop(0x0, 0x200000dc, 0x105182) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) close_range(r1, 0xffffffffffffffff, 0x0) 7.0560847s ago: executing program 9 (id=461): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x108, 0x1f0, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@dev}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'wg0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 6.700033589s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800", @ANYRES32, @ANYBLOB="000000000000000000000000002c4719b26a00000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) 5.584507219s ago: executing program 6 (id=463): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000740)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x27) 5.552676307s ago: executing program 8 (id=464): socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0], 0x0) 4.859018232s ago: executing program 2 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.524668237s ago: executing program 6 (id=466): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000000000000000000000000000000000000000008600907800000000000000b79e71b70a61a1be00000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 3.41825093s ago: executing program 9 (id=467): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000540)=0xc) syz_open_procfs(r0, &(0x7f0000000580)='net/l2cap\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x200000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x6, 0x0, 0xffffffffffffffff, 0x200000000, 0x800, 0x0, {0x8, 0x1, 0x0, 0x0, 0x3, 0x7, 0xfffffffc, 0x4, 0x9, 0x1000, 0xfffffffd, r4, 0x0, 0xfcc00000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x3, 0x0, 0xffff, 0x4000000000000, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2000, 0x0, r4, 0x0, 0x440, 0x880000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000000)='./file0/file0\x00', 0xa02, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4006a04}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@mpls_getnetconf={0x14, 0x52, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x540a, 0x0) 3.155075575s ago: executing program 2 (id=468): syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="02c930180014000500"], 0x1d) 2.983855231s ago: executing program 6 (id=469): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x0, 0xa, 0x2, "be77"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.440555524s ago: executing program 2 (id=470): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 1.396190711s ago: executing program 8 (id=471): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x206, 0x0, 0x0, 0x2, 0xc4, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) 1.208373481s ago: executing program 2 (id=472): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff7a}) close_range(r3, 0xffffffffffffffff, 0x0) 856.180963ms ago: executing program 9 (id=473): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=474): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800", @ANYRES32, @ANYBLOB="000000000000000000000000002c4719b26a00000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 178.126003][ T5767] cgroup: Unknown subsys name 'net' [ 178.287000][ T5767] cgroup: Unknown subsys name 'cpuset' [ 178.309260][ T5767] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.299420][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.306356][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.912960][ T5767] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 235.141052][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.169870][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.181696][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.193512][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.204140][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.233796][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.243689][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.253776][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.265877][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.278273][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.279359][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.295365][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.305000][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.324666][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.345668][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.521035][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.535648][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.634522][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.645386][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.655954][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.667195][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.695913][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.707321][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.728835][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.740651][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.786696][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 237.244426][ T5083] Bluetooth: hci0: command tx timeout [ 237.245155][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 237.320591][ T5083] Bluetooth: hci2: command tx timeout [ 237.358474][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 237.480979][ T5083] Bluetooth: hci1: command tx timeout [ 237.779432][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 237.809672][ T5083] Bluetooth: hci4: command tx timeout [ 237.809791][ T5791] Bluetooth: hci3: command tx timeout [ 237.832026][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.839669][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.847832][ T5783] bridge_slave_0: entered allmulticast mode [ 237.857819][ T5783] bridge_slave_0: entered promiscuous mode [ 237.874314][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.882082][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.889780][ T5783] bridge_slave_1: entered allmulticast mode [ 237.899495][ T5783] bridge_slave_1: entered promiscuous mode [ 238.056985][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 238.106525][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.216190][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.559478][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.569263][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.577341][ T5790] bridge_slave_0: entered allmulticast mode [ 238.587022][ T5790] bridge_slave_0: entered promiscuous mode [ 238.611149][ T5783] team0: Port device team_slave_0 added [ 238.664408][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.672116][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.679775][ T5787] bridge_slave_0: entered allmulticast mode [ 238.689374][ T5787] bridge_slave_0: entered promiscuous mode [ 238.716424][ T5783] team0: Port device team_slave_1 added [ 238.725747][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.733586][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.743644][ T5790] bridge_slave_1: entered allmulticast mode [ 238.753506][ T5790] bridge_slave_1: entered promiscuous mode [ 238.822824][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.830836][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.838555][ T5787] bridge_slave_1: entered allmulticast mode [ 238.848427][ T5787] bridge_slave_1: entered promiscuous mode [ 239.089011][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.097803][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.125520][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.152954][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.233188][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.256285][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.281788][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.293663][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.301632][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.328382][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.338072][ T5791] Bluetooth: hci0: command tx timeout [ 239.394490][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.402166][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.409837][ T5797] bridge_slave_0: entered allmulticast mode [ 239.419311][ T5797] bridge_slave_0: entered promiscuous mode [ 239.432911][ T5791] Bluetooth: hci2: command tx timeout [ 239.560577][ T5791] Bluetooth: hci1: command tx timeout [ 239.599807][ T5790] team0: Port device team_slave_0 added [ 239.659123][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.667794][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.675671][ T5797] bridge_slave_1: entered allmulticast mode [ 239.685427][ T5797] bridge_slave_1: entered promiscuous mode [ 239.833688][ T5790] team0: Port device team_slave_1 added [ 239.858594][ T5783] hsr_slave_0: entered promiscuous mode [ 239.868867][ T5783] hsr_slave_1: entered promiscuous mode [ 239.915101][ T5791] Bluetooth: hci4: command tx timeout [ 239.921039][ T5791] Bluetooth: hci3: command tx timeout [ 239.988367][ T5787] team0: Port device team_slave_0 added [ 240.006652][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.020029][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.027741][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.035689][ T5796] bridge_slave_0: entered allmulticast mode [ 240.045331][ T5796] bridge_slave_0: entered promiscuous mode [ 240.067863][ T5787] team0: Port device team_slave_1 added [ 240.147400][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.257350][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.266050][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.276387][ T5796] bridge_slave_1: entered allmulticast mode [ 240.286094][ T5796] bridge_slave_1: entered promiscuous mode [ 240.464696][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.472897][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.499376][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.516438][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.523971][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.550471][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.564895][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.572901][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.599229][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.739248][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.754935][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.762531][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.789118][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.809077][ T5797] team0: Port device team_slave_0 added [ 240.860197][ T5797] team0: Port device team_slave_1 added [ 240.917799][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.162507][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.169708][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.196177][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.223420][ T5787] hsr_slave_0: entered promiscuous mode [ 241.233995][ T5787] hsr_slave_1: entered promiscuous mode [ 241.242862][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.250766][ T5787] Cannot create hsr debugfs directory [ 241.352899][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.360037][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.386842][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.401574][ T5791] Bluetooth: hci0: command tx timeout [ 241.428186][ T5796] team0: Port device team_slave_0 added [ 241.487620][ T5791] Bluetooth: hci2: command tx timeout [ 241.490400][ T5790] hsr_slave_0: entered promiscuous mode [ 241.502908][ T5790] hsr_slave_1: entered promiscuous mode [ 241.511617][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.519356][ T5790] Cannot create hsr debugfs directory [ 241.572676][ T5796] team0: Port device team_slave_1 added [ 241.650459][ T5791] Bluetooth: hci1: command tx timeout [ 241.972089][ T5791] Bluetooth: hci3: command tx timeout [ 241.975382][ T5083] Bluetooth: hci4: command tx timeout [ 242.021340][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.028533][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.056589][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.086868][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.097293][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.123818][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.182361][ T5797] hsr_slave_0: entered promiscuous mode [ 242.192530][ T5797] hsr_slave_1: entered promiscuous mode [ 242.201232][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.209046][ T5797] Cannot create hsr debugfs directory [ 242.704291][ T5796] hsr_slave_0: entered promiscuous mode [ 242.714784][ T5796] hsr_slave_1: entered promiscuous mode [ 242.723541][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.731526][ T5796] Cannot create hsr debugfs directory [ 243.103680][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.254981][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.277996][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.404425][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.501410][ T5083] Bluetooth: hci0: command tx timeout [ 243.567259][ T5083] Bluetooth: hci2: command tx timeout [ 243.750843][ T5083] Bluetooth: hci1: command tx timeout [ 243.775872][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.824866][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.851294][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.893046][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.971768][ T5790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.059139][ T5790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.077919][ T5083] Bluetooth: hci4: command tx timeout [ 244.077972][ T5791] Bluetooth: hci3: command tx timeout [ 244.164212][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.208831][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 244.239711][ T5790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.274624][ T5790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.299145][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 244.428790][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 244.588382][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.627380][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.667385][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.755876][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.106213][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.377967][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.526825][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.534505][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.558552][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.625805][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.633419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.764921][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.849740][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.898632][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.906336][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.985802][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.993367][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.056895][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.233369][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.411236][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.418978][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.454949][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.573469][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.581134][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.637478][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.685942][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.693652][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.709642][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.717324][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.898627][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.179496][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.187157][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.211095][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.218679][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.293863][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.762878][ T5796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.773758][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.428879][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.451349][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.045248][ T5787] veth0_vlan: entered promiscuous mode [ 249.111136][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.133727][ T5783] veth0_vlan: entered promiscuous mode [ 249.168710][ T5787] veth1_vlan: entered promiscuous mode [ 249.249067][ T5783] veth1_vlan: entered promiscuous mode [ 249.358373][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.599174][ T5787] veth0_macvtap: entered promiscuous mode [ 249.679737][ T5783] veth0_macvtap: entered promiscuous mode [ 249.737184][ T5787] veth1_macvtap: entered promiscuous mode [ 249.785327][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.825276][ T5783] veth1_macvtap: entered promiscuous mode [ 250.036871][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.091516][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.102462][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.117439][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.138175][ T5797] veth0_vlan: entered promiscuous mode [ 250.227805][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.266715][ T5797] veth1_vlan: entered promiscuous mode [ 250.345533][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.355892][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.365273][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.374435][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.402584][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.413648][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.429326][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.615423][ T5796] veth0_vlan: entered promiscuous mode [ 250.627375][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.637678][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.648367][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.658573][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.760918][ T5797] veth0_macvtap: entered promiscuous mode [ 250.786926][ T5796] veth1_vlan: entered promiscuous mode [ 250.881948][ T5797] veth1_macvtap: entered promiscuous mode [ 251.097979][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.109049][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.119327][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.130171][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.145650][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.194557][ T5796] veth0_macvtap: entered promiscuous mode [ 251.325793][ T5796] veth1_macvtap: entered promiscuous mode [ 251.429949][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.441031][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.451386][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.462373][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.480799][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.591625][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.603838][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.614353][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.625203][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.635371][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.647107][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.663315][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.701013][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.710100][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.719490][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.728728][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.969220][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.980736][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.991151][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.001999][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.012308][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.023262][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.038460][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.122324][ T5790] veth0_vlan: entered promiscuous mode [ 252.181077][ T5790] veth1_vlan: entered promiscuous mode [ 252.287138][ T5796] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.296622][ T5796] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.307221][ T5796] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.316470][ T5796] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.592985][ T5790] veth0_macvtap: entered promiscuous mode [ 252.679225][ T5790] veth1_macvtap: entered promiscuous mode [ 252.980199][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.992190][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.005467][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.020021][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.030397][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.041316][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.051561][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.062340][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.077419][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.389934][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.403160][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.414452][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.425329][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.435576][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.446341][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.456592][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.467392][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.483754][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.644068][ T5790] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.655423][ T5790] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.665088][ T5790] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.674377][ T5790] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.022164][ T3058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.033021][ T3058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.103437][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.111815][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.316277][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.328685][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.348796][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.357005][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.029815][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.038064][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.129601][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.137834][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.167732][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 258.729085][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.737479][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.016164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.024604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.800317][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f58000: rx timeout, send abort [ 260.077784][ T5975] Zero length message leads to an empty skb [ 260.284298][ T5977] netlink: 'syz.1.6': attribute type 39 has an invalid length. [ 260.308863][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f58000: abort rx timeout. Force session deactivation [ 260.315548][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.346553][ T3719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.354623][ T3719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.380993][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.389480][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.502134][ T5977] bridge_slave_0 (unregistering): left allmulticast mode [ 260.509470][ T5977] bridge_slave_0 (unregistering): left promiscuous mode [ 260.517107][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.552196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 260.566594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 260.577896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 260.587635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.181417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.202358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 262.222106][ T5991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8'. [ 262.604372][ T5993] syz.3.8 (5993) used greatest stack depth: 5144 bytes left [ 263.402987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.534776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 263.557200][ T5415] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 263.761284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 263.976386][ T5415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.988271][ T5415] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 264.000393][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.048424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 264.133814][ T5415] usb 5-1: config 0 descriptor?? [ 264.715882][ T5415] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 264.768116][ T5415] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input5 [ 265.124428][ T5415] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 265.263323][ T5415] usb 5-1: USB disconnect, device number 2 [ 266.443914][ T5791] Bluetooth: hci4: command 0x0405 tx timeout [ 268.210736][ T5415] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 268.410554][ T5415] usb 3-1: Using ep0 maxpacket: 32 [ 268.476304][ T5415] usb 3-1: config 0 has an invalid interface number: 202 but max is 0 [ 268.485169][ T5415] usb 3-1: config 0 has no interface number 0 [ 268.491916][ T5415] usb 3-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 268.609461][ T5415] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 268.618982][ T5415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.627324][ T5415] usb 3-1: Product: syz [ 268.631770][ T5415] usb 3-1: Manufacturer: syz [ 268.636505][ T5415] usb 3-1: SerialNumber: syz [ 268.726517][ T6032] netlink: 'syz.4.19': attribute type 39 has an invalid length. [ 268.748025][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.767711][ T5415] usb 3-1: config 0 descriptor?? [ 268.845632][ T6032] bridge_slave_0 (unregistering): left allmulticast mode [ 268.853150][ T6032] bridge_slave_0 (unregistering): left promiscuous mode [ 268.866483][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.882444][ T5415] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 269.084261][ T75] usb 3-1: Failed to submit usb control message: -71 [ 269.091659][ T75] usb 3-1: unable to send the bmi data to the device: -71 [ 269.099271][ T75] usb 3-1: unable to get target info from device [ 269.101231][ T11] usb 3-1: USB disconnect, device number 2 [ 269.106037][ T75] usb 3-1: could not get target info (-71) [ 269.117816][ T75] usb 3-1: could not probe fw (-71) [ 271.054664][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 271.064187][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.072224][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.104898][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.117341][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.249208][ T6055] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 277.743196][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025def400: rx timeout, send abort [ 278.244952][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025def200: rx timeout, send abort [ 278.254482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025def400: abort rx timeout. Force