last executing test programs: 17m58.551377033s ago: executing program 32 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) get_mempolicy(0x0, 0x0, 0x535a, &(0x7f0000396000/0x8000)=nil, 0xb) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, &(0x7f0000000500)=""/198, 0xc6) mknodat$loop(r3, 0x0, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0x0) 14m1.254925113s ago: executing program 2 (id=349): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303000000083ec4c0d6e84de0249d09f31ef580c3d000000000000000000"], 0x1, 0x191, &(0x7f00000002c0)="$eJzs3c+qElEcB/Cff5qkletoMdCmlVRPYIWCNBAULmpVYG00gtxMrXyL3qBX6XXClTsv3hHlyly4F64O1/l8Nn7xq5xzZjFnNWc+P/k+nfyYf/v77090Oo1o96Mfq0Z0oxmtKCwCADgnq/U6/q8LN/j56xNMCQA4slvu/wDAGbD/A0D92P8BoH4+fPz09lWWDd6naSdiucjH+bj4LPrhKBs8Ty919/9a5vm4tetfFH16tX8Qj7b9y9I+iWdPi37TvXmXHfQPY1I24X7jzq8BAAAAAAAAAAAAAAAAAAAAAACcWi/dKT3fp9dLrumLNBwl2+8Oz/dpx+N2yYDJUZYBAAAAAAAAAAAAAAAAAAAA99r81+/pl9ns609BEIRdqPrOBAAAAAAAAAAAAAAAAAAA9bN/6LfqmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAdfbv/z9e2IzTrHqhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU2kUAAAD//1z+TP8=") syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000500)='./bus\x00', 0x2925409, 0x0, 0x40, 0x0, &(0x7f0000000500)) rename(0x0, &(0x7f0000000a00)='./bus/file0\x00') ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./bus/file0\x00', 0x200000, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0x38c2c5bc}}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840c0}, 0x4000c0c0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x149) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='3', 0x1, 0x4fed0) fallocate(r2, 0x10, 0xffff, 0x8001) writev(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) 13m57.479911851s ago: executing program 2 (id=353): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0xa530, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e00, 0x80000, @dev={0xfe, 0x80, '\x00', 0x38}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290000000b000000000000090000000033e6cdbbed6c2140c5eca27d1ea554a0f8d3e8c38c4c9b686e14cda4d596aa5ba9add292cd5eb026ad9ebe7c6d66dab1685efd81db7d33c05ea550c8e80eb42292d817efc31a6ebfa286b20e39ee548e59c6723c1b428110eb0e91189f241ed729d7d868bf9c83d72c382422b1f6667243964b1e9c64159af70ee7c9da2a03d10dc18386c84ff500defe727c957e189729ee3e8e093d793ef1ac3021b62d1ade47ec965af954709e9d3b4144d31a9df78ed228deec"], 0x18}, 0x8000) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000080)={&(0x7f0000000840)=[{0x1, 0x5010, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0xad2d, 0x100000000, 0xd, 0x9, 0x400, 0xf, 0x4, 0xfffffffffffffffe, 0x0, 0x1000000200d1, 0xfffffffffffffffc, 0x6, 0x4, 0x0, 0xfffffffffffffe], 0x0, 0x8340}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES32=r2], 0x50) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_io_uring_setup(0x2a9c, &(0x7f0000000480)={0x0, 0x8000, 0x800, 0x2, 0xfffffffd}, &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x1000000, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) fanotify_init(0x20, 0x8000) 13m48.876723737s ago: executing program 2 (id=360): shmget(0x1, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) r0 = shmget(0x0, 0x1000, 0x80, &(0x7f0000ff9000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) r1 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x7fffffffffffffff, 0x74fe}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000040)={0x4, 0x6, 0x26000, 0x2000, &(0x7f0000ffa000/0x2000)=nil, 0x2, r3}) r4 = gettid() stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r10 = fanotify_init(0x1, 0x1) r11 = gettid() fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f00000005c0)='./file0\x00', 0x9686a2098cb9463f, 0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)=0x0) r18 = getegid() r19 = fcntl$getown(r3, 0x9) r20 = getuid() getgroups(0x3, &(0x7f00000008c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4934c8ef5cf5c5fb442742c51fbc47d9a62247ddf7414df3d60f50e8c17baafdecc3588d94963025913b6cdf344a325c9f4c16aaadfbfdfb9f7372ac2bb245589479c0a73679f67de7055ab9c87cf85147340b155535c9db335804ccc0c24867756cf1735f30f439265ecb226f1ee081eb6be5409ce13aecae0ec85ed4284593884b3aa14a65b903c30ead08d6e1882a3d2458f6c01f5db43b1bd61af962c47f4528833f06858f72144ab25b883e21cd7d4d760a9f47d70dfbbdfe92c76edcf33e40e1d384d315a17ed5ac7d597", 0xce}], 0x1, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r9, r2, r10, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @cred={{0x1c}}], 0x128, 0x800}}, {{&(0x7f0000002bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000002c40)="6211674caeb394fd0ef1bb1f42a8e97756e54b0ea7d67f952e3cc2efd9ca77da681c63b0f704048813bf8aad1918bd59611c878911c76a0a2d16bc8a7bb2f8bd55a153df5fabc09a19f0c39d3102775f77ce3d1560dc35a425165e4a551b687cb9479a5c619ba93ec19ae0a6130e85c216aeeb3b97c8c8845acddda84698677adbf7128505f4f59ae0200a202176e8eedaa1ea7327c110b8d34a8337d7d643622e1a77d15c3acc7f1ccfe03123cf349ef7ebe6c76542f6f1d22beac1f003e8b70881faaf7bae41101d8bfc86710988ffdc218847762299612a00231f", 0xdc}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000003d40)="d7a00abd74f98e237212c4d5", 0xc}, {&(0x7f0000003d80)="22842a55a8db8d196d037fd94687f89e5c020533ed37cd73c99664349fd13262969d12e58fcc8e8ff72b3e56e71894675b7fa48e34afa728651235edc20d0441315a2452b13378674231f1af29e06cc94a7cd6440d735a42328f7eb21b0122ab863365a89697abb270aea45aa6a2e1af3fee9edfd02b90ec29f003071e51a06881063782fd0a1568ce111a1832d25da266f5e3856a0855c9be70d947e7d5", 0x9e}, {&(0x7f0000003e40)="7f16ae0f69d7018a39fd3ccc4047d19861fa5d66c14a973334b153efc545116198f81bddf854095727fa553f6cc4f6b9907f7d5386ee614d62082bc557b92ff2477240c53866a2802420ca85d0856e2a6c642fe51cf6e4681a6198226664b7c8407a346feb8a6034b97797e4a7fa5d367a3bab2bf3b7db50183b7a349ae8b771814008fccae28dccb47a1c1032fd", 0x8e}, {&(0x7f0000003f00)="7cbc84657ca8dc36f43523bce2983e37ab0223427f753948f3db620ce162c91e1b97dd8ba6ddfa0adbb392efd96fc30cef4d2c4933b81cdcf792e4a9abb7a7dc45490f46f9223502b49d2c318bcbe97144e993018efe940c9d83b4dc1a57c2a72cbe177c837a37462458c553fc55e4040caa291b4fd0e69a7a4a68356b9086f2b53f1d33a1edc4b675aefeabd368a6914275a3703787218e3874d5b0a553ba4a5007efca83fac277e146e61be70cb9a313c34ed6e13e4d0505d3938687505aac12f9f183548487c1b1bd7671d3504cb24be83cf1", 0xd4}, {&(0x7f0000004000)="f72859df95bc01e8deb2a01c8935a0696b837af8b2c1a172628222d5b32bf19d8d1979c7ea2b8d63fcc76969ddd43859dc4fdd2b8b0ee35f004aaac669fc564fbceb6d6e6c1fef6fde4269761dd1a2e84b0cc9d144aa04e7f474c3726ba413e179e3213a8a8e3572c83fdd84f9bdfd4e81109664160b4254b9c2d5169ed6f04d74599cb6c099e64b8e0078983b29f311c9f96091b81e4bb2e7f9ddf18fe4c5ab29f64d39321c47d1bb48191e845d815f654d964c8ae1f2c3ec9b4cd6c8e6", 0xbe}, {&(0x7f00000040c0)="101b51df5a1256447012a1345c6178259657c57519265af2cc4d120533520bdd90141844bd4e019c297dcca49f9fae274ceca80fa016d0705a2162c885debe85fd7dfdbd426bb2470fb2aa8788d9db704b171f25a71e99e0f98f9870938cc763c1c2e6bca87a32f2", 0x68}], 0x8, &(0x7f00000042c0)=[@rights={{0x24, 0x1, 0x1, [r2, r2, r3, r2, r3]}}, @cred={{0x1c}}], 0x48, 0x10}}], 0x2, 0x20000041) 13m47.50108832s ago: executing program 2 (id=363): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 13m45.524189818s ago: executing program 2 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x123880, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) mount$fuse(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 13m41.272902704s ago: executing program 2 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r5, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 13m24.378549515s ago: executing program 33 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000340)='O', 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x10, r5, 0x1, 0xf0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 12m44.758683312s ago: executing program 4 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) pipe2(&(0x7f0000000200), 0x80800) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) 12m37.290587931s ago: executing program 4 (id=403): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x500) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c000280140005f6ff000000000000000000ffff7f00000108001500b9c20a000400120005"], 0x60}}, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 12m33.185363446s ago: executing program 4 (id=405): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 12m29.400087589s ago: executing program 4 (id=408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400f18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m24.227771561s ago: executing program 4 (id=414): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="400f18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m18.588195945s ago: executing program 4 (id=417): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 12m8.629920416s ago: executing program 0 (id=422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xfffe}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r1, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r2, @ANYBLOB="14002b80080001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 12m7.694970045s ago: executing program 0 (id=423): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 12m7.269923482s ago: executing program 0 (id=424): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x32dc, 0x0, 0xe, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000300)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r7, &(0x7f0000005380)={0x2020}, 0x2020) 12m3.740882818s ago: executing program 0 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12m2.892690226s ago: executing program 34 (id=417): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11m59.363591437s ago: executing program 0 (id=429): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11m55.420996254s ago: executing program 0 (id=431): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 11m39.406641459s ago: executing program 35 (id=431): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4m55.690333513s ago: executing program 7 (id=718): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000000c0)={"0deb2f09c46e81a25056060b852a7e3fe040df8ea9244f73d31c55876afd", 0x2, 0x0, 0x0, 0x0, 0x99, 0x8, 0x38d, 0x4, [0x9, 0xb, 0x0, 0x2, 0xacf, 0x6, 0x4, 0x8e4, 0x7, 0x3, 0x1, 0x7f, 0x2, 0x8, 0x4, 0xfffff004, 0x200, 0x8]}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ftruncate(r0, 0x5) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xfffffffffffffcff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004014) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e1e, @private=0xa010102}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @broadcast}, 0x202, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0xf, 0xe}) 4m54.517336563s ago: executing program 7 (id=720): r0 = fanotify_init(0x2, 0x8000) write$binfmt_elf64(r0, 0x0, 0x40) 4m54.145066431s ago: executing program 7 (id=722): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xd01c4813, &(0x7f0000000100)={0x2, 0x100, 0x0, 0x2, 0x0, 0x42}) 4m53.831816315s ago: executing program 7 (id=724): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_gettime(r0, 0x0) 4m52.397544416s ago: executing program 7 (id=725): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) inotify_init() userfaultfd(0x80001) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) close_range(r4, 0xffffffffffffffff, 0x0) 4m48.804216553s ago: executing program 7 (id=726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 4m32.97405711s ago: executing program 36 (id=726): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 2m47.058778923s ago: executing program 1 (id=836): syz_emit_ethernet(0x9a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) 2m46.764260023s ago: executing program 1 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) r1 = syz_open_dev$vim2m(0x0, 0x7f, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x1}, 0x50) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) r7 = inotify_init1(0x80800) inotify_add_watch(r7, 0x0, 0x10000200) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 2m43.599787931s ago: executing program 1 (id=838): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, 0x0) 2m43.124828482s ago: executing program 1 (id=839): mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m38.584053165s ago: executing program 1 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 2m36.121819578s ago: executing program 1 (id=841): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, 0x0, 0x440e0) 2m20.634220709s ago: executing program 37 (id=841): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, 0x0, 0x440e0) 1m19.937353942s ago: executing program 6 (id=870): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000ac0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet(0x2, 0x800, 0x7) 1m15.136445864s ago: executing program 6 (id=876): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r1}) 1m14.122585421s ago: executing program 6 (id=881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m12.14338714s ago: executing program 6 (id=884): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000008400000d"], &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x8, 0x3}, 0x28) 1m10.333223302s ago: executing program 6 (id=890): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xc1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 1m9.277596773s ago: executing program 6 (id=893): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) shmdt(r3) poll(0x0, 0x0, 0x7) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x0, 0x41}, 0x38) read$FUSE(r6, &(0x7f0000002d80)={0x2020}, 0x2025) 52.556864697s ago: executing program 38 (id=893): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r5 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) shmdt(r3) poll(0x0, 0x0, 0x7) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x6) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r7, 0x0, 0x41}, 0x38) read$FUSE(r6, &(0x7f0000002d80)={0x2020}, 0x2025) 48.089544777s ago: executing program 9 (id=933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000480)=""/137, 0x89}], 0x2, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 45.509806949s ago: executing program 9 (id=939): r0 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') setresuid(0x0, 0xee01, 0x0) pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 43.3473892s ago: executing program 9 (id=945): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, 0x0) 39.653623939s ago: executing program 9 (id=953): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = syz_io_uring_setup(0x80d, 0x0, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 38.936313965s ago: executing program 9 (id=956): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2}) 37.538212158s ago: executing program 9 (id=961): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) 20.845717721s ago: executing program 39 (id=961): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syncfs(0xffffffffffffffff) 15.706067016s ago: executing program 3 (id=984): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, 0x0, 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf250400000000000800130064010102000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0xc0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x18000) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{}, {&(0x7f0000000180)="dae37b5fc59e5b06195b964cd05d64d7f3b617d72ab212cdd65558dcc0efd0b3a5ab6566ea48e3be81b3e0a89ab42bae0eca518b3ecbce8876f1ef6617cada69c22ba9a2fe30d88de9f55282fde1aba4da622aecf938907c0ccb73f2d8a357157aa9ea", 0x63}, {&(0x7f0000000200)="a23be578559b775021bf6e565915982c8f4c272c8e826a29d1ba68a359706343babda0ad2444f777eb3be68198a2c04b9466e8d76bdb8c75d17d9bd684f27e60c1b72459bd6f445662a16dc9062500e0ecd641446067d4dd76a6d82550de3923b1c9d556ebc87f2c84d03952", 