last executing test programs: 6m18.091196518s ago: executing program 4 (id=14): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000", @ANYRESHEX], 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket$inet(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008000, &(0x7f0000000080)={0x2, 0x6e23, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 6m14.052491125s ago: executing program 4 (id=21): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000080)={@desc={0x100007, 0x0, @desc2}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000b80)={0x20000002}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xe) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 6m11.717380954s ago: executing program 4 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x8000000, 0xd1a, 0x9, 0xffff, 0x0, [{0x9, 0x4, 0x1, '\x00', 0x4}, {0x0, 0x6, 0x5, '\x00', 0xb}, {0x2, 0x2, 0xf, '\x00', 0x9}, {0x6, 0x0, 0xfc, '\x00', 0x81}, {0x9, 0x1, 0xf, '\x00', 0x80}, {0x23, 0x4, 0x7f}, {0x0, 0x8, 0x9, '\x00', 0x3}, {0xf, 0x6, 0x3}, {0x0, 0x2, 0xff, '\x00', 0x3}, {0x3, 0xb, 0x38}, {0x8, 0x7, 0x7, '\x00', 0xb}, {0xef, 0x0, 0x1, '\x00', 0x8}, {0x9, 0x1, 0x3, '\x00', 0x7}, {0x0, 0x3, 0xf, '\x00', 0x1}, {0x8, 0xe, 0x9, '\x00', 0x2}, {0x3}, {0x3, 0xc0, 0x6, '\x00', 0x2}, {0x8, 0x7, 0xd3, '\x00', 0x4}, {0x7, 0xd6, 0x5, '\x00', 0x9}, {0x94, 0x2, 0x2, '\x00', 0x5}, {0x1, 0x7f, 0x9, '\x00', 0x2}, {0x81, 0x8, 0x6, '\x00', 0x9}, {0x1, 0x5, 0xdd, '\x00', 0xab}, {0x1, 0x9, 0x9, '\x00', 0xc8}]}}) 6m10.860279481s ago: executing program 4 (id=26): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='/dou!,\xd0W\xe4\x9b;6\xdc\xb6\f\x00\x00\x00\x00\x00\x00\x03\x87:\xbe\xf1\xe9\xdb\xae\xb0V\xf0!\xbdw\x1di\x04\xfd\xc5\xe1\xca\xc6jd\xfds\xcc\x96_\x13\xe7\xdb\xdd>\xcc\"3,\xc0l\x9a+tL\x92\xbbs\xd0q\xc9\xe2\xa8;\xd6\xb5P\x13\xb8?\xefZ\xcc\x84\xa1\xb4\xad\x848\a\xe2y\xb7\v\xd6v\x00\xe9\xe1\x814X\xa5\x85\x018\x82\xff\x01\x00\x00\x00\x86j\x83l\xe0\xd7\x8cEN\a\x00\x00\x00\x87z\xc3,\x99@\x8b\x7f\x1c\xb4\xa1\x811\xe2)(e:\xe3\xb6I\xaa\x9e\x8e\x0ep\xb4%\xcd\x8e\xb6\'\x8b$\xee\x8f\xdf\x12z\x99\x97\x03\x88m\b\xa4\xb2\xa9\x11g9\xd5\xbc\x1d2\xe1\xee\xde\xc6\xc2Q\xc3\x18\xc5`\xae\x00\x80a^\xbf\xb9\xeb\xc4\x191\xday\xfce\x84.\xb4\xb8(\x12\x8a\x9a+\xab_\xe3\xf5IQ\xa1msBG4\x98\xddm\xd5\x02\x87\xb8\x03\xb5\x03\xbaj\xe7~S\xd7\xeb-\x98\x1b\x8eq]\x16\x9b,lc\xbbS\xd5\x87[\xe7\xe0j\x1a{x\xe5\xd0\r\xb9?\xa4\x10\xdf3\xfa[c \x81\x13-4\xf2v\x80\x12\xea\xc1u\x01\x9bY\x91\xb6\xad\x8f\xb8\xc6\xfb\x91\x01#\xd7g<)\xc6!\xd0\x96#\xf9{\xd3o\xf1\xbdJwk\xe0\xbbL,\x19\x8c\xb7,Y\xb9\x8e\xe98\x1f3\xdfS\\\\{6\xbbH\x8a\x96]\xa6\x81!@\x1c\xcc\xb1\xb9\xd9,\xc0\xa1\xe8i\xe8\xbcvz\xc3\x90H\xdf\xf7W\x7f+\xca\x00\xfc\xed:\xf3\\\x0fVr\x9f=\xdf\xba\xdb\x16\x8bAy\xc6\xeb\xd1\x00\xea\xb8\xc0\xd1mj\xaa\xd5\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\xea\x03\x12\xa2q)\xa0kUJh\x8fy\x96\t\xb8\xa4\xdaW$WkL~\x95\x81l*\x872!\xc7\x18\x12\x8fL\x81\xe0\x069\\\x1b&\xca\x904()\xcf\xab%\xdd\x88\xfc,1\xdbv\xa3\xb62\xd8TxE\xb5j\x1d=\xa1p^\xf9J\xaa\xc8\x9aq&\x15\xf2\x1b\x97\x01\x05:\xd0\xf8\x03\xfa\x1a\xbc\xec\x8d\xe9D\xcf`\x8e \x9a\xc9\x05\xbf\x83\x8d\xae\x83\xf8\xb3`3\\\xe1y4p\xe9d\x95\xfe\xad\xa9\xd6{\xc8/\xd2 \xe5\xd2\xe8\x1f\x83./qe\x9a\x83%\xcd\xde\x0e^<`\xe54h\xdf\x9c\xbf\x13\x99Y(\x88\x98Ezb\x89\x88\xb1\xa6\xb8Z?\xfa`\xb4\xe2\xc9`S\t\xad\xd8\xa7\xa2\xb3I\xd1\b2\xaa\xf6\xa8#\xffS)\x15h\xdb', 0x6) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="240000004e0025000303f4f9002304006a91bb75e08f5fd37f2887f12fdae7240a04f55f", 0x24) r2 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) stat(0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000680), 0x8000000, 0x141000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x3, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, 0x0, &(0x7f00000002c0)=@udp6=r6}, 0x20) ppoll(&(0x7f0000000080)=[{r6, 0x22}, {r5, 0x14}], 0x2, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000006c0)=0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r9) syz_clone3(&(0x7f00000009c0)={0x82000000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0, {0x21}, &(0x7f00000007c0)=""/176, 0xb0, &(0x7f0000000880)=""/247, &(0x7f0000000980)=[0x0, 0x0], 0x2}, 0x58) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000300)="2f6c0a4dea5fa55a253eb980cdbec512c0d1c8b7ec5537937ce6008a6874d40b60631a3bea457491bf46850018b13039060aae6d811b143f", 0x38}, {&(0x7f0000000340)='>', 0x1}, {0x0}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, r11}}}], 0x60, 0x4000001}}], 0x1, 0x4000000) 6m9.624626726s ago: executing program 32 (id=9): syz_clone(0x2000300, 0x0, 0x35, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) socket$inet_udplite(0x2, 0x2, 0x88) 6m9.589750061s ago: executing program 4 (id=29): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\a\n\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6m6.471929026s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='!', 0x1}], 0x1}}], 0x1, 0x1) sendto$inet(r5, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 5m59.327022418s ago: executing program 33 (id=18): syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) prlimit64(0x0, 0x2, &(0x7f0000000580)={0x8, 0x6}, 0x0) mkdir(0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) syz_io_uring_setup(0x2423, &(0x7f0000000200)={0x0, 0x0, 0x13100, 0x2, 0x2de}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000453000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0xf175f000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000069c0)={'tunl0\x00', 0x0}) r3 = syz_io_uring_setup(0xec6, &(0x7f0000000500)={0x0, 0xb24b, 0x400, 0x0, 0x4}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x1, 0x40}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x2, 0x10a5, 0x3, 0x0, 0x0) 5m50.819254595s ago: executing program 34 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r6 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x80, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='!', 0x1}], 0x1}}], 0x1, 0x1) sendto$inet(r5, &(0x7f00000012c0), 0x0, 0x0, 0x0, 0x0) 4m15.709580053s ago: executing program 0 (id=141): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) socket$tipc(0x1e, 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 4m15.66378132s ago: executing program 3 (id=142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000"], 0x7c}}, 0x0) 4m14.051428758s ago: executing program 3 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x200000, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x20000, 0x1, {0x0}}) close(r2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @local}, 0x1c) r3 = socket(0x10, 0x80803, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0x1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, 0x0, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000118000/0x3000)=nil, 0x3000}, 0x1}) msgsnd(r5, 0x0, 0x8, 0x0) msgrcv(r5, &(0x7f0000000a80)={0x0, ""/4096}, 0x1008, 0x1, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='snd_soc_jack_irq\x00', r4}, 0x18) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000119000/0x4000)=nil, 0x6) shutdown(r1, 0x1) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x1}, @hci={0x1f, 0x2, 0x2}, @in={0x2, 0x4e23, @private=0xa010102}, 0x3, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)='ipvlan0\x00', 0x0, 0x8, 0x1ff}) socket$netlink(0x10, 0x3, 0x0) 4m11.494701782s ago: executing program 3 (id=144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b301, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000640)={0x0, 0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) memfd_create(0x0, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in6=@initdev}}, {{@in=@private}, 0x0, @in=@multicast2}}, 0x0) 4m10.763649349s ago: executing program 0 (id=145): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$kcm(0x29, 0x5, 0x0) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x7, 0xffffffff) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x10d8, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1340) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x4, 0x13, &(0x7f0000001340)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m6.372020461s ago: executing program 0 (id=146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[]) 4m3.961693911s ago: executing program 0 (id=147): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYRES16=r1, @ANYRES8=r0], 0x0) 4m3.191821366s ago: executing program 3 (id=148): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 4m1.780148903s ago: executing program 3 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0000001d0a0104000000000000004002000000400004803c0001800b00010065787468647200002c000280050002009400000008000340000000000800044000000001080006400000000208000140000000130900010073797a30000000000900"], 0x94}}, 0x0) 4m1.304867508s ago: executing program 0 (id=150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000080)=0x1000800, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r2, &(0x7f000001b700)=""/102398, 0x18ffe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) r3 = dup(0xffffffffffffffff) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fcntl$dupfd(r0, 0x406, r1) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fedbdf254d0000000800030002e9ff000f00a8007365636f6e646e616c7c1865000008000300030000000f00a800333efd30775cebaa2a2bb7e0dd5163207365636f6e646e616d6500000f00a8007365636f6e646e616d650000080003000200"], 0x5c}, 0x1, 0x0, 0x0, 0x24000054}, 0x20000000) syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x6, 0x66c, 0x0, 'queue1\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000240)="4b87275fc38e40ba86", &(0x7f0000000380)=""/128, &(0x7f0000000500)="47d27dfe5354b29ce14f878e340656f50c6024c3b919b3ab8cdc9a2f8687642ad958b19c84338fbe9818e6547403a495db8603fe8b71cd040d94ee9178fb253f610e8743dd24f77c74dbf6062900c42734a21c932b0cc50d594b9dd5a6384d97018bde86fe805793c32cd3270b9d2493ed32d475a9373841b142bc54894a5ffccdb1bc", &(0x7f00000005c0)="1b4223fb7d839b1ebfd768a3f6a35970335b1ac7efdc2d7a4232ed2c014ddd3a84b3a0793e951d0a920d0c0babe810f614f32fa5704040535261f339", 0x9, r3}, 0x38) write$sndseq(r5, 0x0, 0x0) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 4m0.9344425s ago: executing program 3 (id=151): get_mempolicy(0x0, 0xfffffffffffffffe, 0x1ff, &(0x7f0000ffc000/0x2000)=nil, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xd, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0xdb6d, 0x7ff, 0x7, 0x919}, 0x4c, [0x9, 0x9, 0x5, 0x64ff, 0x3, 0x0, 0x101, 0x481572bf, 0x50, 0x1, 0x8f5, 0x5d02, 0xd, 0x328, 0xe78d, 0x1, 0x310, 0x7fffffff, 0x5, 0x1b7, 0x1ff, 0x8001, 0x8, 0xd, 0x0, 0x0, 0x1, 0x3, 0x9, 0x9, 0x2, 0x2, 0xffffffff, 0xa, 0x36, 0x1, 0x9, 0x0, 0x1, 0x0, 0x80000009, 0x1, 0x5, 0x10, 0x6, 0x8, 0x8, 0x60, 0x3, 0x8000, 0xfffffffe, 0x4, 0x0, 0x800000, 0x3, 0x8, 0x6, 0x5, 0x0, 0x9, 0xffff8000, 0x9, 0x5, 0x101], [0x5b9, 0x11, 0x80, 0x81, 0x0, 0x1, 0x0, 0x9, 0x6, 0x2, 0x4, 0x1, 0x8, 0x0, 0x3, 0x86c0, 0x60000, 0x10000, 0x8, 0x401, 0x1, 0x1, 0x863, 0x848, 0xfffffffb, 0x9, 0xffff7fff, 0xeaf, 0x10, 0x7, 0x1, 0x80, 0x8, 0x1ff, 0x3, 0x9, 0x7f, 0x3, 0x81, 0xc8, 0x1, 0x807, 0x2, 0x1a, 0x149f, 0x5, 0x4, 0x69ee, 0x8, 0xd, 0x0, 0x2, 0x8, 0x8, 0xfffff18e, 0x9, 0x1ed7, 0x1, 0x4, 0x1ff, 0x1, 0xffffffda, 0x0, 0x2], [0xe0d, 0x0, 0xa, 0x8, 0x400, 0xfffffffe, 0x7, 0x8, 0x1, 0x4, 0x3, 0x80000001, 0x411ef906, 0x6, 0xf, 0x3, 0x20000, 0x3, 0xe, 0xffff, 0x6, 0x7, 0x3ff, 0x7, 0x3, 0x4, 0xb, 0x9, 0x1, 0x1, 0x1e6, 0x1, 0x4, 0x62d7, 0x5, 0x77f1c688, 0x5, 0x1, 0x6, 0xffffffff, 0x40, 0x9, 0x2, 0x7, 0xc, 0x8, 0x8df1, 0xfff, 0x4, 0x3, 0x7, 0xa, 0x9, 0x1, 0x3585, 0x3ff, 0xd088, 0x0, 0x7fff, 0xfffffffb, 0x4, 0x8, 0x1], [0x6, 0x9, 0x8, 0x5, 0x10000, 0x4, 0x4928, 0xffff, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x4, 0x3, 0x7, 0xed, 0x4, 0x7, 0x81, 0x80000000, 0x7, 0x4, 0xbcc, 0x2, 0x70, 0x4, 0x8, 0x8, 0x4, 0x2, 0x0, 0x0, 0x101, 0x83, 0x9, 0x1ff, 0x9, 0x7fff, 0xa, 0x49, 0x8, 0x80000001, 0x2ccc, 0x10001, 0x20c, 0xe, 0x6, 0x6c252734, 0x3, 0x8, 0xf, 0x9, 0x89, 0x0, 0x2, 0x9, 0x7, 0x0, 0x3, 0x0, 0x2, 0x9, 0x2]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x800}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a00004000090000000000000000000100000004"], 0xab4}}, 0x2000c804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m57.836397667s ago: executing program 0 (id=152): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m43.450840099s ago: executing program 35 (id=151): get_mempolicy(0x0, 0xfffffffffffffffe, 0x1ff, &(0x7f0000ffc000/0x2000)=nil, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xd, 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0xdb6d, 0x7ff, 0x7, 0x919}, 0x4c, [0x9, 0x9, 0x5, 0x64ff, 0x3, 0x0, 0x101, 0x481572bf, 0x50, 0x1, 0x8f5, 0x5d02, 0xd, 0x328, 0xe78d, 0x1, 0x310, 0x7fffffff, 0x5, 0x1b7, 0x1ff, 0x8001, 0x8, 0xd, 0x0, 0x0, 0x1, 0x3, 0x9, 0x9, 0x2, 0x2, 0xffffffff, 0xa, 0x36, 0x1, 0x9, 0x0, 0x1, 0x0, 0x80000009, 0x1, 0x5, 0x10, 0x6, 0x8, 0x8, 0x60, 0x3, 0x8000, 0xfffffffe, 0x4, 0x0, 0x800000, 0x3, 0x8, 0x6, 0x5, 0x0, 0x9, 0xffff8000, 0x9, 0x5, 0x101], [0x5b9, 0x11, 0x80, 0x81, 0x0, 0x1, 0x0, 0x9, 0x6, 0x2, 0x4, 0x1, 0x8, 0x0, 0x3, 0x86c0, 0x60000, 0x10000, 0x8, 0x401, 0x1, 0x1, 0x863, 0x848, 0xfffffffb, 0x9, 0xffff7fff, 0xeaf, 0x10, 0x7, 0x1, 0x80, 0x8, 0x1ff, 0x3, 0x9, 0x7f, 0x3, 0x81, 0xc8, 0x1, 0x807, 0x2, 0x1a, 0x149f, 0x5, 0x4, 0x69ee, 0x8, 0xd, 0x0, 0x2, 0x8, 0x8, 0xfffff18e, 0x9, 0x1ed7, 0x1, 0x4, 0x1ff, 0x1, 0xffffffda, 0x0, 0x2], [0xe0d, 0x0, 0xa, 0x8, 0x400, 0xfffffffe, 0x7, 0x8, 0x1, 0x4, 0x3, 0x80000001, 0x411ef906, 0x6, 0xf, 0x3, 0x20000, 0x3, 0xe, 0xffff, 0x6, 0x7, 0x3ff, 0x7, 0x3, 0x4, 0xb, 0x9, 0x1, 0x1, 0x1e6, 0x1, 0x4, 0x62d7, 0x5, 0x77f1c688, 0x5, 0x1, 0x6, 0xffffffff, 0x40, 0x9, 0x2, 0x7, 0xc, 0x8, 0x8df1, 0xfff, 0x4, 0x3, 0x7, 0xa, 0x9, 0x1, 0x3585, 0x3ff, 0xd088, 0x0, 0x7fff, 0xfffffffb, 0x4, 0x8, 0x1], [0x6, 0x9, 0x8, 0x5, 0x10000, 0x4, 0x4928, 0xffff, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x4, 0x3, 0x7, 0xed, 0x4, 0x7, 0x81, 0x80000000, 0x7, 0x4, 0xbcc, 0x2, 0x70, 0x4, 0x8, 0x8, 0x4, 0x2, 0x0, 0x0, 0x101, 0x83, 0x9, 0x1ff, 0x9, 0x7fff, 0xa, 0x49, 0x8, 0x80000001, 0x2ccc, 0x10001, 0x20c, 0xe, 0x6, 0x6c252734, 0x3, 0x8, 0xf, 0x9, 0x89, 0x0, 0x2, 0x9, 0x7, 0x0, 0x3, 0x0, 0x2, 0x9, 0x2]}, 0x45c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x800}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a00004000090000000000000000000100000004"], 0xab4}}, 0x2000c804) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m41.976643335s ago: executing program 36 (id=152): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m40.56155741s ago: executing program 6 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r2, 0x1269, &(0x7f0000000040)) 2m38.811802763s ago: executing program 6 (id=229): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c) 2m37.815710911s ago: executing program 6 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)="f24d", &(0x7f0000000000), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), 0x0, 0x6, r0}, 0x38) 2m35.194528065s ago: executing program 6 (id=237): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0x18) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, r2, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m33.331461928s ago: executing program 6 (id=239): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 2m32.143580191s ago: executing program 6 (id=242): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='-', 0x1}]) 2m16.627261364s ago: executing program 37 (id=242): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='-', 0x1}]) 2m12.98292825s ago: executing program 7 (id=287): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8=r2, @ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r0], 0x0) 2m8.76368606s ago: executing program 7 (id=297): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xea042, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000180)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000514010027bd7000fbdbdf250800010000000000"], 0x20}}, 0x8000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x6, 0x200200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f00000001c0)={0x1, [[0x4, 0x0, 0x4, 0x8, 0x58, 