last executing test programs: 13m21.394730988s ago: executing program 32 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4084004) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x2000, 0x0) 13m10.472404906s ago: executing program 33 (id=28): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) r1 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x20000020, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[], [], 0x2c}) 12m0.539859836s ago: executing program 34 (id=136): timerfd_create(0x0, 0x80800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x363b28c0}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000480)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 11m58.048691911s ago: executing program 35 (id=140): unshare(0x62040200) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x7, 0x3, 0x101, 0x80, 0x5]}, &(0x7f0000000000)=0x54) 11m57.603839892s ago: executing program 36 (id=142): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ipvlan0\x00'}}, 0x1e) 11m21.062103439s ago: executing program 5 (id=37): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000069c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d"], &(0x7f0000006900)=""/173, 0x2e, 0xad, 0x1}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x20, @remote}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) splice(r3, 0x0, r4, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="d25e0d517726c0f3bc2c652c475c7399", 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="010026bd7000fcd9df251100000024000980080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48000) 11m19.237924776s ago: executing program 5 (id=146): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x54ff, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffb, 0x39f}, 0x0, 0x0, 0x0) open(0x0, 0x4c27e, 0x154) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000300)={{0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0xd, 0x10000, 0x7ff, 0x2, 0x1021b, 0xfff, 0xe, 0xfffffffffffffff7, 0xf4d}}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xfffe, 0x68}, {0x4d, 0x3}, @rumble={0x0, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000070000000c00000f02000000060000000000001201000000000000000000615f00"], 0x0, 0x39}, 0x20) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/102) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11m5.026105842s ago: executing program 7 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m3.936944064s ago: executing program 37 (id=146): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x54ff, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffb, 0x39f}, 0x0, 0x0, 0x0) open(0x0, 0x4c27e, 0x154) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000300)={{0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0xd, 0x10000, 0x7ff, 0x2, 0x1021b, 0xfff, 0xe, 0xfffffffffffffff7, 0xf4d}}) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xfffe, 0x68}, {0x4d, 0x3}, @rumble={0x0, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000070000000c00000f02000000060000000000001201000000000000000000615f00"], 0x0, 0x39}, 0x20) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000080)=""/102) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11m2.524587482s ago: executing program 7 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m1.353366389s ago: executing program 7 (id=179): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x0, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x0, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x435, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x7ff, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x200, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xfffffffe, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x16f8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf250e0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x2000a010}, 0x20000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="e6bf049d51e61f8dc06efe03001e7bdac916ed8df2f7182d5aafb1d1756c4b514543d18ca1b834b7171166c6a67a96090000006b6575e215232465d6bc0e6222001056b47057962792cf1b9c43c976", @ANYRES16, @ANYBLOB="000128bd7000fedbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0500180127"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004840) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m59.428597701s ago: executing program 7 (id=182): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup3(r0, r1, 0x0) 10m58.977994543s ago: executing program 7 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 10m58.746708378s ago: executing program 7 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000ffffffff0a00000006000100140000008f40a389143262e6415ac4d9ff1c326491691d3590d295a9dd4c8cd5"], 0x1c}}, 0x20008080) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x42800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) process_vm_readv(r2, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x50561}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) 10m43.523916661s ago: executing program 38 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000ffffffff0a00000006000100140000008f40a389143262e6415ac4d9ff1c326491691d3590d295a9dd4c8cd5"], 0x1c}}, 0x20008080) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x42800) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) process_vm_readv(r2, &(0x7f00000000c0), 0x0, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x50561}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) 9m36.371124597s ago: executing program 9 (id=427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 9m36.204439945s ago: executing program 9 (id=429): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 9m33.978155375s ago: executing program 8 (id=434): socket(0x2, 0x2, 0x4) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r1, 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) fsopen(&(0x7f0000000180)='ncpfs\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1) 9m33.537283154s ago: executing program 8 (id=435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x1}, 0x0) 9m32.607102233s ago: executing program 8 (id=436): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xeb, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064"], 0x5c}}, 0x40) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 9m32.311197689s ago: executing program 8 (id=437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x141080) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 9m31.991933979s ago: executing program 9 (id=440): r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES8=0x0], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m31.918965881s ago: executing program 8 (id=441): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9m31.704400565s ago: executing program 8 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 9m30.565939423s ago: executing program 9 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="66b9800000c00f326635010000000f300f01c364260f78fc7700440f20c0663504000000440f22c02e0fc7bc050066b9980800000f32b8c9048ed0a50fc71a", 0x3f}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m29.345109641s ago: executing program 9 (id=449): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 9m26.46436256s ago: executing program 9 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008", @ANYRES32, @ANYRES32=r0], 0x90}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r2, 0x541e, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 9m16.371370904s ago: executing program 39 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 9m11.338241663s ago: executing program 40 (id=451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008", @ANYRES32, @ANYRES32=r0], 0x90}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r2, 0x541e, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 8m35.561380183s ago: executing program 6 (id=546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x64, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x141080) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 8m35.464462605s ago: executing program 6 (id=547): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m32.417064333s ago: executing program 6 (id=548): syz_usb_connect(0x3, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0004}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m31.81136423s ago: executing program 6 (id=549): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "75a3d0", 0x10, 0x11, 0xfd, @empty, @mcast2, {[], {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x100, @val=0x80}}}}}}}}}, 0x4a) 8m30.672774698s ago: executing program 6 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m30.366291499s ago: executing program 6 (id=551): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xb4, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048880}, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x1ffffffd}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 8m15.133372359s ago: executing program 41 (id=551): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000804) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0xb4, 0x2, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_STATUS={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20048880}, 0x4) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) bind$netlink(r1, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x1ffffffd}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 4m48.854326443s ago: executing program 4 (id=1120): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 4m47.732907457s ago: executing program 4 (id=1122): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x1a) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 4m46.527599136s ago: executing program 4 (id=1124): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 4m46.056414798s ago: executing program 4 (id=1127): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x1) 4m39.445661178s ago: executing program 4 (id=1136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4m36.635954432s ago: executing program 4 (id=1139): unshare(0x64000600) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0) 4m21.21828798s ago: executing program 42 (id=1139): unshare(0x64000600) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0) 17.464677671s ago: executing program 3 (id=1744): statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7000, 0x100, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x5}}, 0x0, 0x9}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1be) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000300)=[{r2, 0x2046}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x456}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x4, "100000df00000000000000000000000000000000001000", 0x34325241}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) 11.108575783s ago: executing program 3 (id=1756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) syz_open_dev$dri(0x0, 0x1, 0x88300) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) dup2(r5, r3) 10.843005709s ago: executing program 2 (id=1757): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b"}) 9.721123226s ago: executing program 3 (id=1758): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) bind$inet(r0, 0x0, 0x0) 9.314078387s ago: executing program 2 (id=1759): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040011}, 0x8c10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) 6.979056272s ago: executing program 0 (id=1761): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x3328}, {r2, 0x4236}], 0x2, 0x0, 0x0, 0x0) close(r1) 5.901150543s ago: executing program 3 (id=1762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x4046040) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r4 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r4, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) 5.707502517s ago: executing program 1 (id=1763): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r5, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004380), 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 5.628983893s ago: executing program 0 (id=1764): socket(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5.274447041s ago: executing program 2 (id=1765): statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7000, 0x100, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x5}}, 0x0, 0x9}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1be) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000300)=[{r2, 0x2046}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x456}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x4, "100000df00000000000000000000000000000000001000", 0x34325241}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) 4.920361497s ago: executing program 0 (id=1766): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0x0, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x0, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x5, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x435, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x7ff, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x200, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0xfffffffe, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x16f8, 0x6, &(0x7f0000000640)="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"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7000fddbdf250e0000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x2000a010}, 0x20000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="e6bf049d51e61f8dc06efe03001e7bdac916ed8df2f7182d5aafb1d1756c4b514543d18ca1b834b7171166c6a67a96090000006b6575e215232465d6", @ANYRES16, @ANYBLOB="000128bd7000fedbdf254100000008000300", @ANYRES32=0x0, @ANYBLOB="0500180127"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004840) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.481660202s ago: executing program 1 (id=1767): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 4.373220084s ago: executing program 1 (id=1768): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 4.371893595s ago: executing program 2 (id=1769): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x5) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 4.201184697s ago: executing program 0 (id=1770): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) 4.110027125s ago: executing program 3 (id=1771): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) bind$inet(r0, 0x0, 0x0) 4.013758998s ago: executing program 1 (id=1772): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.596260876s ago: executing program 0 (id=1773): accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 2.615369543s ago: executing program 1 (id=1774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8818) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.216962623s ago: executing program 0 (id=1775): socket(0xa, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x1c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.648874984s ago: executing program 1 (id=1776): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x3db) accept4(r2, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r5, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004380), 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) 1.237840822s ago: executing program 2 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x6}}, 0x20) 461.700602ms ago: executing program 3 (id=1778): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = io_uring_setup(0x1b7b, 0x0) io_uring_enter(r1, 0x1f88, 0x7725, 0x17, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xb, 0x0, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x12, 0x0, &(0x7f00000000c0)="259a53f271a76d267300d990990051303bcd", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=1779): statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x7000, 0x100, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) fanotify_mark(0xffffffffffffffff, 0x80, 0x0, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x5}}, 0x0, 0x9}, 0x90) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1be) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000300)=[{r2, 0x2046}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x4, "100000df00000000000000000000000000000000001000", 0x34325241}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x80) kernel console output (not intermixed with test programs): _0 [ 