last executing test programs: 7m21.838133256s ago: executing program 0 (id=7): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 7m21.302948253s ago: executing program 0 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501070000000000000007100400", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="010101007f0000010000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m20.903236784s ago: executing program 0 (id=9): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0xb, {{0xa, 0x4e20, 0x5, @mcast2, 0x81}}, {{0xa, 0x4e20, 0xfffffffb, @empty, 0x8000}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)=@newqdisc={0x28, 0x14, 0xf0b, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, {0xc}, {0x8, 0xfff2}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x200000) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000002c0)={0x1, 0xff, 0xa, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x3]}}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x5}]}}]}, 0x44}}, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) 7m18.92453679s ago: executing program 2 (id=3): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @pix_mp={0x6, 0xe565, 0x38415261, 0x4, 0xb, [{0x9, 0x4}, {0xf82, 0x1}, {0x2, 0x8}, {0x7, 0xfffffffd}, {0xc0}, {0xa, 0x7fff}, {0xffffffff, 0x5a32}, {0x1, 0x7}], 0x1, 0x0, 0x1, 0x2}}) 7m18.201588418s ago: executing program 2 (id=11): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xfffe}, 'syz1\x00', 0xfffffffc}) ioctl$UI_DEV_CREATE(r0, 0x5501) 7m17.356704988s ago: executing program 2 (id=14): socket$caif_stream(0x25, 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x440000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) shutdown(r0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="5be1516340b6c50c8d34bce688f164ad8c090c852d23d74f40e486eccc4fe972"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, 0x0, 0x20000001) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) userfaultfd(0x801) 7m15.609629785s ago: executing program 3 (id=17): r0 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) setpgid(r1, r1) setpgid(0x0, r1) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 7m14.590918432s ago: executing program 3 (id=19): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000840) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000440)={0x9, @sdr={0x34325258, 0x400}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/slabinfo\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) lseek(r2, 0x7, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) 7m11.477846377s ago: executing program 3 (id=22): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) 7m8.061426405s ago: executing program 0 (id=27): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) 7m7.193322885s ago: executing program 0 (id=29): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$inet(0x2, 0x3, 0x1) syz_open_dev$mouse(0x0, 0x0, 0x2042) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 7m4.432855391s ago: executing program 3 (id=32): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0xffffffffffffff94, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7m1.690126256s ago: executing program 32 (id=14): socket$caif_stream(0x25, 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x440000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) shutdown(r0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000200)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="5be1516340b6c50c8d34bce688f164ad8c090c852d23d74f40e486eccc4fe972"}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r4, 0x0, 0x20000001) openat$kvm(0xffffffffffffff9c, 0x0, 0x448000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x20048081}, 0x800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) userfaultfd(0x801) 7m0.613270137s ago: executing program 0 (id=34): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r5 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) bind$vsock_stream(r8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = pidfd_getfd(r1, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc005}, 0x40800) 7m0.494278389s ago: executing program 3 (id=35): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000002c0)={r1}) 6m57.589550111s ago: executing program 3 (id=39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m44.892099324s ago: executing program 33 (id=34): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r5 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) write$dsp(r4, &(0x7f0000000200)="97", 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x8, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r8 = socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40814}, 0x800) bind$vsock_stream(r8, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = pidfd_getfd(r1, r9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1a1001, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc005}, 0x40800) 6m42.127450452s ago: executing program 34 (id=39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m58.04565084s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() prlimit64(r0, 0x4dcac099e9802ae0, &(0x7f0000000180)={0xd, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) read$proc_mixer(0xffffffffffffffff, &(0x7f00000003c0)=""/45, 0x2d) 5m55.310336819s ago: executing program 1 (id=94): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) 5m54.245064834s ago: executing program 1 (id=96): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsopen(0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021200010000000009243200009740a4"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m49.47571975s ago: executing program 1 (id=100): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 5m48.985675084s ago: executing program 1 (id=101): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 5m46.498136637s ago: executing program 1 (id=104): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = open(&(0x7f0000000140)='./file1\x00', 0x18dcc2, 0x5c) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d0040d1) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 5m25.083102608s ago: executing program 35 (id=104): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = open(&(0x7f0000000140)='./file1\x00', 0x18dcc2, 0x5c) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d0040d1) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3m51.989206702s ago: executing program 7 (id=54): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 3m49.568549487s ago: executing program 7 (id=201): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xe799, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=[@tclass={{0x14, 0x29, 0x43, 0x3}}], 0x18}}], 0x1, 0x60004) 3m48.923124745s ago: executing program 7 (id=204): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 3m48.20053048s ago: executing program 7 (id=208): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'vlan1\x00', {'tunl0\x00'}, 0x3}) 3m45.248349504s ago: executing program 7 (id=211): getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, &(0x7f00000003c0)) 3m38.853515321s ago: executing program 7 (id=215): r0 = socket(0x28, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x73, @multicast1, 0x4e23, 0x0, 'sh\x00', 0x4, 0x7, 0x18}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x4001, @random="fc1791b22781", 'ip6gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3m23.001158906s ago: executing program 36 (id=215): r0 = socket(0x28, 0x5, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x73, @multicast1, 0x4e23, 0x0, 'sh\x00', 0x4, 0x7, 0x18}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000200)={0x18, 0x0, {0x4001, @random="fc1791b22781", 'ip6gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 2m14.974783814s ago: executing program 4 (id=313): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800820010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m6.503721377s ago: executing program 4 (id=319): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 1m52.020293972s ago: executing program 4 (id=327): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x24020400) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x47bc, 0x3000000, 0x0, 0x0, 0x0) 1m39.093998894s ago: executing program 4 (id=336): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) read$qrtrtun(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 1m30.585098227s ago: executing program 4 (id=344): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x204031, 0xffffffffffffffff, 0xffffd000) connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x2, @multicast1}}, 0x10) 1m24.032115351s ago: executing program 4 (id=348): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsopen(0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215e5666c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53724eb28301420ced16a8110a8680c91c665f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m8.287208438s ago: executing program 37 (id=348): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsopen(0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 58.201299153s ago: executing program 8 (id=368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 49.935587698s ago: executing program 8 (id=373): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf320009", @ANYRES64], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 46.207460538s ago: executing program 8 (id=375): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001f80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xe799, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x60004) 45.143242219s ago: executing program 8 (id=377): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) eventfd2(0x6a, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00'], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 40.215828346s ago: executing program 8 (id=379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 38.291364435s ago: executing program 8 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 23.296852257s ago: executing program 5 (id=389): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x15, 0x5, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x400017e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x83515, 0xc2de, 0x8, 0x0, 0x0) 23.099610568s ago: executing program 38 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x4c, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6, 0x1, [], "bf3f030b7d27"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x56a]}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xee, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) 19.773141098s ago: executing program 6 (id=391): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 18.293453721s ago: executing program 6 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), 0x10000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) timerfd_create(0x9, 0x80800) timer_create(0x9, 0x0, &(0x7f0000000500)) 11.147804468s ago: executing program 5 (id=393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r3, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) read$hidraw(r1, 0x0, 0x0) dup2(r3, r1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x81}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x4000090) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r7 = syz_open_procfs(0x0, 0x0) fchdir(r7) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00') 9.976732771s ago: executing program 6 (id=394): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf320009", @ANYRES64], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.817475628s ago: executing program 5 (id=395): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x1c) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000300)) io_setup(0x408, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000000640)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x69, r0, &(0x7f0000000000)="ab89e0955eacf6a244f02fb8de5510fb643c80a55bdf036589b52c494f72c9253c6fbea975a8f1af6cf8b223e6997744717e17f847b8358dd660882a45b78740117b5b1732965ca6866bec8efa98e662a8376e82940f63cb2645f2f553e0af75017d11c2fe584cb3e2f4573587b3c27eaed0a22f6e3241eafd367d468745bd078a91871910a6d28aa6fb3a0b826c36d959ade2d5945b", 0x96, 0x48, 0x0, 0x3}, 0x0) 8.327323293s ago: executing program 5 (id=396): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, &(0x7f0000002500)) eventfd2(0x6a, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r5, @ANYBLOB='\b\x00'], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000001c0)=0xffffffff00000041, 0x8) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5.105931818s ago: executing program 6 (id=397): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000020800b700"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) read$FUSE(r0, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000002080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r7}) 4.455103668s ago: executing program 5 (id=398): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 2.324838023s ago: executing program 6 (id=399): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xcf, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_disconnect(r0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.047091419s ago: executing program 5 (id=400): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x80000001, @remote, 0x3}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x801) syz_open_dev$usbfs(0x0, 0x76, 0x101341) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 0s ago: executing program 6 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), 0x0, &(0x7f00000001c0), 0x10000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) timerfd_create(0x9, 0x80800) timer_create(0x9, 0x0, &(0x7f0000000500)) kernel console output (not intermixed with test programs): olve the problem. [ 240.268303][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.370108][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.377483][ T5780] Bluetooth: hci6: command tx timeout [ 240.406067][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.500222][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.938859][ T6087] hsr_slave_0: entered promiscuous mode [ 240.974484][ T6087] hsr_slave_1: entered promiscuous mode [ 240.999803][ T6087] debugfs: 'hsr0' already exists in 'hsr' [ 241.015520][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 241.023994][ T6087] Cannot create hsr debugfs directory [ 241.067311][ T496] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.282244][ T5780] Bluetooth: hci4: command tx timeout [ 241.553513][ T5780] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 242.002229][ T6193] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.62'. [ 242.019926][ T6193] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.62'. [ 242.481472][ T5780] Bluetooth: hci6: command tx timeout [ 242.591778][ T496] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.229372][ T496] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.807471][ T496] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.551711][ T5780] Bluetooth: hci6: command tx timeout [ 244.914775][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 