0x400, 0x30, 0x8], [0x4, 0x8, 0x1, 0x9, 0x9, 0x8, 0x8001, 0x167], [0xc, 0x9, 0x6, 0x3, 0x4, 0xa, 0x1, 0x9]], '\x00', [{0x6, 0x8, 0x1, 0x1, 0x1, 0x1}, {0xe0, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x25e, 0x0, 0x1, 0x1}, {0x3, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x400, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x3ff, 0x8, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x4, 0xf97, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x9}) 2m7.102697731s ago: executing program 7 (id=301): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) 2m5.639386813s ago: executing program 7 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket(0x200000100000011, 0x3, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 2m4.97703729s ago: executing program 7 (id=309): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r0 = syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2001}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m4.155804683s ago: executing program 7 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x2400c080) 1m48.089960275s ago: executing program 38 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9}}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x2400c080) 1m13.823100103s ago: executing program 5 (id=392): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) faccessat(0xffffffffffffff9c, 0x0, 0x0) 1m12.507813678s ago: executing program 5 (id=395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 1m11.267881757s ago: executing program 5 (id=398): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000009301000000002e5f615f"], 0x0, 0x2a, 0x0, 0x3, 0x1, 0x0, @void, @value}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, r3, 0x0, r3, 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m10.354289903s ago: executing program 5 (id=400): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) r4 = fanotify_init(0x200, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5510, &(0x7f0000000300)={0x0, 0x54bb, 0x40, 0x2, 0x69}, &(0x7f0000000200), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) shutdown(r6, 0x1) fanotify_mark(r4, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir, 0x3a}], [], 0x2f}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m8.411816022s ago: executing program 5 (id=406): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e04030520"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m5.266388171s ago: executing program 5 (id=413): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 50.02119782s ago: executing program 39 (id=413): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 42.539109373s ago: executing program 8 (id=447): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x2081) syz_usb_disconnect(r0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, 0x0) 39.908707466s ago: executing program 8 (id=454): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r0 = syz_io_uring_setup(0x22d, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 38.411848596s ago: executing program 8 (id=456): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r2, @ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r0], 0x0) 35.891270277s ago: executing program 1 (id=458): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000305000000000000000004cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c00128008000100677265001000028008000700e000030a04001200"], 0x3c}}, 0x0) 34.401968021s ago: executing program 8 (id=461): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 33.427859931s ago: executing program 8 (id=464): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 32.523296927s ago: executing program 8 (id=467): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0xb}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c3a1d708cd0c99000d95010203010902120001000000000906000000bc71f900"], 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0xa3c, 0x1, 0x4, 0x70000, 0x1, {0x77359400}, {0x4, 0x8, 0x4, 0x4, 0x5, 0xd, "44d741cf"}, 0x401, 0x2, {&(0x7f0000000440)=[{0x3, 0x8, {&(0x7f0000000080)}, 0x2}, {0x18b7deb7, 0x5, {&(0x7f00000002c0)}, 0x4}]}, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x408, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@redirect_dir_follow}, {@default_permissions}, {@verity_off}, {@xino_auto}, {@nfs_export_on}], [{@appraise}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 32.09752187s ago: executing program 1 (id=469): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}]) 31.37947608s ago: executing program 1 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 29.653050633s ago: executing program 1 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) r5 = fanotify_init(0x200, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5510, &(0x7f0000000300)={0x0, 0x54bb, 0x40, 0x2, 0x69}, &(0x7f0000000200), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) shutdown(r7, 0x1) fanotify_mark(r5, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 25.58698615s ago: executing program 1 (id=475): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f00000000c0), 0x0) unshare(0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 22.552464045s ago: executing program 1 (id=477): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r0 = syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2001}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 16.758161156s ago: executing program 40 (id=467): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r2, 0xb}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000c3a1d708cd0c99000d95010203010902120001000000000906000000bc71f900"], 0x0) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)=@multiplanar_userptr={0xa3c, 0x1, 0x4, 0x70000, 0x1, {0x77359400}, {0x4, 0x8, 0x4, 0x4, 0x5, 0xd, "44d741cf"}, 0x401, 0x2, {&(0x7f0000000440)=[{0x3, 0x8, {&(0x7f0000000080)}, 0x2}, {0x18b7deb7, 0x5, {&(0x7f00000002c0)}, 0x4}]}, 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x408, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@redirect_dir_follow}, {@default_permissions}, {@verity_off}, {@xino_auto}, {@nfs_export_on}], [{@appraise}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 13.828202222s ago: executing program 2 (id=483): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10153, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 11.87917434s ago: executing program 2 (id=484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x100000001, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) r5 = fanotify_init(0x200, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x5510, &(0x7f0000000300)={0x0, 0x54bb, 0x40, 0x2, 0x69}, &(0x7f0000000200), &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r7, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x6c, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40800) shutdown(r7, 0x1) fanotify_mark(r5, 0x80, 0x4800003e, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.79656646s ago: executing program 9 (id=485): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000085c) close(r0) 10.841634925s ago: executing program 9 (id=486): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)="e80a58a8ea03599306ec8e04f474fe310965a10f5dcc8cf3775208761302275fd4e4a82ea0d0bf36eb4e89785c42b3a9742586189e05b8c1a15872cad3e024fe58baef99bf4c6f3bcb9d117892aac5db2586851c1fa63e9507f191c909532b1fe36c92a2db15e5619f9204cc658565c8622db445e694cddc4566b4260ef4b8ef", 0x80}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9.919393402s ago: executing program 9 (id=487): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000009301000000002e5f615f"], 0x0, 0x2a, 0x0, 0x3, 0x1, 0x0, @void, @value}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x94e, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, r3, 0x0, r3, 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.588160507s ago: executing program 2 (id=488): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x8007, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc028aa03, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r8, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 6.970419997s ago: executing program 41 (id=477): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) r0 = syz_io_uring_setup(0x22d, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2001}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 6.890159492s ago: executing program 9 (id=490): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.808307436s ago: executing program 2 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.412709488s ago: executing program 2 (id=492): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/timer\x00', 0x41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10153, 0x2, 0x0) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 2.913838904s ago: executing program 9 (id=493): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x0, 0x1}, 0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r2, @ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r0], 0x0) 299.750384ms ago: executing program 9 (id=494): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x8007, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x201, 0xa000000, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc028aa03, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r8, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @null}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 0s ago: executing program 2 (id=495): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xa, 0x0) io_submit(0x0, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) setreuid(0xee01, 0xee01) kernel console output (not intermixed with test programs): T6488] kAFS: unable to lookup cell '.yz1' [ 340.929382][ T3937] bridge_slave_0: left allmulticast mode [ 340.935346][ T3937] bridge_slave_0: left promiscuous mode [ 340.941935][ T3937] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.430935][ T6488] libceph: resolve '0.0' (ret=-3): failed [ 341.616830][ T6490] netdevsim netdevsim3: Direct firmware load for + [ 341.616830][ T6490] failed with error -2 [ 341.627797][ T6490] netdevsim netdevsim3: Falling back to sysfs fallback for: + [ 341.627797][ T6490] [ 341.917704][ T5789] Bluetooth: hci2: command tx timeout [ 342.167379][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.174101][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.731427][ T3937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.753640][ T3937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.785978][ T3937] bond0 (unregistering): Released all slaves [ 342.915862][ T3937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.002405][ T3937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.091922][ T3937] bond0 (unregistering): Released all slaves [ 343.201856][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 343.991861][ T5789] Bluetooth: hci2: command tx timeout [ 344.141612][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 344.240194][ T6502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 345.226434][ T3937] hsr_slave_0: left promiscuous mode [ 345.300410][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.311896][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.323273][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.338361][ T3937] hsr_slave_1: left promiscuous mode [ 345.339087][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.346383][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.360020][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.388831][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.411952][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.516819][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.524641][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.755066][ T3937] hsr_slave_0: left promiscuous mode [ 345.821071][ T3937] hsr_slave_1: left promiscuous mode [ 345.831615][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.839504][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.899509][ T3937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.912122][ T3937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.065562][ T5789] Bluetooth: hci2: command tx timeout [ 346.131447][ T3937] veth1_macvtap: left promiscuous mode [ 346.137184][ T3937] veth0_macvtap: left promiscuous mode [ 346.143375][ T3937] veth1_vlan: left promiscuous mode [ 346.148959][ T3937] veth0_vlan: left promiscuous mode [ 346.264002][ T3937] veth1_macvtap: left promiscuous mode [ 346.269830][ T3937] veth0_macvtap: left promiscuous mode [ 346.275996][ T3937] veth1_vlan: left promiscuous mode [ 346.281756][ T3937] veth0_vlan: left promiscuous mode [ 346.591258][ T6516] kvm: pic: non byte write [ 346.634721][ T6516] kvm: pic: single mode not supported [ 346.634799][ T6516] kvm: pic: level sensitive irq not supported [ 347.508264][ T5789] Bluetooth: hci4: command tx timeout [ 348.595496][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 348.618767][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 349.044241][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 349.317140][ T3937] team0 (unregistering): Port device team_slave_1 removed [ 349.351241][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.362956][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 349.389221][ T3937] team0 (unregistering): Port device team_slave_0 removed [ 349.509456][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 349.519738][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 349.528891][ T25] usb 1-1: SerialNumber: syz [ 349.581672][ T5789] Bluetooth: hci4: command tx timeout [ 349.812179][ T25] usb 1-1: 0:2 : does not exist [ 350.233870][ T25] usb 1-1: USB disconnect, device number 6 [ 350.788381][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.564659][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.572430][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.580202][ T6471] bridge_slave_0: entered allmulticast mode [ 351.589363][ T6471] bridge_slave_0: entered promiscuous mode [ 352.017133][ T5789] Bluetooth: hci4: command tx timeout [ 353.043474][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.051461][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.059239][ T6471] bridge_slave_1: entered allmulticast mode [ 353.068454][ T6471] bridge_slave_1: entered promiscuous mode [ 353.671304][ T6376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 353.720786][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.862667][ T6376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.122389][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.150037][ T5789] Bluetooth: hci4: command tx timeout [ 354.186400][ T6376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.324197][ T6376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.344908][ T6505] chnl_net:caif_netlink_parms(): no params data found [ 354.652631][ T6471] team0: Port device team_slave_0 added [ 354.683353][ T6471] team0: Port device team_slave_1 added [ 355.828073][ T6567] kAFS: unable to lookup cell '.yz1' [ 356.195660][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.389291][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.396530][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.423161][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.795478][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.802828][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.829436][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.159172][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.282174][ T6471] hsr_slave_0: entered promiscuous mode [ 358.292077][ T6471] hsr_slave_1: entered promiscuous mode [ 358.448725][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.773645][ T6554] Set syz1 is full, maxelem 65536 reached [ 359.062955][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.337498][ T6505] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.346395][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.354353][ T6505] bridge_slave_0: entered allmulticast mode [ 359.363495][ T6505] bridge_slave_0: entered promiscuous mode [ 