session deactivation [ 278.756279][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025def200: abort rx timeout. Force session deactivation [ 280.799921][ T6125] bridge0: entered promiscuous mode [ 280.805699][ T6125] macvlan2: entered promiscuous mode [ 280.816949][ T6125] bridge0: port 3(macvlan2) entered blocking state [ 280.824185][ T6125] bridge0: port 3(macvlan2) entered disabled state [ 280.831467][ T6125] macvlan2: entered allmulticast mode [ 280.841903][ T6125] bridge0: entered allmulticast mode [ 281.103702][ T6125] macvlan2: left allmulticast mode [ 281.109114][ T6125] bridge0: left allmulticast mode [ 281.117469][ T6125] bridge0: left promiscuous mode [ 281.912416][ T5415] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 282.049832][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025e44400: rx timeout, send abort [ 282.140632][ T5415] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 282.149103][ T5415] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 282.160927][ T5415] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 282.176045][ T5415] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 282.188609][ T5415] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 282.202337][ T5415] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.328345][ T6137] 9pnet_fd: Insufficient options for proto=fd [ 282.438861][ T5415] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 282.448585][ T5415] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 282.457733][ T5415] usb 1-1: Product: syz [ 282.462361][ T5415] usb 1-1: Manufacturer: syz [ 282.467195][ T5415] usb 1-1: SerialNumber: syz [ 282.494522][ T5415] usb 1-1: config 0 descriptor?? [ 282.506386][ T6131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 282.552349][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804dbfd200: rx timeout, send abort [ 282.555384][ T5415] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 282.561419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025e44400: abort rx timeout. Force session deactivation [ 282.689232][ T5415] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 283.061228][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804dbfd200: abort rx timeout. Force session deactivation [ 283.485031][ T5415] usb 1-1: USB disconnect, device number 2 [ 283.547777][ T5415] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 284.330790][ T1861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 284.530819][ T1861] usb 3-1: Using ep0 maxpacket: 16 [ 284.578161][ T1861] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 284.587032][ T1861] usb 3-1: config 5 has no interface number 0 [ 284.595094][ T1861] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 284.608373][ T1861] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 284.619277][ T1861] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 284.633158][ T1861] usb 3-1: config 5 interface 168 has no altsetting 0 [ 284.828466][ T1861] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 284.841632][ T1861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.851282][ T1861] usb 3-1: Product: syz [ 284.855720][ T1861] usb 3-1: Manufacturer: syz [ 284.860893][ T1861] usb 3-1: SerialNumber: syz [ 284.923119][ T6153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.942612][ T5415] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 284.974128][ T6164] netlink: 'syz.4.72': attribute type 1 has an invalid length. [ 284.984700][ T6153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.193545][ T5415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.205243][ T5415] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.214764][ T5415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.348162][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.354861][ T5415] usb 2-1: config 0 descriptor?? [ 285.358728][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.542334][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.555872][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.654925][ T5415] usbhid 2-1:0.0: can't add hid device: -71 [ 285.664055][ T5415] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 285.664275][ C1] usb 3-1: NFC: Urb failure (status -71) [ 285.704995][ C1] usb 3-1: NFC: Urb failure (status -71) [ 285.727492][ T1861] usb 3-1: NFC: Unable to get FW version [ 285.760030][ T1861] pn533_usb 3-1:5.168: probe with driver pn533_usb failed with error -71 [ 285.763206][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.778298][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.797597][ T5415] usb 2-1: USB disconnect, device number 2 [ 285.890038][ T1861] usb 3-1: USB disconnect, device number 3 [ 286.240780][ T5415] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 286.404224][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d400: rx timeout, send abort [ 286.461868][ T5415] usb 2-1: Using ep0 maxpacket: 16 [ 286.526234][ T5415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.537859][ T5415] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 286.547381][ T5415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.644088][ T5415] usb 2-1: config 0 descriptor?? [ 286.904840][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d200: rx timeout, send abort [ 286.914220][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d400: abort rx timeout. Force session deactivation [ 287.077925][ T5415] usbhid 2-1:0.0: can't add hid device: -71 [ 287.092822][ T5415] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 287.157476][ T5415] usb 2-1: USB disconnect, device number 3 [ 287.413548][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d200: abort rx timeout. Force session deactivation [ 288.238857][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 289.853022][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d200: rx timeout, send abort [ 290.222145][ T6224] netlink: 168 bytes leftover after parsing attributes in process `syz.1.95'. [ 290.300667][ T1861] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 290.348379][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4ca00: rx timeout, send abort [ 290.365676][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4d200: abort rx timeout. Force session deactivation [ 290.478197][ T1861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.490185][ T1861] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.499674][ T1861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.572164][ T1861] usb 5-1: config 0 descriptor?? [ 290.848031][ T1861] usbhid 5-1:0.0: can't add hid device: -71 [ 290.854846][ T1861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.857116][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4ca00: abort rx timeout. Force session deactivation [ 290.917829][ T1861] usb 5-1: USB disconnect, device number 3 [ 291.411027][ T1861] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 291.619068][ T1861] usb 5-1: Using ep0 maxpacket: 16 [ 291.667363][ T1861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.679304][ T1861] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 291.688932][ T1861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.813735][ T1861] usb 5-1: config 0 descriptor?? [ 292.251174][ T1861] usbhid 5-1:0.0: can't add hid device: -71 [ 292.257992][ T1861] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 292.367614][ T1861] usb 5-1: USB disconnect, device number 4 [ 293.752195][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4ca00: rx timeout, send abort [ 294.255057][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4c400: rx timeout, send abort [ 294.264239][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4ca00: abort rx timeout. Force session deactivation [ 294.767501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e4c400: abort rx timeout. Force session deactivation [ 295.511144][ T1861] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 295.711534][ T1861] usb 2-1: Using ep0 maxpacket: 8 [ 295.751383][ T5415] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 295.803300][ T1861] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 295.812991][ T1861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.821656][ T1861] usb 2-1: Product: syz [ 295.826082][ T1861] usb 2-1: Manufacturer: syz [ 295.831190][ T1861] usb 2-1: SerialNumber: syz [ 295.852422][ T1861] usb 2-1: config 0 descriptor?? [ 295.985755][ T5415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.001536][ T5415] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.012282][ T5415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.081407][ T1861] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 296.102681][ T5415] usb 1-1: config 0 descriptor?? [ 296.407471][ T5415] usbhid 1-1:0.0: can't add hid device: -71 [ 296.414412][ T5415] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 296.490681][ T5415] usb 1-1: USB disconnect, device number 3 [ 296.950623][ T5415] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 296.991334][ T1861] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 297.051683][ T1861] usb 2-1: USB disconnect, device number 4 [ 297.154713][ T5415] usb 1-1: Using ep0 maxpacket: 16 [ 297.187121][ T5415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.198937][ T5415] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 297.208616][ T5415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.301809][ T5415] usb 1-1: config 0 descriptor?? [ 297.749876][ T5415] usbhid 1-1:0.0: can't add hid device: -71 [ 297.756930][ T5415] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.811816][ T5415] usb 1-1: USB disconnect, device number 4 [ 299.653446][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c3fe00: rx timeout, send abort [ 300.154377][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c3f600: rx timeout, send abort [ 300.163076][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c3fe00: abort rx timeout. Force session deactivation [ 300.662979][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025c3f600: abort rx timeout. Force session deactivation [ 307.970930][ T5415] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 308.198192][ T5415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.209748][ T5415] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 308.220695][ T5415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.302340][ T5415] usb 2-1: config 0 descriptor?? [ 308.547961][ T5415] usbhid 2-1:0.0: can't add hid device: -71 [ 308.554784][ T5415] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 308.582477][ T5415] usb 2-1: USB disconnect, device number 5 [ 309.062380][ T5415] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 309.265608][ T5415] usb 2-1: Using ep0 maxpacket: 16 [ 309.316652][ T5415] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.331320][ T5415] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 309.341679][ T5415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.372632][ T5415] usb 2-1: config 0 descriptor?? [ 309.850951][ T5415] usbhid 2-1:0.0: can't add hid device: -71 [ 309.858443][ T5415] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 309.966445][ T5415] usb 2-1: USB disconnect, device number 6 [ 310.051884][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025cd3c00: rx timeout, send abort [ 310.552409][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dbfa200: rx timeout, send abort [ 310.561786][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025cd3c00: abort rx timeout. Force session deactivation [ 311.061004][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dbfa200: abort rx timeout. Force session deactivation [ 311.111415][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.132849][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.145433][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.166788][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.237060][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.625484][ T6352] syz.1.146: attempt to access beyond end of device [ 312.625484][ T6352] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 312.639624][ T6352] XFS (nbd1): SB validate failed with error -5. [ 313.017626][ T6340] chnl_net:caif_netlink_parms(): no params data found [ 313.320769][ T5083] Bluetooth: hci5: command tx timeout [ 314.284793][ T6340] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.292431][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.299990][ T6340] bridge_slave_0: entered allmulticast mode [ 314.308501][ T6340] bridge_slave_0: entered promiscuous mode [ 314.419120][ T6340] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.431501][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.439103][ T6340] bridge_slave_1: entered allmulticast mode [ 314.447708][ T6340] bridge_slave_1: entered promiscuous mode [ 314.776389][ T6340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.897243][ T6340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.282140][ T6340] team0: Port device team_slave_0 added [ 315.372067][ T6340] team0: Port device team_slave_1 added [ 315.405236][ T5083] Bluetooth: hci5: command tx timeout [ 315.548257][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.559552][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.587672][ T6340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.622833][ T6340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.629925][ T6340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.659466][ T6340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.303066][ T6340] hsr_slave_0: entered promiscuous mode [ 316.312948][ T6340] hsr_slave_1: entered promiscuous mode [ 316.320905][ T6340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.328586][ T6340] Cannot create hsr debugfs directory [ 316.455499][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e21a00: rx timeout, send abort [ 316.955142][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e21800: rx timeout, send abort [ 316.963990][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e21a00: abort rx timeout. Force session deactivation [ 317.463964][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025e21800: abort rx timeout. Force session deactivation [ 317.503847][ T5083] Bluetooth: hci5: command tx timeout [ 317.740493][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 317.751553][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 317.762650][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 317.777311][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 317.789346][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 318.817748][ T6340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.847471][ T6340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.902832][ T6340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.942717][ T6340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.964599][ T5083] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.973632][ T5083] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.982338][ T5083] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.993916][ T5083] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.006069][ T5083] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.617148][ T5791] Bluetooth: hci5: command tx timeout [ 319.881157][ T5083] Bluetooth: hci6: command tx timeout [ 320.693193][ T6340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.009500][ T6404] 9pnet_fd: Insufficient options for proto=fd [ 321.087847][ T5083] Bluetooth: hci7: command tx timeout [ 321.210713][ T6390] chnl_net:caif_netlink_parms(): no params data found [ 321.432131][ T6383] chnl_net:caif_netlink_parms(): no params data found [ 321.881486][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.962215][ T5083] Bluetooth: hci6: command tx timeout [ 322.007735][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.015260][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.167070][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.174631][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.161297][ T5083] Bluetooth: hci7: command tx timeout [ 323.458779][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.466648][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.474361][ T6383] bridge_slave_0: entered allmulticast mode [ 323.484791][ T6383] bridge_slave_0: entered promiscuous mode [ 323.496597][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 323.726186][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.734089][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.746529][ T6383] bridge_slave_1: entered allmulticast mode [ 323.756657][ T6383] bridge_slave_1: entered promiscuous mode [ 323.842103][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 323.886785][ T11] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.896085][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.906463][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.040717][ T5083] Bluetooth: hci6: command tx timeout [ 324.063584][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.073016][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.081363][ T11] usb 2-1: Product: syz [ 324.085647][ T11] usb 2-1: Manufacturer: syz [ 324.090594][ T11] usb 2-1: SerialNumber: syz [ 324.424225][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.470347][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f79200: rx timeout, send abort [ 324.552439][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.714274][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.722407][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.730658][ T6390] bridge_slave_0: entered allmulticast mode [ 324.742446][ T6390] bridge_slave_0: entered promiscuous mode [ 324.807410][ T11] usb 2-1: 0:2 : does not exist [ 324.893026][ T6383] team0: Port device team_slave_0 added [ 324.968046][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f79400: rx timeout, send abort [ 325.009506][ T6383] team0: Port device team_slave_1 added [ 325.242510][ T5083] Bluetooth: hci7: command tx timeout [ 325.321772][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.329470][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.337581][ T6390] bridge_slave_1: entered allmulticast mode [ 325.347308][ T6390] bridge_slave_1: entered promiscuous mode [ 325.476552][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025f79400: abort rx timeout. Force session deactivation [ 325.487611][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.498572][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.526397][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.858362][ T11] usb 2-1: USB disconnect, device number 7 [ 325.918628][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.926638][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.953575][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.993456][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.137074][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.152521][ T5083] Bluetooth: hci6: command tx timeout [ 326.421672][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.468726][ T6390] team0: Port device team_slave_0 added [ 326.645504][ T6383] hsr_slave_0: entered promiscuous mode [ 326.654382][ T6383] hsr_slave_1: entered promiscuous mode [ 326.662851][ T6383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.670653][ T6383] Cannot create hsr debugfs directory [ 326.687891][ T6390] team0: Port device team_slave_1 added [ 327.334227][ T5083] Bluetooth: hci7: command tx timeout [ 327.341973][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.349053][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.375267][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.600149][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.608129][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.639167][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.938729][ T6340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.723622][ T6440] 9pnet_fd: Insufficient options for proto=fd [ 329.445733][ T6390] hsr_slave_0: entered promiscuous mode [ 329.455144][ T6390] hsr_slave_1: entered promiscuous mode [ 329.463155][ T6390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.471141][ T6390] Cannot create hsr debugfs directory [ 330.515391][ T30] audit: type=1326 audit(1746691035.294:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7fc00000 [ 330.718616][ T6383] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 330.896091][ T6383] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 330.971121][ T30] audit: type=1326 audit(1746691035.784:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.0.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf711e539 code=0x7fc00000 [ 331.002874][ T6383] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 331.358860][ T6383] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 331.726289][ T6390] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.903954][ T6390] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.032178][ T6390] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.252404][ T6390] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 332.348588][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806729d600: rx timeout, send abort [ 332.845161][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806729d200: rx timeout, send abort [ 332.859255][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806729d600: abort rx timeout. Force session deactivation [ 333.353636][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806729d200: abort rx timeout. Force session deactivation [ 333.406165][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.616475][ T6340] veth0_vlan: entered promiscuous mode [ 333.852235][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.889411][ T6340] veth1_vlan: entered promiscuous mode [ 333.976396][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.984161][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.535047][ T6340] veth0_macvtap: entered promiscuous mode [ 334.655573][ T6383] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.671319][ T6383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.727828][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.746170][ T6340] veth1_macvtap: entered promiscuous mode [ 334.770723][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.778360][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.063832][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.140071][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.151091][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.161374][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.172008][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.182015][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.193143][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.204705][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.218501][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.233532][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.681677][ T3058] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.689179][ T3058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.704008][ T3058] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.711462][ T3058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.861050][ T6390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.939832][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.951263][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.962000][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.972658][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.983141][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.993977][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.004041][ T6340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.014982][ T6340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.029292][ T6340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.627267][ T6340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.637180][ T6340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.651100][ T6340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.660077][ T6340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.337770][ T6475] 9pnet_fd: Insufficient options for proto=fd [ 338.236606][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.604271][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.008562][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064ca1e00: rx timeout, send abort [ 341.028292][ T6501] warning: `syz.1.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 341.509470][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064cb8000: rx timeout, send abort [ 341.518447][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064ca1e00: abort rx timeout. Force session deactivation [ 342.018064][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064cb8000: abort rx timeout. Force session deactivation [ 342.183310][ T3668] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.534274][ T3668] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.778980][ T3668] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.056673][ T3668] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.113277][ T6512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input6 [ 343.473212][ T6390] veth0_vlan: entered promiscuous mode [ 343.843973][ T6390] veth1_vlan: entered promiscuous mode [ 344.041890][ T3668] bridge_slave_1: left allmulticast mode [ 344.047874][ T3668] bridge_slave_1: left promiscuous mode [ 344.054732][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.069980][ T3668] bridge_slave_0: left allmulticast mode [ 344.076341][ T3668] bridge_slave_0: left promiscuous mode [ 344.083075][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.222315][ T3668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.354562][ T3668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.431661][ T3668] bond0 (unregistering): Released all slaves [ 345.947948][ T6530] 9pnet_fd: Insufficient options for proto=fd [ 346.351939][ T6528] kvm: pic: non byte read [ 346.357520][ T6528] kvm: pic: non byte read [ 346.466991][ T6390] veth0_macvtap: entered promiscuous mode [ 346.568380][ T6528] kvm: pic: non byte read [ 346.880743][ T3668] hsr_slave_0: left promiscuous mode [ 346.927183][ T3668] hsr_slave_1: left promiscuous mode [ 346.986019][ T3668] veth1_macvtap: left promiscuous mode [ 346.995020][ T3668] veth0_macvtap: left promiscuous mode [ 347.001220][ T3668] veth1_vlan: left promiscuous mode [ 347.006823][ T3668] veth0_vlan: left promiscuous mode [ 347.233471][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.240459][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.930609][ T5836] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 348.105776][ T3668] team0 (unregistering): Port device team_slave_1 removed [ 348.221253][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 348.233321][ T5836] usb 2-1: config 0 has an invalid interface number: 228 but max is 0 [ 348.243012][ T5836] usb 2-1: config 0 has no interface number 0 [ 348.249347][ T5836] usb 2-1: config 0 interface 228 has no altsetting 0 [ 348.282451][ T3668] team0 (unregistering): Port device team_slave_0 removed [ 348.331894][ T5836] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 348.342760][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.351982][ T5836] usb 2-1: Product: syz [ 348.356400][ T5836] usb 2-1: Manufacturer: syz [ 348.362284][ T5836] usb 2-1: SerialNumber: syz [ 348.563600][ T5836] usb 2-1: config 0 descriptor?? [ 348.649813][ T5836] go7007 2-1:0.228: probe with driver go7007 failed with error -12 [ 348.837787][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025cc6600: rx timeout, send abort [ 348.922408][ T5842] usb 2-1: USB disconnect, device number 8 [ 349.034488][ T6390] veth1_macvtap: entered promiscuous mode [ 349.171052][ T6383] veth0_vlan: entered promiscuous mode [ 349.334320][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.337382][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025cc7e00: rx timeout, send abort [ 349.350658][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.363538][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025cc6600: abort rx timeout. Force session deactivation [ 349.374946][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.385943][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.396304][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.407271][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.417452][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.428322][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.438524][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.453243][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.469693][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.497878][ T6383] veth1_vlan: entered promiscuous mode [ 349.853534][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025cc7e00: abort rx timeout. Force session deactivation [ 349.937160][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.948122][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.962593][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.975169][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.986412][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.997230][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.007398][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.018464][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.028803][ T6390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.039637][ T6390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.054974][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.096498][ T6383] veth0_macvtap: entered promiscuous mode [ 350.216094][ T6383] veth1_macvtap: entered promiscuous mode [ 350.328055][ T3016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.506710][ T3016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.704867][ T6390] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.714015][ T6390] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.723223][ T6390] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.732305][ T6390] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.863582][ T3016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.957438][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.968316][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.978658][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.993140][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.010969][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.030008][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.040547][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.051465][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.061713][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.073096][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.087029][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.098727][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.114069][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.236978][ T3016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.341046][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.349049][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.693613][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.707681][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.719071][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.730651][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.741284][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.752138][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.762242][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.774271][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.784504][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.795386][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.808716][ T6383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.820650][ T6383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.836678][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.977116][ T3016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.128055][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.137146][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.145062][ T6383] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.145239][ T6383] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.145414][ T6383] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.172443][ T6383] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.234685][ T3016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.448036][ T3016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.665389][ T3016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.164024][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 353.333998][ T3016] bridge_slave_1: left allmulticast mode [ 353.346164][ T3016] bridge_slave_1: left promiscuous mode [ 353.353902][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.431721][ T3016] bridge_slave_0: left allmulticast mode [ 353.444941][ T3016] bridge_slave_0: left promiscuous mode [ 353.451890][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.545155][ T3016] bridge_slave_1: left allmulticast mode [ 353.552109][ T3016] bridge_slave_1: left promiscuous mode [ 353.558321][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.638491][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.704072][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.729915][ T3016] bond0 (unregistering): Released all slaves [ 354.827692][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.859717][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.985943][ T3016] bond0 (unregistering): Released all slaves [ 356.515725][ T3016] hsr_slave_0: left promiscuous mode [ 356.545154][ T3016] hsr_slave_1: left promiscuous mode [ 356.555286][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.568641][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.672756][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.680676][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.838628][ T3016] hsr_slave_0: left promiscuous mode [ 356.874884][ T3016] hsr_slave_1: left promiscuous mode [ 356.883718][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.891578][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.956915][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.965176][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.017598][ T3016] veth1_macvtap: left promiscuous mode [ 357.027810][ T3016] veth0_macvtap: left promiscuous mode [ 357.033968][ T3016] veth1_vlan: left promiscuous mode [ 357.039437][ T3016] veth0_vlan: left promiscuous mode [ 357.063573][ T3016] veth1_macvtap: left promiscuous mode [ 357.069603][ T3016] veth0_macvtap: left promiscuous mode [ 357.075706][ T3016] veth1_vlan: left promiscuous mode [ 357.081619][ T3016] veth0_vlan: left promiscuous mode [ 357.957071][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 357.995376][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 358.589613][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 358.672172][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 359.512798][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 359.519141][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 363.140138][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.148870][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.563796][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.572255][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.775275][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.783543][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.185835][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.194134][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.137344][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.213'. [ 368.266498][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.213'. [ 368.605922][ T6705] syz.6.214: attempt to access beyond end of device [ 368.605922][ T6705] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 368.619498][ T6705] XFS (nbd6): SB validate failed with error -5. [ 370.182074][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.206487][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.216805][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.236050][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.249140][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.442954][ T5791] Bluetooth: hci2: command tx timeout [ 372.602839][ T6727] chnl_net:caif_netlink_parms(): no params data found [ 373.320393][ T6754] syz.6.228: attempt to access beyond end of device [ 373.320393][ T6754] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 373.333755][ T6754] XFS (nbd6): SB validate failed with error -5. [ 374.523907][ T5791] Bluetooth: hci2: command tx timeout [ 374.916543][ T6727] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.924262][ T6727] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.932123][ T6727] bridge_slave_0: entered allmulticast mode [ 374.940654][ T6727] bridge_slave_0: entered promiscuous mode [ 375.157923][ T6727] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.165533][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.173193][ T6727] bridge_slave_1: entered allmulticast mode [ 375.181873][ T6727] bridge_slave_1: entered promiscuous mode [ 375.747737][ T6727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.897364][ T6727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.049540][ T5791] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 376.415923][ T6727] team0: Port device team_slave_0 added [ 376.551898][ T6727] team0: Port device team_slave_1 added [ 376.611872][ T5791] Bluetooth: hci2: command tx timeout [ 377.009941][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.017697][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.044290][ T6727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.173418][ T6727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.180975][ T6727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.211801][ T6727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.588952][ T6727] hsr_slave_0: entered promiscuous mode [ 377.597962][ T6727] hsr_slave_1: entered promiscuous mode [ 377.611690][ T6727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.619606][ T6727] Cannot create hsr debugfs directory [ 377.936649][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.233'. [ 378.689568][ T5083] Bluetooth: hci2: command tx timeout [ 379.996225][ T6727] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 380.107295][ T6727] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 380.226785][ T6727] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 380.329287][ T6727] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 381.441521][ T6815] syz.6.242 uses obsolete (PF_INET,SOCK_PACKET) [ 381.494656][ T6818] netlink: 'syz.7.243': attribute type 10 has an invalid length. [ 382.232584][ T6727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.456851][ T6727] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.524763][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.525108][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.641087][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.641616][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.852187][ T5083] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 385.090908][ T6843] loop7: detected capacity change from 0 to 16384 [ 385.741246][ T6843] loop7: detected capacity change from 16384 to 0 [ 386.289559][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.850511][ T11] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 388.366600][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 388.419938][ T11] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 388.428793][ T11] usb 2-1: config 0 has no interface number 0 [ 388.435414][ T11] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 388.446437][ T11] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.811132][ T11] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 388.820503][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.828730][ T11] usb 2-1: Product: syz [ 388.833137][ T11] usb 2-1: Manufacturer: syz [ 388.837877][ T11] usb 2-1: SerialNumber: syz [ 388.886878][ T11] usb 2-1: config 0 descriptor?? [ 388.902534][ T6866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.910192][ T6866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.049932][ T5083] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 389.392188][ T6866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 389.450756][ T6866] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 390.130600][ T11] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 390.141204][ T11] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 390.153140][ T11] asix 2-1:0.251: probe with driver asix failed with error -32 [ 391.407548][ T6727] veth0_vlan: entered promiscuous mode [ 391.599391][ T6727] veth1_vlan: entered promiscuous mode [ 391.608123][ T11] usb 2-1: USB disconnect, device number 9 [ 392.222863][ T6727] veth0_macvtap: entered promiscuous mode [ 392.324898][ T6727] veth1_macvtap: entered promiscuous mode [ 392.903482][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.914601][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.924781][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.935677][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.946052][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.956853][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.971149][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.983270][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.993476][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.004333][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.019603][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.342134][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.353676][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.363900][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.378697][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.390942][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.401914][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.412048][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.423077][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.433214][ T6727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 393.443897][ T6727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 393.458621][ T6727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.711084][ T3668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.796306][ T6727] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.805704][ T6727] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.814922][ T6727] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.824088][ T6727] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.979931][ T3668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.220039][ T3668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.388460][ T3668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.283157][ T3668] bridge_slave_1: left allmulticast mode [ 395.289118][ T3668] bridge_slave_1: left promiscuous mode [ 395.296920][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.395282][ T3668] bridge_slave_0: left allmulticast mode [ 395.401937][ T3668] bridge_slave_0: left promiscuous mode [ 395.408507][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.083385][ T3668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.130837][ T3668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.163796][ T3668] bond0 (unregistering): Released all slaves [ 397.013054][ T3668] hsr_slave_0: left promiscuous mode [ 397.040689][ T3668] hsr_slave_1: left promiscuous mode [ 397.048860][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.057509][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.150752][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.158572][ T3668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.310694][ T3668] veth1_macvtap: left promiscuous mode [ 397.316598][ T3668] veth0_macvtap: left promiscuous mode [ 397.323566][ T3668] veth1_vlan: left promiscuous mode [ 397.329013][ T3668] veth0_vlan: left promiscuous mode [ 398.662049][ T3668] team0 (unregistering): Port device team_slave_1 removed [ 398.773140][ T3668] team0 (unregistering): Port device team_slave_0 removed [ 400.332129][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.346474][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.369451][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.409035][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.445102][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.521037][ T5791] Bluetooth: hci0: command tx timeout [ 402.619759][ T6952] chnl_net:caif_netlink_parms(): no params data found [ 404.092359][ T30] audit: type=1326 audit(1746691108.914:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6986 comm="syz.5.280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7fc00000 [ 404.366491][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.374082][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.381804][ T6952] bridge_slave_0: entered allmulticast mode [ 404.390621][ T6952] bridge_slave_0: entered promiscuous mode [ 404.527462][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.540326][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.548110][ T6952] bridge_slave_1: entered allmulticast mode [ 404.556659][ T6952] bridge_slave_1: entered promiscuous mode [ 404.627803][ T5791] Bluetooth: hci0: command tx timeout [ 405.043383][ T6952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.184804][ T6952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.240553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.248609][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.761785][ T6952] team0: Port device team_slave_0 added [ 405.787281][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.795561][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.907981][ T6952] team0: Port device team_slave_1 added [ 406.351523][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.358791][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.393673][ T6952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.670988][ T6952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.678319][ T6952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.709966][ T6952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.725606][ T5791] Bluetooth: hci0: command tx timeout [ 406.868968][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 407.043208][ T6952] hsr_slave_0: entered promiscuous mode [ 407.053770][ T6952] hsr_slave_1: entered promiscuous mode [ 407.111742][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 407.146252][ T5836] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 407.155348][ T5836] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.166001][ T5836] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.269146][ T5836] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.279497][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.288090][ T5836] usb 7-1: Product: syz [ 407.292652][ T5836] usb 7-1: Manufacturer: syz [ 407.297490][ T5836] usb 7-1: SerialNumber: syz [ 407.927230][ T5836] usb 7-1: 0:2 : does not exist [ 408.647308][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.654294][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.782524][ T5791] Bluetooth: hci0: command tx timeout [ 408.825087][ T5836] usb 7-1: USB disconnect, device number 2 [ 409.189682][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.441621][ T6952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 409.547949][ T6952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 409.671744][ T6952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 409.785345][ T6952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 411.470847][ T6952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.753416][ T6952] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.863107][ T3016] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.871034][ T3016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.025449][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.033432][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.416186][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.762463][ T11] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 415.058522][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 415.156277][ T11] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 415.166658][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.177156][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.263660][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.301'. [ 415.397369][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 415.408431][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.417120][ T11] usb 2-1: Product: syz [ 415.422254][ T11] usb 2-1: Manufacturer: syz [ 415.427159][ T11] usb 2-1: SerialNumber: syz [ 416.181329][ T11] usb 2-1: 0:2 : does not exist [ 416.682548][ T11] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 417.021895][ T11] usb 2-1: USB disconnect, device number 10 [ 417.471922][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.107363][ T6952] veth0_vlan: entered promiscuous mode [ 418.324768][ T6952] veth1_vlan: entered promiscuous mode [ 418.926262][ T6952] veth0_macvtap: entered promiscuous mode [ 419.092165][ T6952] veth1_macvtap: entered promiscuous mode [ 419.517258][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.528478][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.539236][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.550074][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.560964][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.571747][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.581880][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.596292][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.607498][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.618331][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.633921][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.369390][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.381081][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.398808][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.413851][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.425492][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.436313][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.446463][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.457382][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.467547][ T6952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.478275][ T6952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.492546][ T6952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.214112][ T6952] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.223635][ T6952] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.237131][ T6952] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.247693][ T6952] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.409533][ T61] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.718649][ T61] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.850976][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.5.312'. [ 421.955158][ T61] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.208638][ T61] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.073652][ T7125] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 423.080542][ T7125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 423.089665][ T7125] vhci_hcd vhci_hcd.0: Device attached [ 423.307183][ T61] bridge_slave_1: left allmulticast mode [ 423.313662][ T61] bridge_slave_1: left promiscuous mode [ 423.320434][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.391824][ T1861] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 423.464936][ T61] bridge_slave_0: left allmulticast mode [ 423.470973][ T61] bridge_slave_0: left promiscuous mode [ 423.477586][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.822688][ T7126] vhci_hcd: connection reset by peer [ 423.860418][ T12] vhci_hcd: stop threads [ 423.864904][ T12] vhci_hcd: release socket [ 423.869885][ T12] vhci_hcd: disconnect device [ 424.890788][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.991732][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.014162][ T61] bond0 (unregistering): Released all slaves [ 425.661699][ T11] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 425.878297][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 425.892782][ T5415] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 425.949104][ T11] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 425.958487][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.969043][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.095162][ T61] hsr_slave_0: left promiscuous mode [ 426.135140][ T61] hsr_slave_1: left promiscuous mode [ 426.135858][ T5415] usb 7-1: config 0 has an invalid interface number: 185 but max is 0 [ 426.146663][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.152467][ T5415] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.156822][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.168263][ T5415] usb 7-1: config 0 has no interface number 0 [ 426.181160][ T5415] usb 7-1: config 0 interface 185 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 426.192658][ T5415] usb 7-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 426.302854][ T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.313354][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.321816][ T11] usb 2-1: Product: syz [ 426.326251][ T11] usb 2-1: Manufacturer: syz [ 426.331282][ T11] usb 2-1: SerialNumber: syz [ 426.350952][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.358796][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.559377][ T5415] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 426.570620][ T5415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.578867][ T5415] usb 7-1: Product: syz [ 426.583837][ T5415] usb 7-1: Manufacturer: syz [ 426.588839][ T5415] usb 7-1: SerialNumber: syz [ 426.620735][ T61] veth1_macvtap: left promiscuous mode [ 426.626485][ T61] veth0_macvtap: left promiscuous mode [ 426.632557][ T61] veth1_vlan: left promiscuous mode [ 426.638213][ T61] veth0_vlan: left promiscuous mode [ 426.754878][ T5415] usb 7-1: config 0 descriptor?? [ 426.842239][ T5415] usb 7-1: bad CDC descriptors [ 426.849428][ T5415] usb 7-1: unsupported MDLM descriptors [ 427.124989][ T5415] usb 7-1: USB disconnect, device number 3 [ 427.165546][ T11] usb 2-1: 0:2 : does not exist [ 427.897021][ T61] team0 (unregistering): Port device team_slave_1 removed [ 427.977661][ T11] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 428.194669][ T61] team0 (unregistering): Port device team_slave_0 removed [ 428.323984][ T11] usb 2-1: USB disconnect, device number 11 [ 428.541009][ T1861] vhci_hcd: vhci_device speed not set [ 428.753818][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.948700][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.6.323'. [ 432.689598][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.699731][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.077290][ T3058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.085749][ T3058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.590684][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.334'. [ 434.610575][ T1861] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 434.790766][ T1861] usb 10-1: Using ep0 maxpacket: 16 [ 434.804778][ T1861] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 434.813648][ T1861] usb 10-1: config 0 has no interface number 0 [ 434.820075][ T1861] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 