250.126102][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 250.911759][ T6231] capability: warning: `syz.4.69' uses deprecated v2 capabilities in a way that may be insecure [ 251.106294][ T496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.323522][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 251.329459][ T496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.597497][ T6239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.673578][ T496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.587148][ T496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.845681][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.864835][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.874007][ T6157] bridge_slave_0: entered allmulticast mode [ 252.897241][ T6157] bridge_slave_0: entered promiscuous mode [ 252.958040][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.976246][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.011636][ T6157] bridge_slave_1: entered allmulticast mode [ 253.063275][ T6157] bridge_slave_1: entered promiscuous mode [ 255.586905][ T6087] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.309546][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.330244][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.340811][ T6141] bridge_slave_0: entered allmulticast mode [ 257.364100][ T6141] bridge_slave_0: entered promiscuous mode [ 257.462039][ T6087] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.530098][ T6087] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.671432][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.691788][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.716994][ T6141] bridge_slave_1: entered allmulticast mode [ 257.753219][ T6141] bridge_slave_1: entered promiscuous mode [ 257.804417][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.915515][ T6087] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.991420][ T5404] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 258.147518][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.198879][ T5404] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.224552][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.251574][ T5404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 258.275580][ T5404] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 258.302168][ T5404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.331577][ T5404] usb 2-1: Product: syz [ 258.335949][ T5404] usb 2-1: Manufacturer: syz [ 258.340710][ T5404] usb 2-1: SerialNumber: syz [ 258.363769][ T5404] usb 2-1: config 0 descriptor?? [ 258.374381][ T6265] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.468903][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.634287][ T5404] powermate: unknown product id 0240 [ 258.639752][ T5404] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 258.664573][ T6157] team0: Port device team_slave_0 added [ 258.708851][ T6157] team0: Port device team_slave_1 added [ 258.737368][ T5404] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 258.854942][ C1] powermate: config urb returned -71 [ 258.860969][ C1] powermate: config urb returned -71 [ 258.869835][ C1] powermate: config urb returned -71 [ 258.878505][ C1] powermate: config urb returned -71 [ 258.902034][ T5404] usb 2-1: USB disconnect, device number 4 [ 258.902250][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 259.315039][ T496] bridge_slave_1: left allmulticast mode [ 259.320959][ T496] bridge_slave_1: left promiscuous mode [ 259.348432][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.365263][ T496] bridge_slave_0: left allmulticast mode [ 259.380098][ T496] bridge_slave_0: left promiscuous mode [ 259.391101][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.410297][ T496] bridge_slave_1: left allmulticast mode [ 259.431272][ T496] bridge_slave_1: left promiscuous mode [ 259.480464][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.512399][ T496] bridge_slave_0: left allmulticast mode [ 259.518259][ T496] bridge_slave_0: left promiscuous mode [ 259.552004][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.881840][ T6279] Bluetooth: MGMT ver 1.23 [ 260.288939][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 260.800668][ T496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.842607][ T496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.878607][ T496] bond0 (unregistering): Released all slaves [ 261.308659][ T496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.363328][ T496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.390013][ T496] bond0 (unregistering): Released all slaves [ 261.457491][ T6141] team0: Port device team_slave_0 added [ 261.518884][ T6141] team0: Port device team_slave_1 added [ 261.752454][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.781406][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.841349][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.867018][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.894657][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.955329][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.010274][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 262.245897][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.275778][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.325980][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.393982][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.413091][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.501354][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.931980][ T6157] hsr_slave_0: entered promiscuous mode [ 262.940714][ T6157] hsr_slave_1: entered promiscuous mode [ 262.963560][ T6157] debugfs: 'hsr0' already exists in 'hsr' [ 262.969480][ T6157] Cannot create hsr debugfs directory [ 265.436167][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.443068][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.591281][ T35] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.643719][ T6141] hsr_slave_0: entered promiscuous mode [ 266.666270][ T6141] hsr_slave_1: entered promiscuous mode [ 266.684066][ T6141] debugfs: 'hsr0' already exists in 'hsr' [ 266.701308][ T6141] Cannot create hsr debugfs directory [ 267.331730][ T35] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 267.397152][ T496] hsr_slave_0: left promiscuous mode [ 267.406413][ T496] hsr_slave_1: left promiscuous mode [ 267.429661][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.451594][ T496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.474392][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.488734][ T496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.517389][ T35] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.541460][ T35] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 267.579438][ T496] hsr_slave_0: left promiscuous mode [ 267.590741][ T35] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 267.607423][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.632132][ T496] hsr_slave_1: left promiscuous mode [ 267.661412][ T35] usb 2-1: Product: syz [ 267.665939][ T35] usb 2-1: Manufacturer: syz [ 267.670687][ T35] usb 2-1: SerialNumber: syz [ 267.677453][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.685837][ T496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.699484][ T35] usb 2-1: config 0 descriptor?? [ 267.708274][ T496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.717354][ T496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.719380][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 267.864211][ T496] veth1_macvtap: left promiscuous mode [ 267.869966][ T496] veth0_macvtap: left promiscuous mode [ 267.884007][ T496] veth1_vlan: left promiscuous mode [ 267.889849][ T496] veth0_vlan: left promiscuous mode [ 267.899931][ T496] veth1_macvtap: left promiscuous mode [ 267.905853][ T496] veth0_macvtap: left promiscuous mode [ 267.942466][ T496] veth1_vlan: left promiscuous mode [ 267.948201][ T496] veth0_vlan: left promiscuous mode [ 268.032049][ T35] powermate: unknown product id 0240 [ 268.051271][ T35] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 268.134844][ T35] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 268.215696][ C1] powermate: config urb returned -71 [ 268.221737][ C1] powermate: config urb returned -71 [ 268.227445][ C1] powermate: config urb returned -71 [ 268.233127][ C1] powermate: config urb returned -71 [ 268.287038][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 268.296204][ T35] usb 2-1: USB disconnect, device number 6 [ 270.300250][ T6324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 270.591705][ T35] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.777340][ T35] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.813260][ T35] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 270.840486][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.860000][ T35] usb 2-1: Product: syz [ 270.870577][ T35] usb 2-1: Manufacturer: syz [ 270.887305][ T35] usb 2-1: SerialNumber: syz [ 270.915980][ T35] usb 2-1: config 0 descriptor?? [ 271.148628][ T6321] kvm: kvm [6319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 271.170633][ T6321] kvm: kvm [6319]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 271.252303][ T35] usb 2-1: USB disconnect, device number 7 [ 272.146820][ T496] team0 (unregistering): Port device team_slave_1 removed [ 272.287223][ T496] team0 (unregistering): Port device team_slave_0 removed [ 275.249808][ T496] team0 (unregistering): Port device team_slave_1 removed [ 275.391816][ T496] team0 (unregistering): Port device team_slave_0 removed [ 275.472702][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.482581][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.491890][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.513530][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.527412][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.663931][ T5777] Bluetooth: hci1: command tx timeout [ 279.741395][ T5777] Bluetooth: hci1: command tx timeout [ 281.732254][ T6363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 281.811740][ T5777] Bluetooth: hci1: command tx timeout [ 282.069044][ T6141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.071287][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 282.139743][ T6141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.326961][ T5840] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.665208][ T5840] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 282.740403][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.012649][ T5840] usb 2-1: Product: syz [ 283.017602][ T5840] usb 2-1: Manufacturer: syz [ 283.023221][ T5840] usb 2-1: SerialNumber: syz [ 283.891473][ T5777] Bluetooth: hci1: command tx timeout [ 283.965268][ T5840] usb 2-1: config 0 descriptor?? [ 284.040521][ T6141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.065076][ T6362] kvm: kvm [6361]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 285.124857][ T6362] kvm: kvm [6361]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 285.241897][ T5836] usb 2-1: USB disconnect, device number 8 [ 285.412542][ T6141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.896915][ T6157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.176694][ T6157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.304471][ T6343] chnl_net:caif_netlink_parms(): no params data found [ 286.396582][ T6157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.650543][ T6157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.143918][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 287.311530][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 287.362055][ T5840] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 287.387043][ T5840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.426442][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.445165][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.486572][ T5840] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.583958][ T5840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.637640][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.953684][ T5840] usb 2-1: usb_control_msg returned -32 [ 287.959545][ T5840] usbtmc 2-1:16.0: can't read capabilities [ 288.006271][ T6031] bridge_slave_1: left allmulticast mode [ 288.029782][ T6031] bridge_slave_1: left promiscuous mode [ 288.057729][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.103903][ T6031] bridge_slave_0: left allmulticast mode [ 288.120561][ T6031] bridge_slave_0: left promiscuous mode [ 288.135851][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.325510][ T6404] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 288.383112][ T5840] usb 2-1: USB disconnect, device number 9 [ 288.709070][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.765683][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.797909][ T6031] bond0 (unregistering): Released all slaves [ 289.121236][ T6031] hsr_slave_0: left promiscuous mode [ 289.148998][ T6031] hsr_slave_1: left promiscuous mode [ 289.186174][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.220633][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.946011][ T6031] team0 (unregistering): Port device team_slave_1 removed [ 289.964433][ T6031] team0 (unregistering): Port device team_slave_0 removed [ 290.663626][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.698589][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.751592][ T6343] bridge_slave_0: entered allmulticast mode [ 290.781843][ T6343] bridge_slave_0: entered promiscuous mode [ 290.937379][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.031292][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.039145][ T6343] bridge_slave_1: entered allmulticast mode [ 291.072513][ T6343] bridge_slave_1: entered promiscuous mode [ 291.549655][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.697820][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.126825][ T6343] team0: Port device team_slave_0 added [ 292.225000][ T6343] team0: Port device team_slave_1 added [ 292.686042][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.741523][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.866601][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.975229][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.041756][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.111849][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 293.118387][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 293.151663][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.367812][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.387686][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.398102][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.421536][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.440457][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.556650][ T6343] hsr_slave_0: entered promiscuous mode [ 293.639687][ T6343] hsr_slave_1: entered promiscuous mode [ 295.175351][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 