359.428422][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.574783][ T6505] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.582712][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.590407][ T6505] bridge_slave_1: entered allmulticast mode [ 359.600666][ T6505] bridge_slave_1: entered promiscuous mode [ 360.037302][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.122455][ T6505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.194819][ T6505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.242146][ T5866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 360.289337][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.297013][ T4195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.405401][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.495542][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.503278][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.505283][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.521451][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.542315][ T6505] team0: Port device team_slave_0 added [ 360.584691][ T6505] team0: Port device team_slave_1 added [ 360.603722][ T5866] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.613422][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.622399][ T5866] usb 1-1: SerialNumber: syz [ 360.647940][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.258527][ T6595] loop9: detected capacity change from 0 to 6 [ 361.374093][ T5866] usb 1-1: 0:2 : does not exist [ 361.403365][ T5866] usb 1-1: USB disconnect, device number 7 [ 361.525730][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.533310][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.559942][ T6505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.633240][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.732593][ T6505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.739715][ T6505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.766510][ T6505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.803398][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.814287][ T6376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.942937][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.379000][ T6505] hsr_slave_0: entered promiscuous mode [ 362.387864][ T6505] hsr_slave_1: entered promiscuous mode [ 362.395455][ T6505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.404669][ T6505] Cannot create hsr debugfs directory [ 362.493119][ T6602] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 362.874860][ T59] bridge_slave_1: left allmulticast mode [ 362.881913][ T59] bridge_slave_1: left promiscuous mode [ 362.888259][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.012810][ T59] bridge_slave_0: left allmulticast mode [ 363.018681][ T59] bridge_slave_0: left promiscuous mode [ 363.026913][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.115800][ T59] bridge_slave_1: left allmulticast mode [ 363.121785][ T59] bridge_slave_1: left promiscuous mode [ 363.127958][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.212093][ T59] bridge_slave_0: left allmulticast mode [ 363.217960][ T59] bridge_slave_0: left promiscuous mode [ 363.224692][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.532051][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.600451][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.668140][ T59] bond0 (unregistering): Released all slaves [ 364.801472][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.850120][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.918578][ T59] bond0 (unregistering): Released all slaves [ 365.456782][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.925630][ T6471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.019382][ T6471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.214561][ T6471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.264468][ T59] hsr_slave_0: left promiscuous mode [ 366.296170][ T59] hsr_slave_1: left promiscuous mode [ 366.306778][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.314594][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.417163][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.425112][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.582251][ T59] hsr_slave_0: left promiscuous mode [ 366.595388][ T59] hsr_slave_1: left promiscuous mode [ 366.603094][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.610941][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.725398][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.733192][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.940380][ T59] veth1_macvtap: left promiscuous mode [ 366.946414][ T59] veth0_macvtap: left promiscuous mode [ 366.954406][ T59] veth1_vlan: left promiscuous mode [ 366.960132][ T59] veth0_vlan: left promiscuous mode [ 367.121293][ T59] veth1_macvtap: left promiscuous mode [ 367.127415][ T59] veth0_macvtap: left promiscuous mode [ 367.133931][ T59] veth1_vlan: left promiscuous mode [ 367.139659][ T59] veth0_vlan: left promiscuous mode [ 367.173692][ T6624] ISOFS: Unable to identify CD-ROM format. [ 368.867032][ T59] team0 (unregistering): Port device team_slave_1 removed [ 368.892424][ T59] team0 (unregistering): Port device team_slave_0 removed [ 369.672776][ T59] team0 (unregistering): Port device team_slave_1 removed [ 369.751642][ T59] team0 (unregistering): Port device team_slave_0 removed [ 369.971217][ T6471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.975907][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 370.242528][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 370.413848][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 370.423299][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.431700][ T10] usb 4-1: Product: syz [ 370.436048][ T10] usb 4-1: Manufacturer: syz [ 370.440950][ T10] usb 4-1: SerialNumber: syz [ 370.630372][ T10] usb 4-1: config 0 descriptor?? [ 370.662538][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 370.960766][ T6505] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 371.112098][ T6505] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 371.212045][ T6505] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 371.372297][ T6505] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 371.872313][ T10] gspca_stk1135: reg_w 0x5 err -110 [ 371.878705][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.886221][ T10] gspca_stk1135: Sensor write failed [ 371.891949][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.898364][ T10] gspca_stk1135: Sensor write failed [ 371.903836][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.910252][ T10] gspca_stk1135: Sensor read failed [ 371.915643][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.922183][ T10] gspca_stk1135: Sensor read failed [ 371.927455][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 371.934266][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.940876][ T10] gspca_stk1135: Sensor read failed [ 371.946227][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.952802][ T10] gspca_stk1135: Sensor read failed [ 371.958164][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.964738][ T10] gspca_stk1135: Sensor write failed [ 371.970192][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 371.976682][ T10] gspca_stk1135: Sensor write failed [ 371.982450][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 372.024787][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.181684][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.299183][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.306865][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.415129][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.422844][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.823174][ T6471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.120132][ T10] usb 4-1: USB disconnect, device number 3 [ 373.213654][ T6376] veth0_vlan: entered promiscuous mode [ 373.387056][ T6376] veth1_vlan: entered promiscuous mode [ 373.462490][ T6505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.729829][ T6505] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.858327][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.866028][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.913157][ T6376] veth0_macvtap: entered promiscuous mode [ 373.976735][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.984272][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.001876][ T6376] veth1_macvtap: entered promiscuous mode [ 374.296364][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.309169][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.319410][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.330163][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.344829][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.712391][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.723764][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.733883][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.744576][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.757920][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.080336][ T6376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.091156][ T6376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.100076][ T6376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.109184][ T6376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.151964][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 375.307130][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.369180][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.379794][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 375.483419][ T44] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 375.493989][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 375.502507][ T44] usb 4-1: SerialNumber: syz [ 375.868451][ T44] usb 4-1: 0:2 : does not exist [ 376.046748][ T44] usb 4-1: USB disconnect, device number 4 [ 376.369784][ T6030] udevd[6030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.447044][ T6505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.143136][ T6682] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 378.324305][ T6471] veth0_vlan: entered promiscuous mode [ 378.507782][ T6471] veth1_vlan: entered promiscuous mode [ 378.777486][ T6471] veth0_macvtap: entered promiscuous mode [ 378.867963][ T6471] veth1_macvtap: entered promiscuous mode [ 378.959541][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.971339][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.981978][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.992698][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.002854][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.013623][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.029577][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.214332][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.225295][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.235450][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.246820][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.257297][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.268676][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.284313][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.582425][ T6471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.591665][ T6471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.600812][ T6471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.609808][ T6471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.207463][ T6505] veth0_vlan: entered promiscuous mode [ 380.375583][ T6505] veth1_vlan: entered promiscuous mode [ 380.899919][ T6505] veth0_macvtap: entered promiscuous mode [ 381.064052][ T6505] veth1_macvtap: entered promiscuous mode [ 381.390038][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.402835][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.413744][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.426139][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.440933][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.452057][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.462401][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.473178][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.491330][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.932439][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.943550][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.953933][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.964790][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.975038][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.985820][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.996718][ T6505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.007913][ T6505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.024721][ T6505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.438456][ T6505] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.447904][ T6505] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.457553][ T6505] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.466670][ T6505] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.515629][ T29] audit: type=1800 audit(2000000128.510:3): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.145" name="bus" dev="tmpfs" ino=318 res=0 errno=0 [ 390.145281][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 390.158981][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 390.171106][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 390.192126][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 390.203388][ T5787] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 390.212928][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.351333][ T5845] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 390.589564][ T5845] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.600746][ T5845] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.660410][ T5845] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.670710][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.678940][ T5845] usb 1-1: SerialNumber: syz [ 390.968796][ T5845] usb 1-1: 0:2 : does not exist [ 391.059329][ T5845] usb 1-1: USB disconnect, device number 8 [ 391.426824][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.898852][ T6793] netlink: 'syz.3.149': attribute type 4 has an invalid length. [ 392.197372][ T6772] chnl_net:caif_netlink_parms(): no params data found [ 392.303087][ T5787] Bluetooth: hci5: command tx timeout [ 394.651269][ T5787] Bluetooth: hci5: command tx timeout [ 395.368899][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.377022][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.717971][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.726662][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.326172][ T4195] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.516974][ T4195] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.704264][ T5789] Bluetooth: hci5: command tx timeout [ 396.724765][ T4195] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.792366][ T4195] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.075680][ T4195] bridge_slave_1: left allmulticast mode [ 398.081912][ T4195] bridge_slave_1: left promiscuous mode [ 398.088100][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.137260][ T4195] bridge_slave_0: left allmulticast mode [ 398.143618][ T4195] bridge_slave_0: left promiscuous mode [ 398.149763][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.304851][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.312722][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.320642][ T6772] bridge_slave_0: entered allmulticast mode [ 398.328588][ T6772] bridge_slave_0: entered promiscuous mode [ 398.358464][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.366407][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.374357][ T6772] bridge_slave_1: entered allmulticast mode [ 398.384269][ T6772] bridge_slave_1: entered promiscuous mode [ 398.784674][ T5789] Bluetooth: hci5: command tx timeout [ 