last executing test programs: 11m15.303358338s ago: executing program 0 (id=425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x800) r1 = socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) listen(r2, 0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r3], 0x7) 11m14.797827398s ago: executing program 0 (id=427): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701dd"], 0x2c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x6, 0x0, [{0xb, 0x6, 0x9, 0x861, 0x9, 0x1, 0x5}, {0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11m14.075045082s ago: executing program 0 (id=429): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m12.760541062s ago: executing program 0 (id=434): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x1, 0x1, @raw_data=[0x400, 0x95, 0x9, 0x3, 0x5, 0xcb, 0x8, 0x5, 0x3, 0x1000, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, 0x8001]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 11m11.290239606s ago: executing program 4 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c00)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0x2, 0x1, @void, @void, @val={0x3, 0x1, 0x6}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xa, 0x3}}, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@tim={0x5, 0x3, {0x7, 0x4, 0x24}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0) 11m10.788775668s ago: executing program 4 (id=439): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() pipe2(&(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 11m8.828019892s ago: executing program 4 (id=440): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x815) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={0x0}}, 0x40000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c0, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0xfff, 0xb3, 0x39da], 0x70000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m8.143494581s ago: executing program 4 (id=443): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafa", 0x91}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1f6a996f0756604847689d37ee3047e61531a8672447cb501b2560bc0e0c5fb2c9f341ed3972b30190e930af94642ab1557e286442cfa6a84ad931e99549640705cd6261ca7094910df055747e2e2ae170e7850093bf0aa3370e03222b5de4597ca76f3193d4a45e424b540f292fd8b3523e5a2dd95177db84a801f0bc70819805a52b1b1b8f6c392056eb5f511d865324a88857277ce16e07bd12fc8b20b4c1b57b6ec2ca634970366", 0x186}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515", 0xb4}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11m7.764915935s ago: executing program 4 (id=445): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 11m6.903494608s ago: executing program 0 (id=450): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 11m6.662506358s ago: executing program 4 (id=453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x1, 0x1, @raw_data=[0x400, 0x95, 0x9, 0x3, 0x5, 0xcb, 0x8, 0x5, 0x3, 0x1000, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, 0x8001]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 11m5.158482111s ago: executing program 0 (id=457): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m49.40833709s ago: executing program 32 (id=457): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x5, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m47.904002247s ago: executing program 33 (id=453): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x500, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000540)={0x1, 0x1, @raw_data=[0x400, 0x95, 0x9, 0x3, 0x5, 0xcb, 0x8, 0x5, 0x3, 0x1000, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, 0x8001]}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x2b) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 8m50.711030043s ago: executing program 5 (id=461): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2000fb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) 8m50.356582156s ago: executing program 5 (id=627): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000"], 0x0) 8m48.257739721s ago: executing program 5 (id=631): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r0, r0, 0x4, r2, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_get$pid(0x2, r0) 8m33.091065092s ago: executing program 34 (id=631): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r0, r0, 0x4, r2, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_get$pid(0x2, r0) 6m56.699569974s ago: executing program 6 (id=780): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r1, r1, 0x4, r3, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_modinfo={0x14, 0x3, 0xbd}}) ppoll(&(0x7f0000000280)=[{r4, 0x4023}, {r6, 0x191}, {r7, 0x1}, {r3, 0x400}, {r0, 0xa142}, {r4, 0x4100}, {r0, 0x2200}], 0x7, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x9]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, 0x0, &(0x7f00000006c0), 0x3, r8}, 0x38) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 6m55.962931603s ago: executing program 6 (id=781): r0 = io_uring_setup(0x64d5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 6m54.083440598s ago: executing program 6 (id=783): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m53.657388922s ago: executing program 6 (id=785): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x80000007, 0x800, 0x0, 0x9, 0x4, 0x401, 0x2}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x4, 0x0, [{0x80000008, 0x81, 0x0, 0x4, 0x9, 0x1, 0x9}, {0x80000008, 0x3, 0x0, 0x81, 0xd5, 0x4, 0x4}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}, {0x40000000, 0xd, 0x6, 0x3, 0x2, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m50.758207581s ago: executing program 6 (id=788): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r1, r1, 0x4, r3, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_modinfo={0x14, 0x3, 0xbd}}) ppoll(&(0x7f0000000280)=[{r4, 0x4023}, {r6, 0x191}, {r7, 0x1}, {r3, 0x400}, {r0, 0xa142}, {r4, 0x4100}, {r0, 0x2200}], 0x7, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x9]}, 0x8) ioprio_get$pid(0x2, r1) 6m47.706866821s ago: executing program 6 (id=789): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r1, r1, 0x4, r3, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_modinfo={0x14, 0x3, 0xbd}}) ppoll(&(0x7f0000000280)=[{r4, 0x4023}, {r6, 0x191}, {r7, 0x1}, {r3, 0x400}, {r0, 0xa142}, {r4, 0x4100}, {r0, 0x2200}], 0x7, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x9]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, 0x0, &(0x7f00000006c0), 0x3, r8}, 0x38) 6m31.600243274s ago: executing program 35 (id=789): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) kcmp(r1, r1, 0x4, r3, 0xffffffffffffffff) io_setup(0x3, &(0x7f0000000180)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003040)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffe0, 0x1}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000140)=@ethtool_modinfo={0x14, 0x3, 0xbd}}) ppoll(&(0x7f0000000280)=[{r4, 0x4023}, {r6, 0x191}, {r7, 0x1}, {r3, 0x400}, {r0, 0xa142}, {r4, 0x4100}, {r0, 0x2200}], 0x7, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x9]}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, 0x0, &(0x7f00000006c0), 0x3, r8}, 0x38) 3m47.485837678s ago: executing program 1 (id=1052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x8100000, 0x0, 0x6, 0xc000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x26000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m46.38944777s ago: executing program 1 (id=1054): r0 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x40010100, 0x0, 0x0) 3m46.252886595s ago: executing program 1 (id=1057): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 3m45.79884061s ago: executing program 1 (id=1058): bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r5}}, 0x48) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf2500000000000000000000000000000000ff0200000000000000000000000000014e240000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000e9000000000180fffffffffffffeffffffffffffff000000000008000000e385000000000000000020002000000b0000000000000000000000000000000101"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 3m40.04121734s ago: executing program 1 (id=1070): ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x2, {0xc0020002, 0xe7ffffff, 0x5, 0x54ef}}) 3m38.527052042s ago: executing program 1 (id=1072): r0 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='rxrpc\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x47) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f0000001240)=[{}], 0x1) semop(r3, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4880) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 3m23.261399331s ago: executing program 36 (id=1072): r0 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000640)='rxrpc\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x47) r3 = semget$private(0x0, 0x6, 0x0) semtimedop(r3, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f0000001240)=[{}], 0x1) semop(r3, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4880) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 48.850742748s ago: executing program 3 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000002c0)=[{0xff, 0xfc, 0x0, 0x6, @time={0x7, 0x79}, {}, {0x0, 0x4}, @quote={{0xc6, 0x3}, 0x5}}], 0x1c) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x100, 0x0, 0x6, {[@md5sig={0x13, 0x12, "7dcde67b70cbf91ce79cd8f74eb814e0"}, @window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x754fd35, &(0x7f00000000c0)={[0x6]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 47.489372741s ago: executing program 3 (id=1266): r0 = socket(0x2, 0x3, 0xff) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20048051, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008090}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002480)}}], 0x1, 0x4c841) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x7}, 0x8) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 46.122687865s ago: executing program 3 (id=1267): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='btrfs\x00', 0x418, 0x0) 42.83682952s ago: executing program 3 (id=1270): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.216373848s ago: executing program 3 (id=1271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) futex(&(0x7f0000000500)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a31000000000500010007000000de9cd81265fe7aa9ed5d7e143cb49aa349220ef29a92fe3c968381a248768e8ce248d9b938ac5522c3edb9a3d9865673d080978650212af197f634d23e5d11a6dfb2af3c7a27efc39fd7db5c41536c3937d02b84cf37b5fad2375aad5820df3abf103e5f9126ffa0fc73ce16bb17"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 32.131945171s ago: executing program 3 (id=1277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) 30.738637365s ago: executing program 2 (id=1279): socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sched_getaffinity(0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "1e3bed42d6e454f191479a3ddafea1315f9619f1f38b2c07c458e12bd5318048c6f0d4b362f215ca0f9662e6d4504b1c6d84b9f2ef437f94789630c113554513", 0x22}, 0x48, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x30, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}]}}}}}}, 0x0) 29.328009278s ago: executing program 2 (id=1280): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x400c084) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) 20.590596688s ago: executing program 2 (id=1281): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f00000002c0)=[{0xff, 0xfc, 0x0, 0x6, @time={0x7, 0x79}, {}, {0x0, 0x4}, @quote={{0xc6, 0x3}, 0x5}}], 0x1c) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x100, 0x0, 0x6, {[@md5sig={0x13, 0x12, "7dcde67b70cbf91ce79cd8f74eb814e0"}, @window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x754fd35, &(0x7f00000000c0)={[0x6]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) socket$inet6(0xa, 0x80001, 0x0) 18.976283122s ago: executing program 2 (id=1282): r0 = socket(0x2, 0x3, 0xff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20048051, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008090}], 0x1, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000002480)}}], 0x1, 0x4c841) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x7}, 0x8) setuid(0xee00) sendto$inet(r1, &(0x7f0000000580)="17", 0xffffffffffffff99, 0x10008095, 0x0, 0x0) 17.318722097s ago: executing program 2 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4000, 0x0) 16.318592187s ago: executing program 37 (id=1277): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) 15.76047485s ago: executing program 2 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f0800000303000100"], 0xfdef) 0s ago: executing program 38 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="3a2f0800000303000100"], 0xfdef) kernel console output (not intermixed with test programs): with driver asix failed with error -32 [ 477.070033][ T5990] usb 2-1: USB disconnect, device number 75 [ 477.191603][ T5472] 8021q: adding VLAN 0 to HW filter on device eth12 [ 478.759181][ T5818] Bluetooth: hci1: command tx timeout [ 478.939447][ T5990] usb 3-1: USB disconnect, device number 57 [ 480.763306][ T5818] Bluetooth: hci1: command tx timeout [ 481.147926][ T9135] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 481.319382][ T9058] chnl_net:caif_netlink_parms(): no params data found [ 481.906353][ T9151] fuse: Bad value for 'fd' [ 481.981846][ T6043] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 482.039162][ T9058] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.039279][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.039503][ T9058] bridge_slave_0: entered allmulticast mode [ 482.073114][ T9058] bridge_slave_0: entered promiscuous mode [ 482.104688][ T9058] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.106830][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.107131][ T9058] bridge_slave_1: entered allmulticast mode [ 482.131062][ T6043] usb 3-1: Using ep0 maxpacket: 8 [ 482.148668][ T6043] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 482.148699][ T6043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.148713][ T6043] usb 3-1: Product: syz [ 482.148723][ T6043] usb 3-1: Manufacturer: syz [ 482.148733][ T6043] usb 3-1: SerialNumber: syz [ 482.188253][ T9058] bridge_slave_1: entered promiscuous mode [ 483.796137][ T6043] usb 3-1: config 0 descriptor?? [ 483.873251][ T6043] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 483.971458][ T9058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.190320][ T9058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.211041][ T37] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 484.437127][ T9058] team0: Port device team_slave_0 added [ 484.452988][ T37] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 484.453077][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.453098][ T37] usb 2-1: Product: syz [ 484.453113][ T37] usb 2-1: Manufacturer: syz [ 484.453127][ T37] usb 2-1: SerialNumber: syz [ 484.462707][ T9058] team0: Port device team_slave_1 added [ 484.564915][ T37] usb 2-1: config 0 descriptor?? [ 484.623051][ T37] hub 2-1:0.0: bad descriptor, ignoring hub [ 484.623087][ T37] hub 2-1:0.0: probe with driver hub failed with error -5 [ 484.706912][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.706931][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.706960][ T9058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.710092][ T9058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.710107][ T9058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.710140][ T9058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.154995][ T9058] hsr_slave_0: entered promiscuous mode [ 485.156599][ T9058] hsr_slave_1: entered promiscuous mode [ 486.316702][ T816] usb 3-1: USB disconnect, device number 58 [ 489.262705][ T6043] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 489.455330][ T6043] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.455358][ T6043] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.496720][ T6043] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.496750][ T6043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 489.496771][ T6043] usb 4-1: SerialNumber: syz [ 489.735526][ T37] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 489.849263][ T6043] usb 4-1: 0:2 : does not exist [ 489.849369][ T6043] usb 4-1: unit 5 not found! [ 489.878355][ T37] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 