295.265824][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 295.292190][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 295.309926][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 295.321253][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.491382][ T5777] Bluetooth: hci2: command tx timeout [ 296.838634][ T1911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.037802][ T1911] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.116143][ T1911] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 297.145570][ T1911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.177147][ T1911] usb 5-1: Product: syz [ 297.208097][ T1911] usb 5-1: Manufacturer: syz [ 297.230552][ T1911] usb 5-1: SerialNumber: syz [ 297.253416][ T1911] usb 5-1: config 0 descriptor?? [ 297.411553][ T5777] Bluetooth: hci5: command tx timeout [ 297.572295][ T5777] Bluetooth: hci2: command tx timeout [ 297.684263][ T1911] usb 5-1: USB disconnect, device number 3 [ 299.360419][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 299.468881][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 299.500479][ T5777] Bluetooth: hci5: command tx timeout [ 299.655104][ T5777] Bluetooth: hci2: command tx timeout [ 300.066452][ T13] bridge_slave_1: left allmulticast mode [ 300.085420][ T13] bridge_slave_1: left promiscuous mode [ 300.102229][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.145566][ T13] bridge_slave_0: left allmulticast mode [ 300.171550][ T13] bridge_slave_0: left promiscuous mode [ 300.241108][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.823439][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.876136][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.902678][ T13] bond0 (unregistering): Released all slaves [ 301.033606][ T6343] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.157638][ T6343] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.226895][ T6343] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.433488][ T13] hsr_slave_0: left promiscuous mode [ 301.446499][ T13] hsr_slave_1: left promiscuous mode [ 301.474870][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.521853][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.581322][ T5777] Bluetooth: hci5: command tx timeout [ 301.741471][ T5777] Bluetooth: hci2: command tx timeout [ 302.198532][ T13] team0 (unregistering): Port device team_slave_1 removed [ 302.254721][ T13] team0 (unregistering): Port device team_slave_0 removed [ 302.607699][ T6343] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.083982][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.121722][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.129341][ T6434] bridge_slave_0: entered allmulticast mode [ 303.167575][ T6434] bridge_slave_0: entered promiscuous mode [ 303.210942][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.269124][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.306074][ T6434] bridge_slave_1: entered allmulticast mode [ 303.367341][ T6434] bridge_slave_1: entered promiscuous mode [ 303.656348][ T5777] Bluetooth: hci5: command tx timeout [ 304.060549][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.414235][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.040899][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.091769][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.099424][ T6422] bridge_slave_0: entered allmulticast mode [ 311.157937][ T6422] bridge_slave_0: entered promiscuous mode [ 311.409011][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.441913][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.471822][ T6422] bridge_slave_1: entered allmulticast mode [ 311.517497][ T6422] bridge_slave_1: entered promiscuous mode [ 311.750842][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.760235][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.770731][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.789030][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.799016][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.826487][ T6434] team0: Port device team_slave_0 added [ 312.105977][ T6434] team0: Port device team_slave_1 added [ 312.398252][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.502924][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.911494][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.950706][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.000351][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.026492][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.061273][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.141277][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.306053][ T6422] team0: Port device team_slave_0 added [ 313.388863][ T6422] team0: Port device team_slave_1 added [ 313.894876][ T5780] Bluetooth: hci4: command tx timeout [ 314.239087][ T6434] hsr_slave_0: entered promiscuous mode [ 314.269302][ T6434] hsr_slave_1: entered promiscuous mode [ 314.299369][ T6434] debugfs: 'hsr0' already exists in 'hsr' [ 314.325159][ T6434] Cannot create hsr debugfs directory [ 314.463109][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.470223][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.521426][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.844452][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.861530][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.911352][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.184090][ T13] bridge_slave_1: left allmulticast mode [ 315.190029][ T13] bridge_slave_1: left promiscuous mode [ 315.202351][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.236865][ T13] bridge_slave_0: left allmulticast mode [ 315.261303][ T13] bridge_slave_0: left promiscuous mode [ 315.267550][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.823055][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.845188][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.868255][ T13] bond0 (unregistering): Released all slaves [ 315.973531][ T5780] Bluetooth: hci4: command tx timeout [ 316.013615][ T6496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 316.282821][ T13] hsr_slave_0: left promiscuous mode [ 316.294681][ T13] hsr_slave_1: left promiscuous mode [ 316.303072][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.317246][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.321532][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.546666][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.602466][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 316.646441][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.677830][ T9] usb 5-1: Product: syz [ 316.693938][ T9] usb 5-1: Manufacturer: syz [ 316.708662][ T9] usb 5-1: SerialNumber: syz [ 316.760435][ T9] usb 5-1: config 0 descriptor?? [ 316.896702][ T13] team0 (unregistering): Port device team_slave_1 removed [ 316.937539][ T13] team0 (unregistering): Port device team_slave_0 removed [ 317.049607][ T5840] usb 5-1: USB disconnect, device number 4 [ 317.475378][ T6422] hsr_slave_0: entered promiscuous mode [ 317.512738][ T6422] hsr_slave_1: entered promiscuous mode [ 317.544268][ T6422] debugfs: 'hsr0' already exists in 'hsr' [ 317.550117][ T6422] Cannot create hsr debugfs directory [ 318.055075][ T5780] Bluetooth: hci4: command tx timeout [ 318.144786][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.377686][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.404866][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.818202][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.165270][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.464492][ T6481] chnl_net:caif_netlink_parms(): no params data found [ 319.549042][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.615818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.623361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.066069][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.073821][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.153418][ T5780] Bluetooth: hci4: command tx timeout [ 326.063717][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.130828][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.231942][ T13] bond0 (unregistering): Released all slaves [ 326.735838][ T6481] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.765225][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.775005][ T6481] bridge_slave_0: entered allmulticast mode [ 326.785147][ T6481] bridge_slave_0: entered promiscuous mode [ 326.797766][ T6434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 326.855546][ T6434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 326.889200][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.898838][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.024995][ T6481] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.052229][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.060292][ T6481] bridge_slave_1: entered allmulticast mode [ 327.083782][ T6481] bridge_slave_1: entered promiscuous mode [ 327.164640][ T6434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 327.207122][ T6434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 327.739181][ T6481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.752307][ T6545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 327.940480][ T6481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.137685][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 328.194593][ T13] hsr_slave_0: left promiscuous mode [ 328.212728][ T13] hsr_slave_1: left promiscuous mode [ 328.233688][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.263914][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.284980][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.293765][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.339391][ T35] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 328.362174][ T13] veth1_macvtap: left promiscuous mode [ 328.368159][ T13] veth0_macvtap: left promiscuous mode [ 328.381857][ T13] veth1_vlan: left promiscuous mode [ 328.388185][ T13] veth0_vlan: left promiscuous mode [ 328.409641][ T35] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 328.453492][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.474433][ T35] usb 5-1: Product: syz [ 328.479404][ T35] usb 5-1: Manufacturer: syz [ 328.495055][ T35] usb 5-1: SerialNumber: syz [ 328.520350][ T35] usb 5-1: config 0 descriptor?? [ 328.836704][ T6544] kvm: kvm [6543]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 328.858426][ T6544] kvm: kvm [6543]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 329.019580][ T35] usb 5-1: USB disconnect, device number 5 [ 329.647314][ T13] team0 (unregistering): Port device team_slave_1 removed [ 329.707477][ T13] team0 (unregistering): Port device team_slave_0 removed [ 330.374656][ T6481] team0: Port device team_slave_0 added [ 330.429808][ T6481] team0: Port device team_slave_1 added [ 330.647429][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.665736][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.721213][ T6481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.803717][ T6481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.824119][ T6481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.901595][ T6481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.383463][ T6481] hsr_slave_0: entered promiscuous mode [ 331.393640][ T6481] hsr_slave_1: entered promiscuous mode [ 331.403623][ T6481] debugfs: 'hsr0' already exists in 'hsr' [ 331.409524][ T6481] Cannot create hsr debugfs directory [ 335.271816][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.607139][ T6422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 336.918948][ T6422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 337.093183][ T6422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 337.235604][ T6422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 337.761279][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.778321][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.787543][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.801653][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.816276][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.567630][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.114289][ T6481] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 339.250190][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.376831][ T6481] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 339.455044][ T6481] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 339.656395][ T6481] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 339.754333][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.761881][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.893385][ T5780] Bluetooth: hci0: command tx timeout [ 339.961377][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 340.126837][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.134967][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.157291][ T5830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.253740][ T5830] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 340.272562][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.293777][ T5830] usb 5-1: Product: syz [ 340.302349][ T5830] usb 5-1: Manufacturer: syz [ 340.307135][ T5830] usb 5-1: SerialNumber: syz [ 340.352682][ T5830] usb 5-1: config 0 descriptor?? [ 340.529897][ T6567] chnl_net:caif_netlink_parms(): no params data found [ 340.577512][ T5840] usb 5-1: USB disconnect, device number 6 [ 340.946851][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.227864][ T1121] bridge_slave_1: left allmulticast mode [ 341.234149][ T1121] bridge_slave_1: left promiscuous mode [ 341.240749][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.301926][ T1121] bridge_slave_0: left allmulticast mode [ 341.307794][ T1121] bridge_slave_0: left promiscuous mode [ 341.333578][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.849292][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.908195][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.924155][ T1121] bond0 (unregistering): Released all slaves [ 341.999152][ T5780] Bluetooth: hci0: command tx timeout [ 342.104159][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.112330][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.123282][ T6567] bridge_slave_0: entered allmulticast mode [ 342.135028][ T6567] bridge_slave_0: entered promiscuous mode [ 342.150686][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.162380][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.174343][ T6567] bridge_slave_1: entered allmulticast mode [ 342.185627][ T6567] bridge_slave_1: entered promiscuous mode [ 342.276955][ T6567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.303575][ T6567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.394211][ T6567] team0: Port device team_slave_0 added [ 342.413235][ T6567] team0: Port device team_slave_1 added [ 342.968841][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.016875][ T1121] hsr_slave_0: left promiscuous mode [ 343.030176][ T1121] hsr_slave_1: left promiscuous mode [ 