0x6c}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xdd24}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0xd8}, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) 11.957244725s ago: executing program 5 (id=988): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080) 11.828647001s ago: executing program 3 (id=989): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff0000090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x15555555555556d1}) 11.239192303s ago: executing program 8 (id=990): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 8.997570475s ago: executing program 8 (id=991): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2}) 8.025102381s ago: executing program 3 (id=992): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852d", 0x6}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 7.928185288s ago: executing program 8 (id=993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x2, 0x11a000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.893054594s ago: executing program 5 (id=994): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x4001af84, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, 0x0) 7.056274479s ago: executing program 3 (id=995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(0xffffffffffffffff, 0x80, 0x40000030, 0xffffffffffffff9c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, &(0x7f0000000780)=""/235, 0x103, 0xeb, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r1) r2 = dup(r1) write$binfmt_elf64(r2, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.194114018s ago: executing program 3 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.92850718s ago: executing program 8 (id=997): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, 0x0, 0x4) r1 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) fsopen(&(0x7f0000000180)='omfs\x00', 0x1) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf250400000000000800130064010102000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0xc0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x18000) sendmsg$sock(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{}, {&(0x7f0000000180)="dae37b5fc59e5b06195b964cd05d64d7f3b617d72ab212cdd65558dcc0efd0b3a5ab6566ea48e3be81b3e0a89ab42bae0eca518b3ecbce8876f1ef6617cada69c22ba9a2fe30d88de9f55282fde1aba4da622aecf938907c0ccb73f2d8a357157aa9ea", 0x63}, {&(0x7f0000000200)="a23be578559b775021bf6e565915982c8f4c272c8e826a29d1ba68a359706343babda0ad2444f777eb3be68198a2c04b9466e8d76bdb8c75d17d9bd684f27e60c1b72459bd6f445662a16dc9062500e0ecd641446067d4dd76a6d82550de3923b1c9d556ebc87f2c84d03952", 0x6c}, {&(0x7f0000000280)}], 0x4, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xdd24}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0xd8}, 0x840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) 4.684780645s ago: executing program 5 (id=998): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.241322184s ago: executing program 5 (id=999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 3.161109443s ago: executing program 3 (id=1000): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x50) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) socket(0x10, 0x803, 0x0) 1.935077019s ago: executing program 8 (id=1001): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40a00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r2}) 1.302922893s ago: executing program 8 (id=1002): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x2ff, 0x0, 0x7ee69d08}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080) 969.035938ms ago: executing program 5 (id=1003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b", 0x6) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852d", 0x6}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) 0s ago: executing program 5 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000300)=0x808c) r5 = socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.839266][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.846811][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.552276][ T9570] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1087.639025][ T9570] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1087.803809][ T9570] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1087.957599][ T9570] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1088.727302][ T9467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.484370][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.787608][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.032453][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.040079][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.317061][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.324776][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.204558][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.135019][ T9467] veth0_vlan: entered promiscuous mode [ 1093.374900][ T9467] veth1_vlan: entered promiscuous mode [ 1093.677540][ T8961] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1093.902619][ T8961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.952770][ T8961] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.998473][ T8961] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1094.060994][ T8961] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1094.085691][ T8961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.138020][ T8961] usb 2-1: config 0 descriptor?? [ 1094.179250][ T9467] veth0_macvtap: entered promiscuous mode [ 1094.412011][ T9467] veth1_macvtap: entered promiscuous mode [ 1094.661898][ T8961] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 1094.896645][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.964784][ T8961] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1095.216814][ T9467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.385819][ T145] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.422294][ T145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.510130][ T145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.555209][ T145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.882270][ T5824] usb 2-1: USB disconnect, device number 48 [ 1095.957735][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.983307][ T9744] fido_id[9744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1096.767526][ T9460] veth0_vlan: entered promiscuous mode [ 1097.056613][ T9460] veth1_vlan: entered promiscuous mode [ 1097.949040][ T9460] veth0_macvtap: entered promiscuous mode [ 1098.094169][ T9460] veth1_macvtap: entered promiscuous mode [ 1098.627096][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.755692][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.974480][ T135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.058069][ T135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.067551][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.210922][ T135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.652778][ T8501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1099.669978][ T8501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1099.681178][ T8501] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1099.707108][ T8501] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1099.721871][ T8501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1100.861698][ T9570] veth0_vlan: entered promiscuous mode [ 1101.452681][ T9570] veth1_vlan: entered promiscuous mode [ 1101.811561][ T8501] Bluetooth: hci1: command tx timeout [ 1102.203982][ T9570] veth0_macvtap: entered promiscuous mode [ 1102.980404][ T9570] veth1_macvtap: entered promiscuous mode [ 1103.141892][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1103.155533][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1103.171615][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1103.203405][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1103.214085][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1103.580565][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.824422][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1103.908950][ T49] Bluetooth: hci1: command tx timeout [ 1104.567078][ T8501] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1104.639818][ T8501] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1104.650532][ T8501] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1104.656344][ T9775] chnl_net:caif_netlink_parms(): no params data found [ 1104.685307][ T8501] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1104.701844][ T8501] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1105.095905][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.137371][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.177758][ T5092] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1105.329144][ T49] Bluetooth: hci6: command tx timeout [ 1105.387046][ T5092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.438645][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.491454][ T5092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.539002][ T5092] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1105.588570][ T5092] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1105.659637][ T5092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.691598][ T5092] usb 2-1: config 0 descriptor?? [ 1105.806149][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.968817][ T49] Bluetooth: hci1: command tx timeout [ 1106.252710][ T5092] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 1106.466316][ T5092] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1106.771407][ T49] Bluetooth: hci7: command tx timeout [ 1107.036565][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.193352][ T5092] usb 2-1: USB disconnect, device number 49 [ 1107.335773][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.408524][ T49] Bluetooth: hci6: command tx timeout [ 1107.722518][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.056965][ T49] Bluetooth: hci1: command tx timeout [ 1108.273945][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.857354][ T49] Bluetooth: hci7: command tx timeout [ 1109.137117][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.169707][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.177612][ T9775] bridge_slave_0: entered allmulticast mode [ 1109.228868][ T9775] bridge_slave_0: entered promiscuous mode [ 1109.271508][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 1109.369240][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.400009][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.407922][ T9775] bridge_slave_1: entered allmulticast mode [ 1109.450147][ T9775] bridge_slave_1: entered promiscuous mode [ 1109.489291][ T49] Bluetooth: hci6: command tx timeout [ 1110.304553][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.562876][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.942333][ T49] Bluetooth: hci7: command tx timeout [ 1111.631921][ T49] Bluetooth: hci6: command tx timeout [ 1112.574030][ T9775] team0: Port device team_slave_0 added [ 1112.627652][ T35] bridge_slave_1: left allmulticast mode [ 1112.698360][ T35] bridge_slave_1: left promiscuous mode [ 1112.705182][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.857133][ T35] bridge_slave_0: left allmulticast mode [ 1112.922065][ T35] bridge_slave_0: left promiscuous mode [ 1112.977303][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.038574][ T49] Bluetooth: hci7: command tx timeout [ 1113.943432][ T5826] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1114.115713][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.165738][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.184774][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.194636][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.212427][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1114.226791][ T5826] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1114.245269][ T35] bond0 (unregistering): Released all slaves [ 1114.265028][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.286856][ T5826] usb 2-1: config 0 descriptor?? [ 1114.302486][ T9775] team0: Port device team_slave_1 added [ 1114.699251][ T35] hsr_slave_0: left promiscuous mode [ 1114.708678][ T35] hsr_slave_1: left promiscuous mode [ 1114.731150][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.757374][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.775965][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.784083][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.803374][ T5826] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 1114.898514][ T35] veth1_macvtap: left promiscuous mode [ 1114.904275][ T35] veth0_macvtap: left promiscuous mode [ 1114.915966][ T5826] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1114.948646][ T35] veth1_vlan: left promiscuous mode [ 1114.954257][ T35] veth0_vlan: left promiscuous mode [ 1116.205839][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1116.282315][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1116.644810][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 1116.695062][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.703822][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.744925][ T9800] bridge_slave_0: entered allmulticast mode [ 1116.763699][ T9800] bridge_slave_0: entered promiscuous mode [ 1116.808002][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.823524][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.896556][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.937058][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.958442][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.016788][ T9] usb 2-1: USB disconnect, device number 50 [ 1117.037299][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.154135][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.163384][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.172883][ T9800] bridge_slave_1: entered allmulticast mode [ 1117.194115][ T9800] bridge_slave_1: entered promiscuous mode [ 1117.509914][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.545692][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.636063][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.714872][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.139599][ T9775] hsr_slave_0: entered promiscuous mode [ 1118.164185][ T9775] hsr_slave_1: entered promiscuous mode [ 1118.181849][ T9775] debugfs: 'hsr0' already exists in 'hsr' [ 1118.187822][ T9775] Cannot create hsr debugfs directory [ 1118.345340][ T9800] team0: Port device team_slave_0 added [ 1118.363805][ T9800] team0: Port device team_slave_1 added [ 1118.444719][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.711993][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.972206][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.331657][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.378437][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.448365][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.487545][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.506126][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.578680][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.632418][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.773780][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.800486][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.824017][ T9806] bridge_slave_0: entered allmulticast mode [ 1119.867283][ T9806] bridge_slave_0: entered promiscuous mode [ 1119.893820][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 1120.102234][ T8501] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1120.118557][ T8501] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1120.127969][ T8501] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1120.144598][ T8501] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1120.157556][ T8501] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1120.332151][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.349066][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.357207][ T9806] bridge_slave_1: entered allmulticast mode [ 1120.406435][ T9806] bridge_slave_1: entered promiscuous mode [ 1120.996627][ T9800] hsr_slave_0: entered promiscuous mode [ 1121.024072][ T9800] hsr_slave_1: entered promiscuous mode [ 1121.045216][ T9800] debugfs: 'hsr0' already exists in 'hsr' [ 1121.051843][ T9800] Cannot create hsr debugfs directory [ 1121.347742][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.790496][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.209043][ T49] Bluetooth: hci0: command tx timeout [ 1122.427469][ T9806] team0: Port device team_slave_0 added [ 1122.679516][ T9806] team0: Port device team_slave_1 added [ 1123.104609][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.113521][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.142713][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.334182][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.353758][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.406071][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.037595][ T9806] hsr_slave_0: entered promiscuous mode [ 1124.050259][ T9806] hsr_slave_1: entered promiscuous mode [ 1124.060057][ T9806] debugfs: 'hsr0' already exists in 'hsr' [ 1124.065998][ T9806] Cannot create hsr debugfs directory [ 1124.108709][ T9775] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1124.164119][ T9775] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1124.197260][ T9775] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1124.289269][ T49] Bluetooth: hci0: command tx timeout [ 1124.364894][ T9775] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1125.687434][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.694439][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.510105][ T49] Bluetooth: hci0: command tx timeout [ 1126.979176][ T35] bridge_slave_1: left allmulticast mode [ 1126.985076][ T35] bridge_slave_1: left promiscuous mode [ 1127.014526][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.080823][ T35] bridge_slave_0: left allmulticast mode [ 1127.086902][ T35] bridge_slave_0: left promiscuous mode [ 1127.099611][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.131129][ T35] bridge_slave_1: left allmulticast mode [ 1127.137336][ T35] bridge_slave_1: left promiscuous mode [ 1127.145579][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.193000][ T35] bridge_slave_0: left allmulticast mode [ 1127.199874][ T35] bridge_slave_0: left promiscuous mode [ 1127.215784][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.001688][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.041272][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.059913][ T35] bond0 (unregistering): Released all slaves [ 1128.515995][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.528762][ T49] Bluetooth: hci0: command tx timeout [ 1128.552899][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.572292][ T35] bond0 (unregistering): Released all slaves [ 1128.776409][ T9916] chnl_net:caif_netlink_parms(): no params data found [ 1129.431614][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 1129.452209][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 1129.598921][ T9800] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1129.747298][ T9800] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1129.996011][ T9800] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1130.235007][ T35] hsr_slave_0: left promiscuous mode [ 1130.266967][ T35] hsr_slave_1: left promiscuous mode [ 1130.286220][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.311331][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.345028][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.360715][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.444707][ T35] hsr_slave_0: left promiscuous mode [ 1130.460992][ T35] hsr_slave_1: left promiscuous mode [ 1130.476103][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.495975][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.512326][ T35] batman_adv: batadv0: Interface deactivated: dummy0 [ 1130.526781][ T35] batman_adv: batadv0: Removing interface: dummy0 [ 1130.596300][ T35] veth1_macvtap: left promiscuous mode [ 1130.606756][ T35] veth0_macvtap: left promiscuous mode [ 1130.617869][ T35] veth1_vlan: left promiscuous mode [ 1130.630125][ T35] veth0_vlan: left promiscuous mode [ 1131.911646][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'. [ 1132.027169][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1132.066018][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1132.697741][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1132.742212][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1132.991647][ T9800] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1133.837392][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.179834][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.187814][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.203535][ T9916] bridge_slave_0: entered allmulticast mode [ 1134.223028][ T9916] bridge_slave_0: entered promiscuous mode [ 1134.251279][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.290208][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.309114][ T9916] bridge_slave_1: entered allmulticast mode [ 1134.340280][ T9916] bridge_slave_1: entered promiscuous mode [ 1134.703793][ T9982] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1134.713198][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1134.760043][ T9775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.771795][ T9806] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1134.831884][ T9806] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1134.907485][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.025336][ T9806] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1135.234736][ T9806] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1135.305596][ T9916] team0: Port device team_slave_0 added [ 1135.369287][ T9916] team0: Port device team_slave_1 added [ 1135.524164][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.531847][ T7202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.563107][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.570790][ T7202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.834840][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.776'. [ 1135.909693][ T5965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.065773][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.082586][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.127973][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.173578][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.189513][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.258636][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.346398][ T5965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.575241][ T5965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.887471][ T5965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.289703][ T9916] hsr_slave_0: entered promiscuous mode [ 1137.301619][ T9916] hsr_slave_1: entered promiscuous mode [ 1137.377997][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.673604][ T49] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1138.328744][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1138.404542][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.472923][ T5965] bridge_slave_1: left allmulticast mode [ 1138.498480][ T5965] bridge_slave_1: left promiscuous mode [ 1138.505300][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.514393][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.535545][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1138.553939][ T5965] bridge_slave_0: left allmulticast mode [ 1138.569764][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1138.580572][ T5965] bridge_slave_0: left promiscuous mode [ 1138.588131][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.618391][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1138.666107][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1138.693039][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.718831][ T9] usb 2-1: Product: syz [ 1138.738403][ T9] usb 2-1: Manufacturer: syz [ 1138.743625][ T9] usb 2-1: SerialNumber: syz [ 1138.791014][ T9] usb 2-1: config 0 descriptor?? [ 1138.850535][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1139.056920][ T9] usb 2-1: USB disconnect, device number 51 [ 1139.358013][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.376298][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.402683][ T5965] bond0 (unregistering): Released all slaves [ 1139.847147][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.855183][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1139.918702][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.926279][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.485834][ T5965] hsr_slave_0: left promiscuous mode [ 1140.507920][ T5965] hsr_slave_1: left promiscuous mode [ 1140.536101][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.546817][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.580751][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.589138][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.630534][ T5965] veth1_macvtap: left promiscuous mode [ 1140.636336][ T5965] veth0_macvtap: left promiscuous mode [ 1140.644751][ T5965] veth1_vlan: left promiscuous mode [ 1140.650679][ T5965] veth0_vlan: left promiscuous mode [ 1141.842896][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 1141.891339][ T5965] team0 (unregistering): Port device team_slave_0 removed [ 1141.970784][ T8475] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1142.171309][ T8475] usb 2-1: Using ep0 maxpacket: 16 [ 1142.183550][ T8475] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.239702][ T8475] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.271174][ T8475] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1142.291887][ T8475] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1142.311605][ T8475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.356336][ T8475] usb 2-1: config 0 descriptor?? [ 1142.917099][ T9775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.150555][ T8475] usb 2-1: USB disconnect, device number 52 [ 1143.257190][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.634887][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.706297][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.714010][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.783734][ T9916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1143.919482][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.927052][ T5965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.014755][ T9916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1144.159035][ T9916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1144.236491][ T9916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1147.371307][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.232935][ T9775] veth0_vlan: entered promiscuous mode [ 1148.383734][ T9775] veth1_vlan: entered promiscuous mode [ 1148.614926][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.515289][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.035188][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.042944][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.750350][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.758935][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1152.148322][ T9775] veth0_macvtap: entered promiscuous mode [ 1152.860007][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.001702][ T9775] veth1_macvtap: entered promiscuous mode [ 1154.644606][ T9916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1154.698354][ T9916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1155.343603][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.633671][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.069995][ T56] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.116348][ T56] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.265812][ T6053] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.315976][ T6053] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.668662][ T9800] veth0_vlan: entered promiscuous mode [ 1157.149821][ T9800] veth1_vlan: entered promiscuous mode [ 1157.173385][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1157.378445][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1157.421489][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.458454][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.507156][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1157.543773][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1157.611119][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.698648][ T10] usb 2-1: config 0 descriptor?? [ 1158.121469][ T9806] veth0_vlan: entered promiscuous mode [ 1158.163294][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1158.179131][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1158.235282][ T10] usb 2-1: USB disconnect, device number 53 [ 1158.439448][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.470512][ T9800] veth0_macvtap: entered promiscuous mode [ 1158.580900][ T9806] veth1_vlan: entered promiscuous mode [ 1158.616631][ T9800] veth1_macvtap: entered promiscuous mode [ 1159.112571][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.376303][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.024531][ T8501] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1160.045539][ T8501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1160.056591][ T8501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1160.077353][ T8501] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1160.180783][ T8501] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1160.615159][ T9806] veth0_macvtap: entered promiscuous mode [ 1160.662990][ T9806] veth1_macvtap: entered promiscuous mode [ 1160.803004][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.877694][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.514873][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.611100][ T145] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.921255][ T145] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.047379][ T145] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.159706][ T135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.238683][ T135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.289465][ T8501] Bluetooth: hci3: command tx timeout [ 1162.414076][ T135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.508874][ T135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.369076][ T8501] Bluetooth: hci3: command tx timeout [ 1166.232610][ T145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.312002][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1166.328785][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1166.342208][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1166.358481][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1166.380692][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1166.457394][ T49] Bluetooth: hci3: command tx timeout [ 1166.785054][ T145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.226935][ T9916] veth0_vlan: entered promiscuous mode [ 1167.375855][ T145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.627000][T10127] chnl_net:caif_netlink_parms(): no params data found [ 1167.867586][ T8501] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1167.877188][ T8501] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1167.891518][ T8501] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1167.917545][ T8501] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1167.930750][ T8501] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1167.949790][ T145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.446456][ T9916] veth1_vlan: entered promiscuous mode [ 1168.471772][ T49] Bluetooth: hci1: command tx timeout [ 1168.533024][ T49] Bluetooth: hci3: command tx timeout [ 1169.782667][ T145] bridge_slave_1: left allmulticast mode [ 1169.806084][ T145] bridge_slave_1: left promiscuous mode [ 1169.826830][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.857680][ T145] bridge_slave_0: left allmulticast mode [ 1169.864069][ T145] bridge_slave_0: left promiscuous mode [ 1169.871308][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.972422][ T49] Bluetooth: hci4: command tx timeout [ 1170.538364][ T49] Bluetooth: hci1: command tx timeout [ 1170.747662][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.758663][ T6831] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1170.783394][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.806613][ T145] bond0 (unregistering): Released all slaves [ 1170.919999][ T6831] usb 2-1: Using ep0 maxpacket: 32 [ 1170.945686][ T6831] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1170.972486][ T6831] usb 2-1: config 0 has no interface number 0 [ 1170.988650][ T6831] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1171.031022][ T6831] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1171.049533][ T6831] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1171.069919][ T6831] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1171.095276][ T6831] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1171.148067][ T6831] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1171.159616][ T6831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.169257][ T6831] usb 2-1: Product: syz [ 1171.173977][ T6831] usb 2-1: Manufacturer: syz [ 1171.192323][ T6831] usb 2-1: SerialNumber: syz [ 1171.205026][ T6831] usb 2-1: config 0 descriptor?? [ 1171.216480][ T145] hsr_slave_0: left promiscuous mode [ 1171.225191][T10179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1171.244222][ T145] hsr_slave_1: left promiscuous mode [ 1171.260037][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.267632][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.285268][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.293536][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.321060][ T6831] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input10 [ 1171.331735][ T145] veth1_macvtap: left promiscuous mode [ 1171.339856][ T145] veth0_macvtap: left promiscuous mode [ 1171.346375][ T145] veth1_vlan: left promiscuous mode [ 1171.365354][ T145] veth0_vlan: left promiscuous mode [ 1171.388238][ C0] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 1171.545246][ C0] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 1171.588012][ T5092] usb 2-1: USB disconnect, device number 54 [ 1172.049690][ T49] Bluetooth: hci4: command tx timeout [ 1172.473762][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1172.535284][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1172.609439][ T49] Bluetooth: hci1: command tx timeout [ 1172.658946][ T6831] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1172.832200][ T9916] veth0_macvtap: entered promiscuous mode [ 1172.848801][ T6831] usb 2-1: Using ep0 maxpacket: 16 [ 1172.867032][T10127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.879214][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.922958][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.933963][T10127] bridge_slave_0: entered allmulticast mode [ 1172.940513][ T6831] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.955592][T10127] bridge_slave_0: entered promiscuous mode [ 1172.962802][ T6831] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1172.979087][ T6831] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1172.992429][T10127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.001319][ T6831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.012774][T10127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.024015][T10127] bridge_slave_1: entered allmulticast mode [ 1173.034964][T10127] bridge_slave_1: entered promiscuous mode [ 1173.056294][ T6831] usb 2-1: config 0 descriptor?? [ 1173.378993][ T9916] veth1_macvtap: entered promiscuous mode [ 1173.420335][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.457182][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.542357][ T6831] usbhid 2-1:0.0: can't add hid device: -71 [ 1173.554433][ T6831] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1173.601936][ T6831] usb 2-1: USB disconnect, device number 55 [ 1173.843162][T10127] team0: Port device team_slave_0 added [ 1173.946159][T10127] team0: Port device team_slave_1 added [ 1174.033730][T10152] chnl_net:caif_netlink_parms(): no params data found [ 1174.128632][ T49] Bluetooth: hci4: command tx timeout [ 1174.305870][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1174.335760][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.373334][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.438827][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.446026][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.474768][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.652362][ T145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.694635][ T49] Bluetooth: hci1: command tx timeout [ 1174.713185][T10193] qnx4: no qnx4 filesystem (no root dir). [ 1174.746114][T10156] chnl_net:caif_netlink_parms(): no params data found [ 1174.963067][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.084555][ T145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.401152][ T145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.576471][T10127] hsr_slave_0: entered promiscuous mode [ 1175.605637][T10127] hsr_slave_1: entered promiscuous mode [ 1175.629573][T10127] debugfs: 'hsr0' already exists in 'hsr' [ 1175.635562][T10127] Cannot create hsr debugfs directory [ 1175.734207][ T9916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.836012][ T145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.329340][ T49] Bluetooth: hci4: command tx timeout [ 1176.343155][ T49] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 1177.456540][ T5874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.492428][T10152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.534748][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.570605][T10152] bridge_slave_0: entered allmulticast mode [ 1177.616992][T10152] bridge_slave_0: entered promiscuous mode [ 1177.743624][ T5874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.908673][T10152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.966138][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.004561][T10152] bridge_slave_1: entered allmulticast mode [ 1178.029403][T10152] bridge_slave_1: entered promiscuous mode [ 1178.187172][ T5874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.644193][ T5874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.867998][T10152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.947413][T10152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1179.045334][ T145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.077296][T10156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.087081][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.097414][T10156] bridge_slave_0: entered allmulticast mode [ 1179.110262][T10156] bridge_slave_0: entered promiscuous mode [ 1179.268523][ T8475] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1179.357881][ T145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.376484][T10156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.397515][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.416759][T10156] bridge_slave_1: entered allmulticast mode [ 1179.441768][T10156] bridge_slave_1: entered promiscuous mode [ 1179.448435][ T8475] usb 2-1: Using ep0 maxpacket: 16 [ 1179.472830][ T8475] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.498549][ T8475] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.519630][ T8475] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1179.526700][ T8475] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1179.561236][ T8475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.593896][ T8475] usb 2-1: config 0 descriptor?? [ 1179.665132][T10152] team0: Port device team_slave_0 added [ 1179.761263][ T145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1179.853493][T10156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1179.887764][T10152] team0: Port device team_slave_1 added [ 1180.046162][ T8475] usbhid 2-1:0.0: can't add hid device: -71 [ 1180.086219][ T8475] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1180.103506][ T145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.144557][ T8475] usb 2-1: USB disconnect, device number 56 [ 1180.221234][T10156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.369622][ T8501] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1180.379091][ T8501] Bluetooth: hci2: Injecting HCI hardware error event [ 1180.387158][ T49] Bluetooth: hci2: hardware error 0x00 [ 1180.454700][T10152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.476245][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.503528][T10152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.745891][T10156] team0: Port device team_slave_0 added [ 1180.813887][T10156] team0: Port device team_slave_1 added [ 1180.851850][T10152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.888570][T10152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.958434][T10152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.468959][T10226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1181.482698][T10226] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1181.499188][T10226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1181.525653][T10226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1181.539812][T10226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1181.584986][T10156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.609979][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.637284][T10156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.868006][T10156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.875437][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.903667][T10156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.298020][T10152] hsr_slave_0: entered promiscuous mode [ 1182.326245][T10152] hsr_slave_1: entered promiscuous mode [ 1182.336191][T10152] debugfs: 'hsr0' already exists in 'hsr' [ 1182.344074][T10152] Cannot create hsr debugfs directory [ 1182.448538][ T49] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1182.599624][T10156] hsr_slave_0: entered promiscuous mode [ 1182.613498][T10156] hsr_slave_1: entered promiscuous mode [ 1182.623936][T10156] debugfs: 'hsr0' already exists in 'hsr' [ 1182.631988][T10156] Cannot create hsr debugfs directory [ 1182.642516][ T145] bridge_slave_1: left allmulticast mode [ 1182.660971][ T145] bridge_slave_1: left promiscuous mode [ 1182.672299][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.694900][ T145] bridge_slave_0: left allmulticast mode [ 1182.713175][ T145] bridge_slave_0: left promiscuous mode [ 1182.732156][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.783168][ T145] bridge_slave_1: left allmulticast mode [ 1182.802306][ T145] bridge_slave_1: left promiscuous mode [ 1182.811131][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.837288][ T145] bridge_slave_0: left allmulticast mode [ 1182.843543][ T145] bridge_slave_0: left promiscuous mode [ 1182.850753][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.341770][T10235] overlay: Unknown parameter '\’œª°@˜’œª°@»»»' [ 1183.671515][ T49] Bluetooth: hci5: command tx timeout [ 1183.771622][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.792271][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.817195][ T145] bond0 (unregistering): Released all slaves [ 1184.301042][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.343713][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.378069][ T145] bond0 (unregistering): Released all slaves [ 1184.997005][T10244] net_ratelimit: 10 callbacks suppressed [ 1184.997069][T10244] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 1185.111964][ T145] hsr_slave_0: left promiscuous mode [ 1185.120408][ T145] hsr_slave_1: left promiscuous mode [ 1185.127883][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.136566][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.150564][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.158553][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.191094][ T145] hsr_slave_0: left promiscuous mode [ 1185.201247][ T145] hsr_slave_1: left promiscuous mode [ 1185.209807][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.217323][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.227808][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.236462][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.276289][ T145] veth1_macvtap: left promiscuous mode [ 1185.282710][ T145] veth0_macvtap: left promiscuous mode [ 1185.290125][ T145] veth1_vlan: left promiscuous mode [ 1185.296520][ T145] veth0_vlan: left promiscuous mode [ 1185.308609][ T145] veth1_macvtap: left promiscuous mode [ 1185.316923][ T145] veth0_macvtap: left promiscuous mode [ 1185.325704][ T145] veth1_vlan: left promiscuous mode [ 1185.332862][ T145] veth0_vlan: left promiscuous mode [ 1185.729526][ T49] Bluetooth: hci5: command tx timeout [ 1186.279229][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1186.310801][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1186.892135][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1186.947367][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1187.121407][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.137518][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1187.808499][ T49] Bluetooth: hci5: command tx timeout [ 1188.702556][T10127] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1189.301091][T10127] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1189.781430][T10127] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1189.888702][ T49] Bluetooth: hci5: command tx timeout [ 1190.673235][T10127] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1192.376925][ T145] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.565423][T10223] chnl_net:caif_netlink_parms(): no params data found [ 1192.681365][ T145] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.987065][ T145] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.088413][T10258] NILFS (nullb0): couldn't find nilfs on the device [ 1193.663933][ T145] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.238443][ T145] bridge_slave_1: left allmulticast mode [ 1195.244948][ T145] bridge_slave_1: left promiscuous mode [ 1195.269538][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.304394][ T145] bridge_slave_0: left allmulticast mode [ 1195.320920][ T145] bridge_slave_0: left promiscuous mode [ 1195.327661][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.140439][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.210005][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.244528][ T145] bond0 (unregistering): Released all slaves [ 1196.405658][T10152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1196.648771][ T145] hsr_slave_0: left promiscuous mode [ 1196.680873][ T145] hsr_slave_1: left promiscuous mode [ 1196.709768][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.717478][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.742231][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.751128][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.780227][ T145] veth1_macvtap: left promiscuous mode [ 1196.785996][ T145] veth0_macvtap: left promiscuous mode [ 1196.793676][ T145] veth1_vlan: left promiscuous mode [ 1196.800817][ T145] veth0_vlan: left promiscuous mode [ 1197.911803][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1198.035790][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1199.647928][T10152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1200.154402][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.218997][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.243925][T10223] bridge_slave_0: entered allmulticast mode [ 1200.385329][T10223] bridge_slave_0: entered promiscuous mode [ 1200.435458][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.446930][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.506457][T10223] bridge_slave_1: entered allmulticast mode [ 1200.617080][T10223] bridge_slave_1: entered promiscuous mode [ 1201.278586][T10152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1201.823665][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.899815][T10152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1202.275720][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.632612][T10223] team0: Port device team_slave_0 added [ 1202.655912][T10223] team0: Port device team_slave_1 added [ 1202.971678][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.994036][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.066634][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.137095][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.145640][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.198611][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1203.633599][T10223] hsr_slave_0: entered promiscuous mode [ 1203.656366][T10223] hsr_slave_1: entered promiscuous mode [ 1203.706279][T10156] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1203.776831][T10127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.814619][T10156] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1203.883383][T10156] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1203.978978][T10156] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1204.186358][T10127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.938336][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.946004][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.030559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.038601][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.642020][T10152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.475593][T10152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.777475][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.785387][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1207.045229][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.053023][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.838069][T10223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1209.108725][T10223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1209.380196][T10223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1209.610879][T10223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1211.782390][T10156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.911966][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.255899][T10156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.394001][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.401805][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.574405][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.582061][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.281198][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.403209][T10152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.576104][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.703270][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.710910][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.799943][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.807511][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.631105][T10127] veth0_vlan: entered promiscuous mode [ 1216.748216][T10127] veth1_vlan: entered promiscuous mode [ 1216.917319][T10156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.474141][T10127] veth0_macvtap: entered promiscuous mode [ 1217.630107][T10127] veth1_macvtap: entered promiscuous mode [ 1217.896043][T10152] veth0_vlan: entered promiscuous mode [ 1218.057797][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.187835][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.300342][T10152] veth1_vlan: entered promiscuous mode [ 1218.454318][ T5965] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.508678][ T5965] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.517852][ T5965] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.623376][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.671505][ T5965] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.110905][T10152] veth0_macvtap: entered promiscuous mode [ 1219.251339][T10152] veth1_macvtap: entered promiscuous mode [ 1219.639910][T10152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.858857][T10152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.027431][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.073150][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.282282][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.319839][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.435778][T10156] veth0_vlan: entered promiscuous mode [ 1220.770197][T10156] veth1_vlan: entered promiscuous mode [ 1221.321579][T10226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1221.339904][T10226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1221.349597][T10226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1221.365705][T10226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1221.391403][T10226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1221.766315][T10156] veth0_macvtap: entered promiscuous mode [ 1221.969993][T10156] veth1_macvtap: entered promiscuous mode [ 1222.873501][T10223] veth0_vlan: entered promiscuous mode [ 1223.094827][T10156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.156423][ T145] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.337640][ T145] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.384069][T10156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.405674][T10223] veth1_vlan: entered promiscuous mode [ 1223.489585][ T49] Bluetooth: hci0: command tx timeout [ 1223.519502][ T145] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.781638][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.815824][ T6008] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.948082][ T6008] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.994594][ T6008] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.137887][ T145] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.722459][T10223] veth0_macvtap: entered promiscuous mode [ 1224.998785][T10373] chnl_net:caif_netlink_parms(): no params data found [ 1225.100858][T10223] veth1_macvtap: entered promiscuous mode [ 1225.391932][ T145] bridge_slave_1: left allmulticast mode [ 1225.397888][ T145] bridge_slave_1: left promiscuous mode [ 1225.440772][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.499981][ T145] bridge_slave_0: left allmulticast mode [ 1225.505892][ T145] bridge_slave_0: left promiscuous mode [ 1225.568501][ T49] Bluetooth: hci0: command tx timeout [ 1225.570753][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.859208][T10226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1226.869864][T10226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1226.902737][T10226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1226.967873][T10226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1226.978670][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.989461][T10226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1227.090001][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1227.116380][ T145] bond0 (unregistering): Released all slaves [ 1227.356527][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.635292][ T145] hsr_slave_0: left promiscuous mode [ 1227.648476][ T49] Bluetooth: hci0: command tx timeout [ 1227.661421][ T145] hsr_slave_1: left promiscuous mode [ 1227.712461][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.737725][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1227.752171][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.778676][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.829359][ T145] veth1_macvtap: left promiscuous mode [ 1227.835128][ T145] veth0_macvtap: left promiscuous mode [ 1227.893101][ T145] veth1_vlan: left promiscuous mode [ 1227.908579][ T145] veth0_vlan: left promiscuous mode [ 1228.016794][T10226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1228.026617][T10226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1228.037529][T10226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1228.076842][T10226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1228.096316][T10226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.092581][T10226] Bluetooth: hci3: command tx timeout [ 1229.244015][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1229.276313][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1229.728694][T10226] Bluetooth: hci0: command tx timeout [ 1229.882501][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.138687][T10226] Bluetooth: hci1: command tx timeout [ 1230.545966][T10373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.568898][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.576908][T10373] bridge_slave_0: entered allmulticast mode [ 1230.624348][T10373] bridge_slave_0: entered promiscuous mode [ 1230.779891][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1230.790708][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1230.801087][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1230.815007][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1230.826904][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1230.864160][T10373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.890394][T10373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.899153][T10373] bridge_slave_1: entered allmulticast mode [ 1230.909640][T10373] bridge_slave_1: entered promiscuous mode [ 1230.968608][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.977757][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.168637][ T49] Bluetooth: hci3: command tx timeout [ 1231.202942][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.228996][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.416458][T10373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.582945][T10373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.774518][ T145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.924538][ T145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.191138][ T145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.208643][ T49] Bluetooth: hci1: command tx timeout [ 1232.254402][T10373] team0: Port device team_slave_0 added [ 1232.409645][T10373] team0: Port device team_slave_1 added [ 1232.472119][ T145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.793417][T10373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.818621][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.847708][T10373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.938902][ T49] Bluetooth: hci4: command tx timeout [ 1233.015450][T10373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.023714][T10373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1233.057174][T10373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.248742][ T49] Bluetooth: hci3: command tx timeout [ 1233.996821][T10373] hsr_slave_0: entered promiscuous mode [ 1234.031297][T10373] hsr_slave_1: entered promiscuous mode [ 1234.060219][T10373] debugfs: 'hsr0' already exists in 'hsr' [ 1234.066350][T10373] Cannot create hsr debugfs directory [ 1234.291834][ T49] Bluetooth: hci1: command tx timeout [ 1234.641224][ T145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.981292][T10427] chnl_net:caif_netlink_parms(): no params data found [ 1235.010978][ T49] Bluetooth: hci4: command tx timeout [ 1235.039387][T10420] chnl_net:caif_netlink_parms(): no params data found [ 1235.246164][ T145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.331207][ T49] Bluetooth: hci3: command tx timeout [ 1235.563258][T10442] chnl_net:caif_netlink_parms(): no params data found [ 1235.769910][ T145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.094506][ T145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.369792][ T49] Bluetooth: hci1: command tx timeout [ 1236.904439][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.933541][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.044997][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.053254][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.063580][T10420] bridge_slave_0: entered allmulticast mode [ 1237.074496][T10420] bridge_slave_0: entered promiscuous mode [ 1237.088677][ T49] Bluetooth: hci4: command tx timeout [ 1237.259422][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.267431][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.275788][T10420] bridge_slave_1: entered allmulticast mode [ 1237.286689][T10420] bridge_slave_1: entered promiscuous mode [ 1237.454857][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.464261][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.473892][T10427] bridge_slave_0: entered allmulticast mode [ 1237.485440][T10427] bridge_slave_0: entered promiscuous mode [ 1237.505508][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.514486][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.522961][T10427] bridge_slave_1: entered allmulticast mode [ 1237.533102][T10427] bridge_slave_1: entered promiscuous mode [ 1237.749768][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.773688][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.817305][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1237.825995][T10442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.839960][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.847885][T10442] bridge_slave_0: entered allmulticast mode [ 1237.854322][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.870933][T10442] bridge_slave_0: entered promiscuous mode [ 1238.009286][ T145] bridge_slave_1: left allmulticast mode [ 1238.017982][ T145] bridge_slave_1: left promiscuous mode [ 1238.025091][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.045439][ T145] bridge_slave_0: left allmulticast mode [ 1238.051760][ T145] bridge_slave_0: left promiscuous mode [ 1238.060230][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.076389][ T145] bridge_slave_1: left allmulticast mode [ 1238.084950][ T145] bridge_slave_1: left promiscuous mode [ 1238.092295][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.120080][ T145] bridge_slave_0: left allmulticast mode [ 1238.126051][ T145] bridge_slave_0: left promiscuous mode [ 1238.132895][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.657191][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.674725][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.689042][ T145] bond0 (unregistering): Released all slaves [ 1238.926014][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.944693][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.966098][ T145] bond0 (unregistering): Released all slaves [ 1239.003630][T10442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.011807][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.043331][T10442] bridge_slave_1: entered allmulticast mode [ 1239.057929][T10442] bridge_slave_1: entered promiscuous mode [ 1239.175548][ T49] Bluetooth: hci4: command tx timeout [ 1239.222498][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.276991][T10420] team0: Port device team_slave_0 added [ 1239.309619][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.334579][T10442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1239.359014][T10442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1239.403314][ T145] hsr_slave_0: left promiscuous mode [ 1239.413535][ T145] hsr_slave_1: left promiscuous mode [ 1239.425229][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.434686][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.452680][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.461456][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.487011][ T145] hsr_slave_0: left promiscuous mode [ 1239.500653][ T145] hsr_slave_1: left promiscuous mode [ 1239.509793][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.517522][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1239.537381][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.545365][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1239.590189][ T145] veth1_macvtap: left promiscuous mode [ 1239.596303][ T145] veth0_macvtap: left promiscuous mode [ 1239.604379][ T145] veth1_vlan: left promiscuous mode [ 1239.610164][ T145] veth0_vlan: left promiscuous mode [ 1239.620258][ T145] veth1_macvtap: left promiscuous mode [ 1239.625985][ T145] veth0_macvtap: left promiscuous mode [ 1239.633010][ T145] veth1_vlan: left promiscuous mode [ 1239.639909][ T145] veth0_vlan: left promiscuous mode [ 1240.587001][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1240.646560][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1241.246517][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1241.275144][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1241.589930][T10420] team0: Port device team_slave_1 added [ 1241.947465][T10442] team0: Port device team_slave_0 added [ 1242.142650][T10427] team0: Port device team_slave_0 added [ 1242.166494][T10442] team0: Port device team_slave_1 added [ 1242.224705][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.235027][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.275783][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.327591][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.353125][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.405765][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.481685][T10427] team0: Port device team_slave_1 added [ 1242.935081][T10442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.944561][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1242.995520][T10442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.070999][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.110659][T10226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1243.121986][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.169725][T10226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1243.177698][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.190175][T10226] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1243.217390][T10226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1243.232764][T10226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1243.233214][T10442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.277417][T10442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.305192][T10442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.349380][T10373] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1243.415872][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.427856][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.491086][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.570205][T10373] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1243.605442][T10373] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1243.829924][T10373] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1243.888739][T10420] hsr_slave_0: entered promiscuous mode [ 1243.900653][T10420] hsr_slave_1: entered promiscuous mode [ 1243.915099][T10420] debugfs: 'hsr0' already exists in 'hsr' [ 1243.921789][T10420] Cannot create hsr debugfs directory [ 1244.006504][T10442] hsr_slave_0: entered promiscuous mode [ 1244.029406][T10442] hsr_slave_1: entered promiscuous mode [ 1244.046627][T10442] debugfs: 'hsr0' already exists in 'hsr' [ 1244.059456][T10442] Cannot create hsr debugfs directory [ 1244.308039][T10427] hsr_slave_0: entered promiscuous mode [ 1244.317975][T10427] hsr_slave_1: entered promiscuous mode [ 1244.327981][T10427] debugfs: 'hsr0' already exists in 'hsr' [ 1244.334908][T10427] Cannot create hsr debugfs directory [ 1244.530716][ T6008] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.720666][ T6008] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.916798][ T6008] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.257962][ T6008] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.329858][T10226] Bluetooth: hci2: command tx timeout [ 1246.720485][ T6008] bridge_slave_1: left allmulticast mode [ 1246.726647][ T6008] bridge_slave_1: left promiscuous mode [ 1246.734522][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.747649][ T6008] bridge_slave_0: left allmulticast mode [ 1246.753914][ T6008] bridge_slave_0: left promiscuous mode [ 1246.766337][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.156419][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.176964][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.195955][ T6008] bond0 (unregistering): Released all slaves [ 1247.408714][T10226] Bluetooth: hci2: command tx timeout [ 1247.877040][T10496] chnl_net:caif_netlink_parms(): no params data found [ 1247.975034][ T6008] hsr_slave_0: left promiscuous mode [ 1247.984133][ T6008] hsr_slave_1: left promiscuous mode [ 1247.992349][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1248.005519][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1248.016774][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1248.024876][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.057519][ T6008] veth1_macvtap: left promiscuous mode [ 1248.063495][ T6008] veth0_macvtap: left promiscuous mode [ 1248.069973][ T6008] veth1_vlan: left promiscuous mode [ 1248.075544][ T6008] veth0_vlan: left promiscuous mode [ 1248.578540][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.585276][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.726476][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 1248.786095][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 1249.324905][T10420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1249.445455][T10420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1249.484527][T10420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1249.491814][T10226] Bluetooth: hci2: command tx timeout [ 1249.523551][T10420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1249.869658][T10373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.106432][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.114578][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.127323][T10496] bridge_slave_0: entered allmulticast mode [ 1250.144470][T10496] bridge_slave_0: entered promiscuous mode [ 1250.213498][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.221313][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.232205][T10496] bridge_slave_1: entered allmulticast mode [ 1250.245615][T10496] bridge_slave_1: entered promiscuous mode [ 1250.343388][T10373] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.413171][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.436089][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.615388][T10496] team0: Port device team_slave_0 added [ 1250.634390][T10496] team0: Port device team_slave_1 added [ 1250.651078][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.658594][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.784074][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.791688][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.876151][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.887920][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.917973][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.940441][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.947607][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1250.974398][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.202764][T10496] hsr_slave_0: entered promiscuous mode [ 1251.214886][T10496] hsr_slave_1: entered promiscuous mode [ 1251.569699][T10226] Bluetooth: hci2: command tx timeout [ 1251.644918][T10427] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1251.706048][T10427] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1251.736039][T10427] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1251.760313][T10427] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1252.256255][T10420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.405827][T10442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1252.551585][T10442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1252.626053][T10442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1252.738977][T10442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1252.982396][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.103078][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.110699][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.267008][ T158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.274678][ T158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.494725][T10373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.014691][T10496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1254.151310][T10496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1254.262208][T10496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1254.342378][T10496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1254.572142][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.865945][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.090684][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.098458][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.306366][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.314037][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.758986][T10442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1256.296067][T10442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.321687][T10373] veth0_vlan: entered promiscuous mode [ 1256.353638][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.414704][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.422228][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1256.562585][T10373] veth1_vlan: entered promiscuous mode [ 1256.602592][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.610305][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.803774][T10496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.195014][T10496] 8021q: adding VLAN 0 to HW filter on device team0 [ 1257.374573][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.382226][ T9059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1257.532997][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.540686][ T9059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1257.596378][T10373] veth0_macvtap: entered promiscuous mode [ 1257.766978][T10373] veth1_macvtap: entered promiscuous mode [ 1258.347003][T10373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.504867][T10420] veth0_vlan: entered promiscuous mode [ 1258.534788][T10373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.651281][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.756041][ T158] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.774198][ T158] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.824000][T10420] veth1_vlan: entered promiscuous mode [ 1258.891566][ T158] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.921223][ T35] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.452363][T10442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.521926][T10420] veth0_macvtap: entered promiscuous mode [ 1259.619680][T10420] veth1_macvtap: entered promiscuous mode [ 1259.911625][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.104253][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1260.395104][T10496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.493075][ T158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.540738][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.694706][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.729991][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1260.856861][T10442] veth0_vlan: entered promiscuous mode [ 1261.195041][T10442] veth1_vlan: entered promiscuous mode [ 1261.472707][T10427] veth0_vlan: entered promiscuous mode [ 1261.639871][T10427] veth1_vlan: entered promiscuous mode [ 1261.884264][T10442] veth0_macvtap: entered promiscuous mode [ 1262.119386][T10442] veth1_macvtap: entered promiscuous mode [ 1262.581738][T10442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.711484][T10442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.812099][T10427] veth0_macvtap: entered promiscuous mode [ 1262.980999][ T158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.028571][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.037720][ T158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.143708][T10427] veth1_macvtap: entered promiscuous mode [ 1263.215281][ T158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.699145][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.721573][T10496] veth0_vlan: entered promiscuous mode [ 1263.889063][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.964913][T10496] veth1_vlan: entered promiscuous mode [ 1264.226987][ T5874] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.240391][ T5874] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.328405][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.344324][ T5965] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.866876][T10496] veth0_macvtap: entered promiscuous mode [ 1265.050682][T10496] veth1_macvtap: entered promiscuous mode [ 1265.504832][ T9059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.585731][ T9059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.705793][T10496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.897702][T10496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.965425][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.996558][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.183048][ T145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.231156][ T9059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.336022][ T9059] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.409034][ T9059] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.210230][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.258641][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.669872][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.677926][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.386998][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1272.481526][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1272.955731][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.024575][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.914231][ T5092] IPVS: starting estimator thread 0... [ 1275.018815][T10704] IPVS: using max 192 ests per chain, 9600 per kthread [ 1275.454116][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.589139][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.775438][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.822045][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.281893][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.378265][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.279133][T10735] 9p: Bad value for 'wfdno' [ 1279.575075][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.701502][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.885581][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 1282.588877][ T8957] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1282.843285][ T8957] usb 6-1: Using ep0 maxpacket: 16 [ 1282.919812][ T8957] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.028682][ T8957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1283.166192][ T8957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1283.386741][ T8957] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.666394][ T8957] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1283.768821][ T8957] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1283.848716][ T8957] usb 6-1: Manufacturer: syz [ 1283.943361][ T8957] usb 6-1: config 0 descriptor?? [ 1285.438578][ T8957] rc_core: IR keymap rc-hauppauge not found [ 1285.473457][ T8957] Registered IR keymap rc-empty [ 1285.598832][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1285.643218][T10768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1285.747432][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1285.877436][ T8957] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1286.073375][ T8957] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 1286.230825][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1286.328969][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1286.408969][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1286.470287][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1287.284426][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1287.328480][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1287.349373][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1288.341904][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1289.321882][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1289.372049][ T8957] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1289.854840][T10789] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1290.924797][ T5826] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1291.298829][ T5826] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.374839][ T8957] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1291.385721][ T8957] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1291.431807][ T5826] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1291.575284][ T5826] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1292.359521][ T8957] usb 6-1: USB disconnect, device number 2 [ 1292.398425][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1292.406790][ T5826] usb 10-1: SerialNumber: syz [ 1294.199950][ T5826] usb 10-1: can't set config #1, error -71 [ 1294.408796][ T5826] usb 10-1: USB disconnect, device number 2 [ 1295.405527][T10814] /dev/sg0: Can't lookup blockdev [ 1295.612330][T10819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1296.439174][ T5824] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1296.708728][ T5824] usb 10-1: Using ep0 maxpacket: 16 [ 1296.750930][ T5824] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.858680][ T5824] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.919949][ T5824] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1296.993764][ T5824] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1297.068583][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.221336][ T5824] usb 10-1: config 0 descriptor?? [ 1299.289914][ T5824] usb 10-1: USB disconnect, device number 3 [ 1300.778756][ T5826] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1300.982210][T10859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1301.048492][ T5826] usb 6-1: Using ep0 maxpacket: 16 [ 1301.111401][ T5826] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.177436][ T5826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1301.264481][ T5826] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1301.328463][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.372380][ T5826] usb 6-1: Product: syz [ 1301.376804][ T5826] usb 6-1: Manufacturer: syz [ 1301.429100][ T5826] usb 6-1: SerialNumber: syz [ 1301.759900][ T5826] usb 6-1: 0:2 : does not exist [ 1301.898755][ T5826] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1303.197554][ T5826] usb 6-1: USB disconnect, device number 3 [ 1304.008406][ T5826] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1304.273161][ T5826] usb 9-1: Using ep0 maxpacket: 16 [ 1304.360744][ T5826] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.487730][ T5826] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.600967][ T5826] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1304.666680][ T5826] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1304.793625][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.913413][ T5826] usb 9-1: config 0 descriptor?? [ 1305.515194][T10883] udevd[10883]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1306.278926][ T5826] usb 9-1: USB disconnect, device number 2 [ 1307.046244][T10910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.037410][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.050491][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.441275][ T5824] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1311.668556][ T5824] usb 9-1: Using ep0 maxpacket: 16 [ 1311.699297][ T5824] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.738540][ T5824] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1311.842872][ T5824] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1311.932788][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.985078][ T5824] usb 9-1: Product: syz [ 1312.009404][ T5824] usb 9-1: Manufacturer: syz [ 1312.014271][ T5824] usb 9-1: SerialNumber: syz [ 1312.479761][ T5824] usb 9-1: 0:2 : does not exist [ 1312.637296][ T5824] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1313.761011][ T5824] usb 9-1: USB disconnect, device number 3 [ 1314.259429][T10951] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1314.339234][T10956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1315.033325][T10844] udevd[10844]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.330715][ T5824] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1319.589222][ T5824] usb 9-1: Using ep0 maxpacket: 16 [ 1319.644928][ T5824] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.688994][ T5824] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.795856][ T5824] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.867054][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.979949][ T5824] usb 9-1: Product: syz [ 1319.984381][ T5824] usb 9-1: Manufacturer: syz [ 1320.058518][ T5824] usb 9-1: SerialNumber: syz [ 1320.401262][ T5824] usb 9-1: 0:2 : does not exist [ 1320.559386][ T5824] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1320.639676][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1320.690042][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1320.702291][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1320.732620][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1320.770885][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1321.850515][ T5824] usb 9-1: USB disconnect, device number 4 [ 1321.996908][T11003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.930591][ T49] Bluetooth: hci5: command tx timeout [ 1323.765418][T10844] udevd[10844]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1324.192483][ T29] audit: type=1326 audit(1774815832.627:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1324.376984][ T29] audit: type=1326 audit(1774815832.687:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1324.630796][ T29] audit: type=1326 audit(1774815832.687:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1324.908760][ T29] audit: type=1326 audit(1774815832.687:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.028273][ T49] Bluetooth: hci5: command tx timeout [ 1325.061088][ T29] audit: type=1326 audit(1774815832.767:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.088437][ T29] audit: type=1326 audit(1774815832.767:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.115719][ T29] audit: type=1326 audit(1774815832.767:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.143630][ T29] audit: type=1326 audit(1774815832.787:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.174081][ T29] audit: type=1326 audit(1774815832.787:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1325.202360][ T29] audit: type=1326 audit(1774815832.787:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11020 comm="syz.8.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5ab9c799 code=0x7ffc0000 [ 1326.606283][T10992] chnl_net:caif_netlink_parms(): no params data found [ 1327.075605][T11045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1327.110826][ T49] Bluetooth: hci5: command tx timeout [ 1327.835559][ T6008] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.958968][ T5826] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1328.181351][ T5826] usb 10-1: Using ep0 maxpacket: 32 [ 1328.278388][ T5826] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 1328.286934][ T5826] usb 10-1: config 0 has no interface number 0 [ 1328.376696][ T5826] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1328.471668][ T6008] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.501545][ T5826] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1328.596860][ T5826] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1328.659946][ T5826] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1328.795840][ T5826] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1328.875238][ T5826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.890368][ T6008] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.932539][ T5826] usb 10-1: Product: syz [ 1328.993103][ T5826] usb 10-1: Manufacturer: syz [ 1329.039660][ T5826] usb 10-1: SerialNumber: syz [ 1329.079528][ T5826] usb 10-1: config 0 descriptor?? [ 1329.172635][ T49] Bluetooth: hci5: command tx timeout [ 1329.246550][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input12 [ 1329.273342][ T6008] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.698590][ T5826] usb 10-1: USB disconnect, device number 4 [ 1330.642111][T11080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1331.243136][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.287631][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.349307][T10992] bridge_slave_0: entered allmulticast mode [ 1331.420965][T10992] bridge_slave_0: entered promiscuous mode [ 1331.486595][ T6008] bridge_slave_1: left allmulticast mode [ 1331.527605][ T6008] bridge_slave_1: left promiscuous mode [ 1331.577775][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.604189][T11088] sctp: [Deprecated]: syz.8.955 (pid 11088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1331.604189][T11088] Use struct sctp_sack_info instead [ 1331.727196][ T6008] bridge_slave_0: left allmulticast mode [ 1331.782269][ T6008] bridge_slave_0: left promiscuous mode [ 1331.824097][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.134528][T11093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.739785][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1333.739872][ T29] audit: type=1326 audit(1774815842.157:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1333.960795][T11111] netlink: 16 bytes leftover after parsing attributes in process `syz.8.958'. [ 1334.798880][ T29] audit: type=1326 audit(1774815842.217:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1334.822682][ T29] audit: type=1326 audit(1774815842.217:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1334.846930][ T29] audit: type=1326 audit(1774815842.217:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1335.582013][ T5826] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1335.647063][ T29] audit: type=1326 audit(1774815842.277:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1336.587359][ T29] audit: type=1326 audit(1774815842.277:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1336.801671][ T29] audit: type=1326 audit(1774815842.277:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1336.837671][ T29] audit: type=1326 audit(1774815843.017:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1336.969913][ T5826] usb 6-1: device descriptor read/all, error -71 [ 1337.018517][ T29] audit: type=1326 audit(1774815843.017:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1337.157113][ T29] audit: type=1326 audit(1774815843.017:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11106 comm="syz.9.