497.193309][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.193339][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.233716][ T32] usb 5-1: USB disconnect, device number 15 [ 497.809853][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.809873][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.809903][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.049366][ T9552] fuse: Unknown parameter '0x0000000000000003' [ 499.676819][ T9333] hsr_slave_0: entered promiscuous mode [ 499.717653][ T9333] hsr_slave_1: entered promiscuous mode [ 499.750331][ T9333] debugfs: 'hsr0' already exists in 'hsr' [ 499.750364][ T9333] Cannot create hsr debugfs directory [ 500.320791][ T9591] fuse: Unknown parameter '0x0000000000000003' [ 500.601655][ T13] bridge_slave_1: left allmulticast mode [ 500.601695][ T13] bridge_slave_1: left promiscuous mode [ 500.602104][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.692512][ T13] bridge_slave_0: left allmulticast mode [ 500.692551][ T13] bridge_slave_0: left promiscuous mode [ 500.692868][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.225658][ T9615] random: crng reseeded on system resumption [ 502.015098][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.015214][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.680736][ T9626] fuse: Unknown parameter '0x0000000000000003' [ 502.845337][ T9629] input: syz1 as /devices/virtual/input/input9 [ 504.447585][ T9641] No control pipe specified [ 506.851737][ T5812] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 507.531000][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.532406][ T5812] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 507.532436][ T5812] usb 5-1: config 0 has no interface number 0 [ 507.563188][ T5812] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 507.563225][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.563245][ T5812] usb 5-1: Product: syz [ 507.563260][ T5812] usb 5-1: Manufacturer: syz [ 507.563275][ T5812] usb 5-1: SerialNumber: syz [ 507.600216][ T9661] fuse: Unknown parameter '0x0000000000000003' [ 507.632761][ T5812] usb 5-1: config 0 descriptor?? [ 507.719058][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.812330][ T13] bond0 (unregistering): Released all slaves [ 507.855733][ T5812] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 508.063387][ T5812] gspca_m5602: Failed to find a sensor [ 508.063404][ T5812] ALi m5602 5-1:0.88: ALi m5602 webcam failed [ 508.101930][ T5812] usb 5-1: USB disconnect, device number 16 [ 508.243850][ T9670] input: syz1 as /devices/virtual/input/input10 [ 509.408304][ T9677] No control pipe specified [ 510.216256][ T9692] mmap: syz.4.866 (9692) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 511.399724][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 511.667611][ T9701] fuse: Unknown parameter 'fd0x0000000000000003' [ 513.719814][ T9724] input: syz1 as /devices/virtual/input/input11 [ 514.550730][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 515.437977][ T9739] fuse: Unknown parameter 'fd0x0000000000000003' [ 515.878280][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'. [ 516.464113][ T13] hsr_slave_0: left promiscuous mode [ 516.508046][ T13] hsr_slave_1: left promiscuous mode [ 516.509292][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.583525][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.284193][ T9770] input: syz1 as /devices/virtual/input/input12 [ 519.371512][ T13] team0 (unregistering): Port device team_slave_1 removed [ 519.451547][ T13] team0 (unregistering): Port device team_slave_0 removed [ 519.560966][ T9782] fuse: Unknown parameter 'fd0x0000000000000003' [ 519.760949][ T5913] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 519.910632][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 519.913539][ T5913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.913565][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 519.913618][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.913661][ T5913] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 519.913686][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.794670][ T5913] hub 4-1:1.0: bad descriptor, ignoring hub [ 520.794716][ T5913] hub 4-1:1.0: probe with driver hub failed with error -5 [ 520.799293][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 520.799312][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 520.799424][ T5913] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 520.940717][ T5913] usb 4-1: USB disconnect, device number 4 [ 521.399125][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 521.420886][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.894'. [ 522.054478][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 522.196744][ T9812] veth0_vlan: left promiscuous mode [ 523.184717][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4 [ 524.719931][ T9842] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 524.722138][ T9842] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 530.217869][ T9333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.442711][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 530.445610][ T9333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.589000][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 530.602738][ T9333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.638273][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 530.654659][ T9333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.862037][ T9333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.822163][ T9936] batman_adv: batadv0: Adding interface: dummy0 [ 531.822184][ T9936] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.822219][ T9936] batman_adv: batadv0: Interface activated: dummy0 [ 531.842282][ T9936] batadv0: mtu less than device minimum [ 531.849917][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.859599][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.869911][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.877361][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.884926][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.894601][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.902212][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.909658][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 531.919848][ T9936] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 532.999895][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.390879][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.444000][ T9719] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.444272][ T9719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.193156][ T9719] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.193392][ T9719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.160439][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.654124][ T9333] veth0_vlan: entered promiscuous mode [ 536.679233][ T9333] veth1_vlan: entered promiscuous mode [ 538.273766][ T9333] veth0_macvtap: entered promiscuous mode [ 538.398093][ T9333] veth1_macvtap: entered promiscuous mode [ 538.705089][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.776606][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.899452][ T1220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.899509][ T1220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.899548][ T1220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.899584][ T1220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.235384][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.345162][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.349061][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.298112][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.299122][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.990667][ T32] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 542.166457][ T32] usb 5-1: device descriptor read/64, error -71 [ 542.420848][ T32] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 542.597299][ T32] usb 5-1: device descriptor read/64, error -71 [ 543.335574][ T32] usb usb5-port1: attempt power cycle [ 543.470680][ T5142] Bluetooth: hci0: command tx timeout [ 545.179844][T10104] binder: 10102:10104 ioctl 4018620d 0 returned -22 [ 545.562335][ T5142] Bluetooth: hci0: command tx timeout [ 545.754171][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.672452][ T5142] Bluetooth: hci0: command tx timeout [ 547.783168][T10040] chnl_net:caif_netlink_parms(): no params data found [ 549.817176][ T5142] Bluetooth: hci0: command tx timeout [ 551.480164][T10162] binder: 10158:10162 ioctl 4018620d 0 returned -22 [ 551.638706][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.797944][T10171] capability: warning: `syz.4.989' uses 32-bit capabilities (legacy support in use) [ 551.968488][T10176] net_ratelimit: 10 callbacks suppressed [ 551.968509][T10176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 552.063821][ T822] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 552.182623][T10171] random: crng reseeded on system resumption [ 552.210606][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 552.212869][ T822] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 552.212896][ T822] usb 3-1: config 0 has no interface number 0 [ 552.212940][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 552.212963][ T822] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 552.215622][ T822] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 552.215647][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.215665][ T822] usb 3-1: Product: syz [ 552.215678][ T822] usb 3-1: Manufacturer: syz [ 552.215691][ T822] usb 3-1: SerialNumber: syz [ 552.264693][T10176] kvm: pic: single mode not supported [ 552.264930][T10176] kvm: pic: non byte read [ 552.265226][T10176] kvm: pic: non byte read [ 552.265496][T10176] kvm: pic: non byte read [ 552.274345][T10176] kvm: pic: non byte read [ 552.274623][T10176] kvm: pic: non byte read [ 552.274920][T10176] kvm: pic: non byte read [ 552.275190][T10176] kvm: pic: non byte read [ 552.275459][T10176] kvm: pic: non byte read [ 552.284559][T10176] kvm: pic: non byte read [ 552.284866][T10176] kvm: pic: non byte read [ 552.456828][ T822] usb 3-1: config 0 descriptor?? [ 552.474039][T10172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.474254][T10172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.718969][T10172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.719261][T10172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 552.787006][T10194] 9p: Bad value for 'wfdno' [ 556.625555][ T822] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 556.625834][ T822] asix 3-1:0.34: probe with driver asix failed with error -71 [ 556.847535][ T822] usb 3-1: USB disconnect, device number 18 [ 558.245170][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 558.936637][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.221144][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.221621][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.222426][T10040] bridge_slave_0: entered allmulticast mode [ 560.435363][T10040] bridge_slave_0: entered promiscuous mode [ 560.452625][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.462481][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.469664][T10040] bridge_slave_1: entered allmulticast mode [ 560.500671][T10040] bridge_slave_1: entered promiscuous mode [ 561.877164][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1010'. [ 562.165357][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.358854][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.358965][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.085963][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.288005][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.401439][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 565.848669][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1022'. [ 567.005946][T10040] team0: Port device team_slave_0 added [ 567.033726][T10040] team0: Port device team_slave_1 added [ 568.126047][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.126066][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.126103][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.177828][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.177848][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.177877][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.351903][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 568.520805][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 568.523103][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.523130][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 568.527370][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 568.527401][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.527420][ T9] usb 2-1: Product: syz [ 568.527433][ T9] usb 2-1: Manufacturer: syz [ 568.527447][ T9] usb 2-1: SerialNumber: syz [ 568.547236][ T9] usb 2-1: config 0 descriptor?? [ 569.025997][T10040] hsr_slave_0: entered promiscuous mode [ 569.037067][T10040] hsr_slave_1: entered promiscuous mode [ 569.039067][T10040] debugfs: 'hsr0' already exists in 'hsr' [ 569.039094][T10040] Cannot create hsr debugfs directory [ 569.180127][T10356] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1033'. [ 570.891439][ T148] bridge_slave_1: left allmulticast mode [ 570.891481][ T148] bridge_slave_1: left promiscuous mode [ 570.891940][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.171311][ T5944] usb 2-1: USB disconnect, device number 4 [ 576.750184][ T148] bridge_slave_0: left allmulticast mode [ 576.750225][ T148] bridge_slave_0: left promiscuous mode [ 576.750881][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.766443][ T5142] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 578.876938][T10439] binder: BINDER_SET_CONTEXT_MGR already set [ 578.876957][T10439] binder: 10437:10439 ioctl 4018620d 200000000040 returned -16 [ 579.580714][ T5208] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 579.744405][ T5208] usb 5-1: Using ep0 maxpacket: 8 [ 579.757398][ T5208] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.757428][ T5208] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 579.762624][ T5208] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 579.762657][ T5208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.762678][ T5208] usb 5-1: Product: syz [ 579.762694][ T5208] usb 5-1: Manufacturer: syz [ 579.762709][ T5208] usb 5-1: SerialNumber: syz [ 579.834278][ T5208] usb 5-1: config 0 descriptor?? [ 581.425888][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.751491][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.794786][ T148] bond0 (unregistering): Released all slaves [ 581.862012][T10470] random: crng reseeded on system resumption [ 582.826805][ T5944] usb 5-1: USB disconnect, device number 20 [ 583.185787][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5 [ 589.356858][T10503] 9pnet_virtio: no channels available for device syz [ 594.371575][ T148] hsr_slave_0: left promiscuous mode [ 594.400654][ T148] hsr_slave_1: left promiscuous mode [ 594.401990][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.402015][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.445380][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.445411][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.659462][ T148] veth1_macvtap: left promiscuous mode [ 594.659581][ T148] veth0_macvtap: left promiscuous mode [ 594.659909][ T148] veth1_vlan: left promiscuous mode [ 594.660133][ T148] veth0_vlan: left promiscuous mode [ 595.134109][ T5912] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 595.290555][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 595.298107][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.298137][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 595.325857][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 595.325892][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.325913][ T5912] usb 3-1: Product: syz [ 595.325928][ T5912] usb 3-1: Manufacturer: syz [ 595.325942][ T5912] usb 3-1: SerialNumber: syz [ 595.368829][ T5912] usb 3-1: config 0 descriptor?? [ 595.653050][ T148] team0 (unregistering): Port device team_slave_1 removed [ 595.709034][ T148] team0 (unregistering): Port device team_slave_0 removed [ 596.029605][ T38] audit: type=1800 audit(1776975869.754:5): pid=10503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1066" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 