398.858518][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 398.870883][ T5787] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 398.884574][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 398.917094][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 398.940046][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 398.949222][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.998203][ T4195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.082964][ T4195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.118102][ T4195] bond0 (unregistering): Released all slaves [ 399.215632][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.276029][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.393648][ T1842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.401755][ T1842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.914950][ T6772] team0: Port device team_slave_0 added [ 399.974542][ T4195] hsr_slave_0: left promiscuous mode [ 399.983031][ T4195] hsr_slave_1: left promiscuous mode [ 399.992533][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.001247][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.018188][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.026096][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.071993][ T4195] veth1_macvtap: left promiscuous mode [ 400.077684][ T4195] veth0_macvtap: left promiscuous mode [ 400.083642][ T4195] veth1_vlan: left promiscuous mode [ 400.089163][ T4195] veth0_vlan: left promiscuous mode [ 400.298213][ T6772] team0: Port device team_slave_1 added [ 400.349421][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.357980][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.651519][ T4195] team0 (unregistering): Port device team_slave_1 removed [ 400.743045][ T4195] team0 (unregistering): Port device team_slave_0 removed [ 401.023730][ T5789] Bluetooth: hci0: command tx timeout [ 401.266834][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.274096][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.302223][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.419900][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.427212][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.453997][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.322858][ T6772] hsr_slave_0: entered promiscuous mode [ 402.332802][ T6772] hsr_slave_1: entered promiscuous mode [ 402.341435][ T6772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.349173][ T6772] Cannot create hsr debugfs directory [ 402.683741][ T4195] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.830164][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 402.908944][ T4195] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.120932][ T5789] Bluetooth: hci0: command tx timeout [ 403.519778][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.526764][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.627479][ T4195] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.035615][ T4195] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.712827][ T5789] Bluetooth: hci0: command tx timeout [ 406.524869][ T4195] bridge_slave_1: left allmulticast mode [ 406.530907][ T4195] bridge_slave_1: left promiscuous mode [ 406.537116][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.625818][ T4195] bridge_slave_0: left allmulticast mode [ 406.632174][ T4195] bridge_slave_0: left promiscuous mode [ 406.638402][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.771138][ T5789] Bluetooth: hci0: command tx timeout [ 409.685912][ T4195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.789606][ T4195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.857826][ T4195] bond0 (unregistering): Released all slaves [ 410.223958][ T5847] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 410.255468][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.263282][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.271289][ T6826] bridge_slave_0: entered allmulticast mode [ 410.279111][ T6826] bridge_slave_0: entered promiscuous mode [ 410.356080][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.364967][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.372584][ T6826] bridge_slave_1: entered allmulticast mode [ 410.380386][ T6826] bridge_slave_1: entered promiscuous mode [ 410.485735][ T5847] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.498293][ T5847] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.574807][ T5847] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.584860][ T5847] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.593448][ T5847] usb 8-1: SerialNumber: syz [ 410.628918][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.740106][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.997518][ T5847] usb 8-1: 0:2 : does not exist [ 411.180158][ T5847] usb 8-1: USB disconnect, device number 2 [ 411.381713][ T6772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.466766][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.481910][ T6826] team0: Port device team_slave_0 added [ 411.494150][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.511008][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.512886][ T6772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.534162][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.566706][ T6826] team0: Port device team_slave_1 added [ 411.632311][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.698156][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 411.709388][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 411.992938][ T6772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.037186][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.044701][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.071061][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.245064][ T6772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.350232][ T4195] hsr_slave_0: left promiscuous mode [ 412.372347][ T4195] hsr_slave_1: left promiscuous mode [ 412.380040][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.388103][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.444467][ T4195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.452376][ T4195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.561608][ T4195] veth1_macvtap: left promiscuous mode [ 412.567356][ T4195] veth0_macvtap: left promiscuous mode [ 412.573657][ T4195] veth1_vlan: left promiscuous mode [ 412.579195][ T4195] veth0_vlan: left promiscuous mode [ 412.682690][ T5789] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.693900][ T5789] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.703840][ T5789] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.722294][ T5789] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.744528][ T5789] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 412.756599][ T5789] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 412.907735][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.915269][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.941683][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.779939][ T4195] team0 (unregistering): Port device team_slave_1 removed [ 413.804052][ T4195] team0 (unregistering): Port device team_slave_0 removed [ 413.901426][ T5789] Bluetooth: hci2: command tx timeout [ 414.780838][ T5789] Bluetooth: hci6: command tx timeout [ 414.908791][ T6826] hsr_slave_0: entered promiscuous mode [ 414.917111][ T6826] hsr_slave_1: entered promiscuous mode [ 415.980934][ T5789] Bluetooth: hci2: command tx timeout [ 416.959489][ T5789] Bluetooth: hci6: command tx timeout [ 417.372941][ T1121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.448391][ T6868] chnl_net:caif_netlink_parms(): no params data found [ 418.271971][ T5789] Bluetooth: hci2: command tx timeout [ 418.577204][ T1121] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.656519][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.836035][ T1121] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.021392][ T5789] Bluetooth: hci6: command tx timeout [ 419.027386][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 419.218395][ T6772] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.246734][ T1121] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.568489][ T1896] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.576218][ T1896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.593457][ T1896] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.601155][ T1896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.401104][ T5789] Bluetooth: hci2: command tx timeout [ 421.102509][ T5789] Bluetooth: hci6: command tx timeout [ 421.285218][ T6868] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.294665][ T6868] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.302519][ T6868] bridge_slave_0: entered allmulticast mode [ 421.311999][ T6868] bridge_slave_0: entered promiscuous mode [ 421.447886][ T6868] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.456974][ T6868] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.464682][ T6868] bridge_slave_1: entered allmulticast mode [ 421.472732][ T6868] bridge_slave_1: entered promiscuous mode [ 421.924235][ T6868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.106654][ T6868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.177825][ T1121] bridge_slave_1: left allmulticast mode [ 422.184366][ T1121] bridge_slave_1: left promiscuous mode [ 422.191123][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.335194][ T1121] bridge_slave_0: left allmulticast mode [ 422.341746][ T1121] bridge_slave_0: left promiscuous mode [ 422.347927][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.709797][ T6826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.802628][ T44] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 422.991516][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.029728][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.044623][ T44] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.046131][ T1121] bond0 (unregistering): Released all slaves [ 423.055043][ T44] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.091494][ T6868] team0: Port device team_slave_0 added [ 423.111275][ T44] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 423.120676][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 423.126336][ T6868] team0: Port device team_slave_1 added [ 423.128803][ T44] usb 8-1: SerialNumber: syz [ 423.213027][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.220842][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.228273][ T6875] bridge_slave_0: entered allmulticast mode [ 423.236950][ T6875] bridge_slave_0: entered promiscuous mode [ 423.258204][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.265889][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.273502][ T6875] bridge_slave_1: entered allmulticast mode [ 423.282238][ T6875] bridge_slave_1: entered promiscuous mode [ 423.303751][ T6826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.383432][ T6826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.471583][ T6826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.504846][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.513297][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.541065][ T6868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.692415][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.708690][ T6868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.716251][ T6868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.742511][ T6868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.784872][ T44] usb 8-1: 0:2 : does not exist [ 423.790019][ T44] usb 8-1: unit 5 not found! [ 423.861870][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.050994][ T44] usb 8-1: USB disconnect, device number 3 [ 424.276392][ T6875] team0: Port device team_slave_0 added [ 424.344914][ T6875] team0: Port device team_slave_1 added [ 424.443417][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.834431][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.842782][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.869472][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.988224][ T6868] hsr_slave_0: entered promiscuous mode [ 424.996946][ T6868] hsr_slave_1: entered promiscuous mode [ 425.004479][ T6868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.012237][ T6868] Cannot create hsr debugfs directory [ 425.083296][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.168701][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.176420][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.203373][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.256970][ T1121] hsr_slave_0: left promiscuous mode [ 425.266373][ T1121] hsr_slave_1: left promiscuous mode [ 425.276969][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.284670][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.302696][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.310299][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.327480][ T1121] veth1_macvtap: left promiscuous mode [ 425.333715][ T1121] veth0_macvtap: left promiscuous mode [ 425.339467][ T1121] veth1_vlan: left promiscuous mode [ 425.346965][ T1121] veth0_vlan: left promiscuous mode [ 426.309772][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 426.372609][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 427.776927][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.169'. [ 428.715052][ T6875] hsr_slave_0: entered promiscuous mode [ 428.727366][ T6875] hsr_slave_1: entered promiscuous mode [ 428.735883][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.743742][ T6875] Cannot create hsr debugfs directory [ 429.626505][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.905785][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.089364][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.097186][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.297777][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.305522][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.451358][ T1121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.614157][ T6868] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 431.777654][ T6772] veth0_vlan: entered promiscuous mode [ 431.786863][ T6868] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 432.074318][ T6868] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 432.179227][ T6772] veth1_vlan: entered promiscuous mode [ 432.224639][ T6868] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 432.533454][ T1121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.555083][ T6875] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 432.660481][ T1121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.687324][ T6875] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 432.783398][ T6875] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 432.919105][ T6875] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 433.007314][ T1121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.189865][ T6772] veth0_macvtap: entered promiscuous mode [ 433.276333][ T6772] veth1_macvtap: entered promiscuous mode [ 433.692385][ T1121] bridge_slave_1: left allmulticast mode [ 433.698264][ T1121] bridge_slave_1: left promiscuous mode [ 433.706279][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.731246][ T1121] bridge_slave_0: left allmulticast mode [ 433.737099][ T1121] bridge_slave_0: left promiscuous mode [ 433.743789][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.821009][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 433.926998][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.939563][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.953094][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.965633][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.980075][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.066384][ T8] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 434.074901][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.085388][ T8] usb 8-1: config 