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426dd9c799 code=0x7ffc0000 [ 1337.388500][ T8957] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1337.608601][ T8957] usb 4-1: Using ep0 maxpacket: 32 [ 1337.647568][ T8957] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 1337.738566][ T8957] usb 4-1: config 0 has no interface number 0 [ 1337.744935][ T8957] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1337.797861][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.895098][ T8957] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1337.960142][ T8957] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1338.020076][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.038436][ T8957] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1338.118806][ T6008] bond0 (unregistering): Released all slaves [ 1338.174481][ T8957] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1338.209293][ T8957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.217870][ T8957] usb 4-1: Product: syz [ 1338.286472][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.294551][ T8957] usb 4-1: Manufacturer: syz [ 1338.308790][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.323118][ T8957] usb 4-1: SerialNumber: syz [ 1338.391598][T10992] bridge_slave_1: entered allmulticast mode [ 1338.412744][ T8957] usb 4-1: config 0 descriptor?? [ 1338.476189][T10992] bridge_slave_1: entered promiscuous mode [ 1338.536475][ T8957] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input13 [ 1339.343966][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.514631][ T8957] input: failed to attach handler mousedev to device input13, error: -8 [ 1339.680388][ T8957] usb 4-1: USB disconnect, device number 3 [ 1340.444460][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.998521][ T5824] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1342.250712][T10992] team0: Port device team_slave_0 added [ 1342.299346][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.368433][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.389241][T10992] team0: Port device team_slave_1 added [ 1342.437082][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1342.552263][ T5824] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1342.616970][T11142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.621291][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.912334][ T5824] usb 6-1: config 0 descriptor?? [ 1343.584105][ T5824] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 1343.942589][ T5824] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1344.916773][ T6008] hsr_slave_0: left promiscuous mode [ 1345.017839][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.972'. [ 1345.371871][ T6008] hsr_slave_1: left promiscuous mode [ 1345.480952][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.592048][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.828598][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.933091][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.039092][ T5826] usb 6-1: USB disconnect, device number 6 [ 1346.389247][ T6008] veth1_macvtap: left promiscuous mode [ 1346.395026][ T6008] veth0_macvtap: left promiscuous mode [ 1346.508712][ T6008] veth1_vlan: left promiscuous mode [ 1346.568641][ T6008] veth0_vlan: left promiscuous mode [ 1346.817162][T11155] fido_id[11155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1347.895679][T10226] Bluetooth: hci0: command 0x0406 tx timeout [ 1351.644101][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1351.656308][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1351.673584][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1351.709251][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1351.722315][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1352.744009][ T5092] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1353.012626][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 1353.019239][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 1353.026077][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 1353.498425][ T5092] usb 6-1: Using ep0 maxpacket: 32 [ 1353.552631][ T5092] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1353.568516][ T5092] usb 6-1: config 0 has no interface number 0 [ 1353.575001][ T5092] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1353.598815][ T5092] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1353.612466][ T5092] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1353.651541][ T5092] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.732611][ T5092] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1353.771695][ T5092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.808495][ T8501] Bluetooth: hci2: command tx timeout [ 1353.818751][ T5092] usb 6-1: Product: syz [ 1353.823237][ T5092] usb 6-1: Manufacturer: syz [ 1353.928832][ T5092] usb 6-1: SerialNumber: syz [ 1353.986363][ T5092] usb 6-1: config 0 descriptor?? [ 1354.125090][ T5092] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input15 [ 1354.450903][ T5092] usb 6-1: USB disconnect, device number 7 [ 1354.843163][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 1355.045508][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 1355.925463][ T8501] Bluetooth: hci2: command tx timeout [ 1356.077631][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 1357.978463][ T8501] Bluetooth: hci2: command tx timeout [ 1358.832327][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1358.904049][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.077942][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1359.165798][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1359.260916][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1359.287583][ T5826] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1359.298990][ T5092] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1359.348340][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1359.508713][ T5826] usb 6-1: Using ep0 maxpacket: 32 [ 1359.540959][ T5092] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1359.570149][ T5826] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1359.594986][ T5092] usb 4-1: not running at top speed; connect to a high speed hub [ 1359.617478][ T5826] usb 6-1: config 0 has no interface number 0 [ 1359.656741][ T5092] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.707681][ T5826] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1360.053315][ T8501] Bluetooth: hci2: command tx timeout [ 1360.494558][T10992] hsr_slave_0: entered promiscuous mode [ 1360.582693][ T5092] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1360.603576][ T5826] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1360.631564][ T5826] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1360.639614][ T5092] usb 4-1: string descriptor 0 read error: -22 [ 1360.660792][ T5826] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1360.675409][ T5826] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1360.692994][T10992] hsr_slave_1: entered promiscuous mode [ 1360.706489][ T5092] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1360.744294][ T5092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.772139][ T5826] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1360.790181][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.813304][ T5826] usb 6-1: Product: syz [ 1360.819684][ T5826] usb 6-1: Manufacturer: syz [ 1360.824842][ T5826] usb 6-1: SerialNumber: syz [ 1360.948040][ T5826] usb 6-1: config 0 descriptor?? [ 1360.965669][T11223] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1361.322813][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input16 [ 1361.521100][ T5826] usb 6-1: USB disconnect, device number 8 [ 1361.521607][ C0] bcm5974 6-1:0.119: trackpad urb failed: -19 [ 1362.299402][ T5092] usb 4-1: USB disconnect, device number 4 [ 1363.238845][ T8957] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1363.488679][ T8957] usb 6-1: Using ep0 maxpacket: 32 [ 1363.567019][ T8957] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1363.586402][ T6008] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.619377][ T8957] usb 6-1: config 0 has no interface number 0 [ 1363.636630][ T8957] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1363.720960][ T8957] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1363.812732][ T8957] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1363.891251][ T8957] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1363.938337][ T8957] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1364.018768][ T8957] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1364.056312][ T8957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.087344][ T8957] usb 6-1: Product: syz [ 1364.138427][ T8957] usb 6-1: Manufacturer: syz [ 1364.143316][ T8957] usb 6-1: SerialNumber: syz [ 1364.190764][ T6008] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.191910][ T8957] usb 6-1: config 0 descriptor?? [ 1364.305406][T11238] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1364.493923][ T8957] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input17 [ 1364.645282][ C0] bcm5974 6-1:0.119: trackpad urb failed: -1 [ 1364.732361][ T6008] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.752515][ T8957] usb 6-1: USB disconnect, device number 9 [ 1365.220976][ T6008] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.036956][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.8.997'. [ 1368.818788][ T8957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1369.505155][ T8957] usb 4-1: Using ep0 maxpacket: 16 [ 1369.545045][ T8957] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.578451][ T8957] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.654628][ T8957] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.721655][ T8957] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1369.809869][ T5824] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1369.841166][ T8957] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1369.925218][ T8957] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1369.968951][ T8957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.058382][ T5824] usb 9-1: Using ep0 maxpacket: 32 [ 1370.098738][ T5824] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 1370.147353][ T5824] usb 9-1: config 0 has no interface number 0 [ 1370.205642][ T6008] bridge_slave_1: left allmulticast mode [ 1370.206085][ T5824] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1370.251291][ T6008] bridge_slave_1: left promiscuous mode [ 1370.264193][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.347957][ T6008] bridge_slave_0: left allmulticast mode [ 1370.356066][ T6008] bridge_slave_0: left promiscuous mode [ 1370.360717][ T5824] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1370.410991][ T5824] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1370.437736][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.492245][ T5824] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 1370.588412][ T5824] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1370.677853][ T5824] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1370.711841][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.759851][T11269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.771000][T11269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.797148][ T5824] usb 9-1: Product: syz [ 1370.817753][ T5824] usb 9-1: Manufacturer: syz [ 1371.463522][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.474856][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.598283][ T5824] usb 9-1: SerialNumber: syz [ 1371.621010][ T5824] usb 9-1: config 0 descriptor?? [ 1371.641208][T11277] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1371.769256][T11287] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1371.779301][T11287] ===================================================== [ 1371.786909][T11287] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 1371.795069][T11287] dvbdmx_release_ts_feed+0x198/0x290 [ 1371.800921][T11287] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1371.806298][T11287] dvb_demux_do_ioctl+0x78b/0xc80 [ 1371.811882][T11287] dvb_usercopy+0x263/0x500 [ 1371.816708][T11287] dvb_demux_ioctl+0x46/0x70 [ 1371.821934][T11287] __se_sys_ioctl+0x23c/0x400 [ 1371.830927][T11287] __x64_sys_ioctl+0x97/0xe0 [ 1371.836947][T11287] x64_sys_call+0x1975/0x3ea0 [ 1371.842342][T11287] do_syscall_64+0x134/0xf80 [ 1371.847459][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.855925][T11287] [ 1371.859344][T11287] Uninit was created at: [ 1371.864053][T11287] __alloc_frozen_pages_noprof+0x6f7/0x1020 [ 1371.871942][T11287] alloc_pages_mpol+0x328/0x860 [ 1371.877266][T11287] alloc_pages_noprof+0x101/0x280 [ 1371.882696][T11287] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 1371.889019][T11287] __vmalloc_noprof+0x128/0x1f0 [ 1371.894206][T11287] vmalloc_array_noprof+0x48/0x80 [ 1371.899776][T11287] dvb_dmx_init+0x121/0x930 [ 1371.904631][T11287] vidtv_bridge_probe+0x1b1f/0x2690 [ 1371.910364][T11287] platform_probe+0x213/0x370 [ 1371.915487][T11287] really_probe+0x4d5/0xe40 [ 1371.920471][T11287] __driver_probe_device+0x25e/0x370 [ 1371.926105][T11287] driver_probe_device+0x70/0x8f0 [ 1371.931684][T11287] __driver_attach+0x541/0xaa0 [ 1371.936763][T11287] bus_for_each_dev+0x33b/0x580 [ 1371.942885][T11287] driver_attach+0x51/0x70 [ 1371.947484][T11287] bus_add_driver+0x54f/0xdb0 [ 1371.955117][T11287] driver_register+0x42e/0x6a0 [ 1371.961076][T11287] __platform_driver_register+0x65/0x80 [ 1371.967003][T11287] vidtv_bridge_init+0x73/0x100 [ 1371.972419][T11287] do_one_initcall+0x237/0xbb0 [ 1371.977548][T11287] do_initcall_level+0x157/0x350 [ 1371.982998][T11287] do_initcalls+0x176/0x310 [ 1371.987934][T11287] do_basic_setup+0x1d/0x30 [ 1371.992970][T11287] kernel_init_freeable+0x213/0x460 [ 1371.998596][T11287] kernel_init+0x2f/0x5e0 [ 1372.003356][T11287] ret_from_fork+0x20f/0x910 [ 1372.008369][T11287] ret_from_fork_asm+0x1a/0x30 [ 1372.013502][T11287] [ 1372.016123][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.5.1004 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.027533][T11287] Tainted: [L]=SOFTLOCKUP [ 1372.032183][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1372.043430][T11287] ===================================================== [ 1372.051088][T11287] Disabling lock debugging due to kernel taint [ 1372.113105][T11287] Kernel panic - not syncing: kmsan.panic set ... [ 1372.119748][T11287] CPU: 0 UID: 0 PID: 11287 Comm: syz.5.1004 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1372.130934][T11287] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1372.136612][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1372.146930][T11287] Call Trace: [ 1372.150340][T11287] [ 1372.153389][T11287] __dump_stack+0x26/0x30 [ 1372.158031][T11287] dump_stack_lvl+0x50/0x1c0 [ 1372.162916][T11287] ? dump_stack+0x12/0x25 [ 1372.167463][T11287] dump_stack+0x1e/0x25 [ 1372.171831][T11287] vpanic+0x7b4/0x1430 [ 1372.176149][T11287] panic+0x15d/0x160 [ 1372.180326][T11287] kmsan_report+0x31a/0x320 [ 1372.185107][T11287] ? vprintk_emit+0xb60/0xba0 [ 1372.190048][T11287] ? __msan_warning+0x1b/0x30 [ 1372.194970][T11287] ? dvbdmx_release_ts_feed+0x198/0x290 [ 1372.200764][T11287] ? dvb_dmxdev_add_pid+0xacc/0xb50 [ 1372.206211][T11287] ? dvb_demux_do_ioctl+0x78b/0xc80 [ 1372.211680][T11287] ? dvb_usercopy+0x263/0x500 [ 1372.216560][T11287] ? dvb_demux_ioctl+0x46/0x70 [ 1372.221562][T11287] ? __se_sys_ioctl+0x23c/0x400 [ 1372.226662][T11287] ? __x64_sys_ioctl+0x97/0xe0 [ 1372.231666][T11287] ? x64_sys_call+0x1975/0x3ea0 [ 1372.236751][T11287] ? do_syscall_64+0x134/0xf80 [ 1372.241760][T11287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.248060][T11287] ? irqentry_exit+0x8f/0x6c0 [ 1372.253001][T11287] ? kmsan_get_metadata+0xf1/0x160 [ 1372.258378][T11287] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1372.265055][T11287] ? kmsan_get_metadata+0xf1/0x160 [ 1372.270429][T11287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1372.276524][T11287] ? preempt_schedule_common+0x5b/0x80 [ 1372.282213][T11287] ? preempt_schedule+0x30/0x40 [ 1372.287273][T11287] ? preempt_schedule_thunk+0x16/0x30 [ 1372.292961][T11287] ? _raw_spin_unlock_irq+0x47/0x50 [ 1372.298432][T11287] ? kmsan_get_metadata+0x146/0x160 [ 1372.303924][T11287] __msan_warning+0x1b/0x30 [ 1372.308660][T11287] dvbdmx_release_ts_feed+0x198/0x290 [ 1372.314297][T11287] dvb_dmxdev_add_pid+0xacc/0xb50 [ 1372.319548][T11287] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 1372.325796][T11287] dvb_demux_do_ioctl+0x78b/0xc80 [ 1372.331058][T11287] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1372.336829][T11287] dvb_usercopy+0x263/0x500 [ 1372.341533][T11287] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1372.347350][T11287] ? kmsan_get_metadata+0xf1/0x160 [ 1372.352729][T11287] dvb_demux_ioctl+0x46/0x70 [ 1372.357651][T11287] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1372.363248][T11287] __se_sys_ioctl+0x23c/0x400 [ 1372.368183][T11287] __x64_sys_ioctl+0x97/0xe0 [ 1372.373110][T11287] x64_sys_call+0x1975/0x3ea0 [ 1372.378030][T11287] do_syscall_64+0x134/0xf80 [ 1372.382849][T11287] ? clear_bhb_loop+0x50/0xa0 [ 1372.387862][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.393991][T11287] RIP: 0033:0x7ff8ac99c799 [ 1372.398567][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.418474][T11287] RSP: 002b:00007ff8ad7e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.427184][T11287] RAX: ffffffffffffffda RBX: 00007ff8acc16180 RCX: 00007ff8ac99c799 [ 1372.435328][T11287] RDX: 0000200000000300 RSI: 0000000040026f33 RDI: 0000000000000006 [ 1372.443461][T11287] RBP: 00007ff8aca32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1372.451684][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.459814][T11287] R13: 00007ff8acc16218 R14: 00007ff8acc16180 R15: 00007ffe5d87db48 [ 1372.467999][T11287] [ 1372.471755][T11287] Kernel Offset: disabled [ 1372.476250][T11287] Rebooting in 86400 seconds..