596.030188][T10503] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 596.030215][T10503] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 596.030227][T10503] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 596.138281][ T5488] 8021q: adding VLAN 0 to HW filter on device eth6 [ 599.194218][ T10] usb 3-1: USB disconnect, device number 19 [ 599.822182][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 600.107548][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.168359][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.269920][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.325793][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.345500][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 602.060637][T10581] hsr_slave_1 (unregistering): left promiscuous mode [ 602.103852][ T5488] 8021q: adding VLAN 0 to HW filter on device eth7 [ 602.242399][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 602.381120][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 602.453093][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.453131][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.453173][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 602.453197][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.465788][ T9] usb 2-1: config 0 descriptor?? [ 602.573211][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 602.587236][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 602.595687][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 602.595728][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.595747][ T10] usb 5-1: Product: syz [ 602.595760][ T10] usb 5-1: Manufacturer: syz [ 602.595773][ T10] usb 5-1: SerialNumber: syz [ 602.602376][ T5834] Bluetooth: hci5: command tx timeout [ 602.623292][ T10] usb 5-1: config 0 descriptor?? [ 603.220161][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 603.220202][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 603.220217][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 603.220232][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 603.220246][ T9] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 604.670570][ T5834] Bluetooth: hci5: command tx timeout [ 604.733778][ T9] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 605.929334][ T10] usb 5-1: USB disconnect, device number 21 [ 606.383750][ T9] usb 2-1: USB disconnect, device number 5 [ 606.760756][ T5834] Bluetooth: hci5: command tx timeout [ 607.441596][ T5488] 8021q: adding VLAN 0 to HW filter on device eth8 [ 607.734468][T10646] comedi comedi0: Minor 3 could not be opened [ 608.456362][T10667] netlink: 'syz.4.1093': attribute type 2 has an invalid length. [ 608.991180][ T5834] Bluetooth: hci5: command tx timeout [ 609.065382][T10583] chnl_net:caif_netlink_parms(): no params data found [ 611.670670][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 611.833971][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 611.838730][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 611.864548][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 611.864570][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.864582][ T9] usb 5-1: Product: syz [ 611.864591][ T9] usb 5-1: Manufacturer: syz [ 611.864599][ T9] usb 5-1: SerialNumber: syz [ 611.933926][ T9] usb 5-1: config 0 descriptor?? [ 612.181551][ T12] bridge_slave_1: left allmulticast mode [ 612.181593][ T12] bridge_slave_1: left promiscuous mode [ 612.181913][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.535624][ T12] bridge_slave_0: left allmulticast mode [ 612.535665][ T12] bridge_slave_0: left promiscuous mode [ 612.535988][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.546467][T10729] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 614.109362][T10734] loop3: detected capacity change from 0 to 40427 [ 614.125037][T10734] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 614.125068][T10734] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 614.156312][T10734] F2FS-fs (loop3): invalid crc value [ 614.307426][T10734] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 614.319071][T10734] F2FS-fs (loop3): Start checkpoint disabled! [ 614.382371][T10734] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 614.384781][T10734] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 614.384812][T10734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 614.451234][ T32] usb 5-1: USB disconnect, device number 22 [ 615.871674][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.043328][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.148948][ T12] bond0 (unregistering): Released all slaves [ 616.344808][T10583] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.345199][T10583] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.345563][T10583] bridge_slave_0: entered allmulticast mode [ 616.401567][T10583] bridge_slave_0: entered promiscuous mode [ 617.015921][T10729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.030022][T10729] team0: Port device netdevsim0 added [ 617.041431][ T5488] 8021q: adding VLAN 0 to HW filter on device eth18 [ 618.691719][T10782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 618.691939][T10782] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 618.737808][T10782] vhci_hcd vhci_hcd.0: Device attached [ 621.057050][T10786] vhci_hcd: connection closed [ 621.509112][ T44] vhci_hcd vhci_hcd.3: stop threads [ 621.553474][ T44] vhci_hcd vhci_hcd.3: release socket [ 621.774695][ T44] vhci_hcd vhci_hcd.3: disconnect device [ 621.912810][T10583] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.913260][T10583] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.913643][T10583] bridge_slave_1: entered allmulticast mode [ 621.928479][T10583] bridge_slave_1: entered promiscuous mode [ 624.019317][T10803] loop3: detected capacity change from 0 to 40427 [ 624.029675][ T12] hsr_slave_0: left promiscuous mode [ 624.045247][ T5208] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 624.096010][T10803] F2FS-fs (loop3): Invalid log blocks per segment (83886089) [ 624.096039][T10803] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 624.101837][T10803] F2FS-fs (loop3): invalid crc value [ 624.141078][ T12] hsr_slave_1: left promiscuous mode [ 624.142554][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.211301][T10803] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 624.252564][T10803] F2FS-fs (loop3): Start checkpoint disabled! [ 624.284428][T10803] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 624.285443][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.286468][T10803] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 624.286498][T10803] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 624.320680][ T5208] usb 3-1: Using ep0 maxpacket: 8 [ 624.570998][ T5208] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 624.574845][ T5208] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 624.574875][ T5208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.574895][ T5208] usb 3-1: Product: syz [ 624.574910][ T5208] usb 3-1: Manufacturer: syz [ 624.574924][ T5208] usb 3-1: SerialNumber: syz [ 624.613407][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613512][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.494634][ T5208] usb 3-1: config 0 descriptor?? [ 626.158696][ T5208] usb 3-1: can't set config #0, error -71 [ 626.424144][ T5208] usb 3-1: USB disconnect, device number 20 [ 629.970907][ T5944] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 630.145838][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 630.145874][ T5944] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 630.168620][ T5944] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 630.168651][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.168669][ T5944] usb 3-1: Product: syz [ 630.168682][ T5944] usb 3-1: Manufacturer: syz [ 630.168703][ T5944] usb 3-1: SerialNumber: syz [ 630.217611][ T5944] usb 3-1: config 0 descriptor?? [ 630.218894][T10840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.219187][T10840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.458699][T10840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.463934][T10840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 630.612739][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 630.633690][ T12] team0 (unregistering): Port device team_slave_1 removed [ 630.706047][ T12] team0 (unregistering): Port device team_slave_0 removed [ 630.790644][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 630.810136][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 630.838240][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 630.838277][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.838298][ T9] usb 4-1: Product: syz [ 630.838313][ T9] usb 4-1: Manufacturer: syz [ 630.838327][ T9] usb 4-1: SerialNumber: syz [ 630.889658][ T9] usb 4-1: config 0 descriptor?? [ 630.892515][ T5944] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 630.947142][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 631.303426][ T5944] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 631.720348][ T5944] usb 3-1: USB disconnect, device number 21 [ 633.404386][ T9] gspca_zc3xx: reg_r err -32 [ 634.471174][ T5488] 8021q: adding VLAN 0 to HW filter on device eth19 [ 634.660542][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 634.660668][ T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 634.673783][T10583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.751637][T10583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.990731][T10867] Illegal XDP return value 128 on prog (id 52) dev N/A, expect packet loss! [ 635.163062][ T5913] usb 4-1: USB disconnect, device number 5 [ 637.655477][T10583] team0: Port device team_slave_0 added [ 638.767758][T10583] team0: Port device team_slave_1 added [ 639.301058][T10583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.301078][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.301104][T10583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.411123][T10583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.411144][T10583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.411174][T10583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.319022][ T5488] 8021q: adding VLAN 0 to HW filter on device eth20 [ 641.458105][T10583] hsr_slave_0: entered promiscuous mode [ 641.484814][T10583] hsr_slave_1: entered promiscuous mode [ 641.486510][T10583] debugfs: 'hsr0' already exists in 'hsr' [ 641.486534][T10583] Cannot create hsr debugfs directory [ 644.548955][T10947] syzkaller0: entered promiscuous mode [ 644.548983][T10947] syzkaller0: entered allmulticast mode [ 650.772256][T10583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 651.315745][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 651.516655][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 652.033523][T10583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 652.074155][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 652.099553][T10583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 652.256750][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.268027][T10583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 652.409462][T10583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 654.017853][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.100031][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.125684][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.137487][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.138720][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.421012][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 657.428739][ T5834] Bluetooth: hci0: command tx timeout [ 658.050610][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 658.053296][ T5944] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 658.056393][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 658.056422][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.056443][ T5944] usb 2-1: Product: syz [ 658.056455][ T5944] usb 2-1: Manufacturer: syz [ 658.056470][ T5944] usb 2-1: SerialNumber: syz [ 658.120694][ T5944] usb 2-1: config 0 descriptor?? [ 658.175835][ T5944] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 658.610614][ T5913] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 658.654338][ T5944] gspca_zc3xx: reg_w_i err -71 [ 659.774915][ T5944] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 659.775036][ T5944] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 659.788694][ T5944] usb 2-1: USB disconnect, device number 6 [ 660.188562][ T5834] Bluetooth: hci0: command tx timeout [ 660.243601][ T5913] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 660.243634][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.243653][ T5913] usb 3-1: config 0 has no interface number 0 [ 660.243697][ T5913] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 660.252709][ T5913] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 660.252752][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.252774][ T5913] usb 3-1: Product: syz [ 660.252788][ T5913] usb 3-1: Manufacturer: syz [ 660.252803][ T5913] usb 3-1: SerialNumber: syz [ 660.337433][ T5913] usb 3-1: config 0 descriptor?? [ 660.646472][ T5913] cyberjack 3-1:0.69: required endpoints missing [ 662.687453][ T5142] Bluetooth: hci0: command tx timeout [ 662.709020][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.779837][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.814556][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.850211][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.862569][ T5944] usb 3-1: USB disconnect, device number 22 [ 662.884890][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.812979][ T5834] Bluetooth: hci0: command tx timeout [ 665.178257][ T5834] Bluetooth: hci4: command tx timeout [ 665.397137][ T32] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 665.545934][T10855] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.565191][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 665.568999][ T32] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 665.572781][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 665.572813][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.572844][ T32] usb 3-1: Product: syz [ 665.572859][ T32] usb 3-1: Manufacturer: syz [ 665.572874][ T32] usb 3-1: SerialNumber: syz [ 665.676418][ T32] usb 3-1: config 0 descriptor?? [ 665.704903][ T32] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 667.230638][ T5834] Bluetooth: hci4: command tx timeout [ 667.545665][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 667.758013][T10855] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.763517][ T10] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 667.763550][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.763581][ T10] usb 4-1: config 0 has no interface number 0 [ 667.763627][ T10] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 667.766881][ T10] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 667.766930][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.766951][ T10] usb 4-1: Product: syz [ 667.766966][ T10] usb 4-1: Manufacturer: syz [ 667.766980][ T10] usb 4-1: SerialNumber: syz [ 667.868324][ T10] usb 4-1: config 0 descriptor?? [ 667.884811][ T10] cyberjack 4-1:0.69: required endpoints missing [ 669.034642][ T32] gspca_zc3xx: reg_r err -32 [ 669.485340][ T5834] Bluetooth: hci4: command tx timeout [ 669.970513][ T32] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 669.972807][ T32] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 670.613167][ T32] usb 3-1: USB disconnect, device number 23 [ 670.758959][ T5208] usb 4-1: USB disconnect, device number 6 [ 671.045181][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'. [ 671.912266][ T5834] Bluetooth: hci4: command tx timeout [ 672.128001][T10855] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.936140][T11167] vlan2: entered promiscuous mode [ 672.936157][T11167] dummy0: entered promiscuous mode [ 674.717657][T11062] chnl_net:caif_netlink_parms(): no params data found [ 674.940741][ T9974] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 675.090563][ T9974] usb 4-1: Using ep0 maxpacket: 8 [ 675.093226][ T9974] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 675.096351][ T9974] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 675.096382][ T9974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.096402][ T9974] usb 4-1: Product: syz [ 675.096418][ T9974] usb 4-1: Manufacturer: syz [ 675.096432][ T9974] usb 4-1: SerialNumber: syz [ 676.159440][ T9974] usb 4-1: config 0 descriptor?? [ 676.961195][ T9974] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 677.130781][ T32] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 677.270732][ T32] usb 2-1: device descriptor read/64, error -71 [ 677.326596][T10855] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.530615][ T32] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 677.660780][ T32] usb 2-1: device descriptor read/64, error -71 [ 677.777057][ T32] usb usb2-port1: attempt power cycle [ 678.120699][ T32] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 678.141670][ T32] usb 2-1: device descriptor read/8, error -71 [ 678.391213][ T32] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 678.411463][ T32] usb 2-1: device descriptor read/8, error -71 [ 678.523892][ T32] usb usb2-port1: unable to enumerate USB device [ 678.815106][ T9974] gspca_zc3xx: reg_r err -32 [ 679.130860][T11062] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.131064][T11062] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.131299][T11062] bridge_slave_0: entered allmulticast mode [ 679.137755][T11062] bridge_slave_0: entered promiscuous mode [ 679.218093][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.244438][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.245136][T11062] bridge_slave_1: entered allmulticast mode [ 679.296872][T11062] bridge_slave_1: entered promiscuous mode [ 679.400593][ T9974] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 679.400755][ T9974] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 679.890074][ T9974] usb 4-1: USB disconnect, device number 7 [ 680.152496][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1204'. [ 680.303529][T11062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.356139][T11062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.847772][T11062] team0: Port device team_slave_0 added [ 680.887813][T11062] team0: Port device team_slave_1 added [ 680.889069][T11108] chnl_net:caif_netlink_parms(): no params data found [ 683.498438][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 683.592416][T11062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.592437][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.592465][T11062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.660594][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 683.663070][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.663121][ T9] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 683.663145][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.715594][ T9] usb 2-1: config 0 descriptor?? [ 684.042136][T10855] bridge_slave_1: left allmulticast mode [ 684.042179][T10855] bridge_slave_1: left promiscuous mode [ 684.042800][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.090826][ T6893] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 684.115369][T10855] bridge_slave_0: left allmulticast mode [ 684.115399][T10855] bridge_slave_0: left promiscuous mode [ 684.115719][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.168051][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168090][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168114][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168139][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168165][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168188][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168209][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168232][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168257][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.168282][ T9] pantherlord 0003:0E8F:0003.0004: unknown main item tag 0x0 [ 684.263859][ T6893] usb 4-1: Using ep0 maxpacket: 8 [ 684.268140][ T6893] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 684.292370][ T6893] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 684.292402][ T6893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.292422][ T6893] usb 4-1: Product: syz [ 684.292436][ T6893] usb 4-1: Manufacturer: syz [ 684.292450][ T6893] usb 4-1: SerialNumber: syz [ 684.311286][ T6893] usb 4-1: config 0 descriptor?? [ 684.337933][ T9] pantherlord 0003:0E8F:0003.0004: hidraw0: USB HID v0.0b Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0 [ 684.337972][ T9] pantherlord 0003:0E8F:0003.0004: no output reports found [ 684.340209][ T6893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 684.388388][ T9] usb 2-1: USB disconnect, device number 11 [ 684.487103][T11278] fido_id[11278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 686.029391][ T38] audit: type=1326 audit(1776975959.754:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.1.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c1fcc819 code=0x0 [ 686.051835][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.052112][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.217507][ T38] audit: type=1326 audit(1776975959.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11294 comm="syz.1.1221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f11c1fcc819 code=0x0 [ 686.369687][T10855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.426738][ T6893] gspca_zc3xx: reg_r err -32 [ 686.456551][T10855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.505477][T10855] bond0 (unregistering): Released all slaves [ 686.701928][T11062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.701949][T11062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.701980][T11062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.060654][ T6893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 687.060767][ T6893] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 687.218414][T11062] hsr_slave_0: entered promiscuous mode [ 687.263669][T11062] hsr_slave_1: entered promiscuous mode [ 687.265667][T11062] debugfs: 'hsr0' already exists in 'hsr' [ 687.265695][T11062] Cannot create hsr debugfs directory [ 688.099620][ T821] usb 4-1: USB disconnect, device number 8 [ 689.912505][T11108] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.912865][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.914072][T11108] bridge_slave_0: entered allmulticast mode [ 689.954802][T11108] bridge_slave_0: entered promiscuous mode [ 690.077233][T11108] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.164082][T11331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1228'. [ 692.696082][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.696437][T11108] bridge_slave_1: entered allmulticast mode [ 694.492584][T11108] bridge_slave_1: entered promiscuous mode [ 695.779027][T10518] udevd[10518]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 695.834444][T10518] udevd[10518]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 696.737620][T11108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.974824][T11108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.850801][ T5912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 701.050897][T10855] hsr_slave_0: left promiscuous mode [ 701.166167][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 701.173235][ T5912] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 701.189353][ T5912] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 701.189387][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.189408][ T5912] usb 2-1: Product: syz [ 701.189422][ T5912] usb 2-1: Manufacturer: syz [ 701.189436][ T5912] usb 2-1: SerialNumber: syz [ 701.201218][ T5912] usb 2-1: config 0 descriptor?? [ 701.207940][ T5912] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 701.725426][T10855] hsr_slave_1: left promiscuous mode [ 701.726872][T10855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.726899][T10855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.811778][ T5912] gspca_zc3xx: reg_w_i err -110 [ 702.127403][T10855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.127433][T10855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.401835][ T5912] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 702.401926][ T5912] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 702.405513][T10855] veth1_macvtap: left promiscuous mode [ 702.405675][T10855] veth0_macvtap: left promiscuous mode [ 702.409328][T10855] veth1_vlan: left promiscuous mode [ 702.409523][T10855] veth0_vlan: left promiscuous mode [ 703.148748][ T8628] usb 2-1: USB disconnect, device number 12 [ 703.856957][T10855] team0 (unregistering): Port device team_slave_1 removed [ 703.992661][T10855] team0 (unregistering): Port device team_slave_0 removed [ 704.917312][T11108] team0: Port device team_slave_0 added [ 704.998669][T11108] team0: Port device team_slave_1 added [ 705.534897][T11108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.534917][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.534947][T11108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.646362][T11108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.646382][T11108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.646412][T11108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.277688][T11108] hsr_slave_0: entered promiscuous mode [ 707.279859][T11108] hsr_slave_1: entered promiscuous mode [ 707.320581][T11108] debugfs: 'hsr0' already exists in 'hsr' [ 707.320610][T11108] Cannot create hsr debugfs directory [ 708.100610][ T9974] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 708.280601][ T9974] usb 4-1: Using ep0 maxpacket: 8 [ 708.549772][ T9974] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 708.563806][ T9974] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 708.563841][ T9974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.563863][ T9974] usb 4-1: Product: syz [ 708.563878][ T9974] usb 4-1: Manufacturer: syz [ 708.563891][ T9974] usb 4-1: SerialNumber: syz [ 708.569838][ T9974] usb 4-1: config 0 descriptor?? [ 708.618864][ T9974] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 708.941379][T11445] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 708.941774][T11445] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 709.875948][ T6893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 710.043333][ T6893] usb 2-1: Using ep0 maxpacket: 16 [ 710.046269][ T6893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.046323][ T6893] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 710.046348][ T6893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.064680][ T6893] usb 2-1: config 0 descriptor?? [ 710.577228][ T6893] usbhid 2-1:0.0: can't add hid device: -71 [ 710.577364][ T6893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 710.608545][ T6893] usb 2-1: USB disconnect, device number 13 [ 711.259424][ T9974] gspca_zc3xx: reg_r err -32 [ 711.840973][ T9974] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 711.841078][ T9974] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 712.377806][ T8628] usb 4-1: USB disconnect, device number 9 [ 712.745372][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.814446][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.817594][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.832657][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.839388][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 714.905574][ T5944] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 714.990664][ T5142] Bluetooth: hci5: command tx timeout [ 715.056874][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 715.063424][ T5944] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 715.095939][ T5944] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 715.095974][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.095996][ T5944] usb 4-1: Product: syz [ 715.096010][ T5944] usb 4-1: Manufacturer: syz [ 715.096024][ T5944] usb 4-1: SerialNumber: syz [ 715.173932][ T5944] usb 4-1: config 0 descriptor?? [ 715.203292][ T5944] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 716.734410][ T5944] gspca_zc3xx: reg_w_i err -110 [ 717.176627][ T5142] Bluetooth: hci5: command tx timeout [ 717.385133][ T5944] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 717.385242][ T5944] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 718.207347][T11485] chnl_net:caif_netlink_parms(): no params data found [ 718.677753][ T9974] usb 4-1: USB disconnect, device number 10 [ 718.955712][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1296'. [ 719.230662][ T5142] Bluetooth: hci5: command tx timeout [ 719.517248][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.517571][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.517907][T11485] bridge_slave_0: entered allmulticast mode [ 719.524732][T11485] bridge_slave_0: entered promiscuous mode [ 719.562633][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.562933][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.563279][T11485] bridge_slave_1: entered allmulticast mode [ 719.593249][T11485] bridge_slave_1: entered promiscuous mode [ 719.887709][T10855] bridge_slave_1: left allmulticast mode [ 719.887794][T10855] bridge_slave_1: left promiscuous mode [ 719.888098][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.385108][T10855] bridge_slave_0: left allmulticast mode [ 720.385147][T10855] bridge_slave_0: left promiscuous mode [ 720.385497][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.872531][T10855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.170075][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 721.231995][T10855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.268163][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 721.272189][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 721.274148][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 721.274866][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 722.381590][ T5834] Bluetooth: hci5: command tx timeout [ 722.488861][T10855] bond0 (unregistering): Released all slaves [ 722.818715][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.019224][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.758850][T11619] overlayfs: missing 'lowerdir' [ 724.850621][ T5142] Bluetooth: hci0: command tx timeout [ 725.750648][T10855] hsr_slave_0: left promiscuous mode [ 725.752352][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1316'. [ 725.792587][T10855] hsr_slave_1: left promiscuous mode [ 725.799970][T10855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.832390][T10855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.923535][ T5142] Bluetooth: hci0: command tx timeout [ 726.972727][T10855] team0 (unregistering): Port device team_slave_1 removed [ 727.032032][T10855] team0 (unregistering): Port device team_slave_0 removed [ 727.499678][T11485] team0: Port device team_slave_0 added [ 727.583190][T11485] team0: Port device team_slave_1 added [ 729.600659][ T5142] Bluetooth: hci0: command tx timeout [ 729.918376][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.918395][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.918421][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.177534][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.177548][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.177565][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.927880][T11485] hsr_slave_0: entered promiscuous mode [ 730.941327][T11485] hsr_slave_1: entered promiscuous mode [ 730.948851][T11485] debugfs: 'hsr0' already exists in 'hsr' [ 730.948882][T11485] Cannot create hsr debugfs directory [ 732.042904][ T5142] Bluetooth: hci0: command tx timeout [ 734.045269][T10855] bridge_slave_1: left allmulticast mode [ 734.045309][T10855] bridge_slave_1: left promiscuous mode [ 734.045640][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.262642][T10855] bridge_slave_0: left allmulticast mode [ 734.262683][T10855] bridge_slave_0: left promiscuous mode [ 734.263767][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.304591][ T38] audit: type=1326 audit(1776976009.034:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.305228][ T38] audit: type=1326 audit(1776976009.034:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.306152][ T38] audit: type=1326 audit(1776976009.034:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.307026][ T38] audit: type=1326 audit(1776976009.034:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.307989][ T38] audit: type=1326 audit(1776976009.034:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.308436][ T38] audit: type=1326 audit(1776976009.034:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 735.308869][ T38] audit: type=1326 audit(1776976009.034:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11745 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb1044c819 code=0x7ffc0000 [ 736.664667][T10855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.781559][T10855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.876455][T10855] bond0 (unregistering): Released all slaves [ 737.771204][ T37] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 738.818642][T10855] hsr_slave_0: left promiscuous mode [ 738.850747][T10855] hsr_slave_1: left promiscuous mode [ 738.852016][T10855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.032326][ T37] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.077418][T10855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.134877][ T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 739.134927][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 739.134949][ T37] usb 4-1: Product: syz [ 739.134963][ T37] usb 4-1: Manufacturer: syz [ 739.135037][ T37] usb 4-1: SerialNumber: syz [ 740.034040][ T37] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 740.096101][ T37] usb 4-1: USB disconnect, device number 11 [ 740.146849][ T37] usblp0: removed [ 742.071232][T10855] team0 (unregistering): Port device team_slave_1 removed [ 742.326360][T11814] QAT: failed to copy from user cfg_data. [ 743.089621][T10855] team0 (unregistering): Port device team_slave_0 removed [ 743.459744][T11601] chnl_net:caif_netlink_parms(): no params data found [ 746.217632][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.217665][T11838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.262827][T11838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.262848][T11838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.302073][T11601] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.302496][T11601] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.302961][T11601] bridge_slave_0: entered allmulticast mode [ 747.313584][T11601] bridge_slave_0: entered promiscuous mode [ 747.353265][T11601] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.353710][T11601] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.354189][T11601] bridge_slave_1: entered allmulticast mode [ 747.416066][T11601] bridge_slave_1: entered promiscuous mode [ 747.503407][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.503484][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.530786][T11485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 749.359331][T11875] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 749.367362][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.536642][T11601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.541821][T11485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 749.892151][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.011244][T11601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.011627][T11485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 750.092548][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.241175][T11485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 750.285610][T11485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.404904][T11601] team0: Port device team_slave_0 added [ 750.435548][T11601] team0: Port device team_slave_1 added [ 750.460701][ T5944] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 750.583752][T11601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.583773][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.583804][T11601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.835867][ T5944] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 750.835898][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 750.835919][ T5944] usb 4-1: config 0 has no interface number 0 [ 750.835966][ T5944] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 750.838660][ T5944] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 750.838689][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.838709][ T5944] usb 4-1: Product: syz [ 750.838722][ T5944] usb 4-1: Manufacturer: syz [ 750.838736][ T5944] usb 4-1: SerialNumber: syz [ 750.866722][ T5944] usb 4-1: config 0 descriptor?? [ 750.930847][T11601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.930866][T11601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.930893][T11601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.003255][ T5944] cyberjack 4-1:0.69: required endpoints missing [ 752.293085][ T822] usb 4-1: USB disconnect, device number 12 [ 752.502067][ T1220] bridge_slave_1: left allmulticast mode [ 752.502104][ T1220] bridge_slave_1: left promiscuous mode [ 752.502420][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.683307][ T1220] bridge_slave_0: left allmulticast mode [ 753.683336][ T1220] bridge_slave_0: left promiscuous mode [ 753.683542][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.832889][T11923] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 754.924132][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 755.052336][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.262248][ T1220] bond0 (unregistering): Released all slaves [ 756.154021][T11601] hsr_slave_0: entered promiscuous mode [ 756.175161][T11601] hsr_slave_1: entered promiscuous mode [ 756.179073][T11601] debugfs: 'hsr0' already exists in 'hsr' [ 756.179102][T11601] Cannot create hsr debugfs directory [ 756.610622][ T822] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 757.442923][ T822] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 757.442955][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.442975][ T822] usb 3-1: config 0 has no interface number 0 [ 757.443021][ T822] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.446271][ T822] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 757.446299][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.446320][ T822] usb 3-1: Product: syz [ 757.446335][ T822] usb 3-1: Manufacturer: syz [ 757.446349][ T822] usb 3-1: SerialNumber: syz [ 757.456395][ T822] usb 3-1: config 0 descriptor?? [ 757.593433][ T822] cyberjack 3-1:0.69: required endpoints missing [ 757.851374][ T1220] hsr_slave_0: left promiscuous mode [ 757.891622][ T1220] hsr_slave_1: left promiscuous mode [ 757.892921][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.971777][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.193717][ T822] usb 3-1: USB disconnect, device number 24 [ 758.590443][T11953] evm: overlay not supported [ 759.331757][T11964] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 761.001858][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 761.860785][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 764.614237][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.980274][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.173957][ T5839] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 765.198828][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.199021][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.398244][ T5839] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 765.398370][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 765.398391][ T5839] usb 3-1: config 0 has no interface number 0 [ 765.398446][ T5839] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 765.440315][ T5839] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 765.440349][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.440944][ T5839] usb 3-1: Product: syz [ 765.440962][ T5839] usb 3-1: Manufacturer: syz [ 765.440977][ T5839] usb 3-1: SerialNumber: syz [ 765.503104][ T5839] usb 3-1: config 0 descriptor?? [ 766.307801][ T5839] cyberjack 3-1:0.69: required endpoints missing [ 766.473517][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.479479][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.905826][T11601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 769.035987][ T5912] usb 3-1: USB disconnect, device number 25 [ 769.092151][T11601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 769.197528][T11601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 769.529468][T11601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 769.546062][T11601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 769.574810][T11601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 769.608909][T11601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 769.638100][T11601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 769.760670][ T5912] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 769.952824][ T5912] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 769.952857][ T5912] usb 3-1: config 0 has no interface number 0 [ 769.952903][ T5912] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 769.956524][ T5912] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 769.956555][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.956575][ T5912] usb 3-1: Product: syz [ 769.956589][ T5912] usb 3-1: Manufacturer: syz [ 769.956603][ T5912] usb 3-1: SerialNumber: syz [ 769.977215][ T5912] usb 3-1: config 0 descriptor?? [ 770.006760][ T5912] kobil_sct 3-1:0.148: KOBIL USB smart card terminal converter detected [ 770.369218][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.445506][T11601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.491926][T11601] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.519610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.519802][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.573267][ T5912] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 771.109049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.109658][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 771.613116][ T5912] usb 3-1: USB disconnect, device number 26 [ 771.923786][ T5912] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 771.929451][ T5912] kobil_sct 3-1:0.148: device disconnected [ 772.053174][ T6893] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 772.423125][ T6893] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 772.423156][ T6893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.423177][ T6893] usb 4-1: config 0 has no interface number 0 [ 772.423224][ T6893] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 773.130348][ T6893] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 773.130427][ T6893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.130451][ T6893] usb 4-1: Product: syz [ 773.130466][ T6893] usb 4-1: Manufacturer: syz [ 773.130481][ T6893] usb 4-1: SerialNumber: syz [ 773.184306][ T6893] usb 4-1: config 0 descriptor?? [ 773.225028][ T6893] cyberjack 4-1:0.69: required endpoints missing [ 773.662798][T12082] netlink: 'syz.1.1453': attribute type 2 has an invalid length. [ 773.768071][ T9974] usb 4-1: USB disconnect, device number 13 [ 773.795453][T11601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.159938][T11601] veth0_vlan: entered promiscuous mode [ 774.404486][T11601] veth1_vlan: entered promiscuous mode [ 774.423430][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 774.489362][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 774.495142][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 774.536774][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 774.554334][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 776.772138][ T5142] Bluetooth: hci4: command tx timeout [ 777.879346][T11601] veth0_macvtap: entered promiscuous mode [ 778.063495][ T5839] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 778.098963][T11601] veth1_macvtap: entered promiscuous mode [ 778.318242][ T5839] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 778.318274][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.318293][ T5839] usb 4-1: config 0 has no interface number 0 [ 778.318337][ T5839] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.327987][ T5839] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 778.328019][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.328037][ T5839] usb 4-1: Product: syz [ 778.328051][ T5839] usb 4-1: Manufacturer: syz [ 778.328063][ T5839] usb 4-1: SerialNumber: syz [ 778.414567][ T5839] usb 4-1: config 0 descriptor?? [ 778.437023][ T5839] cyberjack 4-1:0.69: required endpoints missing [ 778.822181][T12138] syz.1.1464 (12138) used greatest stack depth: 16520 bytes left [ 778.834054][ T5142] Bluetooth: hci4: command tx timeout [ 778.966896][ T5912] usb 4-1: USB disconnect, device number 14 [ 779.473995][T11601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.949189][T11601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.258927][ T5142] Bluetooth: hci4: command tx timeout [ 782.085074][T12091] chnl_net:caif_netlink_parms(): no params data found [ 783.152848][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 783.217669][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 783.263640][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 783.313993][T11112] Bluetooth: hci4: command tx timeout [ 783.329687][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 783.332353][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.500613][ T5839] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 785.550810][ T5834] Bluetooth: hci5: command tx timeout [ 785.676183][ T5839] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 785.676216][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.676236][ T5839] usb 4-1: config 0 has no interface number 0 [ 785.676281][ T5839] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 785.679425][ T5839] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 785.679457][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.679478][ T5839] usb 4-1: Product: syz [ 785.679493][ T5839] usb 4-1: Manufacturer: syz [ 785.679506][ T5839] usb 4-1: SerialNumber: syz [ 786.307653][ T5839] usb 4-1: config 0 descriptor?? [ 786.333851][ T5839] cyberjack 4-1:0.69: required endpoints missing [ 786.708833][T12244] binder: BINDER_SET_CONTEXT_MGR already set [ 786.708850][T12244] binder: 12243:12244 ioctl 4018620d 200000000040 returned -16 [ 786.754340][ T5839] usb 4-1: USB disconnect, device number 15 [ 787.245574][T12091] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.247579][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.247906][T12091] bridge_slave_0: entered allmulticast mode [ 787.255537][T12091] bridge_slave_0: entered promiscuous mode [ 787.307154][T12091] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.307563][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.307968][T12091] bridge_slave_1: entered allmulticast mode [ 787.315787][T12091] bridge_slave_1: entered promiscuous mode [ 787.380572][ T5839] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 787.653703][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.700783][ T5834] Bluetooth: hci5: command tx timeout [ 787.714238][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.076224][ T5839] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 788.076257][ T5839] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 788.084229][ T5839] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 788.084264][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.084286][ T5839] usb 3-1: Product: syz [ 788.084302][ T5839] usb 3-1: Manufacturer: syz [ 788.084316][ T5839] usb 3-1: SerialNumber: syz [ 789.082680][ T5839] usb 3-1: config 0 descriptor?? [ 789.100223][ T5839] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 789.767102][ T5839] gspca_sunplus: reg_r err -110 [ 789.767217][ T5839] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 789.771430][ T5834] Bluetooth: hci5: command tx timeout [ 789.948193][T12091] team0: Port device team_slave_0 added [ 790.296838][T12091] team0: Port device team_slave_1 added [ 790.730884][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.730905][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.730932][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.937954][ T822] usb 3-1: USB disconnect, device number 27 [ 791.063652][T12298] binder: BINDER_SET_CONTEXT_MGR already set [ 791.063665][T12298] binder: 12297:12298 ioctl 4018620d 200000000040 returned -16 [ 