0 has no interface number 0 [ 434.091885][ T8] usb 8-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.105579][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 434.114983][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.155605][ T8] usb 8-1: config 0 descriptor?? [ 434.225988][ T8] usbhid 8-1:0.32: couldn't find an input interrupt endpoint [ 434.308296][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.325670][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.339916][ T1121] bond0 (unregistering): Released all slaves [ 434.410237][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.422955][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.433328][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.444082][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.461181][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.542714][ T6772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.552507][ T6772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.561621][ T6772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.570727][ T6772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.705507][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.837287][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.020176][ T1121] hsr_slave_0: left promiscuous mode [ 435.051043][ T1121] hsr_slave_1: left promiscuous mode [ 435.058591][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.066471][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.092564][ T1121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.100328][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.147703][ T1121] veth1_macvtap: left promiscuous mode [ 435.153709][ T1121] veth0_macvtap: left promiscuous mode [ 435.159644][ T1121] veth1_vlan: left promiscuous mode [ 435.165367][ T1121] veth0_vlan: left promiscuous mode [ 435.586268][ T6868] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.678848][ T1842] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.686619][ T1842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.731707][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.129756][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 436.162082][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 436.426510][ T1842] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.434224][ T1842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.671972][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.801337][ T5843] usb 8-1: USB disconnect, device number 4 [ 436.828856][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.836560][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.020407][ T6868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.062130][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.069721][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.947340][ T6826] veth0_vlan: entered promiscuous mode [ 438.989431][ T6826] veth1_vlan: entered promiscuous mode [ 439.087561][ T6826] veth0_macvtap: entered promiscuous mode [ 439.108038][ T6826] veth1_macvtap: entered promiscuous mode [ 439.158140][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.170801][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.182560][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.193627][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.208241][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.240118][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.250936][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.262150][ T6826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.274829][ T6826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.290064][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.308859][ T6826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.318056][ T6826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.327218][ T6826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.336699][ T6826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.665604][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.597453][ T6868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.506436][ T29] audit: type=1326 audit(2000000186.490:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.7.176" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99a298cda9 code=0x0 [ 443.624423][ T8] IPVS: starting estimator thread 0... [ 443.726763][ T7007] IPVS: using max 240 ests per chain, 12000 per kthread [ 443.953602][ T6875] veth0_vlan: entered promiscuous mode [ 444.046289][ T6875] veth1_vlan: entered promiscuous mode [ 444.431887][ T6875] veth0_macvtap: entered promiscuous mode [ 444.458770][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.469619][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.637943][ T6875] veth1_macvtap: entered promiscuous mode [ 444.648956][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.657734][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.887620][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.898530][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.911862][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.923468][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.933659][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.944500][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.959106][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.140019][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.151023][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.161407][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.172136][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.183719][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.196080][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.212236][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.319940][ T6875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.329209][ T6875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.338393][ T6875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.348392][ T6875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.636780][ T6868] veth0_vlan: entered promiscuous mode [ 445.783352][ T6868] veth1_vlan: entered promiscuous mode [ 446.240330][ T6868] veth0_macvtap: entered promiscuous mode [ 446.363856][ T6868] veth1_macvtap: entered promiscuous mode [ 446.638228][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.650820][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.661238][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.672040][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.682137][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.692815][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.703045][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.713729][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.728151][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.073515][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.085796][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.097169][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.109029][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.120998][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.132588][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.142727][ T6868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.154628][ T6868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.169366][ T6868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.642562][ T6868] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.651741][ T6868] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.666906][ T6868] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.678989][ T6868] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.776456][ T1896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.786604][ T1896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.268053][ T4195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.276668][ T4195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.871854][ T5849] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 455.195268][ T5849] usb 8-1: config 0 has an invalid interface number: 32 but max is 0 [ 455.203807][ T5849] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.214419][ T5849] usb 8-1: config 0 has no interface number 0 [ 455.220848][ T5849] usb 8-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.234257][ T5849] usb 8-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 455.247352][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.541675][ T5849] usb 8-1: config 0 descriptor?? [ 455.580453][ T5849] usbhid 8-1:0.32: couldn't find an input interrupt endpoint [ 455.924391][ T29] audit: type=1800 audit(2000000198.920:5): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.46" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 457.693982][ T25] usb 8-1: USB disconnect, device number 5 [ 458.044144][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.052563][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.238276][ T4047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.247339][ T4047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.285486][ T3937] Bluetooth: hci1: Frame reassembly failed (-84) [ 458.361432][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 458.592118][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.603551][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.613766][ T5849] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 458.626883][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.733778][ T5849] usb 6-1: config 0 descriptor?? [ 458.979341][ T29] audit: type=1804 audit(2000000201.970:6): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.192" name="/newroot/31/file0" dev="tmpfs" ino=184 res=1 errno=0 [ 459.384342][ T5849] usbhid 6-1:0.0: can't add hid device: -71 [ 459.392123][ T5849] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 459.469591][ T5849] usb 6-1: USB disconnect, device number 2 [ 460.096273][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.104933][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.307588][ T5787] Bluetooth: hci1: command 0xfc11 tx timeout [ 460.317382][ T5789] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 460.413683][ T1821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.422106][ T1821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.471526][ T7153] fuse: Invalid rootmode [ 461.205124][ T5849] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 461.407528][ T5849] usb 10-1: config 0 has an invalid interface number: 32 but max is 0 [ 461.417439][ T5849] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.428080][ T5849] usb 10-1: config 0 has no interface number 0 [ 461.434629][ T5849] usb 10-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 461.448153][ T5849] usb 10-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 461.458171][ T5849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.596975][ T5849] usb 10-1: config 0 descriptor?? [ 461.651771][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.8.156'. [ 461.702217][ T5849] usbhid 10-1:0.32: couldn't find an input interrupt endpoint [ 463.340760][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 463.527759][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.544263][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.556209][ T25] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 463.566601][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.714078][ T25] usb 6-1: config 0 descriptor?? [ 464.218710][ T5843] usb 10-1: USB disconnect, device number 2 [ 464.465673][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 464.474004][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 464.785968][ T25] usb 6-1: USB disconnect, device number 3 [ 465.036716][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.043509][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 468.041401][ T7225] Option '±Ç5½”' to dns_resolver key: bad/missing value [ 469.155012][ T7227] overlayfs: cannot append lower layer [ 469.178349][ T7235] syz.8.218 uses obsolete (PF_INET,SOCK_PACKET) [ 469.546195][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 469.800805][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.812534][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.822810][ T25] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 469.832165][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.350195][ T25] usb 7-1: config 0 descriptor?? [ 471.020890][ T51] Bluetooth: hci6: command 0x0405 tx timeout [ 471.257209][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 471.264338][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 471.360631][ T25] usb 7-1: USB disconnect, device number 2 [ 472.153194][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 472.281227][ T5849] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 472.556944][ T5849] usb 8-1: Using ep0 maxpacket: 8 [ 472.773559][ T5849] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 472.783854][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.792308][ T5849] usb 8-1: Product: syz [ 472.796669][ T5849] usb 8-1: Manufacturer: syz [ 472.801628][ T5849] usb 8-1: SerialNumber: syz [ 473.053105][ T5849] usb 8-1: config 0 descriptor?? [ 473.347944][ T5849] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 475.064740][ T5849] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 475.107643][ T5849] usb 8-1: USB disconnect, device number 6 [ 477.776843][ T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 477.915128][ T5843] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 477.981566][ T25] usb 8-1: device descriptor read/64, error -71 [ 478.125012][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.136598][ T5843] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.146932][ T5843] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 478.156457][ T5843] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.258953][ T7302] 9pnet_fd: Insufficient options for proto=fd [ 478.290927][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 478.340334][ T5843] usb 9-1: config 0 descriptor?? [ 478.481625][ T25] usb 8-1: device descriptor read/64, error -71 [ 478.602910][ T25] usb usb8-port1: attempt power cycle [ 478.617871][ T7299] overlayfs: cannot append lower layer [ 478.975389][ T25] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 478.998381][ T5843] usbhid 9-1:0.0: can't add hid device: -71 [ 479.012509][ T5843] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 479.077471][ T25] usb 8-1: device descriptor read/8, error -71 [ 479.151290][ T5843] usb 9-1: USB disconnect, device number 2 [ 479.391027][ T25] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 479.515289][ T25] usb 8-1: device descriptor read/8, error -71 [ 479.658476][ T25] usb usb8-port1: unable to enumerate USB device [ 482.049915][ T7329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.112323][ T5849] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 482.121781][ T5849] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 482.231508][ T4047] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 482.240002][ T4047] wlan1: authenticated [ 482.241274][ T7329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.311433][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.356353][ T4047] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 482.366126][ T4047] wlan1: associated [ 482.375733][ T7329] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 482.456809][ T7338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 482.472982][ T7338] Zero length message leads to an empty skb [ 483.742867][ T7343] 9pnet_fd: Insufficient options for proto=fd [ 484.016964][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.250'. [ 486.234664][ T25] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 488.243721][ T25] usb 10-1: device descriptor read/64, error -71 [ 488.381168][ T5787] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 488.617141][ T7373] fuse: Unknown parameter 'use00000000000000000000' [ 489.084768][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.8.259'. [ 