489.878406][ T37] dib0700: firmware download failed at 7 with -22 [ 490.985466][ T6043] usb 4-1: USB disconnect, device number 44 [ 491.117949][ T8109] bridge_slave_1: left allmulticast mode [ 491.117979][ T8109] bridge_slave_1: left promiscuous mode [ 491.118209][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.247678][ T8109] bridge_slave_0: left allmulticast mode [ 491.247710][ T8109] bridge_slave_0: left promiscuous mode [ 491.247988][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.302400][ T8765] udevd[8765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.191375][ T5928] usb 2-1: USB disconnect, device number 76 [ 495.391655][ T8109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.434732][ T8109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.472526][ T8109] bond0 (unregistering): Released all slaves [ 495.726870][ T5928] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 495.928378][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 495.928415][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 495.928443][ T5928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 495.935924][ T5928] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 495.936059][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.936094][ T5928] usb 2-1: Product: syz [ 495.936137][ T5928] usb 2-1: Manufacturer: syz [ 495.936180][ T5928] usb 2-1: SerialNumber: syz [ 496.031905][ T5928] usb 2-1: config 0 descriptor?? [ 496.032703][ T9233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.032823][ T9233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.057574][ T5928] usb 2-1: ucan: probing device on interface #0 [ 496.292297][ T5928] usb 2-1: ucan: could not read protocol version, ret=0 [ 496.292324][ T5928] usb 2-1: ucan: probe failed; try to update the device firmware [ 496.711611][ T5472] 8021q: adding VLAN 0 to HW filter on device eth13 [ 498.151142][ T8109] hsr_slave_0: left promiscuous mode [ 498.212771][ T8109] hsr_slave_1: left promiscuous mode [ 498.213966][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.236534][ T816] usb 2-1: USB disconnect, device number 77 [ 498.278397][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.191827][ T865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 500.963702][ T865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.963733][ T865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.965287][ T865] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.965316][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.965357][ T865] usb 3-1: SerialNumber: syz [ 501.228417][ T9271] fuse: Bad value for 'fd' [ 501.510305][ T865] usb 3-1: 0:2 : does not exist [ 501.510402][ T865] usb 3-1: unit 5 not found! [ 502.331963][ T865] usb 3-1: USB disconnect, device number 59 [ 502.916167][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.916263][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.971150][ T5900] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 503.056229][ T8765] udevd[8765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.296209][ T5900] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 503.296249][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.296271][ T5900] usb 4-1: Product: syz [ 503.296286][ T5900] usb 4-1: Manufacturer: syz [ 503.296302][ T5900] usb 4-1: SerialNumber: syz [ 503.350275][ T8109] team0 (unregistering): Port device team_slave_1 removed [ 503.385142][ T5900] usb 4-1: config 0 descriptor?? [ 503.396085][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 504.351704][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 504.466066][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 504.863777][ T9291] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 508.742704][ T5900] usb 4-1: can't set config #0, error -110 [ 510.611028][ T5990] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 510.873225][ T9336] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 510.873940][ T9336] overlayfs: overlapping lowerdir path [ 512.365101][ T5990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.365133][ T5990] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.365196][ T5990] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 512.365223][ T5990] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.366757][ T5990] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.366785][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.366808][ T5990] usb 3-1: SerialNumber: syz [ 513.169791][ T5990] usb 3-1: 0:2 : does not exist [ 513.169888][ T5990] usb 3-1: unit 5 not found! [ 513.719436][ T5990] usb 3-1: USB disconnect, device number 60 [ 513.986323][ T9058] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 514.042436][ T8765] udevd[8765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.075828][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.084421][ T9058] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 514.163336][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.167809][ T9058] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 514.390289][ T9347] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 514.480539][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.504475][ T9058] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 514.548617][ T865] usb 4-1: USB disconnect, device number 45 [ 514.575301][ T9058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.494379][ T9058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.006593][ T9058] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.120018][ T9387] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 519.120082][ T9387] overlayfs: overlapping lowerdir path [ 519.232904][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.233083][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.075550][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.075999][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.701894][ T816] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 522.788075][ T9421] fuse: Bad value for 'fd' [ 522.854612][ T816] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.854633][ T816] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.854658][ T816] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 522.854675][ T816] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 522.856428][ T816] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.856449][ T816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.856464][ T816] usb 4-1: SerialNumber: syz [ 522.870123][ T9414] binder: 9406:9414 ioctl 4018620d 0 returned -22 [ 523.393458][ T816] usb 4-1: 0:2 : does not exist [ 523.394109][ T816] usb 4-1: unit 5 not found! [ 523.466089][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.478542][ T5990] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 523.657068][ T5990] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 523.657103][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.657126][ T5990] usb 3-1: Product: syz [ 523.657142][ T5990] usb 3-1: Manufacturer: syz [ 523.657158][ T5990] usb 3-1: SerialNumber: syz [ 523.711822][ T5990] usb 3-1: config 0 descriptor?? [ 523.726495][ T5990] hub 3-1:0.0: bad descriptor, ignoring hub [ 523.726532][ T5990] hub 3-1:0.0: probe with driver hub failed with error -5 [ 523.828401][ T816] usb 4-1: USB disconnect, device number 46 [ 523.987261][ T5990] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 524.022845][ T5990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.029682][ T5990] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 524.029738][ T5990] usb 3-1: media controller created [ 524.166967][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.234302][ T8765] udevd[8765]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.497245][ T5990] DVB: Unable to find symbol dib7000p_attach() [ 524.497262][ T5990] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 524.593374][ T37] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 524.741498][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 524.745840][ T37] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 524.745869][ T37] usb 4-1: config 0 has no interface number 0 [ 524.745912][ T37] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 524.745939][ T37] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 524.760975][ T5990] rc_core: IR keymap rc-dib0700-rc5 not found [ 524.760995][ T5990] Registered IR keymap rc-empty [ 524.761289][ T5990] dvb-usb: could not initialize remote control. [ 524.761300][ T5990] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 524.865780][ T37] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 524.865804][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.865819][ T37] usb 4-1: Product: syz [ 524.865829][ T37] usb 4-1: Manufacturer: syz [ 524.865840][ T37] usb 4-1: SerialNumber: syz [ 524.915400][ T37] usb 4-1: config 0 descriptor?? [ 524.916179][ T9437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 524.916309][ T9437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.158827][ T9437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.158972][ T9437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 525.365515][ T37] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 525.573837][ T37] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 525.573858][ T37] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 525.574020][ T37] asix 4-1:0.34: probe with driver asix failed with error -61 [ 525.790697][ T9058] veth0_vlan: entered promiscuous mode [ 525.845889][ T9058] veth1_vlan: entered promiscuous mode [ 526.152862][ T9058] veth0_macvtap: entered promiscuous mode [ 526.186636][ T9058] veth1_macvtap: entered promiscuous mode [ 526.318600][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.429293][ T9058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.525666][ T1306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.530450][ T1306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.540527][ T1306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.541697][ T1306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.696373][ T5928] usb 4-1: USB disconnect, device number 47 [ 527.833566][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.833584][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.381385][ T5958] usb 3-1: USB disconnect, device number 61 [ 529.600326][ T5958] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 531.227113][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.282733][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.285168][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 531.326488][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.344215][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 531.618365][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 531.657735][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 531.661257][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 531.697976][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 531.732015][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 532.441414][ T816] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 532.676951][ T816] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 532.676984][ T816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.677005][ T816] usb 2-1: Product: syz [ 532.677019][ T816] usb 2-1: Manufacturer: syz [ 532.677033][ T816] usb 2-1: SerialNumber: syz [ 532.772401][ T816] usb 2-1: config 0 descriptor?? [ 532.792731][ T816] hub 2-1:0.0: bad descriptor, ignoring hub [ 532.792767][ T816] hub 2-1:0.0: probe with driver hub failed with error -5 [ 533.551759][ T9529] fuse: Bad value for 'fd' [ 533.564136][ T5827] Bluetooth: hci5: command tx timeout [ 533.881077][ T5827] Bluetooth: hci6: command tx timeout [ 534.250966][ T865] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 534.516706][ T865] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 534.516738][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.516758][ T865] usb 3-1: Product: syz [ 534.516770][ T865] usb 3-1: Manufacturer: syz [ 534.516783][ T865] usb 3-1: SerialNumber: syz [ 534.671834][ T865] usb 3-1: config 0 descriptor?? [ 534.743399][ T865] hub 3-1:0.0: bad descriptor, ignoring hub [ 534.748287][ T865] hub 3-1:0.0: probe with driver hub failed with error -5 [ 534.997640][ T865] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 535.047666][ T865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 535.050422][ T865] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 535.050473][ T865] usb 3-1: media controller created [ 535.223104][ T865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 535.641101][ T5827] Bluetooth: hci5: command tx timeout [ 535.915071][ T865] DVB: Unable to find symbol dib7000p_attach() [ 535.915087][ T865] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 535.961020][ T5827] Bluetooth: hci6: command tx timeout [ 536.344634][ T865] rc_core: IR keymap rc-dib0700-rc5 not found [ 536.344657][ T865] Registered IR keymap rc-empty [ 536.344986][ T865] dvb-usb: could not initialize remote control. [ 536.344997][ T865] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 536.417841][ T170] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.721256][ T5827] Bluetooth: hci5: command tx timeout [ 537.805073][ T816] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 537.806397][ T816] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 537.806429][ T816] dib0700: firmware download failed at 7 with -22 [ 538.041032][ T5827] Bluetooth: hci6: command tx timeout [ 538.868275][ T5893] usb 2-1: USB disconnect, device number 78 [ 539.142054][ T170] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.299365][ T5827] Bluetooth: hci5: command tx timeout [ 540.299385][ T5818] Bluetooth: hci6: command tx timeout [ 541.002041][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 541.878217][ T170] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.133828][ T37] usb 3-1: USB disconnect, device number 62 [ 542.289908][ T37] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 542.484710][ T5900] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 542.565231][ T170] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.807915][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 542.823191][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 543.667890][ T5900] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 543.667922][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.667959][ T5900] usb 2-1: Product: syz [ 543.667974][ T5900] usb 2-1: Manufacturer: syz [ 543.667989][ T5900] usb 2-1: SerialNumber: syz [ 543.670586][ T9493] chnl_net:caif_netlink_parms(): no params data found [ 543.706446][ T5900] usb 2-1: config 0 descriptor?? [ 543.747757][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 544.001418][ T9503] chnl_net:caif_netlink_parms(): no params data found [ 545.436905][ T9493] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.437077][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.437273][ T9493] bridge_slave_0: entered allmulticast mode [ 545.451697][ T9493] bridge_slave_0: entered promiscuous mode [ 545.493667][ T9493] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.493793][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.493989][ T9493] bridge_slave_1: entered allmulticast mode [ 545.503821][ T9493] bridge_slave_1: entered promiscuous mode [ 546.523754][ T865] usb 2-1: USB disconnect, device number 79 [ 546.781061][ T9493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.790170][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.790311][ T9503] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.790553][ T9503] bridge_slave_0: entered allmulticast mode [ 546.858877][ T9667] fuse: Bad value for 'fd' [ 546.862148][ T9503] bridge_slave_0: entered promiscuous mode [ 546.980666][ T9493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.047225][ T9503] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.047398][ T9503] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.047584][ T9503] bridge_slave_1: entered allmulticast mode [ 547.057878][ T9503] bridge_slave_1: entered promiscuous mode [ 547.181111][ T5900] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 547.277304][ T9673] openvswitch: netlink: Flow key attr not present in new flow. [ 547.280417][ T9673] netlink: 