791.184407][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.184421][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.184437][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.790747][ T5834] Bluetooth: hci5: command tx timeout [ 792.132174][ T822] hid_parser_main: 31 callbacks suppressed [ 792.132223][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132264][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132289][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132314][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132338][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132361][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132383][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132405][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132427][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.132450][ T822] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 792.207875][T12091] hsr_slave_0: entered promiscuous mode [ 792.222326][T12091] hsr_slave_1: entered promiscuous mode [ 792.250675][T12091] debugfs: 'hsr0' already exists in 'hsr' [ 792.250703][T12091] Cannot create hsr debugfs directory [ 792.291527][ T822] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 792.542841][T12318] fido_id[12318]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 792.624400][ T5839] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 792.823002][ T5839] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 792.823032][ T5839] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.823053][ T5839] usb 2-1: config 0 has no interface number 0 [ 792.823182][ T5839] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 792.835095][ T5839] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 792.835127][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.835145][ T5839] usb 2-1: Product: syz [ 792.835158][ T5839] usb 2-1: Manufacturer: syz [ 792.835170][ T5839] usb 2-1: SerialNumber: syz [ 792.863721][ T5839] usb 2-1: config 0 descriptor?? [ 792.932761][ T5839] cyberjack 2-1:0.69: required endpoints missing [ 793.836135][ T6893] usb 2-1: USB disconnect, device number 14 [ 793.897036][ T1220] bridge_slave_1: left allmulticast mode [ 793.897075][ T1220] bridge_slave_1: left promiscuous mode [ 793.897407][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.289666][ T1220] bridge_slave_0: left allmulticast mode [ 794.289991][ T1220] bridge_slave_0: left promiscuous mode [ 794.362319][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.174432][T12367] binder: BINDER_SET_CONTEXT_MGR already set [ 796.174450][T12367] binder: 12366:12367 ioctl 4018620d 200000000040 returned -16 [ 797.711137][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.792083][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.813105][ T1220] bond0 (unregistering): Released all slaves [ 797.868539][T12200] chnl_net:caif_netlink_parms(): no params data found [ 798.880598][ T6893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 799.034226][ T6893] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 799.034258][ T6893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.034277][ T6893] usb 2-1: config 0 has no interface number 0 [ 799.034324][ T6893] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 799.037358][ T6893] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 799.037387][ T6893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.037408][ T6893] usb 2-1: Product: syz [ 799.037423][ T6893] usb 2-1: Manufacturer: syz [ 799.037437][ T6893] usb 2-1: SerialNumber: syz [ 799.060525][ T6893] usb 2-1: config 0 descriptor?? [ 799.069412][ T6893] cyberjack 2-1:0.69: required endpoints missing [ 799.177566][T12406] binder: 12405:12406 ioctl 40046205 0 returned -22 [ 799.314730][ T1220] hsr_slave_0: left promiscuous mode [ 799.365737][ T1220] hsr_slave_1: left promiscuous mode [ 799.366913][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.407872][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.567109][ T8628] usb 2-1: USB disconnect, device number 15 [ 801.691523][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 802.046965][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 803.090932][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.091275][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.094147][T12200] bridge_slave_0: entered allmulticast mode [ 803.108529][T12200] bridge_slave_0: entered promiscuous mode [ 803.140117][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.365129][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.593992][T12200] bridge_slave_1: entered allmulticast mode [ 804.197699][T12200] bridge_slave_1: entered promiscuous mode [ 805.713794][T12200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.093462][T12200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.198178][ T5912] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 806.384532][ T5912] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 806.384564][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.384585][ T5912] usb 2-1: config 0 has no interface number 0 [ 806.384711][ T5912] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 806.387995][ T5912] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 806.388026][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.388048][ T5912] usb 2-1: Product: syz [ 806.388062][ T5912] usb 2-1: Manufacturer: syz [ 806.388077][ T5912] usb 2-1: SerialNumber: syz [ 806.467868][ T5912] usb 2-1: config 0 descriptor?? [ 806.488286][ T5912] cyberjack 2-1:0.69: required endpoints missing [ 806.984571][T12200] team0: Port device team_slave_0 added [ 807.015301][ T5912] usb 2-1: USB disconnect, device number 16 [ 807.258524][T12200] team0: Port device team_slave_1 added [ 807.564061][T12200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.564081][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.564109][T12200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.652637][T12200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.652657][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.652684][T12200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.680861][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.680995][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.151209][T12200] hsr_slave_0: entered promiscuous mode [ 810.170506][T12200] hsr_slave_1: entered promiscuous mode [ 810.202292][T12200] debugfs: 'hsr0' already exists in 'hsr' [ 810.202324][T12200] Cannot create hsr debugfs directory [ 812.490627][ T8628] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 812.662068][ T8628] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 812.662100][ T8628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.662120][ T8628] usb 2-1: config 0 has no interface number 0 [ 812.662168][ T8628] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 812.665231][ T8628] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 812.665261][ T8628] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.665281][ T8628] usb 2-1: Product: syz [ 812.665296][ T8628] usb 2-1: Manufacturer: syz [ 812.665310][ T8628] usb 2-1: SerialNumber: syz [ 812.688429][ T8628] usb 2-1: config 0 descriptor?? [ 812.713769][ T8628] cyberjack 2-1:0.69: required endpoints missing [ 813.141978][ T5208] usb 2-1: USB disconnect, device number 17 [ 813.596053][T12559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 813.609295][T12559] team0: Port device bond1 added [ 815.376002][T12564] dummy0: entered promiscuous mode [ 815.720547][T12564] dummy0: left promiscuous mode [ 817.740599][T12091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 817.794862][T12091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.872192][T12091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 818.071152][T12091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.100593][ T6893] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 818.109629][T12091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 818.158532][T12091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.164430][T12091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 818.252755][ T6893] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 818.252787][ T6893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.252806][ T6893] usb 4-1: config 0 has no interface number 0 [ 818.252832][ T6893] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.273392][T12091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.283587][ T6893] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 818.283619][ T6893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.283638][ T6893] usb 4-1: Product: syz [ 818.283651][ T6893] usb 4-1: Manufacturer: syz [ 818.283664][ T6893] usb 4-1: SerialNumber: syz [ 818.463587][ T6893] usb 4-1: config 0 descriptor?? [ 818.478858][ T6893] cyberjack 4-1:0.69: required endpoints missing [ 818.988778][ T5839] usb 4-1: USB disconnect, device number 16 [ 819.615992][T12091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.116964][ T8628] hid_parser_main: 33 callbacks suppressed [ 821.116990][ T8628] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 821.127221][ T8628] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 822.188839][ T5488] 8021q: adding VLAN 0 to HW filter on device eth9 [ 822.370698][ T1220] bridge_slave_1: left allmulticast mode [ 822.370738][ T1220] bridge_slave_1: left promiscuous mode [ 822.371078][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.484743][ T1220] bridge_slave_0: left allmulticast mode [ 822.484781][ T1220] bridge_slave_0: left promiscuous mode [ 822.485094][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.540566][ T5912] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 822.624407][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x79 [ 822.624434][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x33 [ 822.624450][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x38 [ 822.624463][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x32 [ 822.624478][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x32 [ 822.624492][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x38 [ 822.624505][ T5834] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 823.810642][ T8628] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 824.042964][ T8628] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 824.042994][ T8628] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.043019][ T8628] usb 4-1: config 0 has no interface number 0 [ 824.043146][ T8628] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 824.049260][ T8628] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 824.049305][ T8628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.049327][ T8628] usb 4-1: Product: syz [ 824.049342][ T8628] usb 4-1: Manufacturer: syz [ 824.049356][ T8628] usb 4-1: SerialNumber: syz [ 824.125765][ T8628] usb 4-1: config 0 descriptor?? [ 824.130090][ T8628] cyberjack 4-1:0.69: required endpoints missing [ 824.354454][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 824.514695][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 824.588421][ T8628] usb 4-1: USB disconnect, device number 17 [ 824.593348][ T1220] bond0 (unregistering): Released all slaves [ 824.808439][ T5488] 8021q: adding VLAN 0 to HW filter on device eth10 [ 825.930953][ T5912] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 826.080527][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 826.083232][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.083284][ T5912] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 826.083308][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.099456][ T5912] usb 3-1: config 0 descriptor?? [ 826.164515][T12091] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.625138][ T1220] hsr_slave_0: left promiscuous mode [ 826.663670][ T1220] hsr_slave_1: left promiscuous mode [ 826.665070][ T1220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.665099][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.716471][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 826.716617][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 826.718328][ T1220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.718366][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.744027][ T5912] usb 3-1: USB disconnect, device number 28 [ 826.875864][ T1220] veth1_macvtap: left promiscuous mode [ 826.875985][ T1220] veth0_macvtap: left promiscuous mode [ 826.876332][ T1220] veth1_vlan: left promiscuous mode [ 826.908507][ T1220] veth0_vlan: left promiscuous mode [ 827.013753][T12706] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 827.534755][ T5833] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 827.730221][ T5833] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 827.730251][ T5833] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.730271][ T5833] usb 4-1: config 0 has no interface number 0 [ 827.730314][ T5833] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 827.777652][ T5833] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 827.777686][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.777706][ T5833] usb 4-1: Product: syz [ 827.777720][ T5833] usb 4-1: Manufacturer: syz [ 827.777735][ T5833] usb 4-1: SerialNumber: syz [ 827.879041][ T5833] usb 4-1: config 0 descriptor?? [ 827.886531][ T5833] cyberjack 4-1:0.69: required endpoints missing [ 828.263541][T12730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 828.345284][ T5833] usb 4-1: USB disconnect, device number 18 [ 828.721549][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 828.771235][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 829.252308][ T5488] 8021q: adding VLAN 0 to HW filter on device eth11 [ 830.867511][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.868887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.307187][T12744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.873603][ T5833] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 835.179536][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.254296][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.265474][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.266844][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.267725][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.461712][ T5833] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 835.461744][ T5833] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.461763][ T5833] usb 2-1: config 0 has no interface number 0 [ 835.461811][ T5833] usb 2-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 835.465913][ T5833] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 835.465943][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.465965][ T5833] usb 2-1: Product: syz [ 835.465981][ T5833] usb 2-1: Manufacturer: syz [ 835.465995][ T5833] usb 2-1: SerialNumber: syz [ 835.667306][ T5833] usb 2-1: config 0 descriptor?? [ 835.687525][ T5833] cyberjack 2-1:0.69: required endpoints missing [ 836.430021][ T5488] 8021q: adding VLAN 0 to HW filter on device eth12 [ 836.472080][ T5912] usb 2-1: USB disconnect, device number 19 [ 836.645093][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1603'. [ 837.712622][ T5142] Bluetooth: hci0: command tx timeout [ 839.800894][ T5142] Bluetooth: hci0: command tx timeout [ 840.302104][T12824] binder: 12823:12824 ioctl 40046205 0 returned -22 [ 840.824181][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 841.460599][ T5839] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 841.613976][ T5839] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 841.614009][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 841.614030][ T5839] usb 4-1: config 0 has no interface number 0 [ 841.614077][ T5839] usb 4-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 841.617164][ T5839] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 841.617194][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.617215][ T5839] usb 4-1: Product: syz [ 841.617230][ T5839] usb 4-1: Manufacturer: syz [ 841.617245][ T5839] usb 4-1: SerialNumber: syz [ 841.705224][ T5839] usb 4-1: config 0 descriptor?? [ 841.723743][ T5839] cyberjack 4-1:0.69: required endpoints missing [ 841.871516][ T5142] Bluetooth: hci0: command tx timeout [ 842.206944][ T5839] usb 4-1: USB disconnect, device number 19 [ 844.026972][ T5142] Bluetooth: hci0: command tx timeout [ 844.063424][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 