last executing test programs: 12m20.122861536s ago: executing program 3 (id=58): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x30, 0x0, 0x6, 0x0, 0x20, 0x0, {0x10, 0xc}, {0x8, 0xbf2}, {0x0, 0x8}, {0xffff, 0xb, 0xfffffffd}, 0x0, 0x80, 0x4e, 0x2, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x6, 0xfffffffe, 0x17, 0x200, 0x1, 0x8}) 12m19.602831246s ago: executing program 3 (id=62): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 12m15.505968649s ago: executing program 3 (id=67): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) 12m14.659522077s ago: executing program 3 (id=72): connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) readv(0xffffffffffffffff, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0xc0403d11, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x7, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x4000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) 12m7.606051822s ago: executing program 3 (id=77): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 11m59.888061275s ago: executing program 4 (id=84): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 11m58.2268255s ago: executing program 3 (id=86): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7a) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) keyctl$invalidate(0x15, 0x0) 11m57.67280532s ago: executing program 4 (id=87): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r5) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40850}, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af1, 0x80, 0x3, 0x3da}, 0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f00000003c0), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4007, @fd_index, 0x400000080001001, 0x0}) io_uring_enter(r7, 0x47f3, 0xfffffffe, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r1, 0x0, 0x2) mkdirat(r9, &(0x7f0000000040)='./file0\x00', 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r10, r10) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000000)=0x4) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 11m54.957995112s ago: executing program 4 (id=90): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) socket$inet_sctp(0x2, 0x3, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000100)=[0x4], 0x0, 0xffffffffffff4a4b}) 11m49.91069457s ago: executing program 4 (id=94): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x2434, &(0x7f00000002c0)={0x0, 0x8f3f, 0x2000, 0x1, 0x17d}) syz_open_dev$video(&(0x7f0000000180), 0x40000000dd, 0x0) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e20, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x2, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 11m42.213637276s ago: executing program 32 (id=86): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7a) ptrace$getregset(0x4205, 0x0, 0x202, 0x0) keyctl$invalidate(0x15, 0x0) 11m39.002947227s ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0xa621}) socket$kcm(0x2, 0x0, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000003c0)={0x2, 0x0, 0x3, 0x1, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 11m29.343540139s ago: executing program 4 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fanotify_init(0x200, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000680)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ffff000, 0x3) pipe2$9p(0x0, 0x84880) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@uuid_off}, {@uuid_null}], [{@fsname={'fsname', 0x3d, '*$!\'(\v'}}, {@obj_type={'obj_type', 0x3d, 'lowerdir'}}], 0x2f}) chroot(0x0) 11m12.454561739s ago: executing program 33 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a00)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fanotify_init(0x200, 0x0) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187013, &(0x7f0000000680)) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ffff000, 0x3) pipe2$9p(0x0, 0x84880) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@uuid_off}, {@uuid_null}], [{@fsname={'fsname', 0x3d, '*$!\'(\v'}}, {@obj_type={'obj_type', 0x3d, 'lowerdir'}}], 0x2f}) chroot(0x0) 10m57.000108693s ago: executing program 2 (id=148): r0 = socket(0x2, 0x80805, 0x0) flistxattr(r0, &(0x7f0000000240)=""/53, 0x35) 10m56.48938206s ago: executing program 2 (id=150): syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 10m53.981005502s ago: executing program 2 (id=155): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x3ab2c1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x18) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000001940)=@buf) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) 10m48.209027388s ago: executing program 2 (id=166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @empty, 0x3}, 0xd) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0), 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) 10m45.56482241s ago: executing program 0 (id=167): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x2434, &(0x7f00000002c0)={0x0, 0x8f3f, 0x2000, 0x1, 0x17d}) syz_open_dev$video(&(0x7f0000000180), 0x40000000dd, 0x0) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e20, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x2, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 10m44.798140233s ago: executing program 2 (id=168): flistxattr(0xffffffffffffffff, &(0x7f0000000240)=""/53, 0x35) 10m44.206726219s ago: executing program 2 (id=170): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) pread64(r0, 0x0, 0x0, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r6, 0x2, 0x3}, 0x50) 10m42.715209153s ago: executing program 0 (id=173): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000002200)=""/4106, 0x0, 0x100a, 0x1}, 0x28) 10m42.241512041s ago: executing program 0 (id=175): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) socket$inet6(0xa, 0x2, 0x0) 10m36.896674782s ago: executing program 0 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x400, 0x0, 0x1, 0x1, 0xb71, 0x9}, 0x20) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r1, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x8) 10m32.919643099s ago: executing program 0 (id=179): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffd}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0x49, 0x0, 0x3c876ec0}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b0000000000000000000000000000020000000000000056000000000000"], 0xfc}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0xb424ba1a0829159f) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 10m32.043690005s ago: executing program 0 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) close_range(r2, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0800001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800030004000000080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 10m27.96927479s ago: executing program 34 (id=170): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) pread64(r0, 0x0, 0x0, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r6, 0x2, 0x3}, 0x50) 10m12.976320533s ago: executing program 35 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) close_range(r2, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0800001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800030004000000080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2825) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r8, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 9m19.2546674s ago: executing program 8 (id=229): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) 9m18.973000867s ago: executing program 8 (id=231): r0 = syz_io_uring_setup(0x3116, &(0x7f0000000080)={0x0, 0x8720, 0x1042, 0x4, 0x354}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 9m18.611845353s ago: executing program 8 (id=234): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) 9m17.610343243s ago: executing program 8 (id=238): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) 9m17.33386291s ago: executing program 8 (id=240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xbd889962f572ee43}, 0x40815) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 9m16.963155813s ago: executing program 8 (id=242): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 9m1.488564492s ago: executing program 36 (id=242): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 4m32.558940398s ago: executing program 6 (id=451): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r0 = getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030ddb0dcd174be22990a6c0c3030303430393300"], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$I2C_SMBUS(r5, 0x720, 0x0) r6 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r6, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_overlay={0xbd1, 0xd, 0x4, 0x1000, 0x4, {}, {0x1, 0xc, 0x81, 0x6, 0xf, 0xc, "717480be"}, 0x9, 0x3, {0x0}, 0x4ff}) 4m28.824484186s ago: executing program 6 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000605000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m28.498648468s ago: executing program 6 (id=453): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) r7 = socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m16.13257161s ago: executing program 6 (id=455): r0 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x2}) ioctl$TCXONC(r5, 0x540a, 0x3) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xc}, 0x10}, 0x94) syz_clone3(&(0x7f0000000600)={0x4884000, &(0x7f0000000080), 0x0, &(0x7f0000000300), {0x6}, &(0x7f00000004c0)=""/14, 0xe, &(0x7f0000000500)=""/167, &(0x7f00000005c0)=[r1, r1, r1, 0xffffffffffffffff, r1, r1], 0x6}, 0x58) 4m12.960367394s ago: executing program 6 (id=459): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r0 = getpid() syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d70102030109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203030ddb0dcd174be22990a6c0c3030303430393300"], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$I2C_SMBUS(r6, 0x720, 0x0) r7 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r7, 0xc058ff0b, &(0x7f0000000200)=@multiplanar_overlay={0xbd1, 0xd, 0x4, 0x1000, 0x4, {}, {0x1, 0xc, 0x81, 0x6, 0xf, 0xc, "717480be"}, 0x9, 0x3, {0x0}, 0x4ff}) 4m8.566921188s ago: executing program 6 (id=462): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) r7 = socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m53.348448378s ago: executing program 37 (id=462): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) r7 = socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m35.194547266s ago: executing program 7 (id=181): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x2434, &(0x7f00000002c0)={0x0, 0x8f3f, 0x2000, 0x1, 0x17d}) syz_open_dev$video(&(0x7f0000000180), 0x40000000dd, 0x0) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e20, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x2, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) 2m32.089164507s ago: executing program 7 (id=537): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) 2m15.113084026s ago: executing program 38 (id=537): syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r2}, 0x68) 13.421482549s ago: executing program 1 (id=656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43b, 0x0, 0x6, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r0, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) 11.924210196s ago: executing program 1 (id=658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x358, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sched_setscheduler(0x0, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 10.791801375s ago: executing program 1 (id=659): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x2434, &(0x7f00000002c0)={0x0, 0x8f3f, 0x2000, 0x1, 0x17d}) syz_open_dev$video(&(0x7f0000000180), 0x40000000dd, 0x0) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 8.595979361s ago: executing program 1 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.189572657s ago: executing program 1 (id=662): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000000c0)=0xfff7bdff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) timer_create(0x1, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 6.022022073s ago: executing program 5 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xe4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "7f852db18a5c98f04e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x3a, 0x3, "d1d56a098909cdae9f529e54ca63268172d4976dce99258b7e494985f6c4b8180db02981ab81e49566db2c6d34f2614da136afeebffc"}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}}, 0x0) 5.517525365s ago: executing program 5 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.834633499s ago: executing program 5 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43b, 0x0, 0x6, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) 4.04131658s ago: executing program 5 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x358, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sched_setscheduler(0x0, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 2.713881489s ago: executing program 5 (id=667): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000900) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 1.253889527s ago: executing program 1 (id=668): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000045c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) io_uring_setup(0x2434, &(0x7f00000002c0)={0x0, 0x8f3f, 0x2000, 0x1, 0x17d}) syz_open_dev$video(&(0x7f0000000180), 0x40000000dd, 0x0) userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e20, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x2, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 0s ago: executing program 5 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x100000fff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): .209675][ T35] usb usb7-port1: attempt power cycle [ 642.576968][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.603487][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.611767][ T35] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 642.632904][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.648698][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.672001][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 642.725116][ T35] usb 7-1: device descriptor read/8, error -71 [ 642.997904][ T35] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 643.063719][ T35] usb 7-1: device descriptor read/8, error -71 [ 643.198585][ T35] usb usb7-port1: unable to enumerate USB device [ 643.732603][ T12] team0 (unregistering): Port device team_slave_1 removed [ 644.003445][ T12] team0 (unregistering): Port device team_slave_0 removed [ 644.802805][ T5785] Bluetooth: hci1: command tx timeout [ 646.891379][ T5785] Bluetooth: hci1: command tx timeout [ 647.776683][ T7888] veth0_macvtap: entered promiscuous mode [ 647.968677][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.981126][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.992062][ T8000] bridge_slave_0: entered allmulticast mode [ 648.008144][ T8000] bridge_slave_0: entered promiscuous mode [ 648.058726][ T7888] veth1_macvtap: entered promiscuous mode [ 648.086094][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.110693][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.126958][ T8000] bridge_slave_1: entered allmulticast mode [ 648.139927][ T8000] bridge_slave_1: entered promiscuous mode [ 648.441369][ T8000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.468501][ T8000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.998038][ T5785] Bluetooth: hci1: command tx timeout [ 649.766116][ T6121] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.040748][ T5778] Bluetooth: hci1: command tx timeout [ 651.186266][ T8000] team0: Port device team_slave_0 added [ 651.273933][ T8000] team0: Port device team_slave_1 added [ 651.579994][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.616058][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.747832][ T8000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.845087][ T8000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.886040][ T8000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.560490][ T8000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.271887][ T6121] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.350193][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.429427][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.645181][ T8000] hsr_slave_0: entered promiscuous mode [ 653.655892][ T8000] hsr_slave_1: entered promiscuous mode [ 653.666128][ T8000] debugfs: 'hsr0' already exists in 'hsr' [ 653.676802][ T8000] Cannot create hsr debugfs directory [ 653.724446][ T6121] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.758618][ T6043] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.770586][ T6043] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.897923][ T5834] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 653.923936][ T6121] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.002301][ T6043] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.026653][ T6043] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.100703][ T5834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.144734][ T5834] usb 7-1: config 0 has no interfaces? [ 654.195667][ T5834] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 654.249724][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.291111][ T5834] usb 7-1: Product: syz [ 654.295594][ T5834] usb 7-1: Manufacturer: syz [ 654.343123][ T5834] usb 7-1: SerialNumber: syz [ 654.393887][ T5834] usb 7-1: config 0 descriptor?? [ 655.380826][ T8087] tmpfs: Bad value for 'mpol' [ 655.469315][ T8087] xt_HMARK: spi-set and port-set can't be combined [ 656.387367][ T6121] bridge_slave_1: left allmulticast mode [ 656.413420][ T6121] bridge_slave_1: left promiscuous mode [ 656.430268][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.677034][ T7576] usb 7-1: USB disconnect, device number 12 [ 656.780486][ T6121] bridge_slave_0: left allmulticast mode [ 656.786248][ T6121] bridge_slave_0: left promiscuous mode [ 656.824108][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.910128][ T6121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.952028][ T6121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.973357][ T6121] bond0 (unregistering): Released all slaves [ 659.375712][ T6121] hsr_slave_0: left promiscuous mode [ 659.437106][ T6121] hsr_slave_1: left promiscuous mode [ 659.472610][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.496759][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.563235][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.585244][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.683565][ T6121] veth1_macvtap: left promiscuous mode [ 659.746413][ T6121] veth0_macvtap: left promiscuous mode [ 659.753203][ T6121] veth1_vlan: left promiscuous mode [ 659.759176][ T6121] veth0_vlan: left promiscuous mode [ 662.276541][ T6121] team0 (unregistering): Port device team_slave_1 removed [ 662.352917][ T6121] team0 (unregistering): Port device team_slave_0 removed [ 662.993473][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 664.237895][ T5834] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 664.441641][ T5834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.467624][ T5834] usb 7-1: config 0 has no interfaces? [ 664.495473][ T5834] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 664.506726][ T8000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.547873][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.562489][ T5834] usb 7-1: Product: syz [ 664.566844][ T5834] usb 7-1: Manufacturer: syz [ 664.574596][ T5834] usb 7-1: SerialNumber: syz [ 664.589346][ T5834] usb 7-1: config 0 descriptor?? [ 664.597034][ T8000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 665.518487][ T8132] tmpfs: Bad value for 'mpol' [ 665.669018][ T8000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 665.860270][ T8000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 666.014544][ T8131] xt_HMARK: spi-set and port-set can't be combined [ 667.300347][ T5834] usb 7-1: USB disconnect, device number 13 [ 668.401982][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.500471][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.647028][ T8045] bridge_slave_0: entered allmulticast mode [ 668.863694][ T8045] bridge_slave_0: entered promiscuous mode [ 669.216353][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.279357][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.287053][ T8045] bridge_slave_1: entered allmulticast mode [ 669.346652][ T8045] bridge_slave_1: entered promiscuous mode [ 669.800502][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.885105][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.692301][ T8045] team0: Port device team_slave_0 added [ 672.766687][ T8045] team0: Port device team_slave_1 added [ 672.999731][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.019452][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.040118][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.068695][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.088838][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.163268][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.185626][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.260733][ T8045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.764009][ T8045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.802398][ T8045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.877714][ T8045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.504773][ T8045] hsr_slave_0: entered promiscuous mode [ 674.515427][ T8045] hsr_slave_1: entered promiscuous mode [ 674.535868][ T8045] debugfs: 'hsr0' already exists in 'hsr' [ 674.542985][ T8045] Cannot create hsr debugfs directory [ 674.920114][ T5785] Bluetooth: hci6: SCO packet too small [ 674.940379][ T53] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.167356][ T53] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.198044][ T5785] Bluetooth: hci4: command tx timeout [ 675.392028][ T53] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.511899][ T53] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.800948][ T8000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.815422][ T8188] tmpfs: Bad value for 'mpol' [ 677.213027][ T8189] xt_HMARK: spi-set and port-set can't be combined [ 677.278465][ T5785] Bluetooth: hci4: command tx timeout [ 677.331178][ T8000] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.359704][ T5785] Bluetooth: hci4: command tx timeout [ 679.753139][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.760712][ T5884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.967235][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.975013][ T5884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.000632][ T53] bridge_slave_1: left allmulticast mode [ 680.006486][ T53] bridge_slave_1: left promiscuous mode [ 680.020047][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.042660][ T53] bridge_slave_0: left allmulticast mode [ 680.057737][ T53] bridge_slave_0: left promiscuous mode [ 680.066120][ T5829] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 680.070375][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.263236][ T5829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.303467][ T5829] usb 7-1: config 0 has no interfaces? [ 680.335312][ T5829] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 680.359256][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.387710][ T5829] usb 7-1: Product: syz [ 680.392206][ T5829] usb 7-1: Manufacturer: syz [ 680.397009][ T5829] usb 7-1: SerialNumber: syz [ 680.426721][ T5829] usb 7-1: config 0 descriptor?? [ 681.438413][ T5785] Bluetooth: hci4: command tx timeout [ 681.448725][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.481316][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.496981][ T53] bond0 (unregistering): Released all slaves [ 681.571556][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 681.821612][ T53] hsr_slave_0: left promiscuous mode [ 681.843503][ T53] hsr_slave_1: left promiscuous mode [ 681.892918][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.907840][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.949294][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.956872][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.021331][ T53] veth1_macvtap: left promiscuous mode [ 682.027041][ T53] veth0_macvtap: left promiscuous mode [ 682.047917][ T53] veth1_vlan: left promiscuous mode [ 682.053447][ T53] veth0_vlan: left promiscuous mode [ 683.067064][ T35] usb 7-1: USB disconnect, device number 14 [ 685.024024][ T8236] dlm: Unknown command passed to DLM device : 3 [ 685.024024][ T8236] [ 685.180600][ T53] team0 (unregistering): Port device team_slave_1 removed [ 685.209240][ T53] team0 (unregistering): Port device team_slave_0 removed [ 685.829943][ T8237] random: crng reseeded on system resumption [ 688.037655][ T8244] tmpfs: Bad value for 'mpol' [ 688.592057][ T8244] xt_HMARK: spi-set and port-set can't be combined [ 689.532989][ T8238] batman_adv: batadv0: Adding interface: macsec1 [ 689.578153][ T8238] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.643164][ T8238] batman_adv: batadv0: Interface activated: macsec1 [ 690.353112][ T8045] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 690.423033][ T8045] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 690.557809][ T8198] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 690.604778][ T8045] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 690.715205][ T8045] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 690.776169][ T8198] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.803375][ T8198] usb 7-1: config 0 has no interfaces? [ 690.818048][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.837157][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.858746][ T8198] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 690.878248][ T8167] bridge_slave_0: entered allmulticast mode [ 690.884875][ T8198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.910687][ T8167] bridge_slave_0: entered promiscuous mode [ 690.919851][ T8198] usb 7-1: Product: syz [ 690.924221][ T8198] usb 7-1: Manufacturer: syz [ 690.948821][ T8198] usb 7-1: SerialNumber: syz [ 690.983168][ T8198] usb 7-1: config 0 descriptor?? [ 691.031857][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.075527][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.104992][ T8167] bridge_slave_1: entered allmulticast mode [ 691.141120][ T8167] bridge_slave_1: entered promiscuous mode [ 691.754128][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.914725][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.312150][ T8167] team0: Port device team_slave_0 added [ 692.366610][ T8167] team0: Port device team_slave_1 added [ 692.403959][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 692.423555][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 692.433847][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 692.448555][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 692.461145][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 692.662212][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.689652][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.765785][ T8167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.797956][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.805078][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.885578][ T8167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.581281][ T8198] usb 7-1: USB disconnect, device number 15 [ 693.815032][ T8167] hsr_slave_0: entered promiscuous mode [ 693.851747][ T8167] hsr_slave_1: entered promiscuous mode [ 693.883188][ T8167] debugfs: 'hsr0' already exists in 'hsr' [ 693.919304][ T8167] Cannot create hsr debugfs directory [ 694.677305][ T5785] Bluetooth: hci2: command tx timeout [ 695.566036][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.573971][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.213837][ T8045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.276981][ T8045] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.798472][ T5785] Bluetooth: hci2: command tx timeout [ 697.253819][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.261484][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.672741][ T6045] bridge_slave_1: left allmulticast mode [ 697.691904][ T6045] bridge_slave_1: left promiscuous mode [ 697.728836][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.798899][ T6045] bridge_slave_0: left allmulticast mode [ 697.805091][ T6045] bridge_slave_0: left promiscuous mode [ 697.834234][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.748447][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.775478][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.793961][ T6045] bond0 (unregistering): Released all slaves [ 698.887713][ T5778] Bluetooth: hci2: command tx timeout [ 698.902678][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.910253][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.374713][ T6045] hsr_slave_0: left promiscuous mode [ 699.424140][ T6045] hsr_slave_1: left promiscuous mode [ 699.459790][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.509249][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.029122][ T5778] Bluetooth: hci2: command tx timeout [ 705.821176][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 705.870806][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 706.688384][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 707.473634][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 708.452713][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 708.478968][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 708.506934][ T8167] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 708.597035][ T8167] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 708.613888][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 708.626874][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 708.866789][ T8167] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 708.992642][ T8167] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 709.987801][ T795] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 710.203576][ T795] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.231870][ T795] usb 7-1: config 0 has no interfaces? [ 710.254259][ T795] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 710.295794][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.304134][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.304262][ T795] usb 7-1: Product: syz [ 710.304359][ T795] usb 7-1: Manufacturer: syz [ 710.304454][ T795] usb 7-1: SerialNumber: syz [ 710.344635][ T795] usb 7-1: config 0 descriptor?? [ 710.369520][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.377201][ T8262] bridge_slave_0: entered allmulticast mode [ 710.418105][ T8262] bridge_slave_0: entered promiscuous mode [ 710.442886][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.457796][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.465552][ T8262] bridge_slave_1: entered allmulticast mode [ 710.522142][ T8262] bridge_slave_1: entered promiscuous mode [ 710.799412][ T5785] Bluetooth: hci0: command tx timeout [ 711.064256][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.143084][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.958098][ T5785] Bluetooth: hci0: command tx timeout [ 713.897229][ T5834] usb 7-1: USB disconnect, device number 16 [ 714.804129][ T8262] team0: Port device team_slave_0 added [ 715.037826][ T5785] Bluetooth: hci0: command tx timeout [ 717.300686][ T5785] Bluetooth: hci0: command tx timeout [ 718.316322][ T8262] team0: Port device team_slave_1 added [ 720.648991][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 720.778260][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 721.506989][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.526468][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.580908][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.839329][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.846381][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.921296][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.554327][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.497858][ T7772] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 724.506315][ T8262] hsr_slave_0: entered promiscuous mode [ 724.556861][ T8262] hsr_slave_1: entered promiscuous mode [ 724.588279][ T8262] debugfs: 'hsr0' already exists in 'hsr' [ 724.617053][ T8262] Cannot create hsr debugfs directory [ 724.681985][ T7772] usb 2-1: Using ep0 maxpacket: 32 [ 724.723314][ T7772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.770695][ T7772] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 724.815696][ T7772] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 724.847868][ T7772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.856076][ T7772] usb 2-1: Product: syz [ 724.891705][ T7772] usb 2-1: Manufacturer: syz [ 724.896600][ T7772] usb 2-1: SerialNumber: syz [ 724.945960][ T7772] usb 2-1: config 0 descriptor?? [ 725.207240][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.215556][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.236282][ T8315] bridge_slave_0: entered allmulticast mode [ 725.248557][ T8315] bridge_slave_0: entered promiscuous mode [ 725.289212][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.316198][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.335120][ T8315] bridge_slave_1: entered allmulticast mode [ 725.387191][ T8315] bridge_slave_1: entered promiscuous mode [ 728.268122][ T8192] usb 2-1: USB disconnect, device number 24 [ 728.450404][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.864744][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.872258][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.253310][ T8315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.306338][ T8315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.407517][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.415084][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.438058][ T5830] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 729.658754][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.688209][ T5830] usb 2-1: config 0 has no interfaces? [ 729.739313][ T5830] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 729.785662][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.812473][ T5830] usb 2-1: Product: syz [ 729.816852][ T5830] usb 2-1: Manufacturer: syz [ 729.847959][ T5830] usb 2-1: SerialNumber: syz [ 729.880106][ T5830] usb 2-1: config 0 descriptor?? [ 730.183321][ T8315] team0: Port device team_slave_0 added [ 730.249872][ T8315] team0: Port device team_slave_1 added [ 731.577742][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 731.595523][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 731.613692][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 731.658772][ T7773] usb 2-1: USB disconnect, device number 25 [ 731.669558][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 731.706855][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 731.915717][ T58] bridge_slave_1: left allmulticast mode [ 731.935679][ T58] bridge_slave_1: left promiscuous mode [ 731.957052][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.988393][ T58] bridge_slave_0: left allmulticast mode [ 731.994372][ T58] bridge_slave_0: left promiscuous mode [ 732.061873][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.401816][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.439714][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.730643][ T58] bond0 (unregistering): Released all slaves [ 733.771224][ T5778] Bluetooth: hci1: command tx timeout [ 734.004472][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 734.013676][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 734.038396][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 734.050923][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 734.070895][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 734.161121][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 734.229353][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.236455][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.388129][ T8315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.438161][ T8315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.477902][ T8315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.563039][ T8315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.777773][ T58] hsr_slave_0: left promiscuous mode [ 734.837823][ T58] hsr_slave_1: left promiscuous mode [ 734.845554][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.939374][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.837952][ T5785] Bluetooth: hci1: command tx timeout [ 736.007690][ T58] team0 (unregistering): Port device team_slave_1 removed [ 736.131212][ T58] team0 (unregistering): Port device team_slave_0 removed [ 736.159988][ T5778] Bluetooth: hci5: command tx timeout [ 737.917889][ T5778] Bluetooth: hci1: command tx timeout [ 738.237718][ T5778] Bluetooth: hci5: command tx timeout [ 739.683182][ T8315] hsr_slave_0: entered promiscuous mode [ 739.706349][ T8315] hsr_slave_1: entered promiscuous mode [ 739.716755][ T8315] debugfs: 'hsr0' already exists in 'hsr' [ 739.725338][ T8315] Cannot create hsr debugfs directory [ 739.857997][ T5830] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 740.000182][ T5778] Bluetooth: hci1: command tx timeout [ 740.043195][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.067689][ T5830] usb 2-1: config 0 has no interfaces? [ 740.086234][ T5830] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 740.107800][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.116021][ T5830] usb 2-1: Product: syz [ 740.148443][ T5830] usb 2-1: Manufacturer: syz [ 740.153341][ T5830] usb 2-1: SerialNumber: syz [ 740.180095][ T5830] usb 2-1: config 0 descriptor?? [ 740.318595][ T5778] Bluetooth: hci5: command tx timeout [ 742.204477][ T8262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 742.407734][ T5778] Bluetooth: hci5: command tx timeout [ 742.507607][ T5832] usb 2-1: USB disconnect, device number 26 [ 742.712252][ T8262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 742.786386][ T8262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 742.830437][ T8418] chnl_net:caif_netlink_parms(): no params data found [ 742.853607][ T8409] chnl_net:caif_netlink_parms(): no params data found [ 742.916879][ T8262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 743.863035][ T126] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.173769][ T126] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.384296][ T126] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.892050][ T126] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.088777][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 745.371323][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.383783][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.391845][ T8409] bridge_slave_0: entered allmulticast mode [ 745.402777][ T8409] bridge_slave_0: entered promiscuous mode [ 745.535623][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.556600][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.566843][ T8409] bridge_slave_1: entered allmulticast mode [ 745.586334][ T8409] bridge_slave_1: entered promiscuous mode [ 745.661632][ T8504] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 745.719194][ T8418] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.789094][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.806616][ T8418] bridge_slave_0: entered allmulticast mode [ 745.904031][ T8418] bridge_slave_0: entered promiscuous mode [ 747.541368][ T8418] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.554176][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.593081][ T8418] bridge_slave_1: entered allmulticast mode [ 747.639986][ T8418] bridge_slave_1: entered promiscuous mode [ 748.984126][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.045102][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.054996][ T8315] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.093917][ T8315] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.294728][ T8418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.347110][ T126] bridge_slave_1: left allmulticast mode [ 749.377309][ T126] bridge_slave_1: left promiscuous mode [ 749.423472][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.454586][ T126] bridge_slave_0: left allmulticast mode [ 749.474620][ T126] bridge_slave_0: left promiscuous mode [ 749.505989][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.560264][ T126] bridge_slave_1: left allmulticast mode [ 749.566094][ T126] bridge_slave_1: left promiscuous mode [ 749.592976][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.665188][ T126] bridge_slave_0: left allmulticast mode [ 749.676234][ T126] bridge_slave_0: left promiscuous mode [ 749.685426][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.848032][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.920082][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.971721][ T126] bond0 (unregistering): Released all slaves [ 751.636998][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.777863][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.812685][ T126] bond0 (unregistering): Released all slaves [ 751.895516][ T8315] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 751.968882][ T8418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.114606][ T8315] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 752.356319][ T8409] team0: Port device team_slave_0 added [ 752.546596][ T8418] team0: Port device team_slave_0 added [ 752.606930][ T8409] team0: Port device team_slave_1 added [ 752.969048][ T8418] team0: Port device team_slave_1 added [ 753.159620][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.166759][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.240642][ T29] audit: type=1326 audit(1774288067.993:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 753.272310][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.283498][ T29] audit: type=1326 audit(1774288068.003:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc309b9e007 code=0x7ffc0000 [ 753.315699][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.336067][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.363135][ T29] audit: type=1326 audit(1774288068.003:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 753.387098][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.398802][ T29] audit: type=1326 audit(1774288068.003:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 753.438797][ T29] audit: type=1326 audit(1774288068.003:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 753.487856][ T29] audit: type=1326 audit(1774288068.003:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 753.540145][ T29] audit: type=1326 audit(1774288068.013:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 753.631938][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 753.648934][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 753.658498][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 753.677967][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 753.687040][ T29] audit: type=1326 audit(1774288068.013:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 753.710714][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 753.807804][ T29] audit: type=1326 audit(1774288068.013:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 753.923770][ T29] audit: type=1326 audit(1774288068.053:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 754.057901][ T126] hsr_slave_0: left promiscuous mode [ 754.078629][ T126] hsr_slave_1: left promiscuous mode [ 754.086284][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.117075][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.159903][ T126] hsr_slave_0: left promiscuous mode [ 754.169881][ T126] hsr_slave_1: left promiscuous mode [ 754.186907][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.238074][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.250857][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.277834][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.321123][ T126] batman_adv: batadv0: Interface deactivated: macsec1 [ 754.341956][ T126] batman_adv: batadv0: Removing interface: macsec1 [ 754.452055][ T126] veth1_macvtap: left promiscuous mode [ 754.459795][ T126] veth0_macvtap: left promiscuous mode [ 754.519817][ T126] veth1_vlan: left promiscuous mode [ 754.525667][ T126] veth0_vlan: left promiscuous mode [ 754.867838][ T8543] ptrace attach of "./syz-executor exec"[5788] was attempted by "./syz-executor exec"[8543] [ 755.838378][ T5778] Bluetooth: hci4: command tx timeout [ 757.025411][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.057739][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.917621][ T5778] Bluetooth: hci4: command tx timeout [ 758.193870][ T126] team0 (unregistering): Port device team_slave_1 removed [ 758.258047][ T126] team0 (unregistering): Port device team_slave_0 removed [ 759.135931][ T126] team0 (unregistering): Port device team_slave_1 removed [ 759.191467][ T126] team0 (unregistering): Port device team_slave_0 removed [ 760.007837][ T5778] Bluetooth: hci4: command tx timeout [ 760.134157][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.155449][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.261720][ T8418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.825038][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.893137][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.075077][ T8315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.093724][ T8315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.321234][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.328819][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.357228][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.364806][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.533608][ T8418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.549703][ T8418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.582551][ T8418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.697201][ T8409] hsr_slave_0: entered promiscuous mode [ 761.745960][ T8409] hsr_slave_1: entered promiscuous mode [ 761.764993][ T8409] debugfs: 'hsr0' already exists in 'hsr' [ 761.790377][ T8409] Cannot create hsr debugfs directory [ 761.966075][ T126] IPVS: stop unused estimator thread 0... [ 762.092268][ T5778] Bluetooth: hci4: command tx timeout [ 762.375531][ T29] audit: type=1326 audit(1774288077.