343.060580][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.072902][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.051392][ T5780] Bluetooth: hci0: command tx timeout [ 344.188067][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 344.278367][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 344.770862][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.780657][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.878587][ T6567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.158579][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.166263][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.342001][ T6567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.361556][ T6567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.491861][ T6567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.736753][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.748675][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.132993][ T5780] Bluetooth: hci0: command tx timeout [ 346.183621][ T6567] hsr_slave_0: entered promiscuous mode [ 346.195782][ T6567] hsr_slave_1: entered promiscuous mode [ 346.731897][ T6481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.167679][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.700957][ T6481] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.146746][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.154721][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.475616][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.483222][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.130784][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.870052][ T6567] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.958826][ T6567] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.067682][ T6567] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.177488][ T6434] veth0_vlan: entered promiscuous mode [ 351.206106][ T6567] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.367743][ T6434] veth1_vlan: entered promiscuous mode [ 351.543144][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.122751][ T6434] veth0_macvtap: entered promiscuous mode [ 352.263130][ T6434] veth1_macvtap: entered promiscuous mode [ 352.786516][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.817670][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.839703][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.850142][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.870048][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.881277][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.189499][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.360637][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.473408][ T1137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.507038][ T1137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.614457][ T1137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.645624][ T1137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.090316][ T6567] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.225314][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.233193][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.603373][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.610925][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.931482][ T5777] Bluetooth: hci1: command tx timeout [ 357.016241][ T5777] Bluetooth: hci1: command tx timeout [ 358.483168][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.509317][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.525689][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.540492][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.554103][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.751998][ T6481] veth0_vlan: entered promiscuous mode [ 359.092102][ T5777] Bluetooth: hci1: command tx timeout [ 359.532695][ T6481] veth1_vlan: entered promiscuous mode [ 359.704359][ T57] bridge_slave_1: left allmulticast mode [ 359.711632][ T57] bridge_slave_1: left promiscuous mode [ 359.718102][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.734113][ T57] bridge_slave_0: left allmulticast mode [ 359.740346][ T57] bridge_slave_0: left promiscuous mode [ 359.748268][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.212550][ T6717] No such timeout policy "syz1" [ 360.619059][ T5777] Bluetooth: hci2: command tx timeout [ 360.824802][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.856061][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.899005][ T57] bond0 (unregistering): Released all slaves [ 360.962920][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 361.171649][ T5777] Bluetooth: hci1: command tx timeout [ 361.598884][ T6698] chnl_net:caif_netlink_parms(): no params data found [ 362.160452][ T57] hsr_slave_0: left promiscuous mode [ 362.231522][ T57] hsr_slave_1: left promiscuous mode [ 362.239306][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.290271][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.693290][ T5777] Bluetooth: hci2: command tx timeout [ 363.460533][ T57] team0 (unregistering): Port device team_slave_1 removed [ 363.691438][ T57] team0 (unregistering): Port device team_slave_0 removed [ 364.772154][ T5777] Bluetooth: hci2: command tx timeout [ 365.830695][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.838649][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.859819][ T6698] bridge_slave_0: entered allmulticast mode [ 365.913491][ T6698] bridge_slave_0: entered promiscuous mode [ 366.132927][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.251922][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.259591][ T6698] bridge_slave_1: entered allmulticast mode [ 366.317902][ T6698] bridge_slave_1: entered promiscuous mode [ 366.579772][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.684345][ T6481] veth0_macvtap: entered promiscuous mode [ 366.752874][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.851995][ T5777] Bluetooth: hci2: command tx timeout [ 367.087763][ T6698] team0: Port device team_slave_0 added [ 367.129559][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.150654][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.164157][ T6667] bridge_slave_0: entered allmulticast mode [ 367.186247][ T6667] bridge_slave_0: entered promiscuous mode [ 367.219064][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.249885][ T6698] team0: Port device team_slave_1 added [ 367.299070][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.310514][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.318864][ T6667] bridge_slave_1: entered allmulticast mode [ 367.328921][ T6667] bridge_slave_1: entered promiscuous mode [ 367.478937][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.078335][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.294894][ T6481] veth1_macvtap: entered promiscuous mode [ 368.347593][ T6567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.404787][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.468926][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.553895][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.630502][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.642720][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.745104][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.791479][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.821950][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.883375][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.405627][ T6667] team0: Port device team_slave_0 added [ 369.628873][ T6667] team0: Port device team_slave_1 added [ 370.003377][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.010494][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.085139][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.163339][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.224022][ T6481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.299391][ T6698] hsr_slave_0: entered promiscuous mode [ 370.326706][ T6698] hsr_slave_1: entered promiscuous mode [ 370.354362][ T6698] debugfs: 'hsr0' already exists in 'hsr' [ 370.360264][ T6698] Cannot create hsr debugfs directory [ 370.406738][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.420198][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.506370][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.119799][ T57] bridge_slave_1: left allmulticast mode [ 371.161260][ T57] bridge_slave_1: left promiscuous mode [ 371.167690][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.234924][ T57] bridge_slave_0: left allmulticast mode [ 371.251331][ T57] bridge_slave_0: left promiscuous mode [ 371.257852][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.291446][ T794] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 371.488484][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.526401][ T794] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 371.563360][ T794] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 371.591196][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.633569][ T794] usb 5-1: config 0 descriptor?? [ 371.674547][ T794] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 371.691794][ T794] dvb-usb: bulk message failed: -22 (3/0) [ 371.714849][ T794] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 371.743780][ T794] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 371.761269][ T794] usb 5-1: media controller created [ 371.785910][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.857561][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.866868][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.879396][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.893526][ T794] dvb-usb: bulk message failed: -22 (6/0) [ 371.904722][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.915881][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.924423][ T794] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 371.931627][ T6773] dvb-usb: bulk message failed: -22 (2/0) [ 371.965812][ T794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 372.008481][ T794] dvb-usb: schedule remote query interval to 150 msecs. [ 372.023958][ T794] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 372.053655][ T794] usb 5-1: USB disconnect, device number 7 [ 372.173573][ T794] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 372.383517][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.416590][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.455370][ T57] bond0 (unregistering): Released all slaves [ 372.530717][ T6667] hsr_slave_0: entered promiscuous mode [ 372.569332][ T6667] hsr_slave_1: entered promiscuous mode [ 372.587580][ T6667] debugfs: 'hsr0' already exists in 'hsr' [ 372.597785][ T6667] Cannot create hsr debugfs directory [ 372.680765][ T53] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.711989][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.731442][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.749820][ T53] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.076922][ T57] hsr_slave_0: left promiscuous mode [ 373.098564][ T57] hsr_slave_1: left promiscuous mode [ 373.124942][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.145179][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.217007][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.229492][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.552819][ T57] veth1_macvtap: left promiscuous mode [ 373.562619][ T57] veth0_macvtap: left promiscuous mode [ 373.590148][ T57] veth1_vlan: left promiscuous mode [ 373.598069][ T57] veth0_vlan: left promiscuous mode [ 373.971557][ T5780] Bluetooth: hci5: command tx timeout [ 375.976342][ T57] team0 (unregistering): Port device team_slave_1 removed [ 376.034165][ T57] team0 (unregistering): Port device team_slave_0 removed [ 376.051494][ T5780] Bluetooth: hci5: command tx timeout [ 376.462900][ T794] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 376.634702][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 376.660703][ T794] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 376.687233][ T794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.723368][ T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.745579][ T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 376.757054][ T794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.774315][ T794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.787871][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.048316][ T794] usb 5-1: usb_control_msg returned -32 [ 377.056416][ T794] usbtmc 5-1:16.0: can't read capabilities [ 377.223902][ T6567] veth0_vlan: entered promiscuous mode [ 377.288370][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.409063][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.488332][ T6567] veth1_vlan: entered promiscuous mode [ 377.539047][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.648794][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.946159][ T6776] chnl_net:caif_netlink_parms(): no params data found [ 378.131365][ T5780] Bluetooth: hci5: command tx timeout [ 378.276068][ T6567] veth0_macvtap: entered promiscuous mode [ 378.328847][ T6698] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 378.382940][ T6698] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 378.480856][ T6698] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 378.510240][ T6698] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 378.565282][ T6567] veth1_macvtap: entered promiscuous mode [ 378.594717][ T57] bridge_slave_1: left allmulticast mode [ 378.600915][ T57] bridge_slave_1: left promiscuous mode [ 378.618960][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.636254][ T57] bridge_slave_0: left allmulticast mode [ 378.642805][ T57] bridge_slave_0: left promiscuous mode [ 378.660020][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.968676][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.986328][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.004455][ T57] bond0 (unregistering): Released all slaves [ 379.178341][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.186657][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.195459][ T6776] bridge_slave_0: entered allmulticast mode [ 379.210459][ T6776] bridge_slave_0: entered promiscuous mode [ 379.248355][ T6776] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.256967][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.265219][ T6776] bridge_slave_1: entered allmulticast mode [ 379.275841][ T794] usb 5-1: USB disconnect, device number 8 [ 379.276678][ T6776] bridge_slave_1: entered promiscuous mode [ 379.448378][ T57] hsr_slave_0: left promiscuous mode [ 379.461167][ T57] hsr_slave_1: left promiscuous mode [ 379.469139][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.488260][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.500543][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.509800][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.550374][ T57] veth1_macvtap: left promiscuous mode [ 379.556967][ T57] veth0_macvtap: left promiscuous mode [ 379.572309][ T57] veth1_vlan: left promiscuous mode [ 