'syz.3.838': attribute type 1 has an invalid length. [ 547.341087][ T5900] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 547.341174][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.341198][ T5900] usb 2-1: Product: syz [ 547.341214][ T5900] usb 2-1: Manufacturer: syz [ 547.341228][ T5900] usb 2-1: SerialNumber: syz [ 547.370494][ T5900] usb 2-1: config 0 descriptor?? [ 547.390286][ T5900] hub 2-1:0.0: bad descriptor, ignoring hub [ 547.390312][ T5900] hub 2-1:0.0: probe with driver hub failed with error -5 [ 547.441260][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 547.561703][ T170] bridge_slave_1: left allmulticast mode [ 547.561736][ T170] bridge_slave_1: left promiscuous mode [ 547.562182][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.618134][ T5900] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 547.643784][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 547.648804][ T5900] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 547.648840][ T5900] usb 2-1: media controller created [ 547.684449][ T170] bridge_slave_0: left allmulticast mode [ 547.684484][ T170] bridge_slave_0: left promiscuous mode [ 547.684727][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.774686][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.903851][ T5900] DVB: Unable to find symbol dib7000p_attach() [ 547.903863][ T5900] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 548.073375][ T5900] rc_core: IR keymap rc-dib0700-rc5 not found [ 548.073391][ T5900] Registered IR keymap rc-empty [ 548.073590][ T5900] dvb-usb: could not initialize remote control. [ 548.073597][ T5900] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 549.073758][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.153131][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.195845][ T170] bond0 (unregistering): Released all slaves [ 549.196471][ T9686] openvswitch: netlink: Flow key attr not present in new flow. [ 549.200111][ T9686] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 549.274977][ T9493] team0: Port device team_slave_0 added [ 549.286726][ T9503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.430354][ T9674] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 549.445322][ T9674] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 549.803627][ T9687] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 549.804574][ T9687] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 549.941283][ T9503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.946389][ T9493] team0: Port device team_slave_1 added [ 550.095640][ T5900] usb 2-1: USB disconnect, device number 80 [ 550.213667][ T5900] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 550.482092][ T9503] team0: Port device team_slave_0 added [ 550.483184][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.483195][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.483214][ T9493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.486219][ T9493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.486230][ T9493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 550.486254][ T9493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.503354][ T9503] team0: Port device team_slave_1 added [ 552.154293][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.154318][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.154349][ T9503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.371248][ T170] hsr_slave_0: left promiscuous mode [ 552.592265][ T170] hsr_slave_1: left promiscuous mode [ 552.593091][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.593109][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.501844][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.501873][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.008380][ T170] veth1_macvtap: left promiscuous mode [ 554.013717][ T170] veth0_macvtap: left promiscuous mode [ 554.016859][ T170] veth1_vlan: left promiscuous mode [ 554.027065][ T170] veth0_vlan: left promiscuous mode [ 554.949612][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.847'. [ 556.251584][ T170] team0 (unregistering): Port device team_slave_1 removed [ 556.324670][ T170] team0 (unregistering): Port device team_slave_0 removed [ 556.685794][ T9503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.685813][ T9503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.685844][ T9503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.768113][ T9493] hsr_slave_0: entered promiscuous mode [ 556.782094][ T9493] hsr_slave_1: entered promiscuous mode [ 557.063050][ T9503] hsr_slave_0: entered promiscuous mode [ 557.066800][ T9503] hsr_slave_1: entered promiscuous mode [ 557.084206][ T9503] debugfs: 'hsr0' already exists in 'hsr' [ 557.084235][ T9503] Cannot create hsr debugfs directory [ 557.200605][ T9730] fuse: Bad value for 'fd' [ 557.801086][ T5893] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 558.031121][ T5893] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 558.031155][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.031178][ T5893] usb 3-1: Product: syz [ 558.031195][ T5893] usb 3-1: Manufacturer: syz [ 558.031210][ T5893] usb 3-1: SerialNumber: syz [ 558.131457][ T5893] usb 3-1: config 0 descriptor?? [ 558.168144][ T5893] hub 3-1:0.0: bad descriptor, ignoring hub [ 558.168171][ T5893] hub 3-1:0.0: probe with driver hub failed with error -5 [ 558.776256][ T5928] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 559.932792][ T5893] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 559.956881][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 560.314595][ T5893] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 560.314648][ T5893] usb 3-1: media controller created [ 560.362374][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 560.362409][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 560.362436][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 560.439921][ T5928] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 560.439964][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.439985][ T5928] usb 4-1: Product: syz [ 560.439999][ T5928] usb 4-1: Manufacturer: syz [ 560.440013][ T5928] usb 4-1: SerialNumber: syz [ 560.444891][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 560.515822][ T5928] usb 4-1: config 0 descriptor?? [ 560.516633][ T9742] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 560.516756][ T9742] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 560.663711][ T5928] usb 4-1: ucan: probing device on interface #0 [ 560.749086][ T5928] usb 4-1: ucan: device protocol version 0 is not supported [ 560.749112][ T5928] usb 4-1: ucan: probe failed; try to update the device firmware [ 560.949095][ T5893] DVB: Unable to find symbol dib7000p_attach() [ 560.949112][ T5893] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 561.274209][ T5893] rc_core: IR keymap rc-dib0700-rc5 not found [ 561.274225][ T5893] Registered IR keymap rc-empty [ 561.274427][ T5893] dvb-usb: could not initialize remote control. [ 561.274434][ T5893] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 561.866761][ T5472] 8021q: adding VLAN 0 to HW filter on device eth13 [ 562.426684][ T6043] usb 4-1: USB disconnect, device number 48 [ 563.737727][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.737800][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.774770][ T170] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.655250][ T170] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.948005][ T9493] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 565.015899][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.053740][ T9493] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 565.097885][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.194966][ T5900] usb 3-1: USB disconnect, device number 63 [ 565.293490][ T170] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.417584][ T9493] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 565.442447][ T5900] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 565.485615][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 565.490006][ T5472] 8021q: adding VLAN 0 to HW filter on device eth14 [ 565.842148][ T9493] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.641482][ T9493] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.917418][ T170] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.853608][ T37] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 570.102892][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 570.102928][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 570.102955][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 570.109912][ T37] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 570.109944][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.109966][ T37] usb 2-1: Product: syz [ 570.109981][ T37] usb 2-1: Manufacturer: syz [ 570.109997][ T37] usb 2-1: SerialNumber: syz [ 570.185048][ T37] usb 2-1: config 0 descriptor?? [ 570.192555][ T9811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.192844][ T9811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.218430][ T37] usb 2-1: ucan: probing device on interface #0 [ 570.607072][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 571.320439][ T37] usb 2-1: ucan: device protocol version 0 is not supported [ 571.320467][ T37] usb 2-1: ucan: probe failed; try to update the device firmware [ 571.535832][ T9832] fuse: Bad value for 'fd' [ 572.971098][ T5893] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 573.098829][ T5958] usb 2-1: USB disconnect, device number 81 [ 573.239972][ T5893] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 573.239995][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.240009][ T5893] usb 4-1: Product: syz [ 573.240019][ T5893] usb 4-1: Manufacturer: syz [ 573.240029][ T5893] usb 4-1: SerialNumber: syz [ 573.327326][ T5893] usb 4-1: config 0 descriptor?? [ 574.751386][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.655160][ T9493] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.783182][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.783628][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.457252][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.458546][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.364100][ T5893] usb 4-1: can't set config #0, error -110 [ 578.794971][ T37] usb 4-1: USB disconnect, device number 49 [ 579.735014][ T170] bridge_slave_1: left allmulticast mode [ 579.735043][ T170] bridge_slave_1: left promiscuous mode [ 579.735278][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.830788][ T170] bridge_slave_0: left allmulticast mode [ 579.830820][ T170] bridge_slave_0: left promiscuous mode [ 579.832768][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.133912][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.194549][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.234882][ T170] bond0 (unregistering): Released all slaves [ 582.635908][ T9944] openvswitch: netlink: Flow key attr not present in new flow. [ 582.636849][ T9944] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 582.829550][ T9948] netlink: 60 bytes leftover after parsing attributes in process `syz.2.880'. [ 582.943542][ T9945] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.143076][ T9945] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 584.599456][ T9503] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 584.634107][ T9503] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 584.757896][ T9503] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 584.818040][ T9503] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.829352][ T9503] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 584.872679][ T9503] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.192069][ T9503] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 585.222154][ T9503] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.511014][ T170] hsr_slave_0: left promiscuous mode [ 585.551090][ T170] hsr_slave_1: left promiscuous mode [ 585.552375][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.552400][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.613005][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.613035][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.923672][ T170] veth1_macvtap: left promiscuous mode [ 585.923780][ T170] veth0_macvtap: left promiscuous mode [ 585.924060][ T170] veth1_vlan: left promiscuous mode [ 585.924247][ T170] veth0_vlan: left promiscuous mode [ 586.193479][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 587.911612][ T170] team0 (unregistering): Port device team_slave_1 removed [ 587.969202][ T170] team0 (unregistering): Port device team_slave_0 removed [ 588.814492][ T9503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.869138][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.896405][ T9503] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.974701][T10012] fuse: Bad value for 'fd' [ 588.986681][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.986915][ T8919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.038706][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.038946][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.250021][ T9503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.250040][ T9503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.350985][ T5893] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 589.633081][ T5893] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 589.633104][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.633119][ T5893] usb 2-1: Product: syz [ 589.633128][ T5893] usb 2-1: Manufacturer: syz [ 589.633138][ T5893] usb 2-1: SerialNumber: syz [ 589.697749][ T5893] usb 2-1: config 0 descriptor?? [ 589.709210][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 589.709245][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 590.274509][ T5893] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 590.342530][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 590.343908][ T5893] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 590.343945][ T5893] usb 2-1: media controller created [ 590.489981][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.163037][ T5893] DVB: Unable to find symbol dib7000p_attach() [ 593.163054][ T5893] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 593.281257][ T9841] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 594.481039][ T9841] usb 4-1: Using ep0 maxpacket: 8 [ 594.506456][ T9841] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 594.506490][ T9841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.506512][ T9841] usb 4-1: Product: syz [ 594.506529][ T9841] usb 4-1: Manufacturer: syz [ 594.506544][ T9841] usb 4-1: SerialNumber: syz [ 594.618074][ T9841] usb 4-1: config 0 descriptor?? [ 594.626272][ T5893] rc_core: IR keymap rc-dib0700-rc5 not found [ 594.626291][ T5893] Registered IR keymap rc-empty [ 594.626588][ T5893] dvb-usb: could not initialize remote control. [ 594.626597][ T5893] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 594.978335][ T9841] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 595.301388][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.349478][T10056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.435137][T10056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.438016][T10056] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.439128][T10056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.442319][T10056] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.482003][T10056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.483431][T10056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 595.526190][T10056] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.591277][T10056] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.641735][ T9841] gspca_sonixj: reg_r err -32 [ 595.641886][ T9841] sonixj 4-1:0.0: probe with driver sonixj failed with error -32 [ 595.858788][ T9841] usb 4-1: USB disconnect, device number 50 [ 597.048239][ T5472] 8021q: adding VLAN 0 to HW filter on device eth13 [ 597.389788][T10072] fuse: Bad value for 'fd' [ 597.648695][ T5818] Bluetooth: hci2: command tx timeout [ 598.041159][ T5818] Bluetooth: hci1: command tx timeout [ 598.701006][ T9841] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 