844.118964][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 844.134528][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 844.138870][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 844.161581][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.046267][ T5142] Bluetooth: hci4: command tx timeout [ 848.751338][T12780] chnl_net:caif_netlink_parms(): no params data found [ 848.790606][ T822] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 848.957465][ T822] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 848.957496][ T822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 848.957515][ T822] usb 3-1: config 0 has no interface number 0 [ 848.957558][ T822] usb 3-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.070641][ T5142] Bluetooth: hci4: command tx timeout [ 849.230704][ T822] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 849.230737][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.230754][ T822] usb 3-1: Product: syz [ 849.230766][ T822] usb 3-1: Manufacturer: syz [ 849.230778][ T822] usb 3-1: SerialNumber: syz [ 849.671043][ T822] usb 3-1: config 0 descriptor?? [ 849.777830][ T822] cyberjack 3-1:0.69: required endpoints missing [ 851.209397][ T5142] Bluetooth: hci4: command tx timeout [ 851.325118][ T10] usb 3-1: USB disconnect, device number 29 [ 852.909869][T12780] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.910301][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.915227][T12780] bridge_slave_0: entered allmulticast mode [ 852.925874][T12780] bridge_slave_0: entered promiscuous mode [ 852.995339][T12780] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.995708][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.996027][T12780] bridge_slave_1: entered allmulticast mode [ 853.032401][T12780] bridge_slave_1: entered promiscuous mode [ 854.803462][ T5142] Bluetooth: hci4: command tx timeout [ 855.271945][T12780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.069330][T12780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.505834][T12780] team0: Port device team_slave_0 added [ 856.543189][T12780] team0: Port device team_slave_1 added [ 856.731152][T12780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.731172][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.731199][T12780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.810279][T12780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.810293][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.810310][T12780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.328203][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1644'. [ 857.660664][ T5944] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 857.913672][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.913701][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 857.913771][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.913810][ T5944] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 857.913832][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.967087][ T5944] hub 2-1:1.0: bad descriptor, ignoring hub [ 857.967126][ T5944] hub 2-1:1.0: probe with driver hub failed with error -5 [ 857.968172][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 857.968185][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 857.968289][ T5944] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 858.140022][T12780] hsr_slave_0: entered promiscuous mode [ 858.148591][T12780] hsr_slave_1: entered promiscuous mode [ 858.155651][T12780] debugfs: 'hsr0' already exists in 'hsr' [ 858.155679][T12780] Cannot create hsr debugfs directory [ 858.392634][T12856] chnl_net:caif_netlink_parms(): no params data found [ 858.435420][ T5944] usb 2-1: USB disconnect, device number 20 [ 860.810724][ T1220] bridge_slave_1: left allmulticast mode [ 860.810763][ T1220] bridge_slave_1: left promiscuous mode [ 860.811008][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.677879][ T1220] bridge_slave_0: left allmulticast mode [ 861.695581][ T1220] bridge_slave_0: left promiscuous mode [ 861.999164][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.670264][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1657'. [ 863.110523][ T5944] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 864.203514][ T5944] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.203544][ T5944] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 864.203598][ T5944] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.203640][ T5944] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 864.203665][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.227957][ T5944] hub 4-1:1.0: bad descriptor, ignoring hub [ 864.227997][ T5944] hub 4-1:1.0: probe with driver hub failed with error -5 [ 864.231122][ T5944] cdc_wdm 4-1:1.0: skipping garbage [ 864.231140][ T5944] cdc_wdm 4-1:1.0: skipping garbage [ 864.231256][ T5944] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 864.961403][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.042125][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.124355][ T1220] bond0 (unregistering): Released all slaves [ 865.243233][T12856] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.243579][T12856] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.243944][T12856] bridge_slave_0: entered allmulticast mode [ 865.248446][T12856] bridge_slave_0: entered promiscuous mode [ 865.335501][T12856] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.335834][T12856] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.336186][T12856] bridge_slave_1: entered allmulticast mode [ 865.352323][T12856] bridge_slave_1: entered promiscuous mode [ 865.360194][ T5944] usb 4-1: USB disconnect, device number 20 [ 865.818647][T13091] binder: 13090:13091 ioctl c0306201 0 returned -14 [ 865.910527][ T1220] hsr_slave_0: left promiscuous mode [ 865.950792][ T1220] hsr_slave_1: left promiscuous mode [ 865.953356][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.992953][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.393130][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 867.476196][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 868.340150][T12856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.534212][T12856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.310494][ T10] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 869.517832][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.517863][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 869.517912][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.517950][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 869.517972][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.688310][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 869.688357][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 869.704184][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 869.704233][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 869.704347][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 869.975221][ T5944] usb 2-1: USB disconnect, device number 21 [ 870.364018][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.364132][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.442451][T12856] team0: Port device team_slave_0 added [ 870.488058][T12856] team0: Port device team_slave_1 added [ 870.746978][T12856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.746998][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.747028][T12856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.753927][T12856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.753944][T12856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.753970][T12856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.951320][ T10] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 871.130219][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 871.130267][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 871.130292][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.496427][ T10] usb 2-1: config 0 descriptor?? [ 872.349762][T13173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.461357][T12856] hsr_slave_0: entered promiscuous mode [ 872.495159][T12856] hsr_slave_1: entered promiscuous mode [ 872.496691][T12856] debugfs: 'hsr0' already exists in 'hsr' [ 872.496709][T12856] Cannot create hsr debugfs directory [ 873.290937][ T5839] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 873.455132][ T5839] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.455163][ T5839] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 873.455214][ T5839] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.455253][ T5839] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 873.455277][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.500771][ T5839] hub 4-1:1.0: bad descriptor, ignoring hub [ 873.500811][ T5839] hub 4-1:1.0: probe with driver hub failed with error -5 [ 873.506207][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 873.506226][ T5839] cdc_wdm 4-1:1.0: skipping garbage [ 873.506433][ T5839] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 873.668668][ T5839] usb 2-1: USB disconnect, device number 22 [ 873.772050][ T1220] bridge_slave_1: left allmulticast mode [ 873.772088][ T1220] bridge_slave_1: left promiscuous mode [ 873.772431][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.841626][ T37] usb 4-1: USB disconnect, device number 21 [ 873.869400][ T1220] bridge_slave_0: left allmulticast mode [ 873.869439][ T1220] bridge_slave_0: left promiscuous mode [ 873.869747][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.543079][ T1220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.623910][ T1220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.684420][ T1220] bond0 (unregistering): Released all slaves [ 874.911682][T13207] dummy0: entered promiscuous mode [ 874.943022][T13207] dummy0: left promiscuous mode [ 875.468663][ T1220] hsr_slave_0: left promiscuous mode [ 875.520003][ T1220] hsr_slave_1: left promiscuous mode [ 875.522151][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.602421][ T1220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.803041][ T1220] team0 (unregistering): Port device team_slave_1 removed [ 876.974112][ T1220] team0 (unregistering): Port device team_slave_0 removed [ 877.570524][ T32] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 877.744706][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.744738][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 877.744792][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.744835][ T32] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 877.744860][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.841442][ T32] hub 4-1:1.0: bad descriptor, ignoring hub [ 877.841485][ T32] hub 4-1:1.0: probe with driver hub failed with error -5 [ 877.843048][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 877.843067][ T32] cdc_wdm 4-1:1.0: skipping garbage [ 877.843179][ T32] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 878.777605][ T32] usb 4-1: USB disconnect, device number 22 [ 878.984318][ T5944] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 879.219073][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 879.236277][ T5944] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.236307][ T5944] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 879.236360][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 879.236387][ T5944] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 879.236431][ T5944] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 879.236454][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.373752][ T5944] hub 2-1:1.0: bad descriptor, ignoring hub [ 879.373797][ T5944] hub 2-1:1.0: probe with driver hub failed with error -5 [ 879.377422][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 879.377442][ T5944] cdc_wdm 2-1:1.0: skipping garbage [ 879.435581][ T5944] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 879.435606][ T5944] cdc_wdm 2-1:1.0: Unknown control protocol [ 879.660789][T13249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.661464][T13249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.859626][T13258] dummy0: entered promiscuous mode [ 879.900669][T13258] dummy0: left promiscuous mode [ 880.388178][T12780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 880.445461][T12780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 880.471768][T12780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 880.544774][T12780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 880.549225][T12780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 880.634084][T12780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 880.678004][T12780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 880.921677][ T5944] usb 2-1: USB disconnect, device number 23 [ 881.024840][T12780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 881.134721][T13272] netlink: 'syz.2.1704': attribute type 2 has an invalid length. [ 882.481944][T13079] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 882.643658][T13079] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.643688][T13079] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 882.643737][T13079] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.643779][T13079] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 882.643802][T13079] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.703098][T12856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 882.735160][T13079] hub 2-1:1.0: bad descriptor, ignoring hub [ 882.735205][T13079] hub 2-1:1.0: probe with driver hub failed with error -5 [ 882.736544][T13079] cdc_wdm 2-1:1.0: skipping garbage [ 882.736559][T13079] cdc_wdm 2-1:1.0: skipping garbage [ 882.736669][T13079] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 882.780653][T12856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 882.798901][T12856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 882.859772][T12856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 882.891346][T12856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.051991][T13079] usb 2-1: USB disconnect, device number 24 [ 883.212553][T12856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 883.247542][T12856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 883.278510][T12856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 883.309970][T12780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.415383][T12780] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.488070][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.488342][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.550897][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.551078][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.169890][T12856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.377109][T13315] netlink: 'syz.2.1714': attribute type 2 has an invalid length. [ 884.395799][T12856] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.438838][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.439101][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.542282][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.542482][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.557278][T12780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.071533][ T10] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 886.254612][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.254642][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 886.254715][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.254756][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 886.254781][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.428940][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 886.428986][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 886.453195][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 886.453219][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 886.453347][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 886.740940][ T5944] usb 4-1: USB disconnect, device number 23 [ 887.042059][T12856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.453200][T13359] netlink: 'syz.1.1727': attribute type 2 has an invalid length. [ 887.527059][T12856] veth0_vlan: entered promiscuous mode [ 887.586896][T12856] veth1_vlan: entered promiscuous mode [ 887.711330][T12780] veth0_vlan: entered promiscuous mode [ 