379.577833][ T57] veth0_vlan: left promiscuous mode [ 380.216156][ T5780] Bluetooth: hci5: command tx timeout [ 380.557178][ T57] team0 (unregistering): Port device team_slave_1 removed [ 380.578236][ T57] team0 (unregistering): Port device team_slave_0 removed [ 382.112903][ T6776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.588150][ T6776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.697305][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.992048][ T6776] team0: Port device team_slave_0 added [ 384.018061][ T6776] team0: Port device team_slave_1 added [ 384.043583][ T6567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.213351][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.222263][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.252079][ T6776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.281489][ T1911] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 384.333667][ T6776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.341652][ T6776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.372461][ T6776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.399409][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.408932][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.451258][ T1911] usb 5-1: Using ep0 maxpacket: 8 [ 384.469347][ T1911] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 384.491803][ T1911] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.506916][ T6667] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.514588][ T1911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.529615][ T1911] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.556186][ T6667] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.564376][ T1911] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.599323][ T1121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.611437][ T1911] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.622729][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.632302][ T1911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.655923][ T6667] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.753758][ T6667] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 384.921406][ T1911] usb 5-1: usb_control_msg returned -32 [ 384.927255][ T1911] usbtmc 5-1:16.0: can't read capabilities [ 384.989865][ T6776] hsr_slave_0: entered promiscuous mode [ 384.999268][ T1911] usb 5-1: USB disconnect, device number 9 [ 385.025286][ T6776] hsr_slave_1: entered promiscuous mode [ 385.063654][ T6776] debugfs: 'hsr0' already exists in 'hsr' [ 385.069598][ T6776] Cannot create hsr debugfs directory [ 385.596298][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.041528][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.287475][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.295295][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.646738][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.654323][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.516961][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.854938][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.967915][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.036229][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.043885][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.267287][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.274896][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.319483][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.327351][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.378821][ T6776] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.504905][ T6776] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.611930][ T6776] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.798451][ T6776] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 390.188765][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.627346][ T6776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.751323][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.759236][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.759308][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.093203][ T6776] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.140586][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.181575][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.234787][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.242385][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.285588][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.293175][ T6031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.302855][ T5830] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 391.511991][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 391.532978][ T5830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 391.564632][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 391.599421][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 391.641418][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 391.688130][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.752541][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 391.801214][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.088060][ T5830] usb 5-1: usb_control_msg returned -32 [ 392.118351][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 392.254748][ T5830] usb 5-1: USB disconnect, device number 10 [ 393.236057][ T6698] veth0_vlan: entered promiscuous mode [ 393.432332][ T6698] veth1_vlan: entered promiscuous mode [ 394.386605][ T6776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.024014][ T6698] veth0_macvtap: entered promiscuous mode [ 395.263074][ T6698] veth1_macvtap: entered promiscuous mode [ 395.666134][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.746471][ T6667] veth0_vlan: entered promiscuous mode [ 395.848070][ T6698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.099771][ T1137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.141550][ T1137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.174380][ T6667] veth1_vlan: entered promiscuous mode [ 396.260870][ T1137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.277749][ T1137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.503396][ T5836] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 396.694178][ T5836] usb 6-1: Using ep0 maxpacket: 16 [ 396.724905][ T5836] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.763828][ T5836] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.772228][ T5836] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 396.783352][ T5830] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 396.804576][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.818367][ T6667] veth0_macvtap: entered promiscuous mode [ 396.839734][ T5836] usb 6-1: config 0 descriptor?? [ 396.958042][ T6776] veth0_vlan: entered promiscuous mode [ 396.981924][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 396.998310][ T5830] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 397.021488][ T5830] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 397.033849][ T6667] veth1_macvtap: entered promiscuous mode [ 397.051154][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 397.081704][ T5830] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.094459][ T5830] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.166367][ T5830] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.179268][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.224774][ T6776] veth1_vlan: entered promiscuous mode [ 397.472284][ T5836] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 397.511567][ T5830] usb 5-1: usb_control_msg returned -32 [ 397.517662][ T5830] usbtmc 5-1:16.0: can't read capabilities [ 397.576545][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.627373][ T5830] usb 5-1: USB disconnect, device number 11 [ 397.784539][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.930741][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.966911][ T24] usb 6-1: USB disconnect, device number 2 [ 397.985283][ T6216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.101861][ T6216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.111225][ T6216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.318417][ T6776] veth0_macvtap: entered promiscuous mode [ 398.345258][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 398.476860][ T6776] veth1_macvtap: entered promiscuous mode [ 398.821462][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.984751][ T6776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.160958][ T6216] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.182797][ T6216] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.226378][ T6216] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.288372][ T6216] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.675197][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.730127][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.986613][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.058533][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.750610][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.193'. [ 403.815125][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 404.231333][ T5830] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 404.422210][ T5830] usb 8-1: Using ep0 maxpacket: 16 [ 404.451189][ T5830] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 404.459756][ T5830] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 404.510188][ T5830] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.560626][ T5830] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 404.598795][ T5830] usb 8-1: config 0 has no interface number 0 [ 404.631770][ T5830] usb 8-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.735272][ T5830] usb 8-1: config 0 interface 125 has no altsetting 0 [ 404.781070][ T5830] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 404.790352][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.882319][ T5830] usb 8-1: Product: syz [ 404.886696][ T5830] usb 8-1: Manufacturer: syz [ 404.903937][ T5830] usb 8-1: SerialNumber: syz [ 404.924537][ T5830] usb 8-1: config 0 descriptor?? [ 405.202734][ T35] usb 8-1: USB disconnect, device number 2 [ 405.321805][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.349430][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.663120][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.685538][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.870784][ T7041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.203'. [ 406.934036][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 407.120663][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.772887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.562901][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.679800][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.545117][ T7087] overlayfs: unescaped trailing colons in lowerdir mount option. [ 412.771721][ T7090] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 412.804298][ T7090] netlink: 'syz.5.210': attribute type 20 has an invalid length. [ 418.606252][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.5.216'. [ 418.711753][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 419.174140][ T5836] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 419.392786][ T5836] usb 9-1: Using ep0 maxpacket: 32 [ 419.422479][ T5836] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 419.471394][ T5836] usb 9-1: config 0 has no interface number 0 [ 419.507773][ T5836] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 419.535168][ T5836] usb 9-1: config 0 interface 196 has no altsetting 0 [ 420.453038][ T7187] ufs: You didn't specify the type of your ufs filesystem [ 420.453038][ T7187] [ 420.453038][ T7187] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 420.453038][ T7187] [ 420.453038][ T7187] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 420.484607][ T7187] ufs: ufstype=old is supported read-only [ 425.468597][ T5836] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 425.501282][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.523589][ T5836] usb 9-1: config 0 descriptor?? [ 425.603222][ T5836] usb 9-1: can't set config #0, error -71 [ 425.872229][ T5836] usb 9-1: USB disconnect, device number 2 [ 432.989516][ T7215] netlink: 'syz.4.233': attribute type 20 has an invalid length. [ 433.251635][ T5836] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 433.434035][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 433.537383][ T5836] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 433.578673][ T5836] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 433.645343][ T5836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.669102][ T5836] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 433.751463][ T5836] usb 7-1: config 0 has no interface number 0 [ 433.788842][ T5836] usb 7-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.917324][ T5836] usb 7-1: config 0 interface 125 has no altsetting 0 [ 434.032177][ T5836] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 434.087664][ T5836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.117043][ T5836] usb 7-1: Product: syz [ 434.161803][ T5836] usb 7-1: Manufacturer: syz [ 434.166619][ T5836] usb 7-1: SerialNumber: syz [ 434.274885][ T5836] usb 7-1: config 0 descriptor?? [ 434.431355][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 434.495386][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 434.510524][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 434.522399][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 434.552731][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 434.566268][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.644717][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 434.660141][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.672327][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.682935][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.733338][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.734511][ T794] usb 7-1: USB disconnect, device number 2 [ 434.881305][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.969427][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.309137][ T10] usb 5-1: GET_CAPABILITIES returned 2f [ 435.351261][ T10] usbtmc 5-1:16.0: can't read capabilities [ 435.530346][ T10] usb 5-1: USB disconnect, device number 12 [ 436.671441][ T5780] Bluetooth: hci4: command tx timeout [ 438.693305][ T5780] Bluetooth: hci4: command tx timeout [ 438.953117][ T7259] netlink: 'syz.5.244': attribute type 20 has an invalid length. [ 439.093711][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 439.435860][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.513062][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 439.594633][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 439.662448][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.732190][ T10] usb 5-1: config 0 descriptor?? [ 439.859605][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 439.896941][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 