598.701361][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 598.831011][ T9841] usb 4-1: device descriptor read/64, error -32 [ 599.251013][ T9841] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 599.594764][ T9841] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 599.594789][ T9841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.594804][ T9841] usb 4-1: Product: syz [ 599.594814][ T9841] usb 4-1: Manufacturer: syz [ 599.594825][ T9841] usb 4-1: SerialNumber: syz [ 599.639221][ T9841] usb 4-1: config 0 descriptor?? [ 599.733877][ T5818] Bluetooth: hci2: command tx timeout [ 599.817967][ T5820] usb 2-1: USB disconnect, device number 82 [ 600.033391][ T9841] hub 4-1:0.0: bad descriptor, ignoring hub [ 600.121880][ T5818] Bluetooth: hci1: command tx timeout [ 600.227867][ T9841] hub 4-1:0.0: probe with driver hub failed with error -5 [ 600.244606][ T5820] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 601.800962][ T5818] Bluetooth: hci2: command tx timeout [ 601.848510][T10091] openvswitch: netlink: Flow key attr not present in new flow. [ 601.858975][T10091] netlink: 'syz.1.908': attribute type 1 has an invalid length. [ 602.200988][ T5818] Bluetooth: hci1: command tx timeout [ 603.500521][T10092] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 603.514409][T10092] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 603.881129][ T5818] Bluetooth: hci2: command tx timeout [ 604.024920][T10090] bond1: (slave gretap1): making interface the new active one [ 604.056120][T10090] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 604.281132][ T5818] Bluetooth: hci1: command tx timeout [ 604.899628][T10090] syz.1.908 (10090) used greatest stack depth: 17600 bytes left [ 606.522384][ T9841] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 606.566349][ T9841] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 606.566388][ T9841] dib0700: firmware download failed at 7 with -22 [ 607.404941][ T5820] usb 4-1: USB disconnect, device number 52 [ 608.335761][T10139] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 608.336306][T10139] overlayfs: overlapping lowerdir path [ 609.101384][T10049] chnl_net:caif_netlink_parms(): no params data found [ 609.338443][T10048] chnl_net:caif_netlink_parms(): no params data found [ 610.921369][ T155] bridge_slave_1: left allmulticast mode [ 610.921402][ T155] bridge_slave_1: left promiscuous mode [ 610.921681][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.999109][ T155] bridge_slave_0: left allmulticast mode [ 610.999135][ T155] bridge_slave_0: left promiscuous mode [ 611.001616][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.318856][ T9841] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 611.461015][ T9841] usb 3-1: device descriptor read/64, error -71 [ 611.722476][ T9841] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 611.850988][ T9841] usb 3-1: device descriptor read/64, error -71 [ 611.961586][ T9841] usb usb3-port1: attempt power cycle [ 611.986073][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.063130][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.084219][ T155] bond0 (unregistering): Released all slaves [ 612.152689][ T5472] 8021q: adding VLAN 0 to HW filter on device eth14 [ 612.301005][ T9841] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 612.325353][ T9841] usb 3-1: device descriptor read/8, error -71 [ 612.407149][T10049] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.407325][T10049] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.407495][T10049] bridge_slave_0: entered allmulticast mode [ 612.410098][T10049] bridge_slave_0: entered promiscuous mode [ 612.465568][T10049] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.465719][T10049] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.465863][T10049] bridge_slave_1: entered allmulticast mode [ 612.468021][T10049] bridge_slave_1: entered promiscuous mode [ 612.571020][ T9841] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 612.593053][ T9841] usb 3-1: device descriptor read/8, error -71 [ 612.703070][ T9841] usb usb3-port1: unable to enumerate USB device [ 613.088384][ T155] hsr_slave_0: left promiscuous mode [ 613.122453][ T155] hsr_slave_1: left promiscuous mode [ 613.123839][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.173817][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.262548][ T155] team0 (unregistering): Port device team_slave_1 removed [ 614.323897][ T155] team0 (unregistering): Port device team_slave_0 removed [ 614.642568][T10048] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.642711][T10048] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.642917][T10048] bridge_slave_0: entered allmulticast mode [ 614.645057][T10048] bridge_slave_0: entered promiscuous mode [ 614.682805][T10049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.704942][T10048] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.705111][T10048] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.705324][T10048] bridge_slave_1: entered allmulticast mode [ 614.713836][T10048] bridge_slave_1: entered promiscuous mode [ 614.744022][T10049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.878160][T10048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.884810][T10049] team0: Port device team_slave_0 added [ 614.896701][T10048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.904321][T10049] team0: Port device team_slave_1 added [ 615.117270][T10048] team0: Port device team_slave_0 added [ 615.119448][T10049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.119462][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.119490][T10049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.137077][T10048] team0: Port device team_slave_1 added [ 615.139532][T10049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.139548][T10049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.139586][T10049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.322238][T10048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.322257][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.322288][T10048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.325573][T10048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.325589][T10048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.325619][T10048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.718907][T10049] hsr_slave_0: entered promiscuous mode [ 615.725009][T10049] hsr_slave_1: entered promiscuous mode [ 615.729126][T10049] debugfs: 'hsr0' already exists in 'hsr' [ 615.729151][T10049] Cannot create hsr debugfs directory [ 616.667757][T10205] binder: BINDER_SET_CONTEXT_MGR already set [ 616.667775][T10205] binder: 10201:10205 ioctl 4018620d 200000004a80 returned -16 [ 616.913758][T10048] hsr_slave_0: entered promiscuous mode [ 616.918002][T10048] hsr_slave_1: entered promiscuous mode [ 616.928546][T10048] debugfs: 'hsr0' already exists in 'hsr' [ 616.928613][T10048] Cannot create hsr debugfs directory [ 618.751026][ T9841] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 618.900963][ T9841] usb 3-1: Using ep0 maxpacket: 16 [ 618.903391][ T9841] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.903417][ T9841] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 618.906532][ T9841] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 618.906564][ T9841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.906588][ T9841] usb 3-1: Product: syz [ 618.906604][ T9841] usb 3-1: Manufacturer: syz [ 618.906620][ T9841] usb 3-1: SerialNumber: syz [ 618.987345][ T9841] usb 3-1: config 0 descriptor?? [ 619.269063][T10236] netlink: 'syz.2.931': attribute type 10 has an invalid length. [ 619.399383][ T5820] usb 3-1: USB disconnect, device number 68 [ 619.578907][ T5472] 8021q: adding VLAN 0 to HW filter on device eth15 [ 622.718344][T10282] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 622.718414][T10282] overlayfs: overlapping lowerdir path [ 623.822992][ T5472] 8021q: adding VLAN 0 to HW filter on device eth16 [ 624.481031][ T5893] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 624.541910][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.541977][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.632476][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 624.735955][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.735989][ T5893] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 624.823218][ T5893] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 624.823251][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.823272][ T5893] usb 4-1: Product: syz [ 624.823288][ T5893] usb 4-1: Manufacturer: syz [ 624.823303][ T5893] usb 4-1: SerialNumber: syz [ 624.876750][ T5893] usb 4-1: config 0 descriptor?? [ 625.237392][T10317] netlink: 'syz.3.943': attribute type 10 has an invalid length. [ 625.419409][ T5990] usb 4-1: USB disconnect, device number 53 [ 625.431328][ T5472] 8021q: adding VLAN 0 to HW filter on device eth17 [ 627.477915][T10357] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 627.477957][T10357] overlayfs: overlapping lowerdir path [ 627.570749][ T5472] 8021q: adding VLAN 0 to HW filter on device eth18 [ 627.590229][T10355] binder_alloc: 10351: binder_alloc_buf, no vma [ 628.272062][ T155] bridge_slave_1: left allmulticast mode [ 628.272086][ T155] bridge_slave_1: left promiscuous mode [ 628.272523][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.353026][ T155] bridge_slave_0: left allmulticast mode [ 628.353088][ T155] bridge_slave_0: left promiscuous mode [ 628.353781][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.582646][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.673107][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.714644][ T155] bond0 (unregistering): Released all slaves [ 631.582322][T10391] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 631.582408][T10391] overlayfs: overlapping lowerdir path [ 631.857561][ T155] hsr_slave_0: left promiscuous mode [ 631.909594][ T155] hsr_slave_1: left promiscuous mode [ 631.910675][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.943521][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.847556][T10431] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 634.847621][T10431] overlayfs: overlapping lowerdir path [ 635.070666][ T155] team0 (unregistering): Port device team_slave_1 removed [ 636.343836][ T155] team0 (unregistering): Port device team_slave_0 removed [ 636.686377][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 637.189505][ T5472] 8021q: adding VLAN 0 to HW filter on device eth19 [ 639.277976][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 648.000362][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.991'. [ 649.789280][T10049] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 649.859330][T10049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.883139][T10049] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 649.946397][T10049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.966366][T10049] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.023276][T10049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.045863][T10049] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 650.100755][T10049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.159132][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.195379][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.249376][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.257743][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.272402][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 652.448003][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 652.492112][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 652.497686][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 652.503111][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 652.507764][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 653.681862][ T816] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 653.939712][ T816] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 653.939761][ T816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.939784][ T816] usb 2-1: Product: syz [ 653.939794][ T816] usb 2-1: Manufacturer: syz [ 653.939804][ T816] usb 2-1: SerialNumber: syz [ 653.982985][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1005'. [ 654.150059][ T816] usb 2-1: config 0 descriptor?? [ 654.222162][ T816] hub 2-1:0.0: bad descriptor, ignoring hub [ 654.222190][ T816] hub 2-1:0.0: probe with driver hub failed with error -5 [ 654.454204][ T5827] Bluetooth: hci5: command tx timeout [ 654.681057][ T5827] Bluetooth: hci6: command tx timeout [ 656.521075][ T5827] Bluetooth: hci5: command tx timeout [ 656.761016][ T5827] Bluetooth: hci6: command tx timeout [ 659.161088][ T5827] Bluetooth: hci5: command tx timeout [ 660.016248][ T816] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 660.020681][ T816] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 660.020730][ T816] dib0700: firmware download failed at 7 with -22 [ 660.221133][ T5827] Bluetooth: hci6: command tx timeout [ 661.241113][ T5827] Bluetooth: hci5: command tx timeout [ 661.372207][ T816] usb 2-1: USB disconnect, device number 83 [ 661.903001][T10684] fuse: Bad value for 'fd' [ 662.280925][ T5827] Bluetooth: hci6: command tx timeout [ 662.721425][T10612] chnl_net:caif_netlink_parms(): no params data found [ 662.770999][ T5893] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 662.956061][ T5893] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 662.956097][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.956120][ T5893] usb 2-1: Product: syz [ 662.956136][ T5893] usb 2-1: Manufacturer: syz [ 662.956151][ T5893] usb 2-1: SerialNumber: syz [ 663.012851][ T5893] usb 2-1: config 0 descriptor?? [ 663.027613][ T5893] hub 2-1:0.0: bad descriptor, ignoring hub [ 663.027655][ T5893] hub 2-1:0.0: probe with driver hub failed with error -5 [ 663.360007][ T5893] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 663.392035][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 663.394105][ T5893] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 663.394160][ T5893] usb 2-1: media controller created [ 663.448483][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.855213][ T5893] DVB: Unable to find symbol dib7000p_attach() [ 664.855230][ T5893] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 665.005100][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.005220][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.005352][T10612] bridge_slave_0: entered allmulticast mode [ 665.007256][T10612] bridge_slave_0: entered promiscuous mode [ 665.128466][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.128556][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.128707][T10612] bridge_slave_1: entered allmulticast mode [ 665.156699][T10612] bridge_slave_1: entered promiscuous mode [ 665.161142][T10613] chnl_net:caif_netlink_parms(): no params data found [ 665.201037][ T5893] rc_core: IR keymap rc-dib0700-rc5 not found [ 665.201059][ T5893] Registered IR keymap rc-empty [ 665.202084][ T5893] dvb-usb: could not initialize remote control. [ 665.202096][ T5893] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 665.563053][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.697275][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.573174][T10612] team0: Port device team_slave_0 added [ 668.642780][T10612] team0: Port device team_slave_1 added [ 668.891074][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.891202][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.891436][T10613] bridge_slave_0: entered allmulticast mode [ 668.905512][T10613] bridge_slave_0: entered promiscuous mode [ 669.012552][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.012721][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.012922][T10613] bridge_slave_1: entered allmulticast mode [ 669.020473][T10613] bridge_slave_1: entered promiscuous mode [ 669.119359][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.119378][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.119407][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.191331][ T5893] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 