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 762.436663][ T29] audit: type=1326 audit(1774288077.183:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 762.517881][ T29] audit: type=1326 audit(1774288077.183:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc309b9e007 code=0x7ffc0000 [ 762.598025][ T29] audit: type=1326 audit(1774288077.183:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 762.683135][ T8418] hsr_slave_0: entered promiscuous mode [ 762.697806][ T29] audit: type=1326 audit(1774288077.203:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 762.749132][ T8418] hsr_slave_1: entered promiscuous mode [ 762.766305][ T29] audit: type=1326 audit(1774288077.203:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 762.792961][ T8418] debugfs: 'hsr0' already exists in 'hsr' [ 762.817641][ T29] audit: type=1326 audit(1774288077.203:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc309b5cfce code=0x7ffc0000 [ 762.817845][ T8418] Cannot create hsr debugfs directory [ 762.885125][ T29] audit: type=1326 audit(1774288077.203:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 762.976618][ T29] audit: type=1326 audit(1774288077.203:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 763.006364][ T29] audit: type=1326 audit(1774288077.243:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc309b9c799 code=0x7ffc0000 [ 765.665371][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.675993][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.574800][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.598708][ T8587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 766.973499][ T1074] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.011600][ T1074] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.395998][ T1074] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.431131][ T1074] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.950401][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 768.959962][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 768.970338][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 768.992598][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 769.006096][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 771.015796][ T8534] chnl_net:caif_netlink_parms(): no params data found [ 771.118695][ T5778] Bluetooth: hci2: command tx timeout [ 773.026013][ T126] bridge_slave_1: left allmulticast mode [ 773.056445][ T126] bridge_slave_1: left promiscuous mode [ 773.081438][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.141525][ T126] bridge_slave_0: left allmulticast mode [ 773.172972][ T126] bridge_slave_0: left promiscuous mode [ 773.199570][ T5778] Bluetooth: hci2: command tx timeout [ 773.210263][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.663854][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.685795][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.705803][ T126] bond0 (unregistering): Released all slaves [ 773.840026][ T8409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.984159][ T126] hsr_slave_0: left promiscuous mode [ 774.027610][ T126] hsr_slave_1: left promiscuous mode [ 774.040068][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.081971][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.824993][ T126] team0 (unregistering): Port device team_slave_1 removed [ 774.900893][ T126] team0 (unregistering): Port device team_slave_0 removed [ 775.279148][ T5778] Bluetooth: hci2: command tx timeout [ 775.330647][ T8409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 775.395663][ T8409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 775.514965][ T8409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 775.713714][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.721936][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.731171][ T8534] bridge_slave_0: entered allmulticast mode [ 775.743952][ T8534] bridge_slave_0: entered promiscuous mode [ 775.759857][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.767314][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.798515][ T8534] bridge_slave_1: entered allmulticast mode [ 775.818427][ T8534] bridge_slave_1: entered promiscuous mode [ 776.160610][ T8534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.301900][ T8534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.514705][ T8534] team0: Port device team_slave_0 added [ 776.616697][ T8534] team0: Port device team_slave_1 added [ 776.935976][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.946936][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.989287][ T8534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.069308][ T8534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.076795][ T8534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.139419][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.286301][ T8418] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 777.326052][ T8418] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 777.362925][ T5778] Bluetooth: hci2: command tx timeout [ 777.483348][ T8418] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 777.520600][ T8418] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 778.617069][ T8534] hsr_slave_0: entered promiscuous mode [ 778.653245][ T8534] hsr_slave_1: entered promiscuous mode [ 778.680762][ T8534] debugfs: 'hsr0' already exists in 'hsr' [ 778.686667][ T8534] Cannot create hsr debugfs directory [ 778.735591][ T8607] chnl_net:caif_netlink_parms(): no params data found [ 779.841778][ T6303] bridge_slave_1: left allmulticast mode [ 779.862458][ T6303] bridge_slave_1: left promiscuous mode [ 779.886477][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.939726][ T6303] bridge_slave_0: left allmulticast mode [ 779.945581][ T6303] bridge_slave_0: left promiscuous mode [ 779.961798][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.463604][ T6303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.505935][ T6303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.522219][ T6303] bond0 (unregistering): Released all slaves [ 780.729997][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.971271][ T6303] hsr_slave_0: left promiscuous mode [ 780.984950][ T6303] hsr_slave_1: left promiscuous mode [ 781.001219][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.028933][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.581246][ T6303] team0 (unregistering): Port device team_slave_1 removed [ 781.609429][ T6303] team0 (unregistering): Port device team_slave_0 removed [ 782.064469][ T8409] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.267571][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.275198][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.323685][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.331565][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.344748][ T8607] bridge_slave_0: entered allmulticast mode [ 782.354123][ T8607] bridge_slave_0: entered promiscuous mode [ 782.405608][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.418531][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.426702][ T8607] bridge_slave_1: entered allmulticast mode [ 782.441373][ T8607] bridge_slave_1: entered promiscuous mode [ 782.481605][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.489225][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.646909][ T8607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.674864][ T8607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.890075][ T8607] team0: Port device team_slave_0 added [ 782.965191][ T8607] team0: Port device team_slave_1 added [ 783.292615][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.304676][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.336652][ T8607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.363879][ T8607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.376538][ T8607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.418457][ T8607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.596399][ T8607] hsr_slave_0: entered promiscuous mode [ 783.611836][ T8607] hsr_slave_1: entered promiscuous mode [ 783.622491][ T8607] debugfs: 'hsr0' already exists in 'hsr' [ 783.633583][ T8607] Cannot create hsr debugfs directory [ 784.753817][ T8418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.955967][ T8534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 785.067568][ T8534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 785.157018][ T8534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 785.384281][ T8534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 785.768707][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.913296][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.920904][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.113023][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.120880][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.262486][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.440609][ T8607] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 786.485202][ T8607] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 786.535094][ T8607] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 786.566816][ T8607] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 787.202979][ T8409] veth0_vlan: entered promiscuous mode [ 787.335722][ T8409] veth1_vlan: entered promiscuous mode [ 787.602401][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.933927][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.015245][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.022907][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.117436][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.124923][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.235486][ T8409] veth0_macvtap: entered promiscuous mode [ 788.334694][ T8409] veth1_macvtap: entered promiscuous mode [ 788.498685][ T8607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.631835][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.734467][ T8409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.763077][ T8418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.973363][ T8607] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.151385][ T126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.187193][ T126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.293694][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.301343][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.337556][ T126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.400826][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.665812][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.673509][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.898762][ T8745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.908395][ T8745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.921354][ T8745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.933953][ T8745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.946619][ T8745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 792.870669][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.131803][ T8607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.899838][ T1074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.007552][ T8745] Bluetooth: hci0: command tx timeout [ 794.244345][ T1074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.265231][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 794.276803][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 794.286067][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 794.324511][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 794.340589][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 794.564287][ T1074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.832025][ T1074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.889051][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 796.080772][ T5778] Bluetooth: hci0: command tx timeout [ 796.466886][ T8607] veth0_vlan: entered promiscuous mode [ 796.497703][ T5778] Bluetooth: hci1: command tx timeout [ 796.532996][ T8607] veth1_vlan: entered promiscuous mode [ 796.672475][ T8607] veth0_macvtap: entered promiscuous mode [ 796.861089][ T8607] veth1_macvtap: entered promiscuous mode [ 796.890143][ T1074] bridge_slave_1: left allmulticast mode [ 796.900162][ T1074] bridge_slave_1: left promiscuous mode [ 796.906436][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.947249][ T1074] bridge_slave_0: left allmulticast mode [ 796.983613][ T1074] bridge_slave_0: left promiscuous mode [ 797.008414][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.574642][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.593492][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.619183][ T1074] bond0 (unregistering): Released all slaves [ 797.844779][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.866166][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.876898][ T8744] bridge_slave_0: entered allmulticast mode [ 797.887916][ T8744] bridge_slave_0: entered promiscuous mode [ 797.923950][ T1074] hsr_slave_0: left promiscuous mode [ 797.932153][ T1074] hsr_slave_1: left promiscuous mode [ 797.940536][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.948154][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.958316][ T1074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.966130][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.995687][ T1074] veth1_macvtap: left promiscuous mode [ 798.001994][ T1074] veth0_macvtap: left promiscuous mode [ 798.008220][ T1074] veth1_vlan: left promiscuous mode [ 798.013747][ T1074] veth0_vlan: left promiscuous mode [ 798.157697][ T5778] Bluetooth: hci0: command tx timeout [ 798.558392][ T5778] Bluetooth: hci1: command tx timeout [ 798.711096][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 798.755331][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 798.762937][ T5829] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 798.947634][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 798.962174][ T5829] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 798.982620][ T5829] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 798.999002][ T5829] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 799.026212][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.033869][ T5829] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 799.047242][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.056375][ T8744] bridge_slave_1: entered allmulticast mode [ 799.063350][ T5829] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 799.085378][ T5829] usb 2-1: config 0 has no interface number 0 [ 799.092979][ T5829] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 799.096735][ T8744] bridge_slave_1: entered promiscuous mode [ 799.110492][ T5829] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 799.110629][ T5829] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 799.110772][ T5829] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.110930][ T5829] usb 2-1: config 0 interface 125 has no altsetting 0 [ 799.111036][ T5829] usb 2-1: config 0 interface 125 has no altsetting 2 [ 799.124286][ T5829] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 799.178255][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.184786][ T8534] veth0_vlan: entered promiscuous mode [ 799.186748][ T5829] usb 2-1: Product: syz [ 799.198223][ T5829] usb 2-1: Manufacturer: syz [ 799.202990][ T5829] usb 2-1: SerialNumber: syz [ 799.240903][ T5829] usb 2-1: config 0 descriptor?? [ 799.273271][ T5829] usb 2-1: selecting invalid altsetting 2 [ 799.416238][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.462792][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.489413][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.613460][ T8534] veth1_vlan: entered promiscuous mode [ 799.642583][ T8744] team0: Port device team_slave_0 added [ 799.693444][ T8607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.716420][ T8744] team0: Port device team_slave_1 added [ 799.976976][ T6303] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.986450][ T6303] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.015698][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.023371][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.054302][ T8744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.076858][ T8744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.084378][ T8744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.112413][ T8744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.139013][ T8768] chnl_net:caif_netlink_parms(): no params data found [ 800.170189][ T6303] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.184636][ T6303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.237842][ T5778] Bluetooth: hci0: command tx timeout [ 800.638701][ T5778] Bluetooth: hci1: command tx timeout [ 800.686883][ T5829] usb 2-1: USB disconnect, device number 27 [ 800.793950][ T8744] hsr_slave_0: entered promiscuous mode [ 800.804900][ T8744] hsr_slave_1: entered promiscuous mode [ 800.828166][ T8744] debugfs: 'hsr0' already exists in 'hsr' [ 800.834156][ T8744] Cannot create hsr debugfs directory [ 801.224496][ T8534] veth0_macvtap: entered promiscuous mode [ 801.568403][ T7232] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 801.642804][ T8534] veth1_macvtap: entered promiscuous mode [ 801.696378][ T1074] bridge_slave_1: left allmulticast mode [ 801.709739][ T1074] bridge_slave_1: left promiscuous mode [ 801.716079][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.733967][ T1074] bridge_slave_0: left allmulticast mode [ 801.737637][ T7232] usb 2-1: Using ep0 maxpacket: 32 [ 801.739987][ T1074] bridge_slave_0: left promiscuous mode [ 801.752218][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.753768][ T7232] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 801.773781][ T7232] usb 2-1: config 0 has no interface number 0 [ 801.781098][ T7232] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.795932][ T7232] usb 2-1: config 0 interface 89 has no altsetting 0 [ 801.811797][ T7232] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 801.823340][ T7232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.833027][ T7232] usb 2-1: Product: syz [ 801.844279][ T7232] usb 2-1: Manufacturer: syz [ 801.850006][ T7232] usb 2-1: SerialNumber: syz [ 801.862533][ T7232] usb 2-1: config 0 descriptor?? [ 802.115034][ T1074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.132232][ T1074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.144908][ T1074] bond0 (unregistering): Released all slaves [ 802.206560][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.214458][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.222814][ T8768] bridge_slave_0: entered allmulticast mode [ 802.231429][ T8768] bridge_slave_0: entered promiscuous mode [ 802.309500][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.321043][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.331224][ T8768] bridge_slave_1: entered allmulticast mode [ 802.342008][ T8768] bridge_slave_1: entered promiscuous mode [ 802.371997][ T1074] hsr_slave_0: left promiscuous mode [ 802.380093][ T1074] hsr_slave_1: left promiscuous mode [ 802.388364][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.415490][ T1074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.717690][ T5778] Bluetooth: hci1: command tx timeout [ 802.776248][ T1074] team0 (unregistering): Port device team_slave_1 removed [ 802.847282][ T1074] team0 (unregistering): Port device team_slave_0 removed [ 803.300683][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.323640][ T8768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.437084][ T8768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.491402][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.691676][ T8768] team0: Port device team_slave_0 added [ 803.706863][ T8768] team0: Port device team_slave_1 added [ 803.721918][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.934162][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.991442][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.004851][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.064330][ T8768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.093970][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.103767][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.129848][ T8768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.152046][ T8768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 804.231501][ T8768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.451522][ T9] usb 2-1: USB disconnect, device number 28 [ 804.757817][ T8768] hsr_slave_0: entered promiscuous mode [ 804.778568][ T8768] hsr_slave_1: entered promiscuous mode [ 804.788621][ T8768] debugfs: 'hsr0' already exists in 'hsr' [ 804.804313][ T8768] Cannot create hsr debugfs directory [ 805.458351][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.498223][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.653556][ T8744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 805.931180][ T8744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 806.153584][ T8744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 806.277488][ T8744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 806.751860][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.794819][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.787980][ T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 807.992342][ T8768] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 808.019235][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 808.046852][ T9] usb 8-1: config 0 has no interfaces? [ 808.058260][ T9] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 808.147830][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.224139][ T9] usb 8-1: config 0 descriptor?? [ 808.754968][ T8768] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 809.340748][ T8768] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 809.452864][ T5829] usb 8-1: USB disconnect, device number 2 [ 809.588067][ T8768] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 809.901000][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.007248][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.065953][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.827781][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.835790][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.901156][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.066709][ T126] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.074427][ T126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.402129][ T126] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.409895][ T126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.538620][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 811.737787][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 811.789616][ T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 811.818215][ T9] usb 2-1: config 0 has no interface number 0 [ 811.824517][ T9] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.886576][ T9] usb 2-1: config 0 interface 89 has no altsetting 0 [ 813.901809][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 813.912053][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.924893][ T9] usb 2-1: Product: syz [ 813.939680][ T9] usb 2-1: Manufacturer: syz [ 813.944682][ T9] usb 2-1: SerialNumber: syz [ 814.900190][ T9] usb 2-1: config 0 descriptor?? [ 814.907213][ T9] usb 2-1: can't set config #0, error -71 [ 815.889963][ T9] usb 2-1: USB disconnect, device number 29 [ 816.297964][ T8768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 816.912778][ T8768] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.057289][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.064827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.966255][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.981912][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.951462][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.959082][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.497988][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 822.753600][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.799926][ T9] usb 6-1: config 0 has no interfaces? [ 822.805743][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 822.859264][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.896277][ T9] usb 6-1: config 0 descriptor?? [ 823.332305][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.540693][ T9] usb 6-1: USB disconnect, device number 2 [ 824.036999][ T8744] veth0_vlan: entered promiscuous mode [ 824.145735][ T8744] veth1_vlan: entered promiscuous mode [ 826.151756][ T8192] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 826.362820][ T8744] veth0_macvtap: entered promiscuous mode [ 827.146678][ T8744] veth1_macvtap: entered promiscuous mode [ 827.278469][ T8192] usb 2-1: Using ep0 maxpacket: 32 [ 827.319139][ T8192] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 827.383653][ T8768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.424228][ T8192] usb 2-1: config 0 has no interface number 0 [ 827.486021][ T8192] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.651842][ T8192] usb 2-1: config 0 interface 89 has no altsetting 0 [ 828.420278][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.806774][ T8192] usb 2-1: string descriptor 0 read error: -71 [ 828.947981][ T8192] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 828.957261][ T8192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.972921][ T8744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.180533][ T8192] usb 2-1: config 0 descriptor?? [ 829.285470][ T8192] usb 2-1: can't set config #0, error -71 [ 829.432546][ T8192] usb 2-1: USB disconnect, device number 30 [ 829.712394][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.963770][ T1074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.115878][ T1074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.155034][ T8745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.164407][ T1074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.186186][ T8745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.196410][ T8745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 833.219956][ T8745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 833.238382][ T8745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.318221][ T1976] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 835.439469][ T5778] Bluetooth: hci5: command tx timeout [ 835.540566][ T1976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.577949][ T1976] usb 2-1: config 0 has no interfaces? [ 835.583679][ T1976] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 835.633427][ T1976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.669425][ T1976] usb 2-1: config 0 descriptor?? [ 836.054556][ T8995] Bluetooth: MGMT ver 1.23 [ 836.888009][ T8768] veth0_vlan: entered promiscuous mode [ 837.517936][ T5778] Bluetooth: hci5: command tx timeout [ 838.088714][ T7576] usb 2-1: USB disconnect, device number 31 [ 838.984775][ T8978] chnl_net:caif_netlink_parms(): no params data found [ 839.600748][ T5778] Bluetooth: hci5: command tx timeout [ 840.002005][ T8768] veth1_vlan: entered promiscuous mode [ 840.197662][ T8192] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 840.409029][ T8192] usb 2-1: Using ep0 maxpacket: 32 [ 840.446611][ T8192] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 840.485607][ T8192] usb 2-1: config 0 has no interface number 0 [ 840.528010][ T8192] usb 2-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 840.562476][ T8768] veth0_macvtap: entered promiscuous mode [ 840.587605][ T8192] usb 2-1: config 0 interface 89 has no altsetting 0 [ 840.643671][ T8192] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 840.667970][ T8192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.676196][ T8192] usb 2-1: Product: syz [ 840.691739][ T8768] veth1_macvtap: entered promiscuous mode [ 840.727799][ T8192] usb 2-1: Manufacturer: syz [ 840.758878][ T8192] usb 2-1: SerialNumber: syz [ 840.796308][ T8192] usb 2-1: config 0 descriptor?? [ 840.946233][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.237617][ T8768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.611531][ T166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.679036][ T5778] Bluetooth: hci5: command tx timeout [ 842.435066][ T6045] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.501986][ T166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.541845][ T166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.678063][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.710091][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.738292][ T8978] bridge_slave_0: entered allmulticast mode [ 842.762449][ T8978] bridge_slave_0: entered promiscuous mode [ 842.828984][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.857696][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.865796][ T8978] bridge_slave_1: entered allmulticast mode [ 842.917565][ T8978] bridge_slave_1: entered promiscuous mode [ 843.072397][ T5835] usb 2-1: USB disconnect, device number 32 [ 843.116541][ T6045] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.204353][ T166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.193075][ T6045] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.742568][ T6045] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.956586][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.077056][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.791891][ T8978] team0: Port device team_slave_0 added [ 845.990760][ T8978] team0: Port device team_slave_1 added [ 847.763303][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.768846][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.284147][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.181714][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.236632][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.731066][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.260941][ T6045] bridge_slave_1: left allmulticast mode [ 851.266794][ T6045] bridge_slave_1: left promiscuous mode [ 851.298461][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.018699][ T6045] bridge_slave_0: left allmulticast mode [ 852.067789][ T6045] bridge_slave_0: left promiscuous mode [ 852.074334][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.624141][ T8745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 852.641879][ T8745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 852.659976][ T8745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 852.677588][ T8745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 852.694989][ T8745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 852.897533][ T7773] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 853.118522][ T7773] usb 2-1: Using ep0 maxpacket: 32 [ 853.156222][ T7773] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 853.165187][ T7773] usb 2-1: config 0 has no interface number 0 [ 853.177471][ T7773] usb 2-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 853.207549][ T7773] usb 2-1: config 0 interface 89 has no altsetting 0 [ 853.223348][ T7773] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 853.247868][ T7773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.261517][ T7773] usb 2-1: Product: syz [ 853.269257][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.269277][ T7773] usb 2-1: Manufacturer: syz [ 853.296534][ T7773] usb 2-1: SerialNumber: syz [ 853.303549][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.322774][ T7773] usb 2-1: config 0 descriptor?? [ 853.333406][ T6045] bond0 (unregistering): Released all slaves [ 853.520963][ T8978] hsr_slave_0: entered promiscuous mode [ 853.577467][ T8978] hsr_slave_1: entered promiscuous mode [ 853.597004][ T8978] debugfs: 'hsr0' already exists in 'hsr' [ 853.640277][ T8978] Cannot create hsr debugfs directory [ 854.798477][ T5778] Bluetooth: hci2: command tx timeout [ 854.895467][ T6045] hsr_slave_0: left promiscuous mode [ 854.948216][ T6045] hsr_slave_1: left promiscuous mode [ 854.956140][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.993321][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.037965][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.045532][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.174945][ T6045] veth1_macvtap: left promiscuous mode [ 855.199787][ T6045] veth0_macvtap: left promiscuous mode [ 855.205638][ T6045] veth1_vlan: left promiscuous mode [ 855.232036][ T6045] veth0_vlan: left promiscuous mode [ 855.838961][ T8745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.863142][ T8745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.879497][ T8745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 855.893064][ T8745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 855.902748][ T5835] usb 2-1: USB disconnect, device number 33 [ 855.911018][ T8745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 857.047114][ T5778] Bluetooth: hci2: command tx timeout [ 858.048263][ T5778] Bluetooth: hci0: command tx timeout [ 859.118357][ T5778] Bluetooth: hci2: command tx timeout [ 859.517989][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 859.593445][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 860.141117][ T5778] Bluetooth: hci0: command tx timeout [ 861.245950][ T5778] Bluetooth: hci2: command tx timeout [ 862.214983][ T5778] Bluetooth: hci0: command tx timeout [ 863.034916][ T6045] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.193599][ T6045] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.354017][ T6045] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.655850][ T6045] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.297711][ T5778] Bluetooth: hci0: command tx timeout [ 865.052700][ T8978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 865.396234][ T8978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 865.877925][ T8978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 866.224301][ T8978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 866.571930][ T9118] chnl_net:caif_netlink_parms(): no params data found [ 866.726304][ T6045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.071319][ T6045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.393299][ T6045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.709581][ T9145] chnl_net:caif_netlink_parms(): no params data found [ 868.092394][ T6045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.327735][ T1976] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 868.514510][ T1976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.558669][ T1976] usb 6-1: config 0 has no interfaces? [ 868.564492][ T1976] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.616663][ T1976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.648902][ T1976] usb 6-1: config 0 descriptor?? [ 869.616433][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.656197][ T9] usb 6-1: USB disconnect, device number 3 [ 869.674695][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.733073][ T9118] bridge_slave_0: entered allmulticast mode [ 869.775815][ T9118] bridge_slave_0: entered promiscuous mode [ 869.814862][ T6045] bridge_slave_1: left allmulticast mode [ 869.827461][ T6045] bridge_slave_1: left promiscuous mode [ 869.855612][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.892613][ T6045] bridge_slave_0: left allmulticast mode [ 869.919974][ T6045] bridge_slave_0: left promiscuous mode [ 869.943685][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.991047][ T6045] bridge_slave_1: left allmulticast mode [ 870.021996][ T6045] bridge_slave_1: left promiscuous mode [ 870.054469][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.094021][ T6045] bridge_slave_0: left allmulticast mode [ 870.101335][ T6045] bridge_slave_0: left promiscuous mode [ 870.111158][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.480461][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.606986][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.686917][ T6045] bond0 (unregistering): Released all slaves [ 871.994095][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.011472][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.043171][ T6045] bond0 (unregistering): Released all slaves [ 872.072573][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.086372][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.103279][ T9118] bridge_slave_1: entered allmulticast mode [ 872.114498][ T9118] bridge_slave_1: entered promiscuous mode [ 872.428481][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.437992][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.703430][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.746011][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.067688][ T6045] hsr_slave_0: left promiscuous mode [ 874.108640][ T6045] hsr_slave_1: left promiscuous mode [ 874.146053][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.179917][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.231547][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.281646][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.389711][ T6045] hsr_slave_0: left promiscuous mode [ 875.036430][ T6045] hsr_slave_1: left promiscuous mode [ 875.063687][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.088355][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.101169][ T6045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.110300][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.155565][ T6045] veth1_macvtap: left promiscuous mode [ 875.185217][ T6045] veth0_macvtap: left promiscuous mode [ 875.203548][ T6045] veth1_vlan: left promiscuous mode [ 875.216360][ T6045] veth0_vlan: left promiscuous mode [ 875.239559][ T6045] veth1_macvtap: left promiscuous mode [ 875.255774][ T6045] veth0_macvtap: left promiscuous mode [ 875.267927][ T6045] veth1_vlan: left promiscuous mode [ 875.283140][ T6045] veth0_vlan: left promiscuous mode [ 876.779955][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 876.806351][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 877.045830][ T8745] Bluetooth: hci4: command 0x0406 tx timeout [ 877.723878][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 877.770232][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 878.191372][ T126] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.231413][ T6185] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.363599][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.376898][ T9145] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.398082][ T9145] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.406926][ T9145] bridge_slave_0: entered allmulticast mode [ 878.431352][ T9145] bridge_slave_0: entered promiscuous mode [ 878.475256][ T9145] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.497961][ T9145] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.505602][ T9145] bridge_slave_1: entered allmulticast mode [ 878.531043][ T9145] bridge_slave_1: entered promiscuous mode [ 878.552625][ T6185] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.601243][ T6185] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.739747][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.176828][ T9118] team0: Port device team_slave_0 added [ 879.215754][ T9145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.258767][ T9118] team0: Port device team_slave_1 added [ 879.297962][ T1976] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 879.333592][ T9145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.449927][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.490282][ T1976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.518302][ T1976] usb 6-1: config 0 has no interfaces? [ 879.524022][ T1976] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 879.547887][ T1976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.562308][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.574318][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.603584][ T1976] usb 6-1: config 0 descriptor?? [ 879.646433][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.696700][ T9145] team0: Port device team_slave_0 added [ 879.738827][ T9145] team0: Port device team_slave_1 added [ 879.749608][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.756703][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.783563][ T9118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.863037][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.873882][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.080074][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.087198][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.166361][ T1976] usb 6-1: USB disconnect, device number 4 [ 880.187509][ T9145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.219445][ T9145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.226558][ T9145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.315091][ T9145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.187063][ T9311] tmpfs: Bad value for 'mpol' [ 882.537060][ T8978] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.817622][ T9311] xt_HMARK: spi-set and port-set can't be combined [ 883.399124][ T9118] hsr_slave_0: entered promiscuous mode [ 883.421955][ T9118] hsr_slave_1: entered promiscuous mode [ 883.442583][ T9118] debugfs: 'hsr0' already exists in 'hsr' [ 883.467564][ T9118] Cannot create hsr debugfs directory [ 883.656536][ T9145] hsr_slave_0: entered promiscuous mode [ 883.696758][ T9145] hsr_slave_1: entered promiscuous mode [ 883.719811][ T9145] debugfs: 'hsr0' already exists in 'hsr' [ 883.732433][ T9145] Cannot create hsr debugfs directory [ 883.913585][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.921198][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.519712][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.527533][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.998741][ T1976] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 889.253211][ T1976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.330396][ T1976] usb 2-1: config 0 has no interfaces? [ 889.336119][ T1976] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 889.428122][ T1976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.492133][ T1976] usb 2-1: config 0 descriptor?? [ 889.847637][ T9118] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 889.984972][ T9118] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 890.992878][ T9118] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 891.287654][ T9357] tmpfs: Bad value for 'mpol' [ 891.346634][ T9] usb 2-1: USB disconnect, device number 34 [ 892.590100][ T9357] xt_HMARK: spi-set and port-set can't be combined [ 892.887456][ T9118] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 893.006861][ T8745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 893.043708][ T8745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 893.054393][ T8745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 893.079320][ T8745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 893.104431][ T8745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 895.236474][ T5778] Bluetooth: hci1: command tx timeout [ 896.687181][ T9145] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 896.813025][ T9145] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 897.091260][ T9145] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 897.281253][ T5778] Bluetooth: hci1: command tx timeout [ 897.293801][ T9145] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 899.290967][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.358737][ T5778] Bluetooth: hci1: command tx timeout [ 900.442706][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.602850][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.610468][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.918575][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 901.082760][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.090374][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.317977][ T170] bridge_slave_1: left allmulticast mode [ 901.334493][ T170] bridge_slave_1: left promiscuous mode [ 901.358399][ T7773] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 901.378711][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.417253][ T170] bridge_slave_0: left allmulticast mode [ 901.434470][ T170] bridge_slave_0: left promiscuous mode [ 901.463036][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.472852][ T5778] Bluetooth: hci1: command tx timeout [ 901.576634][ T7773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.653525][ T7773] usb 6-1: config 0 has no interfaces? [ 901.678798][ T7773] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 901.729628][ T7773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.872027][ T7773] usb 6-1: config 0 descriptor?? [ 902.221273][ T9410] Bluetooth: MGMT ver 1.23 [ 902.609462][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.673913][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.702841][ T7773] usb 6-1: USB disconnect, device number 5 [ 902.734260][ T170] bond0 (unregistering): Released all slaves [ 904.354848][ T170] hsr_slave_0: left promiscuous mode [ 904.499913][ T170] hsr_slave_1: left promiscuous mode [ 904.530555][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.670375][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 906.443247][ T170] team0 (unregistering): Port device team_slave_1 removed [ 906.484439][ T170] team0 (unregistering): Port device team_slave_0 removed [ 909.531658][ T9145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.157124][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.164768][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.195172][ T9360] bridge_slave_0: entered allmulticast mode [ 911.157687][ T9360] bridge_slave_0: entered promiscuous mode [ 911.177533][ T8192] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 911.219219][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.245318][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.265396][ T9360] bridge_slave_1: entered allmulticast mode [ 911.295999][ T9360] bridge_slave_1: entered promiscuous mode [ 911.353809][ T8192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.417501][ T8192] usb 6-1: config 0 has no interfaces? [ 911.457556][ T8192] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 911.497733][ T8192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.580265][ T8192] usb 6-1: config 0 descriptor?? [ 911.830482][ T9145] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.940776][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.089254][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.179947][ T8745] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 912.194712][ T8745] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 912.205268][ T8745] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 912.226467][ T8745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 912.238483][ T8745] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 912.914808][ T6045] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.922334][ T6045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.987042][ T9360] team0: Port device team_slave_0 added [ 913.033301][ T8192] usb 6-1: USB disconnect, device number 6 [ 913.089085][ T9360] team0: Port device team_slave_1 added [ 914.318009][ T8745] Bluetooth: hci5: command tx timeout [ 914.372760][ T6045] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.380364][ T6045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.456747][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.464602][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.492009][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.849619][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.858371][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.998729][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.397664][ T8745] Bluetooth: hci5: command tx timeout [ 917.857847][ T9360] hsr_slave_0: entered promiscuous mode [ 917.903635][ T9360] hsr_slave_1: entered promiscuous mode [ 917.924020][ T9360] debugfs: 'hsr0' already exists in 'hsr' [ 917.961425][ T9360] Cannot create hsr debugfs directory [ 918.480571][ T8745] Bluetooth: hci5: command tx timeout [ 920.567824][ T8745] Bluetooth: hci5: command tx timeout [ 921.719449][ T8745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.732807][ T8745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.745444][ T8745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.765311][ T8745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.790888][ T8745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 923.370433][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 923.857881][ T8745] Bluetooth: hci2: command tx timeout [ 924.551422][ T6045] bridge_slave_1: left allmulticast mode [ 924.630789][ T6045] bridge_slave_1: left promiscuous mode [ 924.637463][ T6045] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.804841][ T6045] bridge_slave_0: left allmulticast mode [ 924.831437][ T6045] bridge_slave_0: left promiscuous mode [ 924.838173][ T6045] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.569969][ T6045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.637614][ T8192] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 925.714443][ T6045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.782909][ T6045] bond0 (unregistering): Released all slaves [ 925.833182][ T8192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.906175][ T8192] usb 6-1: config 0 has no interfaces? [ 925.926403][ T8745] Bluetooth: hci2: command tx timeout [ 925.978095][ T8192] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 926.078495][ T8192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.165730][ T8192] usb 6-1: config 0 descriptor?? [ 926.246338][ T6045] hsr_slave_0: left promiscuous mode [ 926.267867][ T6045] hsr_slave_1: left promiscuous mode [ 926.289713][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.307490][ T6045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.676513][ T8192] usb 6-1: USB disconnect, device number 7 [ 926.773066][ T6045] team0 (unregistering): Port device team_slave_1 removed [ 926.795318][ T6045] team0 (unregistering): Port device team_slave_0 removed [ 927.951882][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.960443][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.973972][ T8192] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 927.982589][ T9484] bridge_slave_0: entered allmulticast mode [ 927.999946][ T8745] Bluetooth: hci2: command tx timeout [ 928.099196][ T9484] bridge_slave_0: entered promiscuous mode [ 928.195341][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.206639][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.236593][ T9484] bridge_slave_1: entered allmulticast mode [ 928.261932][ T8192] usb 6-1: Using ep0 maxpacket: 16 [ 928.385357][ T8192] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 928.456239][ T8192] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 928.469668][ T9484] bridge_slave_1: entered promiscuous mode [ 928.510439][ T8192] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 928.568749][ T8192] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 928.614179][ T8192] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 928.650678][ T8192] usb 6-1: config 0 has no interface number 0 [ 928.681387][ T8192] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 928.708914][ T8192] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 928.720152][ T8192] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 928.731667][ T8192] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 928.776888][ T8192] usb 6-1: config 0 interface 125 has no altsetting 0 [ 928.787221][ T8192] usb 6-1: config 0 interface 125 has no altsetting 2 [ 928.801997][ T9360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 929.682565][ T8192] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 929.698833][ T8192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.700870][ T9360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 929.720545][ T8192] usb 6-1: Product: syz [ 929.725481][ T8192] usb 6-1: Manufacturer: syz [ 929.737964][ T8192] usb 6-1: SerialNumber: syz [ 929.828437][ T8192] usb 6-1: config 0 descriptor?? [ 930.008343][ T8192] usb 6-1: selecting invalid altsetting 2 [ 930.087552][ T8745] Bluetooth: hci2: command tx timeout [ 930.476582][ T9516] chnl_net:caif_netlink_parms(): no params data found [ 931.422630][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.452370][ T9360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 931.546973][ T9360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 931.801757][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.815142][ T7773] usb 6-1: USB disconnect, device number 8 [ 932.885751][ T9484] team0: Port device team_slave_0 added [ 932.989185][ T9484] team0: Port device team_slave_1 added [ 933.672362][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.679659][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.707236][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.817700][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.195707][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.258022][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.043183][ T9516] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.068588][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.095331][ T9516] bridge_slave_0: entered allmulticast mode [ 935.115330][ T9516] bridge_slave_0: entered promiscuous mode [ 935.150850][ T9516] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.158828][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.166483][ T9516] bridge_slave_1: entered allmulticast mode [ 935.185530][ T9516] bridge_slave_1: entered promiscuous mode [ 935.669741][ T7772] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 935.883817][ T7772] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.905442][ T7772] usb 6-1: config 0 has no interfaces? [ 935.932732][ T9484] hsr_slave_0: entered promiscuous mode [ 935.939875][ T7772] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 935.950044][ T7772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.060178][ T9484] hsr_slave_1: entered promiscuous mode [ 936.121180][ T9484] debugfs: 'hsr0' already exists in 'hsr' [ 936.128234][ T7772] usb 6-1: config 0 descriptor?? [ 936.148168][ T9484] Cannot create hsr debugfs directory [ 936.318798][ T9516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.749231][ T9516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.703895][ T7772] usb 6-1: USB disconnect, device number 9 [ 938.040037][ T6043] bridge_slave_1: left allmulticast mode [ 938.056030][ T6043] bridge_slave_1: left promiscuous mode [ 938.104703][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.233619][ T6043] bridge_slave_0: left allmulticast mode [ 938.248086][ T6043] bridge_slave_0: left promiscuous mode [ 938.294087][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.022032][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.040368][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.075162][ T6043] bond0 (unregistering): Released all slaves [ 941.334477][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.341825][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.654136][ T9516] team0: Port device team_slave_0 added [ 941.737643][ T6043] hsr_slave_0: left promiscuous mode [ 941.763869][ T6043] hsr_slave_1: left promiscuous mode [ 941.781548][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.791524][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.972612][ T5958] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 942.158670][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 942.180097][ T5958] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 942.189781][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 942.237418][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 942.245910][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 942.280717][ T5958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 942.290893][ T5958] usb 6-1: config 0 has no interface number 0 [ 942.297177][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 942.339159][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 942.349723][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 942.360618][ T5958] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.374430][ T5958] usb 6-1: config 0 interface 125 has no altsetting 0 [ 942.381477][ T5958] usb 6-1: config 0 interface 125 has no altsetting 2 [ 942.432838][ T6043] team0 (unregistering): Port device team_slave_1 removed [ 942.446885][ T5958] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 942.466475][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.482588][ T5958] usb 6-1: Product: syz [ 942.491522][ T6043] team0 (unregistering): Port device team_slave_0 removed [ 942.503713][ T5958] usb 6-1: Manufacturer: syz [ 942.521231][ T5958] usb 6-1: SerialNumber: syz [ 942.650623][ T5958] usb 6-1: config 0 descriptor?? [ 942.703628][ T5958] usb 6-1: selecting invalid altsetting 2 [ 942.985578][ T9516] team0: Port device team_slave_1 added [ 943.364833][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.379522][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.449489][ T9516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.613831][ T9516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.627989][ T9516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.718008][ T9516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.781325][ T1976] usb 6-1: USB disconnect, device number 10 [ 944.274203][ T9516] hsr_slave_0: entered promiscuous mode [ 944.301076][ T9516] hsr_slave_1: entered promiscuous mode [ 944.310804][ T9516] debugfs: 'hsr0' already exists in 'hsr' [ 944.316782][ T9516] Cannot create hsr debugfs directory [ 944.679186][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.907619][ T8192] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 945.103193][ T8192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.157761][ T8192] usb 6-1: config 0 has no interfaces? [ 945.163482][ T8192] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 945.187433][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.227502][ T8192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.279626][ T8192] usb 6-1: config 0 descriptor?? [ 945.709035][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.716693][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.790022][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.797815][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.021051][ T5830] usb 6-1: USB disconnect, device number 11 [ 946.307084][ T9484] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.432201][ T9484] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.519584][ T9484] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 946.589490][ T9484] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 946.986598][ T9360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.179126][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.647873][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.862641][ T9516] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 948.986197][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.993766][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.037584][ T9516] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.333750][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.341316][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.469566][ T9516] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.687718][ T9516] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 950.781783][ T5958] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 950.807634][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.826956][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.836067][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.851066][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.868235][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 950.987442][ T5958] usb 6-1: Using ep0 maxpacket: 16 [ 951.006897][ T5958] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 951.044579][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 951.072174][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 951.112972][ T5958] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 951.153956][ T5958] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 951.189573][ T5958] usb 6-1: config 0 has no interface number 0 [ 951.234924][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 951.282636][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 951.329722][ T5958] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 951.367636][ T5958] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 951.417709][ T5958] usb 6-1: config 0 interface 125 has no altsetting 