439.978261][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 440.010298][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 440.047530][ T7256] dvb-usb: bulk message failed: -22 (2/0) [ 440.057089][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 440.185190][ T10] usb 5-1: media controller created [ 440.220354][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.302878][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 440.356148][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 440.438260][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 440.552834][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 440.637707][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 440.777092][ T5780] Bluetooth: hci4: command tx timeout [ 440.790787][ T794] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 440.793675][ T5836] dvb-usb: bulk message failed: -22 (1/0) [ 440.921294][ T5836] dvb-usb: error while querying for an remote control event. [ 440.930489][ T10] usb 5-1: USB disconnect, device number 13 [ 441.011648][ T794] usb 7-1: Using ep0 maxpacket: 32 [ 441.065084][ T794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 441.141375][ T794] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 441.211467][ T794] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 441.322242][ T794] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 441.394418][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 441.404865][ T794] usb 7-1: config 128 has no interface number 0 [ 441.404992][ T794] usb 7-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.405141][ T794] usb 7-1: config 128 interface 127 has no altsetting 0 [ 441.482171][ T794] usb 7-1: string descriptor 0 read error: -22 [ 441.488929][ T794] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 441.633367][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.071576][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 442.331279][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 442.376404][ T10] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 442.461396][ T10] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 442.551198][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.601209][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 442.610311][ T10] usb 5-1: config 0 has no interface number 0 [ 442.662303][ T794] usb 7-1: USB disconnect, device number 3 [ 442.721598][ T10] usb 5-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.819228][ T6739] udevd[6739]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.851285][ T5780] Bluetooth: hci4: command tx timeout [ 442.871437][ T10] usb 5-1: config 0 interface 125 has no altsetting 0 [ 442.976007][ T10] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 443.040918][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.049297][ T10] usb 5-1: Product: syz [ 443.088269][ T10] usb 5-1: Manufacturer: syz [ 443.131371][ T10] usb 5-1: SerialNumber: syz [ 443.183646][ T10] usb 5-1: config 0 descriptor?? [ 443.271736][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.332043][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.339943][ T7230] bridge_slave_0: entered allmulticast mode [ 443.426104][ T7230] bridge_slave_0: entered promiscuous mode [ 443.479855][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.543985][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.588143][ T7230] bridge_slave_1: entered allmulticast mode [ 443.646802][ T7230] bridge_slave_1: entered promiscuous mode [ 443.718417][ T10] usb 5-1: USB disconnect, device number 14 [ 444.227216][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.349754][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.792284][ T7230] team0: Port device team_slave_0 added [ 444.903372][ T7230] team0: Port device team_slave_1 added [ 445.381253][ T794] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 445.506882][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.530337][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.661304][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.689435][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.771751][ T794] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 445.780927][ T794] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 445.822354][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.868012][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.001435][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.420223][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.458212][ T794] usb 5-1: config 0 descriptor?? [ 446.688882][ T7327] overlayfs: unescaped trailing colons in lowerdir mount option. [ 446.833087][ T7328] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 449.291535][ T794] usb 5-1: can't set config #0, error -71 [ 449.362547][ T794] usb 5-1: USB disconnect, device number 15 [ 449.519983][ T7230] hsr_slave_0: entered promiscuous mode [ 449.575680][ T7230] hsr_slave_1: entered promiscuous mode [ 449.627533][ T7230] debugfs: 'hsr0' already exists in 'hsr' [ 450.074572][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.081323][ T7230] Cannot create hsr debugfs directory [ 450.091276][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.172199][ T794] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 454.218000][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 455.520111][ T794] usb 5-1: device descriptor read/all, error -71 [ 455.932145][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 456.105170][ T7131] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.268042][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 456.314040][ T35] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.339688][ T35] usb 6-1: config 0 interface 0 has no altsetting 0 [ 456.370657][ T35] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 456.396136][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.459000][ T7131] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.502145][ T35] usb 6-1: config 0 descriptor?? [ 456.649451][ T5836] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 456.901311][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 456.973533][ T5836] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 456.993424][ T5836] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 457.030541][ T7131] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.033431][ T5836] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.136947][ T5836] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 457.203019][ T5836] usb 9-1: config 0 has no interface number 0 [ 457.209341][ T5836] usb 9-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.228278][ T35] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 457.483917][ T5836] usb 9-1: config 0 interface 125 has no altsetting 0 [ 457.561708][ T5836] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 457.619631][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.655512][ T5836] usb 9-1: Product: syz [ 457.659889][ T5836] usb 9-1: Manufacturer: syz [ 457.665977][ T35] usb 6-1: USB disconnect, device number 3 [ 457.719083][ T5836] usb 9-1: SerialNumber: syz [ 457.763784][ T5836] usb 9-1: config 0 descriptor?? [ 457.779751][ T7131] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.175570][ T7368] fido_id[7368]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 458.257150][ T35] usb 9-1: USB disconnect, device number 3 [ 459.078056][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.269'. [ 459.096276][ T7376] netlink: 20 bytes leftover after parsing attributes in process `syz.6.269'. [ 460.966245][ T7230] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.121782][ T7131] bridge_slave_1: left allmulticast mode [ 461.173220][ T7131] bridge_slave_1: left promiscuous mode [ 461.221871][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.208334][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 465.512216][ T7131] bridge_slave_0: left allmulticast mode [ 465.518078][ T7131] bridge_slave_0: left promiscuous mode [ 466.202323][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.505092][ T794] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 466.711679][ T794] usb 9-1: Using ep0 maxpacket: 32 [ 466.763653][ T794] usb 9-1: unable to get BOS descriptor or descriptor too short [ 466.799034][ T794] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 466.839004][ T794] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 466.865713][ T794] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 466.881225][ T794] usb 9-1: config 128 has no interface number 0 [ 466.887693][ T794] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.936998][ T794] usb 9-1: config 128 interface 127 has no altsetting 0 [ 466.965090][ T794] usb 9-1: string descriptor 0 read error: -22 [ 466.973823][ T794] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 467.003040][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.075464][ T7396] netlink: 'syz.5.276': attribute type 1 has an invalid length. [ 467.111345][ T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 467.321690][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 467.339194][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.376740][ T35] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 467.443383][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.517039][ T35] usb 5-1: config 0 descriptor?? [ 467.642271][ T794] usb 9-1: USB disconnect, device number 4 [ 468.047218][ T7131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.165130][ T7131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.178962][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 468.203193][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 468.246538][ T7131] bond0 (unregistering): Released all slaves [ 468.261990][ T35] usb 5-1: USB disconnect, device number 18 [ 468.339016][ T7230] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 468.445804][ T7230] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 468.751412][ T7396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.471160][ T7409] netlink: 96 bytes leftover after parsing attributes in process `syz.8.279'. [ 471.887451][ T7397] bond1: (slave veth3): Enslaving as an active interface with a down link [ 472.158692][ T7398] bond1: (slave veth0_to_bond): making interface the new active one [ 472.303855][ T7398] veth0_to_bond: entered promiscuous mode [ 472.357937][ T7398] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 472.500564][ T7230] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 473.141166][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.6.282'. [ 473.165762][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.6.282'. [ 477.451902][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 479.557173][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.8.285'. [ 480.197771][ T7131] hsr_slave_0: left promiscuous mode [ 480.262656][ T7131] hsr_slave_1: left promiscuous mode [ 480.303958][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.348707][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.443618][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.507343][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.104980][ T7131] veth1_macvtap: left promiscuous mode [ 483.128532][ T7131] veth0_macvtap: left promiscuous mode [ 483.269758][ T7131] veth1_vlan: left promiscuous mode [ 483.359127][ T7131] veth0_vlan: left promiscuous mode [ 483.762981][ T7464] overlayfs: unescaped trailing colons in lowerdir mount option. [ 483.845823][ T7465] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 484.933741][ T7472] netlink: 96 bytes leftover after parsing attributes in process `syz.6.294'. [ 490.800038][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.298'. [ 491.130113][ T7131] team0 (unregistering): Port device team_slave_1 removed [ 491.217392][ T7131] team0 (unregistering): Port device team_slave_0 removed [ 496.138768][ T7102] veth0_to_bond: left promiscuous mode [ 496.546657][ T7529] overlayfs: unescaped trailing colons in lowerdir mount option. [ 496.663372][ T7526] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 497.258381][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.272214][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.302625][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.336747][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.348318][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.901208][ T5777] Bluetooth: hci5: command 0x0406 tx timeout [ 499.061518][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 499.272361][ T10] usb 7-1: device descriptor read/64, error -71 [ 499.411181][ T5780] Bluetooth: hci2: command tx timeout [ 499.545652][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 499.891545][ T10] usb 7-1: device descriptor read/64, error -71 [ 500.008230][ T10] usb usb7-port1: attempt power cycle [ 500.956482][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 501.135626][ T7561] netlink: 96 bytes leftover after parsing attributes in process `syz.8.311'. [ 501.906963][ T5780] Bluetooth: hci2: command tx timeout [ 503.971466][ T5780] Bluetooth: hci2: command tx timeout [ 503.989688][ T10] usb 7-1: device descriptor read/8, error -71 [ 504.878156][ T7573] netlink: 96 bytes leftover after parsing attributes in process `syz.5.312'. [ 506.057050][ T5780] Bluetooth: hci2: command tx timeout [ 507.275114][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 508.223893][ T7535] chnl_net:caif_netlink_parms(): no params data found [ 508.970117][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 509.410472][ T7593] overlayfs: unescaped trailing colons in lowerdir mount option. [ 509.558097][ T7595] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 509.581787][ T7595] netlink: 'syz.6.317': attribute type 20 has an invalid length. [ 510.111692][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 510.126297][ T10] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 510.148957][ T10] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 511.108320][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.123020][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 511.136039][ T10] usb 9-1: config 0 has no interface number 0 [ 511.162263][ T10] usb 9-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.203142][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.209743][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.403982][ T10] usb 9-1: config 0 interface 125 has no altsetting 0 [ 511.432870][ T10] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 511.451839][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.460055][ T10] usb 9-1: Product: syz [ 511.501225][ T10] usb 9-1: Manufacturer: syz [ 511.506041][ T10] usb 9-1: SerialNumber: syz [ 511.574081][ T10] usb 9-1: config 0 descriptor?? [ 511.873502][ T10] usb 9-1: can't set config #0, error -71 [ 511.949002][ T10] usb 9-1: USB disconnect, device number 5 [ 512.522855][ T7109] bridge_slave_1: left allmulticast mode [ 512.654559][ T7109] bridge_slave_1: left promiscuous mode [ 512.820750][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.035831][ T7109] bridge_slave_0: left allmulticast mode [ 514.101442][ T7109] bridge_slave_0: left promiscuous mode [ 514.151968][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.142301][ T7633] netlink: 96 bytes leftover after parsing attributes in process `syz.5.323'. [ 518.512748][ T5830] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 519.808854][ T7647] netlink: 96 bytes leftover after parsing attributes in process `syz.8.325'. [ 519.820517][ T7109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.038454][ T7109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.087507][ T7109] bond0 (unregistering): Released all slaves [ 524.459958][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.827357][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.062189][ T7667] overlayfs: unescaped trailing colons in lowerdir mount option. [ 525.208249][ T7668] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 525.231841][ T7668] netlink: 'syz.8.330': attribute type 20 has an invalid length. [ 525.821780][ T7535] bridge_slave_0: entered allmulticast mode [ 525.829904][ T7535] bridge_slave_0: entered promiscuous mode [ 528.742000][ T7109] hsr_slave_0: left promiscuous mode [ 528.751402][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 528.814958][ T7109] hsr_slave_1: left promiscuous mode [ 528.843348][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.876872][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.902388][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 528.947272][ T35] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 528.986269][ T35] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 529.015246][ T35] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.071223][ T35] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.128933][ T35] usb 7-1: config 0 has no interface number 0 [ 529.141609][ T35] usb 7-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.180189][ T35] usb 7-1: config 0 interface 125 has no altsetting 0 [ 529.202657][ T35] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 529.212781][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.220965][ T35] usb 7-1: Product: syz [ 529.225893][ T35] usb 7-1: Manufacturer: syz [ 529.230658][ T35] usb 7-1: SerialNumber: syz [ 529.276786][ T35] usb 7-1: config 0 descriptor?? [ 529.921264][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.8.333'. [ 529.934415][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.8.333'. [ 531.361855][ T35] usb 7-1: USB disconnect, device number 9 [ 533.653882][ T7109] team0 (unregistering): Port device team_slave_1 removed [ 534.763331][ T7109] team0 (unregistering): Port device team_slave_0 removed [ 536.858370][ T7687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 537.221238][ T35] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 537.320211][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.330547][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.338688][ T7535] bridge_slave_1: entered allmulticast mode [ 537.375940][ T7535] bridge_slave_1: entered promiscuous mode [ 537.382513][ T35] usb 9-1: device descriptor read/64, error -71 [ 537.661659][ T35] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 537.715694][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.787868][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.841460][ T35] usb 9-1: device descriptor read/64, error -71 [ 537.952269][ T35] usb usb9-port1: attempt power cycle [ 538.196290][ T7535] team0: Port device team_slave_0 added [ 538.260812][ T7535] team0: Port device team_slave_1 added [ 539.049242][ T7709] netlink: 96 bytes leftover after parsing attributes in process `syz.8.339'. [ 542.020421][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.101155][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.189775][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.237060][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.267667][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.381176][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.653561][ T7535] hsr_slave_0: entered promiscuous mode [ 545.822736][ T7535] hsr_slave_1: entered promiscuous mode [ 545.981892][ T7535] debugfs: 'hsr0' already exists in 'hsr' [ 546.090197][ T7535] Cannot create hsr debugfs directory [ 546.159973][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.343'. [ 546.174064][ T7785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.343'. [ 547.013526][ T794] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 547.441263][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 547.556192][ T794] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 547.699189][ T794] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 549.801198][ T794] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.805063][ T794] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 550.891186][ T794] usb 9-1: config 0 has no interface number 0 [ 550.897488][ T794] usb 9-1: config 0 interface 125 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.474522][ T794] usb 9-1: config 0 interface 125 has no altsetting 0 [ 551.695862][ T794] usb 9-1: string descriptor 0 read error: -71 [ 551.783487][ T794] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 551.903554][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.984008][ T794] usb 9-1: config 0 descriptor?? [ 552.055791][ T794] usb 9-1: can't set config #0, error -71 [ 552.108413][ T794] usb 9-1: USB disconnect, device number 9 [ 552.967417][ T7812] netlink: 96 bytes leftover after parsing attributes in process `syz.6.350'. [ 556.488499][ T7822] netlink: 96 bytes leftover after parsing attributes in process `syz.8.352'. [ 562.432127][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 562.445723][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 562.483054][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 562.515484][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 562.532308][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 562.672107][ T7891] fuse: Bad value for 'fd' [ 564.648241][ T5787] Bluetooth: hci4: command tx timeout [ 566.791204][ T5787] Bluetooth: hci4: command tx timeout [ 567.672712][ T5830] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 569.158798][ T5787] Bluetooth: hci4: command tx timeout [ 569.185959][ T5830] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 570.854186][ T5830] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 571.171453][ T5787] Bluetooth: hci4: command tx timeout [ 572.667977][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.679009][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.744015][ T7889] chnl_net:caif_netlink_parms(): no params data found [ 572.874551][ T7144] bridge_slave_1: left allmulticast mode [ 572.901626][ T7144] bridge_slave_1: left promiscuous mode [ 572.908537][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.268158][ T5830] usb 6-1: string descriptor 0 read error: -71 [ 573.351613][ T5830] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 573.360969][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.476803][ T7144] bridge_slave_0: left allmulticast mode [ 573.511382][ T7144] bridge_slave_0: left promiscuous mode [ 573.517895][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.573603][ T5830] usb 6-1: config 0 descriptor?? [ 573.601600][ T5830] usb 6-1: can't set config #0, error -71 [ 573.656613][ T5830] usb 6-1: USB disconnect, device number 4 [ 574.126561][ T7932] netlink: 'syz.5.365': attribute type 1 has an invalid length. [ 574.558697][ T7936] netlink: 96 bytes leftover after parsing attributes in process `syz.6.364'. [ 575.356159][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.474212][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.506733][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.672574][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.807561][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 576.808668][ T7934] netlink: 28 bytes leftover after parsing attributes in process `syz.5.365'. [ 576.912975][ T7943] fuse: Bad value for 'fd' [ 577.213417][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.343372][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.416480][ T7144] bond0 (unregistering): Released all slaves [ 578.093508][ T7932] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 578.141688][ T5780] Bluetooth: hci2: command tx timeout [ 580.711352][ T5780] Bluetooth: hci2: command tx timeout [ 582.793875][ T5780] Bluetooth: hci2: command tx timeout [ 582.871340][ T7144] hsr_slave_0: left promiscuous mode [ 583.909026][ T7144] hsr_slave_1: left promiscuous mode [ 584.414070][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.869032][ T5780] Bluetooth: hci2: command tx timeout [ 584.983007][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.341523][ T794] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 587.507681][ T794] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.537421][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 588.498374][ T794] usb 9-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 588.514945][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.540434][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 588.984366][ T794] usb 9-1: Product: syz [ 588.988736][ T794] usb 9-1: Manufacturer: syz [ 589.011204][ T794] usb 9-1: SerialNumber: syz [ 589.020827][ T794] usb 9-1: config 0 descriptor?? [ 589.556376][ T794] usb 9-1: can't set config #0, error -71 [ 589.579851][ T794] usb 9-1: USB disconnect, device number 10 [ 590.141837][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 590.481567][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 590.965568][ T5830] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 591.144770][ T5830] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 591.321320][ T5830] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.558337][ T5830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 592.286225][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.559885][ T7990] netlink: 96 bytes leftover after parsing attributes in process `syz.8.377'. [ 595.651924][ T5830] usb 6-1: can't set config #16, error -71 [ 595.671993][ T5830] usb 6-1: USB disconnect, device number 5 [ 595.869531][ T7999] netlink: 'syz.8.379': attribute type 1 has an invalid length. [ 595.981286][ T7996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.004891][ T7996] vivid-003: disconnect [ 596.072643][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.8.379'. [ 596.377767][ T7992] vivid-003: reconnect [ 596.863082][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.883318][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.902603][ T7889] bridge_slave_0: entered allmulticast mode [ 596.943059][ T7889] bridge_slave_0: entered promiscuous mode [ 597.168582][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.201747][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.219271][ T7889] bridge_slave_1: entered allmulticast mode [ 597.258767][ T7889] bridge_slave_1: entered promiscuous mode [ 597.981820][ T7889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.511868][ T7889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.415707][ T7889] team0: Port device team_slave_0 added [ 602.739668][ T7889] team0: Port device team_slave_1 added [ 603.035907][ T7928] chnl_net:caif_netlink_parms(): no params data found [ 603.111612][ T794] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 603.352838][ T794] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.409730][ T794] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 603.420415][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.451250][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.459458][ T794] usb 6-1: Product: syz [ 603.468285][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.528575][ T794] usb 6-1: Manufacturer: syz [ 603.551229][ T794] usb 6-1: SerialNumber: syz [ 603.585375][ T794] usb 6-1: config 0 descriptor?? [ 603.602908][ T7889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.657737][ T7889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.666347][ T794] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 603.737903][ T7889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.881513][ T7889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.692119][ T7889] hsr_slave_0: entered promiscuous mode [ 604.752210][ T7889] hsr_slave_1: entered promiscuous mode [ 604.760665][ T7889] debugfs: 'hsr0' already exists in 'hsr' [ 604.821256][ T7889] Cannot create hsr debugfs directory [ 606.213380][ T794] usb 6-1: USB disconnect, device number 6 [ 606.868342][ T7928] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.923826][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.953215][ T7928] bridge_slave_0: entered allmulticast mode [ 606.993772][ T7928] bridge_slave_0: entered promiscuous mode [ 610.233815][ T8034] netlink: 96 bytes leftover after parsing attributes in process `syz.6.387'. [ 610.643589][ T7928] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.653374][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.668393][ T7928] bridge_slave_1: entered allmulticast mode [ 611.683903][ T7928] bridge_slave_1: entered promiscuous mode [ 612.620290][ T7928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.884577][ T7928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.961363][ T794] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 613.154570][ T794] usb 7-1: Using ep0 maxpacket: 8 [ 613.199327][ T794] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 613.232935][ T7889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 613.243970][ T794] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 613.265155][ T794] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.339548][ T794] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 613.381408][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.454320][ T794] usbtmc 7-1:16.0: bulk endpoints not found [ 613.528917][ T7889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 613.720571][ T7928] team0: Port device team_slave_0 added [ 613.818983][ T7928] team0: Port device team_slave_1 added [ 613.862684][ T7889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 614.008412][ T7889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 614.217167][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 614.232427][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 614.242069][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 614.259739][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 614.282839][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 614.388988][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.396438][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.445718][ T7928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.575071][ T7928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.634195][ T7928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.746768][ T7928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.540619][ T7928] hsr_slave_0: entered promiscuous mode [ 615.602845][ T7928] hsr_slave_1: entered promiscuous