434.830691][ T1861] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 434.920702][ T1861] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 434.930535][ T1861] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.938895][ T1861] usb 10-1: Product: syz [ 434.943611][ T1861] usb 10-1: Manufacturer: syz [ 434.951043][ T1861] usb 10-1: SerialNumber: syz [ 435.013565][ T1861] usb 10-1: config 0 descriptor?? [ 435.042371][ T7217] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 435.050605][ T7217] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 435.365987][ T7217] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 435.441793][ T7217] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 436.161342][ T1861] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 436.173563][ T1861] asix 10-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 436.189899][ T1861] asix 10-1:0.251: probe with driver asix failed with error -32 [ 436.285366][ T5083] Bluetooth: hci5: command 0x0406 tx timeout [ 437.975431][ T1861] usb 10-1: USB disconnect, device number 2 [ 440.301633][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz.8.347'. [ 440.313866][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.345'. [ 441.406110][ T5083] Bluetooth: hci6: command 0x0406 tx timeout [ 441.931845][ T1861] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 442.167274][ T1861] usb 2-1: Using ep0 maxpacket: 16 [ 442.280788][ T1861] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 442.289876][ T1861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.300969][ T1861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.523838][ T1861] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.535886][ T1861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.545348][ T1861] usb 2-1: Product: syz [ 442.549770][ T1861] usb 2-1: Manufacturer: syz [ 442.554778][ T1861] usb 2-1: SerialNumber: syz [ 443.442516][ T1861] usb 2-1: 0:2 : does not exist [ 443.521743][ T1861] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 443.772475][ T1861] usb 2-1: USB disconnect, device number 12 [ 444.340626][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.253238][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.8.360'. [ 445.597167][ T7316] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'. [ 445.897602][ T7323] fuse: Bad value for 'fd' [ 448.180620][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 448.424650][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 448.438309][ T11] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 448.447798][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.458292][ T11] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.605946][ T11] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 448.615658][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.624080][ T11] usb 7-1: Product: syz [ 448.628469][ T11] usb 7-1: Manufacturer: syz [ 448.633421][ T11] usb 7-1: SerialNumber: syz [ 449.298406][ T11] usb 7-1: 0:2 : does not exist [ 449.392873][ T11] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 449.622965][ T11] usb 7-1: USB disconnect, device number 4 [ 449.923659][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.670053][ T7368] fuse: Bad value for 'fd' [ 451.512696][ T7374] netlink: 48 bytes leftover after parsing attributes in process `syz.6.376'. [ 452.369336][ T5791] Bluetooth: hci6: unexpected event for opcode 0x1004 [ 453.289187][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.302510][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.312198][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.325869][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.337593][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.561000][ T5083] Bluetooth: hci3: command tx timeout [ 456.049305][ T7387] chnl_net:caif_netlink_parms(): no params data found [ 456.440513][ T5083] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 456.449207][ T5083] Bluetooth: hci6: Injecting HCI hardware error event [ 456.461062][ T5791] Bluetooth: hci6: hardware error 0x00 [ 457.641259][ T5083] Bluetooth: hci3: command tx timeout [ 458.321654][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.329652][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.337658][ T7387] bridge_slave_0: entered allmulticast mode [ 458.347264][ T7387] bridge_slave_0: entered promiscuous mode [ 458.613277][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.620976][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.628626][ T7387] bridge_slave_1: entered allmulticast mode [ 458.637922][ T7387] bridge_slave_1: entered promiscuous mode [ 458.683430][ T5791] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 459.159529][ T7387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.202034][ T7387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.567993][ T7387] team0: Port device team_slave_0 added [ 459.587089][ T7387] team0: Port device team_slave_1 added [ 459.721224][ T5791] Bluetooth: hci3: command tx timeout [ 460.086197][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.093789][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.121810][ T7387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.385859][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.393694][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.420266][ T7387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.802855][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.389'. [ 461.091744][ T7387] hsr_slave_0: entered promiscuous mode [ 461.102508][ T7387] hsr_slave_1: entered promiscuous mode [ 461.111507][ T7387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.119315][ T7387] Cannot create hsr debugfs directory [ 461.810674][ T5791] Bluetooth: hci3: command tx timeout [ 465.662943][ T7387] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 465.692491][ T7387] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 465.753385][ T7387] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 465.893315][ T7387] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.514207][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.854352][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.043720][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.051478][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.252776][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.260585][ T6909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.175228][ T7494] netlink: 48 bytes leftover after parsing attributes in process `syz.9.403'. [ 470.107112][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.113994][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.147847][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.072239][ T7387] veth0_vlan: entered promiscuous mode [ 472.344056][ T7387] veth1_vlan: entered promiscuous mode [ 472.951384][ T7387] veth0_macvtap: entered promiscuous mode [ 473.171778][ T7387] veth1_macvtap: entered promiscuous mode [ 473.779404][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.790482][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.801475][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.812641][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.822799][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.833627][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.843750][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.854491][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.867513][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.880683][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.904124][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.021749][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.032543][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.042835][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.053522][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.063509][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.076138][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.087060][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.097740][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.108246][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.118891][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.134445][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.286088][ T3016] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.557347][ T3016] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.712845][ T3016] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.904875][ T3016] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.006087][ T7387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.015478][ T7387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.024783][ T7387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.034029][ T7387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.672120][ T3016] bridge_slave_1: left allmulticast mode [ 475.677966][ T3016] bridge_slave_1: left promiscuous mode [ 475.684815][ T3016] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.785067][ T3016] bridge_slave_0: left allmulticast mode [ 475.791204][ T3016] bridge_slave_0: left promiscuous mode [ 475.797563][ T3016] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.333664][ T7546] netlink: 48 bytes leftover after parsing attributes in process `syz.9.417'. [ 476.882048][ T3016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.977119][ T3016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.033429][ T3016] bond0 (unregistering): Released all slaves [ 477.735501][ T3016] hsr_slave_0: left promiscuous mode [ 477.764379][ T3016] hsr_slave_1: left promiscuous mode [ 477.772984][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.780871][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.838863][ T3016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.850576][ T3016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.102963][ T3016] veth1_macvtap: left promiscuous mode [ 478.108759][ T3016] veth0_macvtap: left promiscuous mode [ 478.116154][ T3016] veth1_vlan: left promiscuous mode [ 478.122169][ T3016] veth0_vlan: left promiscuous mode [ 479.302723][ T3016] team0 (unregistering): Port device team_slave_1 removed [ 479.423064][ T3016] team0 (unregistering): Port device team_slave_0 removed [ 483.940458][ T5415] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 484.260487][ T5415] usb 7-1: Using ep0 maxpacket: 16 [ 484.434780][ T5415] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 484.444088][ T5415] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.454682][ T5415] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.531041][ T5415] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.541429][ T5415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.549789][ T5415] usb 7-1: Product: syz [ 484.554471][ T5415] usb 7-1: Manufacturer: syz [ 484.559316][ T5415] usb 7-1: SerialNumber: syz [ 484.696604][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.430'. [ 485.112949][ T5415] usb 7-1: 0:2 : does not exist [ 485.798962][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.811821][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.144838][ T5415] usb 7-1: USB disconnect, device number 5 [ 486.387410][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.395895][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.694867][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.280984][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.310101][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.326602][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.358281][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.388830][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.501024][ T5791] Bluetooth: hci4: command tx timeout [ 489.741181][ T7615] chnl_net:caif_netlink_parms(): no params data found [ 490.788675][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.441'. [ 491.560950][ T5083] Bluetooth: hci4: command tx timeout [ 491.701461][ T5415] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 491.917876][ T5415] usb 7-1: Using ep0 maxpacket: 16 [ 492.024912][ T5415] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 492.034380][ T5415] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.046375][ T5415] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.174859][ T5415] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 492.184277][ T5415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.195041][ T5415] usb 7-1: Product: syz [ 492.199347][ T5415] usb 7-1: Manufacturer: syz [ 492.205086][ T5415] usb 7-1: SerialNumber: syz [ 492.243922][ T7615] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.251621][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.259234][ T7615] bridge_slave_0: entered allmulticast mode [ 492.267856][ T7615] bridge_slave_0: entered promiscuous mode [ 492.316300][ T7615] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.324715][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.332684][ T7615] bridge_slave_1: entered allmulticast mode [ 492.342350][ T7615] bridge_slave_1: entered promiscuous mode [ 492.618701][ T7615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.685886][ T5791] Bluetooth: hci2: command 0x0405 tx timeout [ 492.817953][ T7615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.861281][ T5415] usb 7-1: 0:2 : does not exist [ 492.895970][ T5415] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 493.166504][ T5415] usb 7-1: USB disconnect, device number 6 [ 493.449649][ T7615] team0: Port device team_slave_0 added [ 493.474734][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.569437][ T7615] team0: Port device team_slave_1 added [ 493.640604][ T5791] Bluetooth: hci4: command tx timeout [ 494.095550][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.103026][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.130318][ T7615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.385154][ T7615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.392882][ T7615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.419893][ T7615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.989887][ T7615] hsr_slave_0: entered promiscuous mode [ 494.998571][ T7615] hsr_slave_1: entered promiscuous mode [ 495.006351][ T7615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.014377][ T7615] Cannot create hsr debugfs directory [ 495.722833][ T5791] Bluetooth: hci4: command tx timeout [ 496.511924][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 498.176546][ T7681] nvme_fabrics: missing parameter 'transport=%s' [ 498.183559][ T7681] nvme_fabrics: missing parameter 'nqn=%s' [ 498.622372][ T7615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.723767][ T7615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.820767][ T7615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.918460][ T7615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.006539][ T7694] netlink: 56 bytes leftover after parsing attributes in process `syz.6.457'. [ 501.429410][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.662182][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.766720][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.774447][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.952352][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.960672][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.550888][ T7615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.054844][ T2209] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 505.277967][ T2209] usb 7-1: Using ep0 maxpacket: 16 [ 505.378336][ T2209] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 505.386834][ T2209] usb 7-1: config 1 has no interface number 0 [ 505.393194][ T2209] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 505.405765][ T2209] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 505.416877][ T2209] usb 7-1: config 1 interface 105 has no altsetting 0 [ 505.631809][ T2209] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 505.641714][ T2209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.649860][ T2209] usb 7-1: Product: syz [ 505.654293][ T2209] usb 7-1: Manufacturer: syz [ 505.659020][ T2209] usb 7-1: SerialNumber: syz [ 505.774049][ T7743] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 505.851221][ T7743] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 506.482702][ T7743] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 506.555781][ T7743] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 506.758244][ T7759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 507.268824][ T2209] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 507.324415][ T2209] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 507.337005][ T2209] ===================================================== [ 507.345119][ T2209] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 507.357611][ T2209] usbnet_probe+0x2e57/0x4390 [ 507.364380][ T2209] usb_probe_interface+0xd01/0x1310 [ 507.369882][ T2209] really_probe+0x4d1/0xd90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 507.379934][ T2209] __driver_probe_device+0x268/0x380 [ 507.390031][ T2209] driver_probe_device+0x70/0x8b0 [ 507.395875][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.401806][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.408328][ T2209] __device_attach+0x3c8/0x5c0 [ 507.413374][ T2209] device_initial_probe+0x33/0x40 [ 507.418578][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.423727][ T2209] device_add+0x12a9/0x1c10 [ 507.428351][ T2209] usb_set_configuration+0x3493/0x3b70 [ 507.434032][ T2209] usb_generic_driver_probe+0xfc/0x290 [ 507.439650][ T2209] usb_probe_device+0x38a/0x690 [ 507.446098][ T2209] really_probe+0x4d1/0xd90 [ 507.454009][ T2209] __driver_probe_device+0x268/0x380 [ 507.459394][ T2209] driver_probe_device+0x70/0x8b0 [ 507.466721][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.472299][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.477263][ T2209] __device_attach+0x3c8/0x5c0 [ 507.482237][ T2209] device_initial_probe+0x33/0x40 [ 507.487411][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.492626][ T2209] device_add+0x12a9/0x1c10 [ 507.497376][ T2209] usb_new_device+0x104b/0x20c0 [ 507.502545][ T2209] hub_event+0x5588/0x7580 [ 507.507200][ T2209] process_scheduled_works+0xb97/0x1d90 [ 507.513050][ T2209] worker_thread+0xedf/0x1590 [ 507.517974][ T2209] kthread+0xd59/0xf00 [ 507.522271][ T2209] ret_from_fork+0x6e/0x90 [ 507.526908][ T2209] ret_from_fork_asm+0x1a/0x30 [ 507.531994][ T2209] [ 507.534368][ T2209] Uninit was stored to memory at: [ 507.539558][ T2209] dev_addr_mod+0xb0/0x550 [ 507.544209][ T2209] aqc111_bind+0x35f/0x1150 [ 507.548807][ T2209] usbnet_probe+0xbe6/0x4390 [ 507.557058][ T2209] usb_probe_interface+0xd01/0x1310 [ 507.563830][ T2209] really_probe+0x4d1/0xd90 [ 507.568432][ T2209] __driver_probe_device+0x268/0x380 [ 507.574269][ T2209] driver_probe_device+0x70/0x8b0 [ 507.579413][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.585150][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.590297][ T2209] __device_attach+0x3c8/0x5c0 [ 507.595149][ T2209] device_initial_probe+0x33/0x40 [ 507.600364][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.605332][ T2209] device_add+0x12a9/0x1c10 [ 507.609988][ T2209] usb_set_configuration+0x3493/0x3b70 [ 507.615767][ T2209] usb_generic_driver_probe+0xfc/0x290 [ 507.621473][ T2209] usb_probe_device+0x38a/0x690 [ 507.626459][ T2209] really_probe+0x4d1/0xd90 [ 507.631160][ T2209] __driver_probe_device+0x268/0x380 [ 507.636546][ T2209] driver_probe_device+0x70/0x8b0 [ 507.641836][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.647325][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.656539][ T2209] __device_attach+0x3c8/0x5c0 [ 507.662295][ T2209] device_initial_probe+0x33/0x40 [ 507.667412][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.672935][ T2209] device_add+0x12a9/0x1c10 [ 507.677565][ T2209] usb_new_device+0x104b/0x20c0 [ 507.682640][ T2209] hub_event+0x5588/0x7580 [ 507.687169][ T2209] process_scheduled_works+0xb97/0x1d90 [ 507.692910][ T2209] worker_thread+0xedf/0x1590 [ 507.697684][ T2209] kthread+0xd59/0xf00 [ 507.702015][ T2209] ret_from_fork+0x6e/0x90 [ 507.706548][ T2209] ret_from_fork_asm+0x1a/0x30 [ 507.711514][ T2209] [ 507.713891][ T2209] Uninit was stored to memory at: [ 507.719081][ T2209] aqc111_bind+0x774/0x1150 [ 507.723799][ T2209] usbnet_probe+0xbe6/0x4390 [ 507.728522][ T2209] usb_probe_interface+0xd01/0x1310 [ 507.733902][ T2209] really_probe+0x4d1/0xd90 [ 507.738498][ T2209] __driver_probe_device+0x268/0x380 [ 507.743956][ T2209] driver_probe_device+0x70/0x8b0 [ 507.749105][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.758678][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.764663][ T2209] __device_attach+0x3c8/0x5c0 [ 507.769567][ T2209] device_initial_probe+0x33/0x40 [ 507.774785][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.779763][ T2209] device_add+0x12a9/0x1c10 [ 507.784505][ T2209] usb_set_configuration+0x3493/0x3b70 [ 507.790262][ T2209] usb_generic_driver_probe+0xfc/0x290 [ 507.795891][ T2209] usb_probe_device+0x38a/0x690 [ 507.800962][ T2209] really_probe+0x4d1/0xd90 [ 507.805556][ T2209] __driver_probe_device+0x268/0x380 [ 507.811076][ T2209] driver_probe_device+0x70/0x8b0 [ 507.816279][ T2209] __device_attach_driver+0x4ee/0x950 [ 507.821917][ T2209] bus_for_each_drv+0x3e0/0x680 [ 507.826884][ T2209] __device_attach+0x3c8/0x5c0 [ 507.831826][ T2209] device_initial_probe+0x33/0x40 [ 507.836953][ T2209] bus_probe_device+0x3ba/0x5e0 [ 507.841977][ T2209] device_add+0x12a9/0x1c10 [ 507.846605][ T2209] usb_new_device+0x104b/0x20c0 [ 507.851633][ T2209] hub_event+0x5588/0x7580 [ 507.856203][ T2209] process_scheduled_works+0xb97/0x1d90 [ 507.865122][ T2209] worker_thread+0xedf/0x1590 [ 507.869908][ T2209] kthread+0xd59/0xf00 [ 507.874974][ T2209] ret_from_fork+0x6e/0x90 [ 507.879523][ T2209] ret_from_fork_asm+0x1a/0x30 [ 507.885726][ T2209] [ 507.888111][ T2209] Local variable buf.i created at: [ 507.894024][ T2209] aqc111_bind+0x221/0x1150 [ 507.898636][ T2209] usbnet_probe+0xbe6/0x4390 [ 507.903443][ T2209] [ 507.905863][ T2209] CPU: 0 UID: 0 PID: 2209 Comm: kworker/0:2 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 507.918256][ T2209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 507.928491][ T2209] Workqueue: usb_hub_wq hub_event [ 507.933729][ T2209] ===================================================== [ 507.940850][ T2209] Disabling lock debugging due to kernel taint [ 507.947073][ T2209] Kernel panic - not syncing: kmsan.panic set ... [ 507.953582][ T2209] CPU: 0 UID: 0 PID: 2209 Comm: kworker/0:2 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 507.967440][ T2209] Tainted: [B]=BAD_PAGE [ 507.971661][ T2209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 507.981810][ T2209] Workqueue: usb_hub_wq hub_event [ 507.986982][ T2209] Call Trace: [ 507.990332][ T2209] [ 507.993340][ T2209] __dump_stack+0x26/0x30 [ 507.997784][ T2209] dump_stack_lvl+0x53/0x270 [ 508.002490][ T2209] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.008434][ T2209] dump_stack+0x1e/0x25 [ 508.012700][ T2209] panic+0x4bd/0xd50 [ 508.016743][ T2209] kmsan_report+0x29d/0x2a0 [ 508.021366][ T2209] ? __netdev_printk+0x677/0xa00 [ 508.026409][ T2209] ? __msan_warning+0x96/0x120 [ 508.031291][ T2209] ? usbnet_probe+0x2e57/0x4390 [ 508.036287][ T2209] ? usb_probe_interface+0xd01/0x1310 [ 508.041762][ T2209] ? really_probe+0x4d1/0xd90 [ 508.046568][ T2209] ? __driver_probe_device+0x268/0x380 [ 508.052134][ T2209] ? driver_probe_device+0x70/0x8b0 [ 508.057431][ T2209] ? __device_attach_driver+0x4ee/0x950 [ 508.063104][ T2209] ? bus_for_each_drv+0x3e0/0x680 [ 508.068329][ T2209] ? __device_attach+0x3c8/0x5c0 [ 508.073364][ T2209] ? device_initial_probe+0x33/0x40 [ 508.078669][ T2209] ? bus_probe_device+0x3ba/0x5e0 [ 508.083809][ T2209] ? device_add+0x12a9/0x1c10 [ 508.088603][ T2209] ? usb_set_configuration+0x3493/0x3b70 [ 508.094373][ T2209] ? usb_generic_driver_probe+0xfc/0x290 [ 508.100157][ T2209] ? usb_probe_device+0x38a/0x690 [ 508.105418][ T2209] ? really_probe+0x4d1/0xd90 [ 508.110224][ T2209] ? __driver_probe_device+0x268/0x380 [ 508.115802][ T2209] ? driver_probe_device+0x70/0x8b0 [ 508.121097][ T2209] ? __device_attach_driver+0x4ee/0x950 [ 508.126756][ T2209] ? bus_for_each_drv+0x3e0/0x680 [ 508.131902][ T2209] ? __device_attach+0x3c8/0x5c0 [ 508.136928][ T2209] ? device_initial_probe+0x33/0x40 [ 508.142229][ T2209] ? bus_probe_device+0x3ba/0x5e0 [ 508.147481][ T2209] ? device_add+0x12a9/0x1c10 [ 508.152316][ T2209] ? usb_new_device+0x104b/0x20c0 [ 508.157464][ T2209] ? hub_event+0x5588/0x7580 [ 508.162190][ T2209] ? process_scheduled_works+0xb97/0x1d90 [ 508.168019][ T2209] ? worker_thread+0xedf/0x1590 [ 508.173000][ T2209] ? kthread+0xd59/0xf00 [ 508.177370][ T2209] ? ret_from_fork+0x6e/0x90 [ 508.182090][ T2209] ? ret_from_fork_asm+0x1a/0x30 [ 508.187200][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.192532][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.197898][ T2209] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 508.204262][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.209628][ T2209] __msan_warning+0x96/0x120 [ 508.214355][ T2209] usbnet_probe+0x2e57/0x4390 [ 508.219193][ T2209] ? pm_runtime_enable+0x3b2/0x4d0 [ 508.224475][ T2209] ? __pfx_usbnet_probe+0x10/0x10 [ 508.229646][ T2209] usb_probe_interface+0xd01/0x1310 [ 508.234997][ T2209] ? __pfx_usb_probe_interface+0x10/0x10 [ 508.240742][ T2209] really_probe+0x4d1/0xd90 [ 508.245402][ T2209] __driver_probe_device+0x268/0x380 [ 508.250812][ T2209] driver_probe_device+0x70/0x8b0 [ 508.255951][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.261327][ T2209] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.267397][ T2209] __device_attach_driver+0x4ee/0x950 [ 508.272968][ T2209] bus_for_each_drv+0x3e0/0x680 [ 508.277951][ T2209] ? __pfx___device_attach_driver+0x10/0x10 [ 508.283973][ T2209] __device_attach+0x3c8/0x5c0 [ 508.288861][ T2209] device_initial_probe+0x33/0x40 [ 508.293997][ T2209] bus_probe_device+0x3ba/0x5e0 [ 508.298981][ T2209] device_add+0x12a9/0x1c10 [ 508.303736][ T2209] usb_set_configuration+0x3493/0x3b70 [ 508.309434][ T2209] usb_generic_driver_probe+0xfc/0x290 [ 508.315049][ T2209] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 508.321317][ T2209] usb_probe_device+0x38a/0x690 [ 508.326342][ T2209] ? __pfx_usb_probe_device+0x10/0x10 [ 508.331869][ T2209] really_probe+0x4d1/0xd90 [ 508.336512][ T2209] __driver_probe_device+0x268/0x380 [ 508.341923][ T2209] driver_probe_device+0x70/0x8b0 [ 508.347055][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.352377][ T2209] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.358314][ T2209] __device_attach_driver+0x4ee/0x950 [ 508.363811][ T2209] bus_for_each_drv+0x3e0/0x680 [ 508.368822][ T2209] ? __pfx___device_attach_driver+0x10/0x10 [ 508.374912][ T2209] __device_attach+0x3c8/0x5c0 [ 508.379795][ T2209] device_initial_probe+0x33/0x40 [ 508.384930][ T2209] bus_probe_device+0x3ba/0x5e0 [ 508.389920][ T2209] device_add+0x12a9/0x1c10 [ 508.394600][ T2209] usb_new_device+0x104b/0x20c0 [ 508.399608][ T2209] hub_event+0x5588/0x7580 [ 508.404306][ T2209] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 508.410286][ T2209] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 508.415944][ T2209] ? kmsan_get_metadata+0x105/0x1b0 [ 508.421302][ T2209] ? __pfx_hub_event+0x10/0x10 [ 508.426195][ T2209] process_scheduled_works+0xb97/0x1d90 [ 508.431903][ T2209] worker_thread+0xedf/0x1590 [ 508.436715][ T2209] kthread+0xd59/0xf00 [ 508.440916][ T2209] ? __pfx_worker_thread+0x10/0x10 [ 508.446163][ T2209] ? __pfx_kthread+0x10/0x10 [ 508.450888][ T2209] ret_from_fork+0x6e/0x90 [ 508.455431][ T2209] ? __pfx_kthread+0x10/0x10 [ 508.460159][ T2209] ret_from_fork_asm+0x1a/0x30 [ 508.465121][ T2209] [ 508.468597][ T2209] Kernel Offset: disabled [ 508.473008][ T2209] Rebooting in 86400 seconds..