887.788460][T12780] veth1_vlan: entered promiscuous mode [ 887.807263][T12856] veth0_macvtap: entered promiscuous mode [ 887.850285][T12856] veth1_macvtap: entered promiscuous mode [ 887.969219][T12856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.016232][T12856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.033159][T12780] veth0_macvtap: entered promiscuous mode [ 888.063922][ T3015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.076202][T10855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.077990][T12780] veth1_macvtap: entered promiscuous mode [ 888.087458][T10855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.088631][T10855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 888.269873][T12780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.504411][T12780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 890.464924][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.561959][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.629059][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.633187][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.827712][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.827736][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.574360][ T37] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 892.958422][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.958450][ T37] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 892.958508][ T37] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.958544][ T37] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 892.958562][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.074534][ T37] hub 3-1:1.0: bad descriptor, ignoring hub [ 893.074579][ T37] hub 3-1:1.0: probe with driver hub failed with error -5 [ 893.095870][ T37] cdc_wdm 3-1:1.0: skipping garbage [ 893.095891][ T37] cdc_wdm 3-1:1.0: skipping garbage [ 893.095991][ T37] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 893.379152][ T37] usb 3-1: USB disconnect, device number 30 [ 893.465682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.465705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.320202][T13406] netlink: 'syz.2.1740': attribute type 2 has an invalid length. [ 894.797551][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 894.854822][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 894.887296][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 894.893377][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 894.906039][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 896.941670][T13445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1748'. [ 897.167554][ T5834] Bluetooth: hci5: command tx timeout [ 897.190493][ T9] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 897.352941][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.352972][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 897.353026][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.353067][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 897.353091][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.480957][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 897.481001][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 897.485424][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 897.485446][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 897.485565][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 898.360482][T13468] netlink: 'syz.0.1752': attribute type 2 has an invalid length. [ 899.230729][ T5834] Bluetooth: hci5: command tx timeout [ 899.233088][ T5208] usb 2-1: USB disconnect, device number 25 [ 899.847601][T13411] chnl_net:caif_netlink_parms(): no params data found [ 901.320305][ T5834] Bluetooth: hci5: command tx timeout [ 903.400619][ T5834] Bluetooth: hci5: command tx timeout [ 904.558271][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.303640][T13532] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1762'. [ 907.405185][T13534] netlink: 'syz.1.1763': attribute type 2 has an invalid length. [ 907.709928][ T5833] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 907.752821][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.793911][T13411] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.794110][T13411] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.794368][T13411] bridge_slave_0: entered allmulticast mode [ 907.797036][T13411] bridge_slave_0: entered promiscuous mode [ 907.804838][T13411] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.805250][T13411] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.805650][T13411] bridge_slave_1: entered allmulticast mode [ 907.814076][T13544] Set syz1 is full, maxelem 0 reached [ 907.814804][T13411] bridge_slave_1: entered promiscuous mode [ 907.899512][ T5833] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.899544][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 907.899597][ T5833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.899639][ T5833] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 907.899663][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.947373][ T5833] hub 4-1:1.0: bad descriptor, ignoring hub [ 907.947419][ T5833] hub 4-1:1.0: probe with driver hub failed with error -5 [ 907.958102][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 907.958121][ T5833] cdc_wdm 4-1:1.0: skipping garbage [ 907.958226][ T5833] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 908.260932][ T5833] usb 4-1: USB disconnect, device number 24 [ 908.506393][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.628291][T13411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.686818][T13411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.225251][T13411] team0: Port device team_slave_0 added [ 911.257479][T13576] netlink: 'syz.1.1776': attribute type 2 has an invalid length. [ 913.084354][ C1] [ 913.084364][ C1] ====================================================== [ 913.084369][ C1] WARNING: possible circular locking dependency detected [ 913.084375][ C1] syzkaller #0 Not tainted [ 913.084381][ C1] ------------------------------------------------------ [ 913.084385][ C1] syz.1.1776/13575 is trying to acquire lock: [ 913.084393][ C1] ffff88803e6f1420 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 913.084461][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 913.084461][ C1] but task is already holding lock: [ 913.084464][ C1] ffff88803e6f25a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 913.084489][ C1] [ 913.084489][ C1] which lock already depends on the new lock. [ 913.084489][ C1] [ 913.084494][ C1] [ 913.084494][ C1] the existing dependency chain (in reverse order) is: [ 913.084498][ C1] [ 913.084498][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 913.084512][ C1] rt_spin_lock+0x83/0x400 [ 913.084524][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 913.084536][ C1] phonet_rcv+0x781/0xc40 [ 913.084546][ C1] process_backlog+0x5e1/0xc60 [ 913.084558][ C1] __napi_poll+0xab/0x550 [ 913.084568][ C1] net_rx_action+0x696/0xe00 [ 913.084580][ C1] handle_softirqs+0x1de/0x6d0 [ 913.084590][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 913.084599][ C1] netif_rx+0xb9/0xf0 [ 913.084608][ C1] pn_send+0x62a/0x8e0 [ 913.084617][ C1] pn_skb_send+0x218/0x530 [ 913.084626][ C1] pipe_snd_status+0x1f1/0x320 [ 913.084637][ C1] pipe_do_rcv+0xf15/0x16a0 [ 913.084647][ C1] __sk_receive_skb+0x962/0x9e0 [ 913.084658][ C1] pep_do_rcv+0x685/0xaa0 [ 913.084668][ C1] __release_sock+0x2a9/0x3d0 [ 913.084678][ C1] release_sock+0x1be/0x290 [ 913.084689][ C1] pep_sock_accept+0xd47/0x11e0 [ 913.084700][ C1] pn_socket_accept+0xc1/0x310 [ 913.084708][ C1] do_accept+0x6ca/0x930 [ 913.084720][ C1] __sys_accept4+0x139/0x230 [ 913.084731][ C1] __x64_sys_accept4+0x9a/0xb0 [ 913.084743][ C1] do_syscall_64+0x15f/0xf80 [ 913.084756][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.084766][ C1] [ 913.084766][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 913.084783][ C1] __lock_acquire+0x15a5/0x2cf0 [ 913.084796][ C1] lock_acquire+0x106/0x350 [ 913.084807][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 913.084818][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 913.084829][ C1] pep_do_rcv+0x685/0xaa0 [ 913.084839][ C1] __sk_receive_skb+0x962/0x9e0 [ 913.084850][ C1] phonet_rcv+0x781/0xc40 [ 913.084860][ C1] process_backlog+0x5e1/0xc60 [ 913.084871][ C1] __napi_poll+0xab/0x550 [ 913.084881][ C1] net_rx_action+0x696/0xe00 [ 913.084893][ C1] handle_softirqs+0x1de/0x6d0 [ 913.084902][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 913.084911][ C1] netif_rx+0xb9/0xf0 [ 913.084920][ C1] pn_send+0x62a/0x8e0 [ 913.084929][ C1] pn_skb_send+0x218/0x530 [ 913.084938][ C1] pep_sock_close+0x2c1/0x5b0 [ 913.084948][ C1] pn_socket_release+0x9b/0xc0 [ 913.084961][ C1] __sock_release+0xb9/0x250 [ 913.084971][ C1] sock_close+0x1c/0x30 [ 913.084981][ C1] __fput+0x461/0xa70 [ 913.084992][ C1] task_work_run+0x1d9/0x270 [ 913.085004][ C1] exit_to_user_mode_loop+0xed/0x480 [ 913.085016][ C1] do_syscall_64+0x33e/0xf80 [ 913.085029][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.085038][ C1] [ 913.085038][ C1] other info that might help us debug this: [ 913.085038][ C1] [ 913.085041][ C1] Possible unsafe locking scenario: [ 913.085041][ C1] [ 913.085045][ C1] CPU0 CPU1 [ 913.085048][ C1] ---- ---- [ 913.085051][ C1] lock(slock-AF_PHONET); [ 913.085059][ C1] lock(slock-AF_PHONET/1); [ 913.085069][ C1] lock(slock-AF_PHONET); [ 913.085077][ C1] lock(slock-AF_PHONET/1); [ 913.085086][ C1] [ 913.085086][ C1] *** DEADLOCK *** [ 913.085086][ C1] [ 913.085089][ C1] 7 locks held by syz.1.1776/13575: [ 913.085096][ C1] #0: ffff888040e41038 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 913.085124][ C1] #1: ffff88803e6f1d98 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 913.085150][ C1] #2: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 913.085174][ C1] #3: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 913.085200][ C1] #4: ffff88803e6f25a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 913.085226][ C1] #5: ffffffff8dfc81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 913.085251][ C1] #6: ffff88803e6f2658 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 913.085275][ C1] [ 913.085275][ C1] stack backtrace: [ 913.085282][ C1] CPU: 1 UID: 0 PID: 13575 Comm: syz.1.1776 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 913.085295][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 913.085302][ C1] Call Trace: [ 913.085306][ C1] [ 913.085311][ C1] dump_stack_lvl+0xe8/0x150 [ 913.085323][ C1] print_circular_bug+0x2e1/0x300 [ 913.085339][ C1] check_noncircular+0x12e/0x150 [ 913.085355][ C1] __lock_acquire+0x15a5/0x2cf0 [ 913.085369][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 913.085385][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 913.085397][ C1] lock_acquire+0x106/0x350 [ 913.085414][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 913.085427][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 913.085441][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 913.085452][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 913.085464][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 913.085474][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 913.085487][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 913.085499][ C1] ? rt_spin_lock+0x1e0/0x400 [ 913.085511][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 913.085525][ C1] pep_do_rcv+0x685/0xaa0 [ 913.085537][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 913.085550][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 913.085561][ C1] ? phonet_rcv+0x781/0xc40 [ 913.085571][ C1] __sk_receive_skb+0x962/0x9e0 [ 913.085585][ C1] phonet_rcv+0x781/0xc40 [ 913.085595][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 913.085611][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 913.085623][ C1] ? process_backlog+0x271/0xc60 [ 913.085635][ C1] ? process_backlog+0x271/0xc60 [ 913.085647][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 913.085657][ C1] process_backlog+0x5e1/0xc60 [ 913.085673][ C1] __napi_poll+0xab/0x550 [ 913.085686][ C1] net_rx_action+0x696/0xe00 [ 913.085701][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 913.085713][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 913.085729][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 913.085744][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 913.085757][ C1] handle_softirqs+0x1de/0x6d0 [ 913.085770][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 913.085781][ C1] netif_rx+0xb9/0xf0 [ 913.085791][ C1] pn_send+0x62a/0x8e0 [ 913.085803][ C1] pn_skb_send+0x218/0x530 [ 913.085814][ C1] pep_sock_close+0x2c1/0x5b0 [ 913.085826][ C1] pn_socket_release+0x9b/0xc0 [ 913.085841][ C1] __sock_release+0xb9/0x250 [ 913.085852][ C1] ? __pfx_sock_close+0x10/0x10 [ 913.085863][ C1] sock_close+0x1c/0x30 [ 913.085873][ C1] __fput+0x461/0xa70 [ 913.085886][ C1] task_work_run+0x1d9/0x270 [ 913.085901][ C1] ? __pfx_task_work_run+0x10/0x10 [ 913.085915][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.085926][ C1] exit_to_user_mode_loop+0xed/0x480 [ 913.085937][ C1] ? rcu_is_watching+0x15/0xb0 [ 913.085951][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.085961][ C1] do_syscall_64+0x33e/0xf80 [ 913.085975][ C1] ? trace_irq_disable+0x3b/0x140 [ 913.085986][ C1] ? clear_bhb_loop+0x40/0x90 [ 913.085997][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.086007][ C1] RIP: 0033:0x7f11c1fcc819 [ 913.086019][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.086029][ C1] RSP: 002b:00007ffcfb3a0e78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 913.086041][ C1] RAX: 0000000000000000 RBX: 00007f11c2247da0 RCX: 00007f11c1fcc819 [ 913.086049][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 913.086055][ C1] RBP: 00007f11c2247da0 R08: 0000000000000006 R09: 0000000000000000 [ 913.086062][ C1] R10: 00007f11c2247cb0 R11: 0000000000000246 R12: 00000000000decbb [ 913.086069][ C1] R13: 00007f11c224609c R14: 00000000000dec89 R15: 00007f11c2246090 [ 913.086081][ C1] [ 913.089539][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.156140][T13591] Set syz1 is full, maxelem 0 reached [ 913.500459][T13411] team0: Port device team_slave_1 added [ 914.351097][ T44] bridge_slave_1: left allmulticast mode [ 914.351130][ T44] bridge_slave_1: left promiscuous mode [ 914.351332][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.431394][ T44] bridge_slave_0: left allmulticast mode [ 914.431433][ T44] bridge_slave_0: left promiscuous mode [ 914.431630][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.481125][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.591073][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.674084][ T44] bond0 (unregistering): Released all slaves [ 917.250486][ T44] hsr_slave_0: left promiscuous mode [ 917.290514][ T44] hsr_slave_1: left promiscuous mode [ 917.291355][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.291377][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.331294][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.331318][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.410929][ T44] veth1_macvtap: left promiscuous mode [ 917.410995][ T44] veth0_macvtap: left promiscuous mode [ 917.411156][ T44] veth1_vlan: left promiscuous mode [ 917.411259][ T44] veth0_vlan: left promiscuous mode [ 918.041802][ T44] team0 (unregistering): Port device team_slave_1 removed [ 918.080914][ T44] team0 (unregistering): Port device team_slave_0 removed [ 919.571957][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.803279][ T44] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.041619][ T44] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.301524][ T44] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.683072][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.922174][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.171856][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.471252][ T44] team0: Port device netdevsim0 removed [ 921.472943][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.851720][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.092202][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.332253][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.571395][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.952187][ T44] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0