mode [ 615.635517][ T7928] debugfs: 'hsr0' already exists in 'hsr' [ 615.664595][ T7928] Cannot create hsr debugfs directory [ 615.729431][ T5830] usb 7-1: USB disconnect, device number 10 [ 616.371592][ T5787] Bluetooth: hci6: command tx timeout [ 617.582317][ T7131] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.325790][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 618.341706][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 618.357407][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 618.370405][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 618.387100][ T7131] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.408223][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 618.461349][ T5780] Bluetooth: hci6: command tx timeout [ 618.896193][ T7131] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.396276][ T7131] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.531444][ T5787] Bluetooth: hci5: command tx timeout [ 620.531684][ T5780] Bluetooth: hci6: command tx timeout [ 621.280254][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 621.503804][ T7131] bridge_slave_1: left allmulticast mode [ 621.509639][ T7131] bridge_slave_1: left promiscuous mode [ 621.555945][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.628986][ T7131] bridge_slave_0: left allmulticast mode [ 621.665528][ T7131] bridge_slave_0: left promiscuous mode [ 621.675377][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.611483][ T5780] Bluetooth: hci5: command tx timeout [ 622.616987][ T5780] Bluetooth: hci6: command tx timeout [ 622.672930][ T7131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.707401][ T7131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.739879][ T7131] bond0 (unregistering): Released all slaves [ 622.760599][ T7131] bond1 (unregistering): Released all slaves [ 624.233180][ T7131] hsr_slave_0: left promiscuous mode [ 624.251702][ T7131] hsr_slave_1: left promiscuous mode [ 624.259505][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.287090][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.323932][ T7131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.367527][ T7131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.462948][ T7131] veth1_macvtap: left promiscuous mode [ 624.468666][ T7131] veth0_macvtap: left promiscuous mode [ 624.512345][ T7131] veth1_vlan: left promiscuous mode [ 624.517980][ T7131] veth0_vlan: left promiscuous mode [ 624.691335][ T5780] Bluetooth: hci5: command tx timeout [ 624.845632][ T794] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 625.013191][ T794] usb 6-1: Using ep0 maxpacket: 16 [ 625.035964][ T794] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.081219][ T794] usb 6-1: config 0 interface 0 has no altsetting 0 [ 625.099967][ T794] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 625.125514][ T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.171422][ T794] usb 6-1: config 0 descriptor?? [ 625.680408][ T794] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 626.059158][ T7131] team0 (unregistering): Port device team_slave_1 removed [ 626.139443][ T7131] team0 (unregistering): Port device team_slave_0 removed [ 626.153567][ T10] usb 6-1: USB disconnect, device number 7 [ 626.172111][ T5830] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 626.303590][ T8078] fido_id[8078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 626.377824][ T5830] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.457433][ T5830] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 626.481263][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.489567][ T5830] usb 7-1: Product: syz [ 626.501241][ T5830] usb 7-1: Manufacturer: syz [ 626.506040][ T5830] usb 7-1: SerialNumber: syz [ 626.573404][ T5830] usb 7-1: config 0 descriptor?? [ 626.594935][ T5830] powermate 7-1:0.0: probe with driver powermate failed with error -22 [ 626.771996][ T5780] Bluetooth: hci5: command tx timeout [ 626.935537][ T8062] chnl_net:caif_netlink_parms(): no params data found [ 627.046724][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.058873][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.067037][ T8049] bridge_slave_0: entered allmulticast mode [ 627.076571][ T8049] bridge_slave_0: entered promiscuous mode [ 627.162431][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.169909][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.196769][ T8049] bridge_slave_1: entered allmulticast mode [ 627.211985][ T8049] bridge_slave_1: entered promiscuous mode [ 627.504001][ T7928] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 627.590127][ T7928] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.782391][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.832278][ T7928] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.954086][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.006340][ T7928] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.210887][ T8089] netlink: 96 bytes leftover after parsing attributes in process `syz.5.396'. [ 630.339897][ T5830] usb 7-1: USB disconnect, device number 11 [ 631.122213][ T8049] team0: Port device team_slave_0 added [ 631.271647][ T8049] team0: Port device team_slave_1 added [ 631.502959][ T5830] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 631.761637][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 631.813066][ T5830] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 631.880639][ T5830] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 631.936281][ T5830] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.024379][ T5830] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 632.051656][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.122855][ T5830] usbtmc 6-1:16.0: bulk endpoints not found [ 632.489493][ T7131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.846837][ T7131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.910069][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.937899][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.947723][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.962260][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.987629][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 633.360115][ T7131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.467183][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.476169][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.523677][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.548486][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.557418][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.596506][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.671224][ T5830] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 633.707993][ T7131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.757786][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.778195][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.786665][ T8062] bridge_slave_0: entered allmulticast mode [ 633.797680][ T8062] bridge_slave_0: entered promiscuous mode [ 633.831297][ T5830] usb 7-1: Using ep0 maxpacket: 8 [ 633.844068][ T5830] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 633.861304][ T5830] usb 7-1: config 0 has no interface number 0 [ 633.869958][ T5830] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.901814][ T5830] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 633.922414][ T5830] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 633.925509][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.935784][ T5830] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 633.955790][ T5830] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 633.966524][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.981914][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.995080][ T8062] bridge_slave_1: entered allmulticast mode [ 634.005554][ T5830] usb 7-1: config 0 descriptor?? [ 634.039587][ T8062] bridge_slave_1: entered promiscuous mode [ 634.073720][ T5830] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 634.102055][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.108648][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.275033][ T5830] usb 7-1: USB disconnect, device number 12 [ 634.275259][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 634.294698][ T5830] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 634.450540][ T35] usb 6-1: USB disconnect, device number 8 [ 634.660020][ T8049] hsr_slave_0: entered promiscuous mode [ 634.679491][ T8049] hsr_slave_1: entered promiscuous mode [ 634.689948][ T8049] debugfs: 'hsr0' already exists in 'hsr' [ 634.712932][ T8049] Cannot create hsr debugfs directory [ 634.871697][ T8062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.016883][ T8062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.092022][ T5780] Bluetooth: hci3: command tx timeout [ 635.713177][ T7152] ===================================================== [ 635.720476][ T7152] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 635.728399][ T7152] __inet6_bind+0x4ac/0x1830 [ 635.733292][ T7152] inet6_bind+0x11e/0x1a0 [ 635.737788][ T7152] kernel_bind+0xd6/0x130 [ 635.742409][ T7152] rds_tcp_conn_path_connect+0x952/0xff0 [ 635.748218][ T7152] rds_connect_worker+0x353/0x4d0 [ 635.755965][ T7152] process_scheduled_works+0xb21/0x1e30 [ 635.762481][ T7152] worker_thread+0xede/0x1580 [ 635.770614][ T7152] kthread+0x53f/0x600 [ 635.774980][ T7152] ret_from_fork+0x20f/0x910 [ 635.779704][ T7152] ret_from_fork_asm+0x1a/0x30 [ 635.784764][ T7152] [ 635.787142][ T7152] Uninit was stored to memory at: [ 635.792531][ T7152] kernel_bind+0x92/0x130 [ 635.797049][ T7152] rds_tcp_conn_path_connect+0x952/0xff0 [ 635.803162][ T7152] rds_connect_worker+0x353/0x4d0 [ 635.808338][ T7152] process_scheduled_works+0xb21/0x1e30 [ 635.815432][ T7152] worker_thread+0xede/0x1580 [ 635.820258][ T7152] kthread+0x53f/0x600 [ 635.824768][ T7152] ret_from_fork+0x20f/0x910 [ 635.829504][ T7152] ret_from_fork_asm+0x1a/0x30 [ 635.834543][ T7152] [ 635.836931][ T7152] Uninit was stored to memory at: [ 635.842262][ T7152] rds_tcp_conn_path_connect+0xae5/0xff0 [ 635.848063][ T7152] rds_connect_worker+0x353/0x4d0 [ 635.853371][ T7152] process_scheduled_works+0xb21/0x1e30 [ 635.860856][ T7152] worker_thread+0xede/0x1580 [ 635.866496][ T7152] kthread+0x53f/0x600 [ 635.870730][ T7152] ret_from_fork+0x20f/0x910 [ 635.875583][ T7152] ret_from_fork_asm+0x1a/0x30 [ 635.880579][ T7152] [ 635.883092][ T7152] Uninit was created at: [ 635.887538][ T7152] kmem_cache_alloc_noprof+0x37b/0x1270 [ 635.893357][ T7152] rds_tcp_conn_alloc+0x7b/0xbb0 [ 635.898446][ T7152] __rds_conn_create+0x267f/0x34e0 [ 635.903859][ T7152] rds_conn_create_outgoing+0x5d/0x80 [ 635.909398][ T7152] rds_sendmsg+0x2684/0x4d70 [ 635.914395][ T7152] __sys_sendto+0xa77/0xb90 [ 635.919045][ T7152] __x64_sys_sendto+0x130/0x200 [ 635.924140][ T7152] x64_sys_call+0x39a0/0x3ea0 [ 635.928982][ T7152] do_syscall_64+0x134/0xf80 [ 635.933884][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.939928][ T7152] [ 635.942478][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: kworker/u8:31 Not tainted syzkaller #0 PREEMPT(full) [ 635.952273][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.964301][ T7152] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 635.970647][ T7152] ===================================================== [ 635.979184][ T7152] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 637.309039][ T7152] Kernel panic - not syncing: kmsan.panic set ... [ 637.315635][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: kworker/u8:31 Tainted: G B syzkaller #0 PREEMPT(full) [ 637.326944][ T7152] Tainted: [B]=BAD_PAGE [ 637.331178][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.341365][ T7152] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 637.347721][ T7152] Call Trace: [ 637.351093][ T7152] [ 637.354103][ T7152] __dump_stack+0x26/0x30 [ 637.358604][ T7152] dump_stack_lvl+0x50/0x1c0 [ 637.363349][ T7152] ? dump_stack+0x12/0x25 [ 637.367845][ T7152] dump_stack+0x1e/0x25 [ 637.372159][ T7152] vpanic+0x7b4/0x1430 [ 637.376435][ T7152] panic+0x15d/0x160 [ 637.380536][ T7152] kmsan_report+0x31a/0x320 [ 637.385224][ T7152] ? __msan_warning+0x1b/0x30 [ 637.390062][ T7152] ? __inet6_bind+0x4ac/0x1830 [ 637.395012][ T7152] ? inet6_bind+0x11e/0x1a0 [ 637.399699][ T7152] ? kernel_bind+0xd6/0x130 [ 637.404394][ T7152] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 637.410381][ T7152] ? rds_connect_worker+0x353/0x4d0 [ 637.415734][ T7152] ? process_scheduled_works+0xb21/0x1e30 [ 637.421608][ T7152] ? worker_thread+0xede/0x1580 [ 637.426613][ T7152] ? kthread+0x53f/0x600 [ 637.431020][ T7152] ? ret_from_fork+0x20f/0x910 [ 637.435936][ T7152] ? ret_from_fork_asm+0x1a/0x30 [ 637.441062][ T7152] ? stack_depot_save+0x12/0x20 [ 637.446108][ T7152] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 637.452098][ T7152] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 637.458075][ T7152] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 637.464580][ T7152] ? __msan_memcpy+0x105/0x1c0 [ 637.469515][ T7152] ? kernel_bind+0x92/0x130 [ 637.474217][ T7152] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 637.480218][ T7152] ? rds_connect_worker+0x353/0x4d0 [ 637.485579][ T7152] ? process_scheduled_works+0xb21/0x1e30 [ 637.491457][ T7152] ? worker_thread+0xede/0x1580 [ 637.496459][ T7152] ? kthread+0x53f/0x600 [ 637.500863][ T7152] ? ret_from_fork+0x20f/0x910 [ 637.505785][ T7152] ? ret_from_fork_asm+0x1a/0x30 [ 637.510927][ T7152] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 637.516905][ T7152] ? stack_depot_save_flags+0x610/0x790 [ 637.522659][ T7152] ? kmsan_get_metadata+0xf1/0x160 [ 637.527972][ T7152] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 637.533984][ T7152] ? kmsan_get_metadata+0xf1/0x160 [ 637.539321][ T7152] __msan_warning+0x1b/0x30 [ 637.543993][ T7152] __inet6_bind+0x4ac/0x1830 [ 637.548782][ T7152] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 637.554798][ T7152] inet6_bind+0x11e/0x1a0 [ 637.559315][ T7152] ? __pfx_inet6_bind+0x10/0x10 [ 637.564348][ T7152] kernel_bind+0xd6/0x130 [ 637.568877][ T7152] ? kmsan_get_metadata+0xf1/0x160 [ 637.574172][ T7152] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 637.580180][ T7152] rds_tcp_conn_path_connect+0x952/0xff0 [ 637.586122][ T7152] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 637.592652][ T7152] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 637.598997][ T7152] rds_connect_worker+0x353/0x4d0 [ 637.604188][ T7152] ? __pfx_rds_connect_worker+0x10/0x10 [ 637.609911][ T7152] process_scheduled_works+0xb21/0x1e30 [ 637.615685][ T7152] worker_thread+0xede/0x1580 [ 637.620555][ T7152] kthread+0x53f/0x600 [ 637.624790][ T7152] ? __pfx_worker_thread+0x10/0x10 [ 637.630058][ T7152] ? __pfx_kthread+0x10/0x10 [ 637.634815][ T7152] ret_from_fork+0x20f/0x910 [ 637.639556][ T7152] ? __switch_to+0x51c/0x750 [ 637.644332][ T7152] ? __pfx_kthread+0x10/0x10 [ 637.649099][ T7152] ret_from_fork_asm+0x1a/0x30 [ 637.654105][ T7152] [ 637.657720][ T7152] Kernel Offset: disabled [ 637.662094][ T7152] Rebooting in 86400 seconds..