669.237010][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.237030][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.237062][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.366938][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 669.366991][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.367030][ T5893] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 669.367055][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.416348][ T37] usb 2-1: USB disconnect, device number 84 [ 669.451348][ T5893] usb 3-1: config 0 descriptor?? [ 669.522765][ T1361] bridge_slave_1: left allmulticast mode [ 669.522795][ T1361] bridge_slave_1: left promiscuous mode [ 669.523056][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.588524][ T37] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 669.626724][ T1361] bridge_slave_0: left allmulticast mode [ 669.626754][ T1361] bridge_slave_0: left promiscuous mode [ 669.627038][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.904007][ T5893] cp2112 0003:10C4:EA90.0002: item fetching failed at offset 5/7 [ 669.908305][ T5893] cp2112 0003:10C4:EA90.0002: parse failed [ 669.908485][ T5893] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -22 [ 670.171913][ T1361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.251919][ T1361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.315014][ T1361] bond0 (unregistering): Released all slaves [ 670.413430][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.449662][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.701972][T10613] team0: Port device team_slave_0 added [ 670.738540][T10612] hsr_slave_0: entered promiscuous mode [ 670.747858][T10612] hsr_slave_1: entered promiscuous mode [ 670.764379][T10613] team0: Port device team_slave_1 added [ 670.908517][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.908531][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.908552][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.565914][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.565933][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.565965][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.998945][ T816] usb 3-1: USB disconnect, device number 69 [ 674.781002][ T1361] hsr_slave_0: left promiscuous mode [ 675.070963][ T1361] hsr_slave_1: left promiscuous mode [ 675.072072][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.096792][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.604153][ T1361] team0 (unregistering): Port device team_slave_1 removed [ 676.684235][ T1361] team0 (unregistering): Port device team_slave_0 removed [ 678.444326][T10613] hsr_slave_0: entered promiscuous mode [ 678.447766][T10613] hsr_slave_1: entered promiscuous mode [ 678.451674][T10613] debugfs: 'hsr0' already exists in 'hsr' [ 678.451701][T10613] Cannot create hsr debugfs directory [ 679.571100][ T5990] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 679.796231][ T5990] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 679.796256][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.796271][ T5990] usb 4-1: Product: syz [ 679.796282][ T5990] usb 4-1: Manufacturer: syz [ 679.796293][ T5990] usb 4-1: SerialNumber: syz [ 679.888195][ T5990] usb 4-1: config 0 descriptor?? [ 679.901855][ T5990] hub 4-1:0.0: bad descriptor, ignoring hub [ 679.901893][ T5990] hub 4-1:0.0: probe with driver hub failed with error -5 [ 680.280146][ T5990] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 680.303404][ T5990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 680.306926][ T5990] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 680.306985][ T5990] usb 4-1: media controller created [ 680.407608][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.732898][ T5990] DVB: Unable to find symbol dib7000p_attach() [ 680.732917][ T5990] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 680.992502][ T5990] rc_core: IR keymap rc-dib0700-rc5 not found [ 680.992526][ T5990] Registered IR keymap rc-empty [ 680.993486][ T5990] dvb-usb: could not initialize remote control. [ 680.993498][ T5990] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 685.904685][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.904735][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.637287][ T37] usb 4-1: USB disconnect, device number 54 [ 686.807295][ T37] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 688.882411][T10874] kAFS: unable to lookup cell '' [ 689.957564][ T1361] bridge_slave_1: left allmulticast mode [ 689.957597][ T1361] bridge_slave_1: left promiscuous mode [ 689.957879][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.163108][ T1361] bridge_slave_0: left allmulticast mode [ 692.163137][ T1361] bridge_slave_0: left promiscuous mode [ 692.163395][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.305263][T10885] Bluetooth: MGMT ver 1.23 [ 692.602506][T10895] capability: warning: `syz.1.1050' uses 32-bit capabilities (legacy support in use) [ 694.653840][ T1361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.773303][ T1361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.855519][ T1361] bond0 (unregistering): Released all slaves [ 694.915448][ T5472] 8021q: adding VLAN 0 to HW filter on device eth17 [ 695.431205][ T1361] hsr_slave_0: left promiscuous mode [ 695.472566][ T1361] hsr_slave_1: left promiscuous mode [ 695.473589][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.542712][ T1361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.945091][ T1361] team0 (unregistering): Port device team_slave_1 removed [ 698.992524][ T1361] team0 (unregistering): Port device team_slave_0 removed [ 700.901014][ T5900] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 701.060919][ T5900] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.060951][ T5900] usb 3-1: config 0 has no interface number 0 [ 701.060997][ T5900] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 701.061027][ T5900] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 701.061072][ T5900] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 701.061098][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.070765][ T5900] usb 3-1: config 0 descriptor?? [ 701.154038][T10960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.273370][ T5900] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 702.177280][ T7537] usb 3-1: USB disconnect, device number 70 [ 710.690289][T10612] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 710.782844][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.826536][T10612] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 710.945370][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.949772][T10612] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 711.085160][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.170385][T10612] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 711.208061][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 714.381413][ T5820] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 714.575084][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 714.611000][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 714.638509][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 714.640472][ T5820] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 714.640509][ T5820] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 714.640553][ T5820] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.640584][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.698836][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 714.710720][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 715.071227][T11047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 715.094801][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 715.163223][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 715.177236][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 715.183979][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 715.196458][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 715.276965][ T5820] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 717.170515][ T5827] Bluetooth: hci1: command tx timeout [ 717.510932][ T5827] Bluetooth: hci2: command tx timeout [ 719.240966][ T5827] Bluetooth: hci1: command tx timeout [ 719.388041][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 719.455846][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 719.457814][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 719.460691][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 719.518164][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 719.561191][ T5818] Bluetooth: hci2: command tx timeout [ 719.827798][ T5820] usb 4-1: USB disconnect, device number 55 [ 720.163820][T11094] block nbd2: NBD_DISCONNECT [ 721.320958][ T5827] Bluetooth: hci1: command tx timeout [ 721.662531][ T5827] Bluetooth: hci2: command tx timeout [ 721.803227][ T5827] Bluetooth: hci5: command tx timeout [ 723.401019][ T5827] Bluetooth: hci1: command tx timeout [ 723.827417][ T5827] Bluetooth: hci2: command tx timeout [ 723.889553][ T5827] Bluetooth: hci5: command tx timeout [ 725.971034][ T5827] Bluetooth: hci5: command tx timeout [ 726.155380][T11128] fuse: Unknown parameter '/dev/snd/seq' [ 726.555820][T11052] chnl_net:caif_netlink_parms(): no params data found [ 727.977610][ T5893] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 728.041052][ T5827] Bluetooth: hci5: command tx timeout [ 728.490962][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 728.494094][ T5893] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.494114][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.499049][ T5893] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.499071][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.499086][ T5893] usb 4-1: Product: syz [ 728.499097][ T5893] usb 4-1: Manufacturer: syz [ 728.499108][ T5893] usb 4-1: SerialNumber: syz [ 728.510355][ T5893] usb 4-1: 0:2 : does not exist [ 728.716583][ T5893] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 728.820699][T11050] chnl_net:caif_netlink_parms(): no params data found [ 728.976375][ T5893] usb 4-1: USB disconnect, device number 56 [ 729.297915][T11017] udevd[11017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 729.840960][ T6269] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 729.993438][ T6269] usb 4-1: Using ep0 maxpacket: 16 [ 730.002656][ T6269] usb 4-1: config 0 has no interfaces? [ 730.019737][ T6269] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 730.019769][ T6269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.019792][ T6269] usb 4-1: Product: syz [ 730.019807][ T6269] usb 4-1: Manufacturer: syz [ 730.019838][ T6269] usb 4-1: SerialNumber: syz [ 730.090484][ T6269] usb 4-1: config 0 descriptor?? [ 730.425348][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.425745][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.425955][T11052] bridge_slave_0: entered allmulticast mode [ 730.432288][T11052] bridge_slave_0: entered promiscuous mode [ 730.520717][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.535007][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.535204][T11052] bridge_slave_1: entered allmulticast mode [ 730.546616][T11052] bridge_slave_1: entered promiscuous mode [ 730.762848][T11050] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.762973][T11050] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.763215][T11050] bridge_slave_0: entered allmulticast mode [ 730.778287][T11050] bridge_slave_0: entered promiscuous mode [ 730.876907][T11050] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.877052][T11050] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.877217][T11050] bridge_slave_1: entered allmulticast mode [ 730.896396][T11050] bridge_slave_1: entered promiscuous mode [ 730.940937][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.063728][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.304519][ T3526] bridge_slave_1: left allmulticast mode [ 731.304550][ T3526] bridge_slave_1: left promiscuous mode [ 731.304783][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.388279][ T3526] bridge_slave_0: left allmulticast mode [ 731.388311][ T3526] bridge_slave_0: left promiscuous mode [ 731.391324][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.742273][ T3526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.803554][ T3526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.864223][ T3526] bond0 (unregistering): Released all slaves [ 731.895233][T11050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.135162][T11050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.156112][T11052] team0: Port device team_slave_0 added [ 732.161829][ T5893] usb 4-1: USB disconnect, device number 57 [ 732.259522][T11052] team0: Port device team_slave_1 added [ 732.260272][T11083] chnl_net:caif_netlink_parms(): no params data found [ 732.333404][T11050] team0: Port device team_slave_0 added [ 732.462473][ T3526] hsr_slave_0: left promiscuous mode [ 732.482387][ T3526] hsr_slave_1: left promiscuous mode [ 732.483229][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.533562][ T3526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.073233][ T3526] team0 (unregistering): Port device team_slave_1 removed [ 733.121647][ T3526] team0 (unregistering): Port device team_slave_0 removed [ 733.623966][T11050] team0: Port device team_slave_1 added [ 733.627209][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.627222][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.627242][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.794269][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.794284][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.794306][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.175982][T11050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.175997][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.176018][T11050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.490669][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 735.159252][T11050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.159266][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.159286][T11050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.295351][T11052] hsr_slave_0: entered promiscuous mode [ 736.296340][T11052] hsr_slave_1: entered promiscuous mode [ 736.297695][T11083] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.297903][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.298093][T11083] bridge_slave_0: entered allmulticast mode [ 736.312898][T11083] bridge_slave_0: entered promiscuous mode [ 736.372505][T11083] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.372706][T11083] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.372915][T11083] bridge_slave_1: entered allmulticast mode [ 736.378931][T11083] bridge_slave_1: entered promiscuous mode [ 736.702933][T11050] hsr_slave_0: entered promiscuous mode [ 736.705918][T11050] hsr_slave_1: entered promiscuous mode [ 736.708823][T11050] debugfs: 'hsr0' already exists in 'hsr' [ 736.708849][T11050] Cannot create hsr debugfs directory [ 736.835557][T11083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.801020][T11083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.689822][T11083] team0: Port device team_slave_0 added [ 740.727123][T11083] team0: Port device team_slave_1 added [ 740.882427][ T37] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 741.933491][ T37] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 741.933522][ T37] usb 4-1: config 0 has no interface number 0 [ 741.933570][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 741.933601][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 741.933646][ T37] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 741.933672][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.005669][ T37] usb 4-1: config 0 descriptor?? [ 742.006745][T11264] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 742.010186][T11083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.010202][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.010234][T11083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.098236][ T37] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 742.152676][T11083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.152694][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.152724][T11083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.712915][T11083] hsr_slave_0: entered