489.783877][ T7384] overlayfs: failed to resolve './file1': -2 [ 489.926731][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.264'. [ 490.075286][ T7388] vlan2: entered promiscuous mode [ 490.080765][ T7388] vlan2: entered allmulticast mode [ 490.951533][ T5787] Bluetooth: hci6: unexpected event for opcode 0x200f [ 491.280853][ T7407] autofs: Bad value for 'fd' [ 493.353579][ T5849] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 496.095648][ T7430] overlayfs: failed to resolve './file1': -2 [ 497.405084][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.9.281'. [ 498.201805][ T44] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 498.481193][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 498.617460][ T44] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 498.626996][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.635563][ T44] usb 9-1: Product: syz [ 498.639927][ T44] usb 9-1: Manufacturer: syz [ 498.644862][ T44] usb 9-1: SerialNumber: syz [ 498.937775][ T7449] autofs: Bad value for 'fd' [ 498.957490][ T44] usb 9-1: config 0 descriptor?? [ 499.352209][ T44] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 499.716472][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.727438][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.751687][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.769287][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.865292][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.876115][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.861393][ T5849] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 500.988043][ T44] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 501.022601][ T5849] usb 8-1: device descriptor read/64, error -71 [ 501.061886][ T44] usb 9-1: USB disconnect, device number 4 [ 501.265521][ T5849] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 501.460980][ T5849] usb 8-1: device descriptor read/64, error -71 [ 501.601949][ T5849] usb usb8-port1: attempt power cycle [ 501.960993][ T5849] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 501.984330][ T51] Bluetooth: hci1: command tx timeout [ 502.036161][ T7477] overlayfs: failed to resolve './file1': -2 [ 502.092005][ T5849] usb 8-1: device descriptor read/8, error -71 [ 502.353671][ T5849] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 502.457152][ T5849] usb 8-1: device descriptor read/8, error -71 [ 502.467773][ T7453] chnl_net:caif_netlink_parms(): no params data found [ 502.583112][ T5849] usb usb8-port1: unable to enumerate USB device [ 503.438630][ T5071] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.015663][ T5071] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.081927][ T51] Bluetooth: hci1: command tx timeout [ 504.526583][ T5071] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.834503][ T7497] autofs: Unknown parameter '0x0000000000000000' [ 504.875475][ T5071] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.274543][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.297'. [ 505.963658][ T5071] bridge_slave_1: left allmulticast mode [ 505.969529][ T5071] bridge_slave_1: left promiscuous mode [ 505.976421][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.123674][ T5071] bridge_slave_0: left allmulticast mode [ 506.129810][ T5071] bridge_slave_0: left promiscuous mode [ 506.141274][ T51] Bluetooth: hci1: command tx timeout [ 506.148899][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.025521][ T7521] misc userio: Begin command sent, but we're already running [ 507.106000][ T7523] overlayfs: failed to resolve './file0': -2 [ 507.165364][ T5071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.209556][ T5071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.238649][ T5071] bond0 (unregistering): Released all slaves [ 507.256592][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.270896][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.278687][ T7453] bridge_slave_0: entered allmulticast mode [ 507.287875][ T7453] bridge_slave_0: entered promiscuous mode [ 507.383560][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.391554][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.401550][ T7453] bridge_slave_1: entered allmulticast mode [ 507.410766][ T7453] bridge_slave_1: entered promiscuous mode [ 507.629120][ T29] audit: type=1326 audit(2000000250.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.651845][ T29] audit: type=1326 audit(2000000250.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.677966][ T29] audit: type=1326 audit(2000000250.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.701693][ T29] audit: type=1326 audit(2000000250.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.724973][ T29] audit: type=1326 audit(2000000250.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.748512][ T29] audit: type=1326 audit(2000000250.610:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.771618][ T29] audit: type=1326 audit(2000000250.610:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 507.797785][ T29] audit: type=1326 audit(2000000250.610:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.8.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86eef8cda9 code=0x7fc00000 [ 508.089066][ T7453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.178323][ T7453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.220810][ T51] Bluetooth: hci1: command tx timeout [ 508.361133][ T5849] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 508.445554][ T7536] autofs: Unknown parameter '0x0000000000000000' [ 508.511080][ T5849] usb 6-1: device descriptor read/64, error -71 [ 508.668431][ T7453] team0: Port device team_slave_0 added [ 508.764939][ T5849] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 508.775566][ T7453] team0: Port device team_slave_1 added [ 508.961129][ T5849] usb 6-1: device descriptor read/64, error -71 [ 509.054645][ T5071] hsr_slave_0: left promiscuous mode [ 509.077997][ T5849] usb usb6-port1: attempt power cycle [ 509.090840][ T5071] hsr_slave_1: left promiscuous mode [ 509.098635][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.112882][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.184590][ T5071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.192697][ T5071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.272558][ T5071] veth1_macvtap: left promiscuous mode [ 509.278471][ T5071] veth0_macvtap: left promiscuous mode [ 509.284667][ T5071] veth1_vlan: left promiscuous mode [ 509.290207][ T5071] veth0_vlan: left promiscuous mode [ 509.972843][ T5849] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 510.017296][ T5849] usb 6-1: device descriptor read/8, error -71 [ 510.316413][ T5849] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 513.222415][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 513.346173][ T5071] team0 (unregistering): Port device team_slave_1 removed [ 513.618400][ T5071] team0 (unregistering): Port device team_slave_0 removed [ 513.831460][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.840837][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.868178][ T7453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.985793][ T5849] usb 6-1: device descriptor read/8, error -71 [ 514.059103][ T7453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.066510][ T7453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.092903][ T7453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.108028][ T5849] usb usb6-port1: unable to enumerate USB device [ 514.405174][ T7564] overlayfs: failed to resolve './file0': -2 [ 514.859130][ T7453] hsr_slave_0: entered promiscuous mode [ 514.868963][ T7453] hsr_slave_1: entered promiscuous mode [ 516.738001][ T7586] kvm: pic: single mode not supported [ 516.738368][ T7586] kvm: pic: single mode not supported [ 516.812800][ T7586] kvm: pic: single mode not supported [ 516.861582][ T7586] kvm: pic: single mode not supported [ 516.867548][ T7586] kvm: pic: single mode not supported [ 516.995918][ T7586] kvm: pic: single mode not supported [ 517.024719][ T7586] kvm: pic: single mode not supported [ 517.061501][ T7586] kvm: pic: single mode not supported [ 517.107874][ T7586] kvm: pic: single mode not supported [ 517.220312][ T7586] kvm: pic: single mode not supported [ 517.279512][ T7586] kvm: pic: level sensitive irq not supported [ 517.405122][ T7453] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.513837][ T7453] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.581145][ T7453] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.655695][ T7453] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.711354][ T44] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 517.916967][ T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.927931][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.959119][ T44] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 517.968732][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 517.977497][ T44] usb 6-1: SerialNumber: syz [ 518.282020][ T44] usb 6-1: skipping empty audio interface (v1) [ 518.416006][ T7601] overlayfs: failed to resolve './file0': -2 [ 518.453261][ T44] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 518.549154][ T44] usb 6-1: USB disconnect, device number 8 [ 518.811783][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.208334][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.421355][ T7453] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.509432][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.517167][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.649069][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.656772][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.073929][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.329'. [ 524.120571][ C0] sched: DL replenish lagged too much [ 524.492234][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 525.248969][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013472c00: rx timeout, send abort [ 525.757534][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013472c00: abort rx timeout. Force session deactivation [ 526.403620][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.410250][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.184235][ T7636] overlayfs: failed to resolve './file0': -2 [ 528.854214][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.873612][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.885602][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.918679][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.950694][ T5849] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 528.959696][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 528.975809][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.123504][ T7453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.148290][ T5849] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.158806][ T5849] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.391146][ T5849] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.400475][ T5849] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.409166][ T5849] usb 9-1: SerialNumber: syz [ 529.541462][ T51] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 529.754505][ T5849] usb 9-1: skipping empty audio interface (v1) [ 531.060885][ T51] Bluetooth: hci0: command tx timeout [ 531.567117][ T5849] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 531.711661][ T5849] usb 9-1: USB disconnect, device number 5 [ 531.832496][ T7453] veth0_vlan: entered promiscuous mode [ 532.195779][ T7453] veth1_vlan: entered promiscuous mode [ 532.256001][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.794592][ T7453] veth0_macvtap: entered promiscuous mode [ 532.861734][ T7453] veth1_macvtap: entered promiscuous mode [ 533.102745][ T51] Bluetooth: hci0: command tx timeout [ 533.167208][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.181015][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.192454][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.203238][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.213370][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.224117][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.234217][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.244910][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.259613][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.267394][ T7641] chnl_net:caif_netlink_parms(): no params data found [ 534.206675][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.217473][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.227712][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.238456][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.248555][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.259289][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.269351][ T7453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.280283][ T7453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.294887][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.801974][ T51] Bluetooth: hci0: command tx timeout [ 535.928628][ T7677] netlink: 'syz.8.347': attribute type 2 has an invalid length. [ 535.984303][ T7453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.993429][ T7453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.002654][ T7453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.011929][ T7453] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.033817][ T3866] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.347159][ T7681] overlayfs: failed to resolve './file0': -2 [ 536.367430][ T3866] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.681403][ T3866] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.904316][ T3866] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.141669][ T7685] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 537.757088][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 537.822201][ T7685] Bluetooth: hci0: command tx timeout [ 538.131889][ T3866] bridge_slave_1: left allmulticast mode [ 538.137864][ T3866] bridge_slave_1: left promiscuous mode [ 538.144662][ T3866] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.297437][ T3866] bridge_slave_0: left allmulticast mode [ 538.303535][ T3866] bridge_slave_0: left promiscuous mode [ 538.310272][ T3866] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.805797][ T7685] Bluetooth: hci6: command 0x0405 tx timeout [ 539.849313][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.859783][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.882075][ T3866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.923429][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 539.935192][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.952227][ T10] usb 6-1: SerialNumber: syz [ 540.014133][ T3866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.042837][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 540.061696][ T3866] bond0 (unregistering): Released all slaves [ 540.553723][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.563077][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.571429][ T7641] bridge_slave_0: entered allmulticast mode [ 540.582324][ T7641] bridge_slave_0: entered promiscuous mode [ 540.777207][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.786391][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.794782][ T7641] bridge_slave_1: entered allmulticast mode [ 540.805186][ T7641] bridge_slave_1: entered promiscuous mode [ 540.871161][ T10] usb 6-1: skipping empty audio interface (v1) [ 541.083222][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 541.172332][ T10] usb 6-1: USB disconnect, device number 9 [ 541.593015][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.634215][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.835381][ T3866] hsr_slave_0: left promiscuous mode [ 541.891447][ T3866] hsr_slave_1: left promiscuous mode [ 541.899119][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.907561][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.014203][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.022563][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.104633][ T7730] overlayfs: failed to resolve './file0': -2 [ 542.138684][ T3866] veth1_macvtap: left promiscuous mode [ 542.144810][ T3866] veth0_macvtap: left promiscuous mode [ 542.151394][ T3866] veth1_vlan: left promiscuous mode [ 542.156931][ T3866] veth0_vlan: left promiscuous mode [ 542.545546][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.310025][ T5787] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 544.015988][ T3866] team0 (unregistering): Port device team_slave_1 removed [ 544.050650][ T3866] team0 (unregistering): Port device team_slave_0 removed [ 544.265317][ T7641] team0: Port device team_slave_0 added [ 544.302007][ T7641] team0: Port device team_slave_1 added [ 545.063019][ T7764] 9pnet_fd: Insufficient options for proto=fd [ 545.095446][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.103237][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.129582][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.322930][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.330108][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.357577][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.801882][ T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 546.336258][ T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.346791][ T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.538976][ T44] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 546.548781][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.557183][ T44] usb 6-1: SerialNumber: syz [ 546.941118][ T7641] hsr_slave_0: entered promiscuous mode [ 546.954613][ T7641] hsr_slave_1: entered promiscuous mode [ 546.963522][ T7641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.971386][ T7641] Cannot create hsr debugfs directory [ 546.973960][ T44] usb 6-1: 0:2 : does not exist [ 547.221837][ T3866] IPVS: stop unused estimator thread 0... [ 547.383818][ T44] usb 6-1: USB disconnect, device number 10 [ 548.139613][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.502842][ T7787] overlayfs: failed to resolve './file1': -2 [ 548.852021][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.860064][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.959612][ T1842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.967887][ T1842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.207617][ T5787] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 551.337821][ T7810] 9pnet_fd: Insufficient options for proto=fd [ 552.021249][ T7641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 552.634250][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 552.847648][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 552.921447][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.001169][ T7641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 553.122211][ T44] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 553.131882][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.132063][ T7641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 553.143628][ T44] usb 2-1: Product: syz [ 553.154508][ T44] usb 2-1: Manufacturer: syz [ 553.159336][ T44] usb 2-1: SerialNumber: syz [ 553.265157][ T7641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 553.396496][ T44] usb 2-1: config 0 descriptor?? [ 553.433669][ T44] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 553.635403][ T7830] overlayfs: failed to resolve './file1': -2 [ 553.724740][ T25] usb 2-1: USB disconnect, device number 2 [ 553.902592][ T1669] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 554.181478][ T1669] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.192112][ T1669] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.202592][ T1669] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 555.212069][ T1669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 555.220301][ T1669] usb 6-1: SerialNumber: syz [ 555.949120][ T7641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.348931][ T7641] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.451201][ T1669] usb 6-1: 0:2 : does not exist [ 556.547591][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.555390][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.616072][ T1669] usb 6-1: USB disconnect, device number 11 [ 556.709631][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.717358][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.059244][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.484250][ T7850] overlayfs: cannot append lower layer [ 558.372696][ T51] Bluetooth: hci6: unexpected event for opcode 0x2005 [ 558.933196][ T7870] overlayfs: failed to resolve './file1': -2 [ 559.427312][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 559.737353][ T7641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.644330][ T44] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 560.771518][ T7641] veth0_vlan: entered promiscuous mode [ 560.841131][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 560.927372][ T44] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 560.936861][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.017117][ T7641] veth1_vlan: entered promiscuous mode [ 561.153525][ T44] usb 9-1: config 0 descriptor?? [ 561.808195][ T7641] veth0_macvtap: entered promiscuous mode [ 561.894260][ T7641] veth1_macvtap: entered promiscuous mode [ 562.027332][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.031455][ T8] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 562.038788][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.063771][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.074687][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.084965][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.095771][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.106141][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.116952][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.134586][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.271594][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.282546][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.293407][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.306954][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.319215][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.330281][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.334816][ T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.340723][ T7641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.350945][ T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.365507][ T7641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.388664][ T7641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.443334][ T7641] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.452685][ T7641] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.466530][ T7641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.477427][ T7641] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.644854][ T8] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 562.654815][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 562.664888][ T8] usb 10-1: SerialNumber: syz [ 562.887169][ T44] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 562.897970][ T44] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 562.909233][ T44] asix 9-1:0.0: probe with driver asix failed with error -71 [ 563.048908][ T8] usb 10-1: 0:2 : does not exist [ 563.094524][ T44] usb 9-1: USB disconnect, device number 6 [ 563.238224][ T8] usb 10-1: USB disconnect, device number 5 [ 563.584432][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.884781][ T7904] overlayfs: cannot append lower layer [ 564.253716][ T7918] Dead loop on virtual device ip6_vti0, fix it urgently! [ 565.003954][ T5787] Bluetooth: hci5: unexpected event for opcode 0x2005 [ 567.581350][ T44] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 567.886520][ T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.898311][ T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.003139][ T44] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.012903][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.021406][ T44] usb 10-1: SerialNumber: syz [ 568.995823][ T44] usb 10-1: 0:2 : does not exist [ 569.118394][ T44] usb 10-1: USB disconnect, device number 6 [ 569.405749][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.872308][ T7969] overlayfs: cannot append lower layer [ 576.353999][ T5787] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 578.653896][ T4047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.662079][ T4047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.903461][ T1842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.912323][ T1842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.111353][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 579.351324][ T8] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.363937][ T8] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 579.414345][ T8] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 579.424525][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 579.433371][ T8] usb 9-1: SerialNumber: syz [ 581.653819][ T8] usb 9-1: 0:2 : does not exist [ 581.911076][ T8] usb 9-1: USB disconnect, device number 7 [ 582.267420][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.377595][ T8038] overlayfs: cannot append lower layer [ 584.965604][ T8066] geneve2: entered promiscuous mode [ 584.971343][ T8066] geneve2: entered allmulticast mode [ 585.056481][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.065684][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.076259][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.094429][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.112053][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 585.121314][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.171219][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 585.552167][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 585.604037][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 585.641342][ T8] usb 2-1: config 6 has an invalid interface number: 31 but max is 0 [ 585.649669][ T8] usb 2-1: config 6 has no interface number 0 [ 585.657254][ T8] usb 2-1: config 6 interface 31 has no altsetting 0 [ 585.759489][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=fc82, bcdDevice= 5.c7 [ 585.769174][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.777593][ T8] usb 2-1: Product: syz [ 585.782054][ T8] usb 2-1: Manufacturer: syz [ 585.786853][ T8] usb 2-1: SerialNumber: syz [ 586.795471][ T8080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 587.184217][ T51] Bluetooth: hci3: command tx timeout [ 587.693567][ T8] ftdi_sio 2-1:6.31: FTDI USB Serial Device converter detected [ 587.704076][ T8] ftdi_sio ttyUSB0: unknown device type: 0x5c7 [ 587.884957][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.891675][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.273344][ T8] usb 2-1: USB disconnect, device number 3 [ 588.281880][ T8] ftdi_sio 2-1:6.31: device disconnected [ 588.304509][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 588.756729][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 588.892596][ T7412] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 588.964561][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 589.000470][ T44] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 589.010038][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.125133][ T44] usb 3-1: config 0 descriptor?? [ 589.143329][ T7412] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.153955][ T7412] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.261147][ T51] Bluetooth: hci3: command tx timeout [ 589.297223][ T7412] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 589.307032][ T7412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 589.315591][ T7412] usb 9-1: SerialNumber: syz [ 589.602505][ T7412] usb 9-1: 0:2 : does not exist [ 589.821929][ T7412] usb 9-1: USB disconnect, device number 8 [ 590.318557][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.735630][ T8097] overlayfs: cannot append lower layer [ 590.745825][ T44] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 590.756970][ T44] asix 3-1:0.0: probe with driver asix failed with error -71 [ 590.941714][ T44] usb 3-1: USB disconnect, device number 2 [ 590.952376][ T7464] udevd[7464]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 591.020084][ T7464] udevd[7464]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 591.239962][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.249643][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.257305][ T8068] bridge_slave_0: entered allmulticast mode [ 591.265280][ T8068] bridge_slave_0: entered promiscuous mode [ 591.344324][ T51] Bluetooth: hci3: command tx timeout [ 591.363583][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.371510][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.379312][ T8068] bridge_slave_1: entered allmulticast mode [ 591.388525][ T8068] bridge_slave_1: entered promiscuous mode [ 591.401909][ T7412] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 591.644925][ T7412] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 591.654454][ T7412] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.665646][ T7412] usb 9-1: Product: syz [ 591.670020][ T7412] usb 9-1: Manufacturer: syz [ 591.675651][ T7412] usb 9-1: SerialNumber: syz [ 591.838857][ T7412] usb 9-1: config 0 descriptor?? [ 591.992769][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.113391][ T7412] usb 9-1: USB disconnect, device number 9 [ 592.160211][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.216205][ T1896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.503871][ T6752] udevd[6752]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 592.861361][ T8068] team0: Port device team_slave_0 added [ 592.889737][ T1896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.996089][ T8068] team0: Port device team_slave_1 added [ 593.140976][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.452'. [ 593.480992][ T51] Bluetooth: hci3: command tx timeout [ 593.509015][ T1896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.852958][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.860119][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.886560][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.045011][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.052272][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.079594][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.108028][ T1896] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.230856][ T7412] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 595.643423][ T1896] bridge_slave_1: left allmulticast mode [ 595.649413][ T1896] bridge_slave_1: left promiscuous mode [ 595.657657][ T1896] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.695731][ T10] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 595.800767][ T7412] usb 3-1: Using ep0 maxpacket: 8 [ 596.743773][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.754392][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.882113][ T1896] bridge_slave_0: left allmulticast mode [ 596.888110][ T1896] bridge_slave_0: left promiscuous mode [ 596.895203][ T1896] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.259467][ T10] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 597.268956][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 597.280319][ T10] usb 9-1: SerialNumber: syz [ 597.751422][ T7412] usb 3-1: unable to read config index 0 descriptor/all [ 597.758904][ T7412] usb 3-1: can't read configurations, error -71 [ 597.816444][ T10] usb 9-1: 0:2 : does not exist [ 597.821830][ T10] usb 9-1: unit 5 not found! [ 598.004638][ T10] usb 9-1: USB disconnect, device number 10 [ 598.050315][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 598.331462][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 598.376897][ T44] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 