promiscuous mode [ 742.714463][T11083] hsr_slave_1: entered promiscuous mode [ 742.715408][T11083] debugfs: 'hsr0' already exists in 'hsr' [ 742.715433][T11083] Cannot create hsr debugfs directory [ 744.712279][ T816] usb 4-1: USB disconnect, device number 58 [ 744.922914][T11165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.466147][T11165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.500947][ T816] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 746.766933][ T816] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 746.766975][ T816] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 746.767019][ T816] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.767044][ T816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.801326][T11293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 746.825631][ T816] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.169146][T11165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.254539][ T37] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 747.338464][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.338623][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.519029][ T37] usb 3-1: config 0 has no interfaces? [ 747.533022][ T37] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 747.533284][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.533309][ T37] usb 3-1: Product: syz [ 747.533325][ T37] usb 3-1: Manufacturer: syz [ 747.533342][ T37] usb 3-1: SerialNumber: syz [ 747.594402][ T37] usb 3-1: config 0 descriptor?? [ 747.755605][ T816] usb 4-1: USB disconnect, device number 59 [ 747.896199][ T37] usb 3-1: USB disconnect, device number 71 [ 747.945399][T11165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.860946][ T37] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 748.861142][ T6043] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 749.021813][ T37] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 749.021841][ T37] usb 4-1: config 0 has no interface number 0 [ 749.021940][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 749.021968][ T37] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 749.022008][ T37] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 749.022031][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.023204][ T6043] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.023247][ T6043] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.023286][ T6043] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.023310][ T6043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.129013][ T37] usb 4-1: config 0 descriptor?? [ 749.140141][T11312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 749.157465][T11313] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 749.160734][ T37] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 749.192943][ T6043] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 749.796647][ T5893] usb 3-1: USB disconnect, device number 72 [ 751.671315][ T816] usb 4-1: USB disconnect, device number 60 [ 751.676235][T11165] bridge_slave_1: left allmulticast mode [ 751.676283][T11165] bridge_slave_1: left promiscuous mode [ 751.676525][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.937628][ T865] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 751.955628][T11165] bridge_slave_0: left allmulticast mode [ 751.955657][T11165] bridge_slave_0: left promiscuous mode [ 751.955903][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.461481][ T865] usb 3-1: Using ep0 maxpacket: 8 [ 752.564504][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.564651][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.564894][ T865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 752.565222][ T865] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 752.565311][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.738398][ T865] usb 3-1: config 0 descriptor?? [ 753.041123][T11165] bridge_slave_1: left allmulticast mode [ 753.041173][T11165] bridge_slave_1: left promiscuous mode [ 753.041479][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.102940][T11165] bridge_slave_0: left allmulticast mode [ 753.102966][T11165] bridge_slave_0: left promiscuous mode [ 753.103239][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.145186][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.145834][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.514133][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x4 [ 753.514178][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x6 [ 753.514208][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x5 [ 753.514236][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514264][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514293][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514320][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514348][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514386][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.514413][ T865] elecom 0003:056E:00FE.0003: unknown main item tag 0x0 [ 753.600699][ T865] elecom 0003:056E:00FE.0003: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.2-1/input0 [ 753.729535][ T816] usb 3-1: USB disconnect, device number 73 [ 758.051715][T11165] bond1 (unregistering): (slave gretap1): Releasing active interface [ 760.332407][T11165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.505394][T11165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.584088][T11165] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 760.623398][T11165] bond0 (unregistering): Released all slaves [ 760.653995][T11165] bond1 (unregistering): Released all slaves [ 761.172755][T11165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.525230][T11165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.643778][T11165] bond0 (unregistering): Released all slaves [ 762.787152][ T5472] 8021q: adding VLAN 0 to HW filter on device eth17 [ 764.608245][ T5472] 8021q: adding VLAN 0 to HW filter on device eth18 [ 765.051001][ T5820] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 765.227003][ T5820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.227081][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.227111][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.227159][ T5820] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 765.227185][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.297674][ T5820] usb 4-1: config 0 descriptor?? [ 765.780442][ T5820] hid-rmi 0003:0461:4E72.0004: bogus close delimiter [ 765.780466][ T5820] hid-rmi 0003:0461:4E72.0004: item 0 2 2 10 parsing failed [ 765.795912][ T5820] hid-rmi 0003:0461:4E72.0004: parse failed [ 765.796005][ T5820] hid-rmi 0003:0461:4E72.0004: probe with driver hid-rmi failed with error -22 [ 765.882118][T11052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 765.926762][T11052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.020653][T11052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 766.029942][ T6269] usb 4-1: USB disconnect, device number 61 [ 766.274479][T11052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.609855][T11052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 768.679304][T11052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.925602][T11052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 770.052165][T11052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.161004][T11165] hsr_slave_0: left promiscuous mode [ 772.181359][T11165] hsr_slave_1: left promiscuous mode [ 772.182531][T11165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.182559][T11165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.215099][T11165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.215147][T11165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.580009][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.642937][T11165] hsr_slave_0: left promiscuous mode [ 772.648467][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.745521][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.843836][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.903676][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 773.766762][T11165] hsr_slave_1: left promiscuous mode [ 773.767814][T11165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.844146][T11165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.789281][T11165] veth1_macvtap: left promiscuous mode [ 776.789365][T11165] veth0_macvtap: left promiscuous mode [ 776.789584][T11165] veth1_vlan: left promiscuous mode [ 776.789725][T11165] veth0_vlan: left promiscuous mode [ 776.807887][ T5827] Bluetooth: hci3: command tx timeout [ 777.392906][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 777.437744][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 777.450178][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 777.452657][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 777.454511][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 778.660683][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.761536][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 778.824577][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.829141][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 778.841414][T10056] Bluetooth: hci3: command tx timeout [ 778.867749][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 779.341534][T11165] team0 (unregistering): Port device team_slave_1 removed [ 779.401665][T11165] team0 (unregistering): Port device team_slave_0 removed [ 779.735257][ T5827] Bluetooth: hci6: command tx timeout [ 780.031768][T11165] team0 (unregistering): Port device team_slave_1 removed [ 780.093015][T11165] team0 (unregistering): Port device team_slave_0 removed [ 780.383072][T11516] warning: `syz.2.1179' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 780.932569][ T5827] Bluetooth: hci3: command tx timeout [ 781.081010][ T5827] Bluetooth: hci7: command tx timeout [ 781.848278][ T5827] Bluetooth: hci6: command tx timeout [ 783.057015][ T5827] Bluetooth: hci3: command tx timeout [ 783.171392][ T5827] Bluetooth: hci7: command tx timeout [ 784.166742][ T5827] Bluetooth: hci6: command tx timeout [ 785.744572][ T5827] Bluetooth: hci7: command tx timeout [ 786.265587][ T5827] Bluetooth: hci6: command tx timeout [ 786.723603][T11564] sctp: [Deprecated]: syz.3.1189 (pid 11564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 786.723603][T11564] Use struct sctp_sack_info instead [ 788.125262][ T5827] Bluetooth: hci7: command tx timeout [ 790.839639][ T5472] 8021q: adding VLAN 0 to HW filter on device eth19 [ 793.597762][T11596] sctp: [Deprecated]: syz.2.1197 (pid 11596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 793.597762][T11596] Use struct sctp_sack_info instead [ 797.703688][T11499] chnl_net:caif_netlink_parms(): no params data found [ 799.547051][ T5900] hid_parser_main: 40 callbacks suppressed [ 799.547076][ T5900] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 799.603163][ T5900] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 799.890131][ T5472] 8021q: adding VLAN 0 to HW filter on device eth20 [ 799.985657][T11483] chnl_net:caif_netlink_parms(): no params data found [ 800.071780][T11508] chnl_net:caif_netlink_parms(): no params data found [ 800.773840][T11656] sctp: [Deprecated]: syz.2.1206 (pid 11656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.773840][T11656] Use struct sctp_sack_info instead [ 801.391981][T11499] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.392206][T11499] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.392422][T11499] bridge_slave_0: entered allmulticast mode [ 801.687963][T11499] bridge_slave_0: entered promiscuous mode [ 804.081140][T11499] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.081301][T11499] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.081605][T11499] bridge_slave_1: entered allmulticast mode [ 804.087661][T11499] bridge_slave_1: entered promiscuous mode [ 804.324991][T11483] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.325132][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.325343][T11483] bridge_slave_0: entered allmulticast mode [ 804.361159][T11483] bridge_slave_0: entered promiscuous mode [ 804.462535][T11499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.464345][T11483] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.464445][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.464654][T11483] bridge_slave_1: entered allmulticast mode [ 804.468618][T11483] bridge_slave_1: entered promiscuous mode [ 804.515904][T11508] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.516015][T11508] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.516232][T11508] bridge_slave_0: entered allmulticast mode [ 804.523370][T11508] bridge_slave_0: entered promiscuous mode [ 804.555888][T11499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.597732][T11508] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.597846][T11508] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.598071][T11508] bridge_slave_1: entered allmulticast mode [ 804.615664][T11508] bridge_slave_1: entered promiscuous mode [ 804.697237][T11674] input: syz0 as /devices/virtual/input/input38 [ 804.786722][T11483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.888196][T11499] team0: Port device team_slave_0 added [ 804.903705][T11483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.964140][T11508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.999041][T11499] team0: Port device team_slave_1 added [ 805.040600][T11508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.206515][T11483] team0: Port device team_slave_0 added [ 805.603135][T11499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.603153][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.603182][T11499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.759826][T11483] team0: Port device team_slave_1 added [ 805.769338][T11508] team0: Port device team_slave_0 added [ 805.770616][T11499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.770632][T11499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.770663][T11499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.833058][T11508] team0: Port device team_slave_1 added [ 805.896058][T11483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.896075][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.896097][T11483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.962178][T11483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.962196][T11483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.962226][T11483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.092491][T11508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.092510][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.092541][T11508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.236978][T11508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.236997][T11508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.237027][T11508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.316862][T11499] hsr_slave_0: entered promiscuous mode [ 806.318238][T11499] hsr_slave_1: entered promiscuous mode [ 806.319198][T11499] debugfs: 'hsr0' already exists in 'hsr' [ 806.319240][T11499] Cannot create hsr debugfs directory [ 806.610043][T11483] hsr_slave_0: entered promiscuous mode [ 806.621385][T11483] hsr_slave_1: entered promiscuous mode [ 806.624315][T11483] debugfs: 'hsr0' already exists in 'hsr' [ 806.624368][T11483] Cannot create hsr debugfs directory [ 806.839362][T11508] hsr_slave_0: entered promiscuous mode [ 806.842640][T11508] hsr_slave_1: entered promiscuous mode [ 806.856946][T11508] debugfs: 'hsr0' already exists in 'hsr' [ 806.856973][T11508] Cannot create hsr debugfs directory [ 806.920882][ T5827] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 808.772314][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.772386][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.936381][T11780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1223'. [ 835.327997][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.392282][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.398010][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.425355][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.428929][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 837.406515][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 