598.387233][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.448993][ T44] usb 2-1: config 0 descriptor?? [ 598.473466][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.483465][ T1896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.611164][ T1896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.640433][ T1896] bond0 (unregistering): Released all slaves [ 598.678534][ T8068] hsr_slave_0: entered promiscuous mode [ 598.690417][ T8068] hsr_slave_1: entered promiscuous mode [ 598.700437][ T8068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.713286][ T8068] Cannot create hsr debugfs directory [ 598.797311][ T8146] overlayfs: cannot append lower layer [ 600.043616][ T44] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 600.054741][ T44] asix 2-1:0.0: probe with driver asix failed with error -71 [ 600.177582][ T44] usb 2-1: USB disconnect, device number 4 [ 600.288223][ T1896] hsr_slave_0: left promiscuous mode [ 600.331322][ T1896] hsr_slave_1: left promiscuous mode [ 600.338877][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.352195][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.388690][ T1896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.396859][ T1896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.504813][ T1896] veth1_macvtap: left promiscuous mode [ 600.511130][ T1896] veth0_macvtap: left promiscuous mode [ 600.517009][ T1896] veth1_vlan: left promiscuous mode [ 600.523080][ T1896] veth0_vlan: left promiscuous mode [ 600.792248][ T5787] Bluetooth: hci3: command 0x0405 tx timeout [ 601.760972][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 601.991556][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 602.048587][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 602.146533][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 602.156623][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.165398][ T10] usb 9-1: Product: syz [ 602.170018][ T10] usb 9-1: Manufacturer: syz [ 602.175205][ T10] usb 9-1: SerialNumber: syz [ 602.466449][ T10] usb 9-1: config 0 descriptor?? [ 602.522284][ T1896] team0 (unregistering): Port device team_slave_1 removed [ 602.551292][ T1598] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 602.732459][ T1896] team0 (unregistering): Port device team_slave_0 removed [ 602.809818][ T1598] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.821256][ T1598] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.877208][ T8179] overlay: Unknown parameter 'appraise' [ 602.889188][ T1598] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 602.898782][ T1598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 602.909431][ T1598] usb 3-1: SerialNumber: syz [ 603.364500][ T1598] usb 3-1: 0:2 : does not exist [ 603.369649][ T1598] usb 3-1: unit 5 not found! [ 603.609695][ T1598] usb 3-1: USB disconnect, device number 5 [ 604.169250][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.413122][ T8068] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 606.564181][ T8068] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 606.846034][ T8068] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 607.062329][ T8068] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.660247][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.974652][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.045115][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 615.577234][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.585000][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.738568][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 616.001728][ T10] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 616.015702][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.179189][ T10] usb 10-1: config 0 descriptor?? [ 616.531400][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.539039][ T4195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.921167][ T10] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 617.932829][ T10] asix 10-1:0.0: probe with driver asix failed with error -71 [ 618.151249][ T10] usb 10-1: USB disconnect, device number 7 [ 619.408760][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 619.420295][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 619.456038][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 619.477216][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 619.490280][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 619.504066][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 619.717432][ T1598] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 619.921445][ T1598] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.932171][ T1598] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.045290][ T1598] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 620.055210][ T1598] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 620.064142][ T1598] usb 10-1: SerialNumber: syz [ 620.426419][ T1598] usb 10-1: 0:2 : does not exist [ 620.432030][ T1598] usb 10-1: unit 5 not found! [ 620.602628][ T1598] usb 10-1: USB disconnect, device number 8 [ 620.883748][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.905145][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 621.586240][ T51] Bluetooth: hci4: command tx timeout [ 621.730133][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 623.672353][ T7685] Bluetooth: hci4: command tx timeout [ 624.970444][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.978097][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.986441][ T8239] bridge_slave_0: entered allmulticast mode [ 624.995565][ T8239] bridge_slave_0: entered promiscuous mode [ 625.708274][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.716071][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.723786][ T8239] bridge_slave_1: entered allmulticast mode [ 625.732007][ T8239] bridge_slave_1: entered promiscuous mode [ 625.742305][ T7685] Bluetooth: hci1: command 0x0406 tx timeout [ 625.752211][ T51] Bluetooth: hci4: command tx timeout [ 626.069836][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.182104][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.695883][ T8239] team0: Port device team_slave_0 added [ 626.835787][ T8239] team0: Port device team_slave_1 added [ 627.003904][ T44] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 627.255607][ T44] usb 10-1: Using ep0 maxpacket: 8 [ 627.286333][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.293975][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.320385][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.357428][ T44] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 627.368118][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.372662][ T8068] veth0_vlan: entered promiscuous mode [ 627.478576][ T8068] veth1_vlan: entered promiscuous mode [ 627.509368][ T44] usb 10-1: config 0 descriptor?? [ 627.576583][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.586558][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.613800][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.822429][ T5787] Bluetooth: hci4: command tx timeout [ 628.478253][ T8239] hsr_slave_0: entered promiscuous mode [ 628.487917][ T8239] hsr_slave_1: entered promiscuous mode [ 628.496227][ T8239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 628.507211][ T8239] Cannot create hsr debugfs directory [ 628.678406][ T8068] veth0_macvtap: entered promiscuous mode [ 628.774954][ T7685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.821547][ T7685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 628.833442][ T7685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 628.842425][ T8068] veth1_macvtap: entered promiscuous mode [ 628.869192][ T7685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 628.886917][ T7685] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 628.898826][ T7685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.034759][ T44] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 629.045227][ T44] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 629.056518][ T44] asix 10-1:0.0: probe with driver asix failed with error -71 [ 629.193067][ T44] usb 10-1: USB disconnect, device number 9 [ 629.636054][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.647905][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.658363][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.669038][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.679201][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.689923][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.699994][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.710687][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.723931][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.382161][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.392925][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.403070][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.414048][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.424176][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.434934][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.445439][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.459417][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.475313][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.931705][ T44] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 630.946297][ T7685] Bluetooth: hci5: command tx timeout [ 631.143576][ T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.154406][ T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.165411][ T44] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 631.180134][ T44] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 631.296578][ T8068] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.306518][ T8068] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.316444][ T8068] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.326131][ T8068] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.364809][ T44] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.377182][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.387004][ T44] usb 10-1: SerialNumber: syz [ 631.934920][ T44] usb 10-1: 0:2 : does not exist [ 631.940157][ T44] usb 10-1: unit 5 not found! [ 632.148032][ T8239] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 632.229450][ T44] usb 10-1: USB disconnect, device number 10 [ 632.277518][ T8239] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.486427][ T8239] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.576523][ T8297] chnl_net:caif_netlink_parms(): no params data found [ 632.653528][ T8239] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.712371][ T6747] udevd[6747]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 632.852282][ T1896] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.046808][ T7685] Bluetooth: hci5: command tx timeout [ 633.110326][ T1896] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.274129][ T1896] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.688001][ T1896] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.192405][ T7685] Bluetooth: hci5: command tx timeout [ 635.784546][ T8328] ===================================================== [ 635.791977][ T8328] BUG: KMSAN: uninit-value in nsim_get_ringparam+0xa8/0xe0 [ 635.799399][ T8328] nsim_get_ringparam+0xa8/0xe0 [ 635.804626][ T8328] ethtool_set_ringparam+0x268/0x570 [ 635.810158][ T8328] dev_ethtool+0x126d/0x2a40 [ 635.815190][ T8328] dev_ioctl+0xb0e/0x1280 [ 635.819754][ T8328] sock_do_ioctl+0x28c/0x540 [ 635.824776][ T8328] sock_ioctl+0x721/0xd70 [ 635.829300][ T8328] __se_sys_ioctl+0x246/0x440 [ 635.834328][ T8328] __x64_sys_ioctl+0x96/0xe0 [ 635.839659][ T8328] x64_sys_call+0x19f0/0x3c30 [ 635.844656][ T8328] do_syscall_64+0xcd/0x1e0 [ 635.849375][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.855736][ T8328] [ 635.858162][ T8328] Local variable kernel_ringparam created at: [ 635.864429][ T8328] ethtool_set_ringparam+0x96/0x570 [ 635.869843][ T8328] dev_ethtool+0x126d/0x2a40 [ 635.874753][ T8328] [ 635.881008][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.2.495 Not tainted 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 635.893018][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 635.903365][ T8328] ===================================================== [ 635.910404][ T8328] Disabling lock debugging due to kernel taint [ 635.916810][ T8328] Kernel panic - not syncing: kmsan.panic set ... [ 635.923371][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.2.495 Tainted: G B 6.13.0-syzkaller-09585-gb4b0881156fb #0 [ 635.935298][ T8328] Tainted: [B]=BAD_PAGE [ 635.939556][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 635.949753][ T8328] Call Trace: [ 635.953151][ T8328] [ 635.956187][ T8328] dump_stack_lvl+0x216/0x2d0 [ 635.961042][ T8328] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 635.967060][ T8328] dump_stack+0x1e/0x24 [ 635.971382][ T8328] panic+0x4e2/0xcf0 [ 635.975490][ T8328] ? kmsan_get_metadata+0x61/0x1c0 [ 635.980811][ T8328] kmsan_report+0x2c7/0x2d0 [ 635.985512][ T8328] ? __msan_warning+0x95/0x120 [ 635.990451][ T8328] ? nsim_get_ringparam+0xa8/0xe0 [ 635.995683][ T8328] ? ethtool_set_ringparam+0x268/0x570 [ 636.001374][ T8328] ? dev_ethtool+0x126d/0x2a40 [ 636.006333][ T8328] ? dev_ioctl+0xb0e/0x1280 [ 636.011038][ T8328] ? sock_do_ioctl+0x28c/0x540 [ 636.016003][ T8328] ? sock_ioctl+0x721/0xd70 [ 636.020696][ T8328] ? __se_sys_ioctl+0x246/0x440 [ 636.025707][ T8328] ? __x64_sys_ioctl+0x96/0xe0 [ 636.030620][ T8328] ? x64_sys_call+0x19f0/0x3c30 [ 636.035570][ T8328] ? do_syscall_64+0xcd/0x1e0 [ 636.040365][ T8328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.046545][ T8328] ? kmsan_internal_poison_memory+0x7d/0x90 [ 636.052572][ T8328] ? kmsan_internal_poison_memory+0x49/0x90 [ 636.058593][ T8328] ? kmsan_slab_free+0xd0/0x140 [ 636.063533][ T8328] ? kfree+0x240/0xdb0 [ 636.067718][ T8328] ? tomoyo_path_number_perm+0x778/0x8f0 [ 636.073509][ T8328] ? kmsan_get_metadata+0x13e/0x1c0 [ 636.078910][ T8328] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 636.085485][ T8328] ? kmsan_get_metadata+0x13e/0x1c0 [ 636.090872][ T8328] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 636.096891][ T8328] ? kmsan_get_metadata+0x13e/0x1c0 [ 636.102287][ T8328] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 636.108772][ T8328] ? kmsan_get_metadata+0x13e/0x1c0 [ 636.114157][ T8328] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 636.120142][ T8328] __msan_warning+0x95/0x120 [ 636.124832][ T8328] nsim_get_ringparam+0xa8/0xe0 [ 636.129798][ T8328] ? __pfx_nsim_set_ringparam+0x10/0x10 [ 636.135469][ T8328] ? __pfx_nsim_get_ringparam+0x10/0x10 [ 636.141139][ T8328] ethtool_set_ringparam+0x268/0x570 [ 636.146553][ T8328] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 636.152482][ T8328] dev_ethtool+0x126d/0x2a40 [ 636.157199][ T8328] dev_ioctl+0xb0e/0x1280 [ 636.161656][ T8328] sock_do_ioctl+0x28c/0x540 [ 636.166369][ T8328] sock_ioctl+0x721/0xd70 [ 636.170841][ T8328] ? __pfx_sock_ioctl+0x10/0x10 [ 636.175826][ T8328] __se_sys_ioctl+0x246/0x440 [ 636.180615][ T8328] __x64_sys_ioctl+0x96/0xe0 [ 636.185322][ T8328] x64_sys_call+0x19f0/0x3c30 [ 636.190163][ T8328] do_syscall_64+0xcd/0x1e0 [ 636.194791][ T8328] ? clear_bhb_loop+0x25/0x80 [ 636.199583][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.205596][ T8328] RIP: 0033:0x7ff10478cda9 [ 636.210085][ T8328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.229807][ T8328] RSP: 002b:00007ff105583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.238321][ T8328] RAX: ffffffffffffffda RBX: 00007ff1049a6240 RCX: 00007ff10478cda9 [ 636.246375][ T8328] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 000000000000000a [ 636.254438][ T8328] RBP: 00007ff10480e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 636.262482][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.270542][ T8328] R13: 0000000000000000 R14: 00007ff1049a6240 R15: 00007ffe137bc8b8 [ 636.278733][ T8328] [ 636.282102][ T8328] Kernel Offset: disabled [ 636.286488][ T8328] Rebooting in 86400 seconds..