837.456762][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 837.460522][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 837.514509][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 837.516979][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 838.785231][ T5827] Bluetooth: hci1: command tx timeout [ 839.015344][ T31] IPVS: starting estimator thread 0... [ 839.383168][T11854] IPVS: using max 7 ests per chain, 16800 per kthread [ 839.980578][ T5827] Bluetooth: hci2: command tx timeout [ 841.116668][ T5827] Bluetooth: hci1: command tx timeout [ 842.326865][T10056] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.368034][ T5818] Bluetooth: hci2: command tx timeout [ 842.379717][T10056] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.731379][T10056] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.736391][T10056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.758142][T10056] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.176774][ T5827] Bluetooth: hci1: command tx timeout [ 845.325558][T10056] Bluetooth: hci5: command tx timeout [ 845.326902][ T5827] Bluetooth: hci2: command tx timeout [ 846.307244][ T5827] Bluetooth: hci1: command tx timeout [ 847.401092][ T5827] Bluetooth: hci2: command tx timeout [ 847.401125][ T5827] Bluetooth: hci5: command tx timeout [ 849.540872][ T5818] Bluetooth: hci5: command tx timeout [ 850.466131][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'. [ 851.680663][ T5818] Bluetooth: hci5: command tx timeout [ 864.373957][T11927] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 868.401164][T11840] chnl_net:caif_netlink_parms(): no params data found [ 870.327040][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.341498][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.852825][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.853120][T11840] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.853382][T11840] bridge_slave_0: entered allmulticast mode [ 873.893247][T11840] bridge_slave_0: entered promiscuous mode [ 874.578015][T11840] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.578143][T11840] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.578460][T11840] bridge_slave_1: entered allmulticast mode [ 874.612543][T11840] bridge_slave_1: entered promiscuous mode [ 878.019899][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.055510][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.128281][T11840] team0: Port device team_slave_0 added [ 880.128646][T11859] chnl_net:caif_netlink_parms(): no params data found [ 880.436404][T11848] chnl_net:caif_netlink_parms(): no params data found [ 880.479028][T11840] team0: Port device team_slave_1 added [ 882.803101][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.803119][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.803150][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.324324][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.324341][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.324365][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.152427][T11859] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.152545][T11859] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.152758][T11859] bridge_slave_0: entered allmulticast mode [ 886.159004][T11859] bridge_slave_0: entered promiscuous mode [ 886.173290][T11848] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.173401][T11848] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.173598][T11848] bridge_slave_0: entered allmulticast mode [ 886.190345][T11848] bridge_slave_0: entered promiscuous mode [ 888.305716][T11859] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.305850][T11859] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.306169][T11859] bridge_slave_1: entered allmulticast mode [ 888.339037][T11859] bridge_slave_1: entered promiscuous mode [ 888.350997][T11848] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.351125][T11848] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.351328][T11848] bridge_slave_1: entered allmulticast mode [ 888.360183][T11848] bridge_slave_1: entered promiscuous mode [ 888.514414][T11840] hsr_slave_0: entered promiscuous mode [ 888.518968][T11840] hsr_slave_1: entered promiscuous mode [ 888.629518][T11840] debugfs: 'hsr0' already exists in 'hsr' [ 888.629550][T11840] Cannot create hsr debugfs directory [ 889.999287][T11859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.436454][T11848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.087630][T11859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.115348][T11848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.679525][T11859] team0: Port device team_slave_0 added [ 892.778117][T11848] team0: Port device team_slave_0 added [ 893.020226][T11859] team0: Port device team_slave_1 added [ 893.192941][T11848] team0: Port device team_slave_1 added [ 894.028768][T11859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.028787][T11859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.028816][T11859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.144067][T11848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 894.144083][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.144105][T11848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 894.153827][T11859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.153916][T11859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.154000][T11859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.762170][T11848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 894.762190][T11848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.762222][T11848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.781671][T11859] hsr_slave_0: entered promiscuous mode [ 895.808295][T11859] hsr_slave_1: entered promiscuous mode [ 895.831290][T11859] debugfs: 'hsr0' already exists in 'hsr' [ 895.831322][T11859] Cannot create hsr debugfs directory [ 896.031275][T11848] hsr_slave_0: entered promiscuous mode [ 896.041535][T11848] hsr_slave_1: entered promiscuous mode [ 896.051083][T11848] debugfs: 'hsr0' already exists in 'hsr' [ 896.051114][T11848] Cannot create hsr debugfs directory [ 897.126893][T10056] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 897.246791][T10056] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 897.248987][T10056] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 897.265706][T10056] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 897.315175][T10056] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 897.967884][T10056] Bluetooth: hci3: command 0x0406 tx timeout [ 898.934811][T10056] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 899.007058][T10056] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 899.083459][T10056] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 899.131955][T10056] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 899.136210][T10056] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 899.561328][T10056] Bluetooth: hci6: command tx timeout [ 901.646884][T10056] Bluetooth: hci6: command tx timeout [ 902.009845][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.071503][ T5827] Bluetooth: hci8: command tx timeout [ 902.107849][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.119047][T12080] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.129429][T12080] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.169692][T12080] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.634772][T10056] Bluetooth: hci7: command 0x0406 tx timeout [ 903.896579][T10056] Bluetooth: hci6: command tx timeout [ 904.159738][T10056] Bluetooth: hci8: command tx timeout [ 904.290890][T10056] Bluetooth: hci1: command tx timeout [ 905.961069][ T5818] Bluetooth: hci6: command tx timeout [ 906.223278][T10056] Bluetooth: hci8: command tx timeout [ 906.371006][T10056] Bluetooth: hci1: command tx timeout [ 906.704666][T10056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 906.749207][T10056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 906.821140][T10056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 906.823047][T10056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 906.823871][T10056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 907.992485][ T5472] 8021q: adding VLAN 0 to HW filter on device eth21 [ 908.014424][T12093] syzkaller1: entered promiscuous mode [ 908.014454][T12093] syzkaller1: entered allmulticast mode [ 908.280882][ T5818] Bluetooth: hci8: command tx timeout [ 908.459369][ T5818] Bluetooth: hci1: command tx timeout [ 909.205840][ T5818] Bluetooth: hci2: command tx timeout [ 910.520953][ T5818] Bluetooth: hci1: command tx timeout [ 911.240877][ T5818] Bluetooth: hci2: command tx timeout [ 913.320945][ T5818] Bluetooth: hci2: command tx timeout [ 915.401034][ T5818] Bluetooth: hci2: command tx timeout [ 922.428835][T10056] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 922.497335][T10056] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 922.513697][T10056] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 922.519064][T10056] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 922.529472][T10056] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 922.729347][T12055] chnl_net:caif_netlink_parms(): no params data found [ 923.718233][T12062] chnl_net:caif_netlink_parms(): no params data found [ 924.461347][T12078] chnl_net:caif_netlink_parms(): no params data found [ 924.600951][ T5818] Bluetooth: hci4: command tx timeout [ 925.458313][ T5472] 8021q: adding VLAN 0 to HW filter on device eth22 [ 927.433555][T12097] chnl_net:caif_netlink_parms(): no params data found [ 927.687334][ T5818] Bluetooth: hci4: command tx timeout [ 929.796195][ T5818] Bluetooth: hci4: command tx timeout [ 930.192541][T12055] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.192729][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.192978][T12055] bridge_slave_0: entered allmulticast mode [ 930.222693][T12055] bridge_slave_0: entered promiscuous mode [ 930.227912][T12062] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.228024][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.228232][T12062] bridge_slave_0: entered allmulticast mode [ 930.264498][T12062] bridge_slave_0: entered promiscuous mode [ 930.513043][T12055] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.514689][T12055] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.515001][T12055] bridge_slave_1: entered allmulticast mode [ 930.517850][T12055] bridge_slave_1: entered promiscuous mode [ 930.550927][T12062] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.551053][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.551312][T12062] bridge_slave_1: entered allmulticast mode [ 930.608655][T12062] bridge_slave_1: entered promiscuous mode [ 931.154596][T11840] syz-executor (11840) used greatest stack depth: 16704 bytes left [ 931.427102][T12078] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.427222][T12078] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.427476][T12078] bridge_slave_0: entered allmulticast mode [ 931.457071][T12078] bridge_slave_0: entered promiscuous mode [ 931.656728][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.656803][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.800910][ T5818] Bluetooth: hci4: command tx timeout [ 932.379536][T12078] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.379698][T12078] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.380641][T12078] bridge_slave_1: entered allmulticast mode [ 932.566006][T12078] bridge_slave_1: entered promiscuous mode [ 933.896154][T12055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.096293][T12062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.545094][T12055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.165964][T12062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.708531][T12097] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.708663][T12097] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.708919][T12097] bridge_slave_0: entered allmulticast mode [ 945.743989][T12097] bridge_slave_0: entered promiscuous mode [ 945.943256][T12078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.947039][T12097] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.947167][T12097] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.947396][T12097] bridge_slave_1: entered allmulticast mode [ 945.949803][T12097] bridge_slave_1: entered promiscuous mode [ 946.708204][T12078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.870100][T12055] team0: Port device team_slave_0 added [ 946.895453][T12062] team0: Port device team_slave_0 added [ 949.892706][T12055] team0: Port device team_slave_1 added [ 949.946127][T12062] team0: Port device team_slave_1 added [ 950.768407][T12097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.227445][T12078] team0: Port device team_slave_0 added [ 951.249155][T12097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.465677][T12078] team0: Port device team_slave_1 added [ 951.574134][T12055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.574153][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.574185][T12055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.649977][T12062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.649997][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.650029][T12062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.946349][T12055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.946368][T12055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.946395][T12055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.105636][T12062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.105655][T12062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.105687][T12062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.053856][T12097] team0: Port device team_slave_0 added [ 953.675751][T12078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.675771][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.675802][T12078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.168734][T12097] team0: Port device team_slave_1 added [ 954.197295][T12078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.197313][T12078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.197342][T12078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.319703][T12097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.319722][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.319749][T12097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.787926][T12097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.787947][T12097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.787978][T12097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.264030][T12078] hsr_slave_0: entered promiscuous mode [ 960.297999][T10056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 960.346478][T10056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 960.361220][T10056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 960.363026][T10056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 960.366470][T10056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 960.400085][T12078] hsr_slave_1: entered promiscuous mode [ 960.511482][T12078] debugfs: 'hsr0' already exists in 'hsr' [ 960.511513][T12078] Cannot create hsr debugfs directory [ 960.587978][T12124] chnl_net:caif_netlink_parms(): no params data found [ 961.187215][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 961.224175][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 961.228357][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 961.250359][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 961.252935][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 961.886716][T12097] hsr_slave_0: entered promiscuous mode [ 961.891462][T12097] hsr_slave_1: entered promiscuous mode [ 961.892539][T12097] debugfs: 'hsr0' already exists in 'hsr' [ 961.892564][T12097] Cannot create hsr debugfs directory [ 962.616946][T12080] Bluetooth: hci0: command tx timeout [ 963.096792][ T5818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 963.151273][ T5818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 963.181063][ T5818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 963.220912][ T5818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 963.298332][ T5818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 963.481546][ T5818] Bluetooth: hci5: command tx timeout [ 964.680980][ T5818] Bluetooth: hci0: command tx timeout [ 965.481184][ T5818] Bluetooth: hci6: command tx timeout [ 965.561241][ T5818] Bluetooth: hci5: command tx timeout [ 966.773534][T12080] Bluetooth: hci0: command tx timeout [ 967.560817][T12080] Bluetooth: hci6: command tx timeout [ 967.641297][T12080] Bluetooth: hci5: command tx timeout [ 968.079432][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.134977][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.138225][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.139315][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.174522][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 968.852017][T12080] Bluetooth: hci0: command tx timeout [ 969.656330][T12080] Bluetooth: hci6: command tx timeout [ 969.731578][T12080] Bluetooth: hci5: command tx timeout [ 970.281293][T12080] Bluetooth: hci1: command tx timeout [ 971.645386][T12124] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.645531][T12124] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.651983][T12124] bridge_slave_0: entered allmulticast mode [ 971.677744][T12124] bridge_slave_0: entered promiscuous mode [ 971.732728][T12080] Bluetooth: hci6: command tx timeout [ 972.028853][T12124] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.028987][T12124] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.029311][T12124] bridge_slave_1: entered allmulticast mode [ 972.066622][T12124] bridge_slave_1: entered promiscuous mode [ 972.360943][T12080] Bluetooth: hci1: command tx timeout [ 974.441537][T12080] Bluetooth: hci1: command tx timeout [ 974.570984][ T39] INFO: task syz-executor:11508 blocked for more than 143 seconds. [ 974.571034][ T39] Tainted: G L syzkaller #0 [ 974.571048][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 974.571059][ T39] task:syz-executor state:D stack:22184 pid:11508 tgid:11508 ppid:1 task_flags:0x400140 flags:0x00080002 [ 974.571143][ T39] Call Trace: [ 974.571152][ T39] [ 974.571167][ T39] __schedule+0x1681/0x54c0 [ 974.571391][ T39] ? __pfx___schedule+0x10/0x10 [ 974.571448][ T39] rt_mutex_schedule+0x76/0xf0 [ 974.571574][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 974.571659][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 974.571687][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 974.571711][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 974.571747][ T39] ? del_device_store+0xd7/0x370 [ 974.571841][ T39] ? del_device_store+0xd7/0x370 [ 974.571877][ T39] ? del_device_store+0xd7/0x370 [ 974.571904][ T39] mutex_lock_nested+0x168/0x1d0 [ 974.571948][ T39] del_device_store+0xd7/0x370 [ 974.571975][ T39] ? sysfs_file_kobj+0x1a/0x230 [ 974.572076][ T39] ? __pfx_del_device_store+0x10/0x10 [ 974.572106][ T39] ? sysfs_file_kobj+0x1e4/0x230 [ 974.572133][ T39] ? sysfs_kf_write+0x166/0x260 [ 974.572164][ T39] ? __pfx_sysfs_kf_write+0x10/0x10 [ 974.572189][ T39] kernfs_fop_write_iter+0x3b0/0x540 [ 974.572222][ T39] vfs_write+0x629/0xba0 [ 974.573881][ T39] ? __pfx_vfs_write+0x10/0x10 [ 974.573922][ T39] ? do_sys_openat2+0x14c/0x200 [ 974.573949][ T39] ? kmem_cache_free+0x187/0x6c0 [ 974.574026][ T39] ksys_write+0x156/0x270 [ 974.574064][ T39] ? __pfx_ksys_write+0x10/0x10 [ 974.574107][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.574157][ T39] do_syscall_64+0x15f/0xf80 [ 974.574230][ T39] ? clear_bhb_loop+0x40/0x90 [ 974.574258][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.574287][ T39] RIP: 0033:0x7f5055edd04e [ 974.574312][ T39] RSP: 002b:00007ffea4245c48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 974.574336][ T39] RAX: ffffffffffffffda RBX: 00005555911f6500 RCX: 00007f5055edd04e [ 974.574353][ T39] RDX: 0000000000000001 RSI: 00007ffea4245cd0 RDI: 0000000000000005 [ 974.574367][ T39] RBP: 00007f5055fb3514 R08: 0000000000000000 R09: 0000000000000000 [ 974.574381][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.574395][ T39] R13: 00007ffea4245cd0 R14: 00007f5056cc4620 R15: 0000000000000003 [ 974.574435][ T39] [ 974.574493][ T39] [ 974.574493][ T39] Showing all locks held in the system: [ 974.574504][ T39] 5 locks held by ksoftirqd/0/15: [ 974.574518][ T39] 4 locks held by rcuc/0/20: [ 974.574532][ T39] 1 lock held by khungtaskd/39: [ 974.574558][ T39] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 974.574635][ T39] 3 locks held by kworker/u8:7/155: [ 974.574647][ T39] #0: ffff8880329cc138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 974.574768][ T39] #1: ffffc900039a7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 974.574832][ T39] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 974.574945][ T39] 3 locks held by kworker/u8:10/1306: [ 974.574957][ T39] #0: ffff88801a08c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 974.575020][ T39] #1: ffffc9000659fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 974.575082][ T39] #2: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 974.575199][ T39] 6 locks held by kworker/u8:11/1361: [ 974.575224][ T39] 2 locks held by dhcpcd/5472: [ 974.575237][ T39] #0: ffff8880350ee928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xe10 [ 974.576910][ T39] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 974.576978][ T39] 2 locks held by getty/5568: [ 974.576991][ T39] #0: ffff88803772d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 974.577125][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 974.577187][ T39] 5 locks held by kworker/u8:2/8919: [ 974.577203][ T39] 6 locks held by kworker/u8:6/11165: [ 974.577217][ T39] #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 974.577284][ T39] #1: ffffc90003d67c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 974.577350][ T39] #2: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 974.577460][ T39] #3: ffff88804e512160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 974.577577][ T39] #4: ffff8880351d0310 (&devlink->lock_key#17){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 974.577643][ T39] #5: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.577745][ T39] 5 locks held by syz-executor/11483: [ 974.577758][ T39] #0: ffff8880380ea480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 974.577830][ T39] #1: ffff88806479c478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 974.577887][ T39] #2: ffff8880294ef698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 974.577948][ T39] #3: ffffffff8ebcf1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 974.578010][ T39] #4: ffff88804e512160 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x900 [ 974.578137][ T39] 4 locks held by syz-executor/11508: [ 974.578151][ T39] #0: ffff8880380ea480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 974.578222][ T39] #1: ffff8880398a9078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 974.578276][ T39] #2: ffff8880294ef698 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 974.578337][ T39] #3: ffffffff8ebcf1f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 974.866181][ T39] 1 lock held by syz.3.1277/12035: [ 974.866200][ T39] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.866268][ T39] 1 lock held by syz-executor/12055: [ 974.866298][ T39] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.866364][ T39] 1 lock held by syz-executor/12062: [ 974.866377][ T39] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.866442][ T39] 1 lock held by syz-executor/12078: [ 974.866461][ T39] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.866538][ T39] 1 lock held by syz.2.1285/12092: [ 974.866550][ T39] #0: ffffffff8dfce270 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 974.866610][ T39] 1 lock held by syz-executor/12097: [ 974.866622][ T39] #0: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 974.866767][ T39] 3 locks held by syz-executor/12124: [ 974.866784][ T39] 2 locks held by syz-executor/12197: [ 974.866796][ T39] #0: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 974.866857][ T39] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 974.866977][ T39] 2 locks held by syz-executor/12204: [ 974.866989][ T39] #0: ffffffff8f359180 (pernet_ops_rwsem){[ 974.866989][ T39] #0: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 974.867048][ T39] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 974.867110][ T39] 2 locks held by syz-executor/12208: [ 974.867123][ T39] #0: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 974.867184][ T39] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840 [ 974.867267][ T39] 2 locks held by syz-executor/12211: [ 974.867281][ T39] #0: ffffffff8f359180 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 974.867347][ T39] #1: ffffffff8f367a78 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 974.867440][ T39] [ 974.867446][ T39] ============================================= [ 974.867446][ T39] [ 974.867473][ T39] NMI backtrace for cpu 0 [ 974.867506][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.867537][ T39] Tainted: [L]=SOFTLOCKUP [ 974.867545][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 974.867559][ T39] Call Trace: [ 974.867568][ T39] [ 974.867578][ T39] dump_stack_lvl+0xe8/0x150 [ 974.867631][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 974.867714][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 974.867799][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 974.867839][ T39] sys_info+0x135/0x170 [ 974.867870][ T39] watchdog+0xfd3/0x1030 [ 974.867944][ T39] ? watchdog+0x1c9/0x1030 [ 974.867972][ T39] kthread+0x388/0x470 [ 974.868022][ T39] ? __pfx_watchdog+0x10/0x10 [ 974.868041][ T39] ? __pfx_kthread+0x10/0x10 [ 974.868069][ T39] ret_from_fork+0x514/0xb70 [ 974.868157][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 974.868193][ T39] ? __switch_to+0xc79/0x1410 [ 974.868265][ T39] ? __pfx_kthread+0x10/0x10 [ 974.868292][ T39] ret_from_fork_asm+0x1a/0x30 [ 974.868334][ T39] [ 974.868363][ T39] Sending NMI from CPU 0 to CPUs 1: [ 974.868395][ C1] NMI backtrace for cpu 1 [ 974.868413][ C1] CPU: 1 UID: 0 PID: 8919 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 974.868439][ C1] Tainted: [L]=SOFTLOCKUP [ 974.868445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 974.868458][ C1] Workqueue: bat_events batadv_tt_purge [ 974.868523][ C1] RIP: 0010:__kernel_text_address+0x29/0x30 [ 974.868549][ C1] Code: 90 0f 1f 40 d6 53 48 89 fb e8 33 00 00 00 48 81 fb 00 60 e6 90 0f 93 c1 48 81 fb 20 36 fe 90 0f 92 c2 20 ca 08 c2 0f b6 c2 5b cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 974.868566][ C1] RSP: 0018:ffffc90003f46960 EFLAGS: 00000202 [ 974.868581][ C1] RAX: 0000000000000001 RBX: ffffc90003f469d0 RCX: 0000000000000000 [ 974.868594][ C1] RDX: 0000000000000001 RSI: ffffffff8d891dd8 RDI: ffffffff822b0abe [ 974.868607][ C1] RBP: ffffc90003f46a10 R08: ffffc90003f46ab0 R09: 0000000000000000 [ 974.868620][ C1] R10: ffffc90003f469d8 R11: fffff520007e8d3d R12: ffff888028e5bd80 [ 974.868633][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920007e8d3a [ 974.868651][ C1] FS: 0000000000000000(0000) GS:ffff888126209000(0000) knlGS:0000000000000000 [ 974.868666][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.868678][ C1] CR2: 0000557589495068 CR3: 000000000ddb6000 CR4: 00000000003526f0 [ 974.868694][ C1] Call Trace: [ 974.868701][ C1] [ 974.868707][ C1] unwind_get_return_address+0x4d/0x90 [ 974.868749][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.868794][ C1] arch_stack_walk+0xfb/0x150 [ 974.868842][ C1] ? kasan_save_track+0x3e/0x80 [ 974.868893][ C1] stack_trace_save+0xa9/0x100 [ 974.868911][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 974.868935][ C1] kasan_save_track+0x3e/0x80 [ 974.868991][ C1] kasan_save_free_info+0x46/0x50 [ 974.869036][ C1] __kasan_slab_free+0x5c/0x80 [ 974.869062][ C1] kfree+0x1c5/0x6c0 [ 974.869110][ C1] ? skb_release_data+0x828/0xa60 [ 974.869154][ C1] skb_release_data+0x828/0xa60 [ 974.869178][ C1] __kfree_skb+0x5d/0x210 [ 974.869196][ C1] nft_synproxy_eval_v4+0x352/0x4e0 [ 974.869254][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 974.869277][ C1] ? nf_ip_checksum+0x13c/0x510 [ 974.869343][ C1] nft_synproxy_do_eval+0x305/0x580 [ 974.869365][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 974.869424][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 974.869444][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 974.869475][ C1] nft_do_chain+0x467/0x19f0 [ 974.869531][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 974.869566][ C1] ? finish_task_switch+0x41f/0xbe0 [ 974.869592][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 974.869617][ C1] nft_do_chain_inet+0x360/0x4b0 [ 974.869663][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 974.869690][ C1] ? NF_HOOK+0x9e/0x3c0 [ 974.869755][ C1] ? NF_HOOK+0x9e/0x3c0 [ 974.869777][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 974.869800][ C1] nf_hook_slow+0xc5/0x220 [ 974.869822][ C1] NF_HOOK+0x21f/0x3c0 [ 974.869844][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 974.869867][ C1] ? NF_HOOK+0x9e/0x3c0 [ 974.869887][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 974.869907][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 974.869932][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 974.869958][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 974.869992][ C1] NF_HOOK+0x336/0x3c0 [ 974.870010][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 974.870051][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 974.870072][ C1] ? NF_HOOK+0x9e/0x3c0 [ 974.870092][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 974.870113][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 974.870153][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 974.870192][ C1] ? process_backlog+0x271/0xc60 [ 974.870250][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 974.870272][ C1] process_backlog+0x569/0xc60 [ 974.870309][ C1] __napi_poll+0xab/0x550 [ 974.870334][ C1] net_rx_action+0x696/0xe00 [ 974.870370][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 974.870395][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 974.870422][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 974.870473][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 974.870501][ C1] handle_softirqs+0x1de/0x6d0 [ 974.870575][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 974.870605][ C1] ? batadv_tt_purge+0x97/0xa10 [ 974.870621][ C1] batadv_tt_purge+0x475/0xa10 [ 974.870641][ C1] ? batadv_tt_purge+0x97/0xa10 [ 974.870658][ C1] ? process_scheduled_works+0xa70/0x1860 [ 974.870694][ C1] process_scheduled_works+0xb5d/0x1860 [ 974.870744][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 974.870777][ C1] ? assign_work+0x3d5/0x5e0 [ 974.870807][ C1] worker_thread+0xa53/0xfc0 [ 974.870839][ C1] kthread+0x388/0x470 [ 974.870861][ C1] ? __pfx_worker_thread+0x10/0x10 [ 974.870876][ C1] ? __pfx_kthread+0x10/0x10 [ 974.870898][ C1] ret_from_fork+0x514/0xb70 [ 974.870928][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 974.870956][ C1] ? __switch_to+0xc79/0x1410 [ 974.870982][ C1] ? __pfx_kthread+0x10/0x10 [ 974.871004][ C1] ret_from_fork_asm+0x1a/0x30 [ 974.871033][ C1] [ 975.312665][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 975.312737][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 975.312813][ T39] Tainted: [L]=SOFTLOCKUP [ 975.312835][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 975.312875][ T39] Call Trace: [ 975.312896][ T39] [ 975.312923][ T39] vpanic+0x56c/0xa60 [ 975.312996][ T39] ? __pfx___schedule+0x10/0x10 [ 975.313065][ T39] ? __pfx_vpanic+0x10/0x10 [ 975.313149][ T39] panic+0xc5/0xd0 [ 975.313204][ T39] ? __pfx_panic+0x10/0x10 [ 975.313263][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 975.313325][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 975.313428][ T39] watchdog+0x102c/0x1030 [ 975.313505][ T39] ? watchdog+0x1c9/0x1030 [ 975.313590][ T39] kthread+0x388/0x470 [ 975.313669][ T39] ? __pfx_watchdog+0x10/0x10 [ 975.313733][ T39] ? __pfx_kthread+0x10/0x10 [ 975.313805][ T39] ret_from_fork+0x514/0xb70 [ 975.313917][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 975.314007][ T39] ? __switch_to+0xc79/0x1410 [ 975.314088][ T39] ? __pfx_kthread+0x10/0x10 [ 975.314158][ T39] ret_from_fork_asm+0x1a/0x30 [ 975.314258][ T39] [ 975.314863][ T39] Kernel Offset: disabled