0 [ 951.444767][ T5958] usb 6-1: config 0 interface 125 has no altsetting 2 [ 951.485647][ T5958] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 951.516074][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.536746][ T5958] usb 6-1: Product: syz [ 951.551758][ T5958] usb 6-1: Manufacturer: syz [ 951.563300][ T5958] usb 6-1: SerialNumber: syz [ 951.586506][ T5958] usb 6-1: config 0 descriptor?? [ 951.642132][ T5958] usb 6-1: selecting invalid altsetting 2 [ 952.191654][ T7232] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 952.247862][ T9516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.383256][ T7232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.404852][ T7232] usb 2-1: config 0 has no interfaces? [ 952.419834][ T7232] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 952.437962][ T7232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.490233][ C0] usb 6-1: async_complete: urb error -71 [ 952.491415][ T7232] usb 2-1: config 0 descriptor?? [ 952.496232][ T5958] get_1284_register: usb error -71 [ 952.556296][ T5958] usb 6-1: USB disconnect, device number 12 [ 952.841668][ T9722] Bluetooth: MGMT ver 1.23 [ 952.867873][ T9722] Bluetooth: hci0: unsupported parameter 28694 [ 952.874261][ T9722] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 952.960999][ T8745] Bluetooth: hci0: command tx timeout [ 953.025886][ T9516] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.186817][ T5830] usb 2-1: USB disconnect, device number 35 [ 953.208680][ T9710] chnl_net:caif_netlink_parms(): no params data found [ 953.496767][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.504409][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.037783][ T8745] Bluetooth: hci0: command tx timeout [ 955.261269][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.335150][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.342787][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.868357][ T6043] bridge_slave_1: left allmulticast mode [ 956.874207][ T6043] bridge_slave_1: left promiscuous mode [ 956.908412][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.948809][ T6043] bridge_slave_0: left allmulticast mode [ 956.954642][ T6043] bridge_slave_0: left promiscuous mode [ 957.000627][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.118703][ T8745] Bluetooth: hci0: command tx timeout [ 957.782270][ T6043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.844379][ T6043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.876350][ T6043] bond0 (unregistering): Released all slaves [ 958.149637][ T6043] hsr_slave_0: left promiscuous mode [ 958.268658][ T6043] hsr_slave_1: left promiscuous mode [ 958.276640][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.329604][ T6043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.198516][ T8745] Bluetooth: hci0: command tx timeout [ 959.222812][ T6043] team0 (unregistering): Port device team_slave_1 removed [ 959.270609][ T6043] team0 (unregistering): Port device team_slave_0 removed [ 959.899485][ T9710] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.933707][ T9710] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.947033][ T9710] bridge_slave_0: entered allmulticast mode [ 959.958682][ T9710] bridge_slave_0: entered promiscuous mode [ 960.005124][ T9710] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.013516][ T9710] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.022421][ T9710] bridge_slave_1: entered allmulticast mode [ 960.042502][ T9710] bridge_slave_1: entered promiscuous mode [ 960.247507][ T5829] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 960.332643][ T9710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.417997][ T5829] usb 6-1: Using ep0 maxpacket: 16 [ 960.423908][ T9710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.446106][ T5829] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 960.457603][ T5829] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 960.476705][ T5829] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 960.497497][ T5829] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 960.506337][ T5829] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 960.538297][ T9484] veth0_vlan: entered promiscuous mode [ 960.545658][ T5829] usb 6-1: config 0 has no interface number 0 [ 960.557484][ T5829] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 960.577517][ T5829] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 960.597907][ T5829] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 960.618305][ T5829] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 960.678923][ T5829] usb 6-1: config 0 interface 125 has no altsetting 0 [ 960.706845][ T5829] usb 6-1: config 0 interface 125 has no altsetting 2 [ 960.739889][ T5829] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 960.764739][ T9710] team0: Port device team_slave_0 added [ 960.771171][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.791148][ T5829] usb 6-1: Product: syz [ 960.804037][ T5829] usb 6-1: Manufacturer: syz [ 960.817742][ T5829] usb 6-1: SerialNumber: syz [ 960.846554][ T5829] usb 6-1: config 0 descriptor?? [ 960.868863][ T9710] team0: Port device team_slave_1 added [ 960.935502][ T5829] usb 6-1: selecting invalid altsetting 2 [ 961.137710][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.145370][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.207689][ T9710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.225669][ T9484] veth1_vlan: entered promiscuous mode [ 961.303087][ T9710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.338069][ T9710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.417519][ T9710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.627661][ T7232] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 961.720668][ C0] usb 6-1: async_complete: urb error -71 [ 961.746322][ T5829] get_1284_register: usb error -71 [ 961.797765][ T5829] usb 6-1: USB disconnect, device number 13 [ 961.829105][ T7232] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.880442][ T7232] usb 2-1: config 0 has no interfaces? [ 961.884442][ T9710] hsr_slave_0: entered promiscuous mode [ 961.886140][ T7232] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 961.929505][ T9710] hsr_slave_1: entered promiscuous mode [ 961.950121][ T7232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.950375][ T9710] debugfs: 'hsr0' already exists in 'hsr' [ 961.988204][ T9710] Cannot create hsr debugfs directory [ 961.990072][ T7232] usb 2-1: config 0 descriptor?? [ 962.323154][ T9796] Bluetooth: hci0: unsupported parameter 255 [ 962.367607][ T9796] Bluetooth: hci0: unsupported parameter 255 [ 962.494966][ T9484] veth0_macvtap: entered promiscuous mode [ 962.676752][ T35] usb 2-1: USB disconnect, device number 36 [ 962.725207][ T9484] veth1_macvtap: entered promiscuous mode [ 962.863223][ C0] ===================================================== [ 962.870754][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 962.879507][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 962.885919][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 962.893018][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 962.899186][ C0] sysvec_call_function_single+0x7c/0x90 [ 962.905050][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 962.911187][ C0] __msan_metadata_ptr_for_store_8+0x2f/0x40 [ 962.917344][ C0] update_stack_state+0x180/0x1c0 [ 962.922589][ C0] unwind_next_frame+0x116/0x350 [ 962.927680][ C0] arch_stack_walk+0x1b0/0x280 [ 962.932655][ C0] stack_trace_save+0xc2/0x100 [ 962.937727][ C0] kmsan_internal_chain_origin+0x5d/0xd0 [ 962.943515][ C0] __msan_chain_origin+0xc1/0x140 [ 962.948682][ C0] fib_table_dump+0x173a/0x1b30 [ 962.953764][ C0] inet_dump_fib+0x7df/0xb80 [ 962.958482][ C0] rtnl_dumpit+0x141/0x2f0 [ 962.963116][ C0] netlink_dump+0xbaa/0x1800 [ 962.967869][ C0] __netlink_dump_start+0x716/0xd60 [ 962.973193][ C0] rtnetlink_rcv_msg+0x1262/0x14b0 [ 962.978439][ C0] netlink_rcv_skb+0x54d/0x680 [ 962.983381][ C0] rtnetlink_rcv+0x35/0x40 [ 962.987921][ C0] netlink_unicast+0xf04/0x12b0 [ 962.992885][ C0] netlink_sendmsg+0x10b2/0x1250 [ 962.997948][ C0] ____sys_sendmsg+0xf37/0xfd0 [ 963.002888][ C0] ___sys_sendmsg+0x271/0x3b0 [ 963.007688][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 963.012759][ C0] x64_sys_call+0x1e20/0x3ea0 [ 963.017683][ C0] do_syscall_64+0x134/0xf80 [ 963.022453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.028465][ C0] [ 963.030833][ C0] Local variable rf created at: [ 963.035735][ C0] __schedule+0x3b/0x8640 [ 963.040384][ C0] preempt_schedule_irq+0x50/0xa0 [ 963.045521][ C0] [ 963.047930][ C0] CPU: 0 UID: 101 PID: 5424 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 963.057170][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.067306][ C0] ===================================================== [ 963.074301][ C0] Disabling lock debugging due to kernel taint [ 963.080522][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 963.087039][ C0] CPU: 0 UID: 101 PID: 5424 Comm: dhcpcd Tainted: G B syzkaller #0 PREEMPT(full) [ 963.097868][ C0] Tainted: [B]=BAD_PAGE [ 963.102077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 963.112227][ C0] Call Trace: [ 963.115570][ C0] [ 963.118478][ C0] __dump_stack+0x26/0x30 [ 963.122953][ C0] dump_stack_lvl+0x50/0x1c0 [ 963.127674][ C0] ? dump_stack+0x12/0x25 [ 963.132153][ C0] dump_stack+0x1e/0x25 [ 963.136438][ C0] vpanic+0x7b4/0x1430 [ 963.140684][ C0] panic+0x15d/0x160 [ 963.144785][ C0] kmsan_report+0x31a/0x320 [ 963.149455][ C0] ? __msan_warning+0x1b/0x30 [ 963.154289][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 963.160939][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 963.168193][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 963.174402][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 963.180345][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 963.186639][ C0] ? __msan_metadata_ptr_for_store_8+0x2f/0x40 [ 963.193050][ C0] ? update_stack_state+0x180/0x1c0 [ 963.198410][ C0] ? unwind_next_frame+0x116/0x350 [ 963.203687][ C0] ? arch_stack_walk+0x1b0/0x280 [ 963.208781][ C0] ? stack_trace_save+0xc2/0x100 [ 963.213867][ C0] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 963.219826][ C0] ? __msan_chain_origin+0xc1/0x140 [ 963.225180][ C0] ? fib_table_dump+0x173a/0x1b30 [ 963.230359][ C0] ? inet_dump_fib+0x7df/0xb80 [ 963.235246][ C0] ? rtnl_dumpit+0x141/0x2f0 [ 963.240001][ C0] ? netlink_dump+0xbaa/0x1800 [ 963.244891][ C0] ? __netlink_dump_start+0x716/0xd60 [ 963.250397][ C0] ? rtnetlink_rcv_msg+0x1262/0x14b0 [ 963.255832][ C0] ? netlink_rcv_skb+0x54d/0x680 [ 963.260905][ C0] ? rtnetlink_rcv+0x35/0x40 [ 963.265630][ C0] ? netlink_unicast+0xf04/0x12b0 [ 963.270793][ C0] ? netlink_sendmsg+0x10b2/0x1250 [ 963.276038][ C0] ? ____sys_sendmsg+0xf37/0xfd0 [ 963.281110][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 963.286190][ C0] ? __x64_sys_sendmsg+0x211/0x3e0 [ 963.291431][ C0] ? x64_sys_call+0x1e20/0x3ea0 [ 963.296432][ C0] ? do_syscall_64+0x134/0xf80 [ 963.301330][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.307533][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 963.313768][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.319152][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.324425][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.329705][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 963.336200][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.341486][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 963.347594][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.352892][ C0] __msan_warning+0x1b/0x30 [ 963.357543][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 963.363926][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 963.369941][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 963.377031][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 963.383082][ C0] sysvec_call_function_single+0x7c/0x90 [ 963.388858][ C0] [ 963.391855][ C0] [ 963.394861][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 963.400995][ C0] RIP: 0010:__msan_metadata_ptr_for_store_8+0x2f/0x40 [ 963.407936][ C0] Code: 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 08 00 00 00 ba 01 00 00 00 e8 d9 26 00 00 48 89 5d f0 ff 75 f0 9d <48> 83 c4 10 5b 5d e9 06 7c 5f 0e cc 0f 1f 44 00 00 90 90 90 90 90 [ 963.427767][ C0] RSP: 0018:ffff8881251a6e90 EFLAGS: 00000286 [ 963.433972][ C0] RAX: ffff8881249a6fa0 RBX: 0000000000000286 RCX: 00000000005b843e [ 963.442218][ C0] RDX: ffff888124da6fa0 RSI: 0000000000000001 RDI: ffff8881251a6fa0 [ 963.450288][ C0] RBP: ffff8881251a6ea8 R08: ffffea000000000f R09: ffff8881251a8000 [ 963.458367][ C0] R10: ffff8881251a4000 R11: 0000000000000001 R12: ffff8881251a6f48 [ 963.466442][ C0] R13: 0000000000000000 R14: ffffffff8dcfb955 R15: ffff8881251a79a8 [ 963.474604][ C0] ? rtnetlink_rcv+0x35/0x40 [ 963.479376][ C0] update_stack_state+0x180/0x1c0 [ 963.484581][ C0] unwind_next_frame+0x116/0x350 [ 963.489690][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 963.496013][ C0] arch_stack_walk+0x1b0/0x280 [ 963.500943][ C0] ? netlink_rcv_skb+0x54d/0x680 [ 963.506025][ C0] stack_trace_save+0xc2/0x100 [ 963.510947][ C0] kmsan_internal_chain_origin+0x5d/0xd0 [ 963.516746][ C0] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 963.522793][ C0] ? __msan_chain_origin+0xc1/0x140 [ 963.528152][ C0] ? fib_table_dump+0x173a/0x1b30 [ 963.533391][ C0] ? inet_dump_fib+0x7df/0xb80 [ 963.538295][ C0] ? rtnl_dumpit+0x141/0x2f0 [ 963.543034][ C0] ? netlink_dump+0xbaa/0x1800 [ 963.548029][ C0] ? __netlink_dump_start+0x716/0xd60 [ 963.553534][ C0] ? rtnetlink_rcv_msg+0x1262/0x14b0 [ 963.558970][ C0] ? netlink_rcv_skb+0x54d/0x680 [ 963.564047][ C0] ? __msan_memcpy+0x105/0x1c0 [ 963.568963][ C0] ? lwtunnel_fill_encap+0xab/0x630 [ 963.574438][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.579725][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 963.585720][ C0] ? fib_table_dump+0x1041/0x1b30 [ 963.590914][ C0] ? filter_irq_stacks+0x49/0x190 [ 963.596107][ C0] ? stack_depot_save_flags+0x35/0x790 [ 963.601893][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.607202][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 963.613733][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.619033][ C0] __msan_chain_origin+0xc1/0x140 [ 963.624247][ C0] fib_table_dump+0x173a/0x1b30 [ 963.629335][ C0] inet_dump_fib+0x7df/0xb80 [ 963.634175][ C0] rtnl_dumpit+0x141/0x2f0 [ 963.638734][ C0] ? __pfx_inet_dump_fib+0x10/0x10 [ 963.643972][ C0] ? __pfx_rtnl_dumpit+0x10/0x10 [ 963.649052][ C0] netlink_dump+0xbaa/0x1800 [ 963.653837][ C0] __netlink_dump_start+0x716/0xd60 [ 963.659192][ C0] rtnetlink_rcv_msg+0x1262/0x14b0 [ 963.664453][ C0] ? __pfx_rtnl_dumpit+0x10/0x10 [ 963.669531][ C0] ? __pfx_inet_dump_fib+0x10/0x10 [ 963.674836][ C0] ? __pfx_inet_dump_fib+0x10/0x10 [ 963.680135][ C0] netlink_rcv_skb+0x54d/0x680 [ 963.685078][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 963.690705][ C0] rtnetlink_rcv+0x35/0x40 [ 963.695263][ C0] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 963.700510][ C0] netlink_unicast+0xf04/0x12b0 [ 963.705518][ C0] netlink_sendmsg+0x10b2/0x1250 [ 963.710651][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.716083][ C0] ____sys_sendmsg+0xf37/0xfd0 [ 963.721014][ C0] ___sys_sendmsg+0x271/0x3b0 [ 963.725840][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.731177][ C0] ? stack_depot_save_flags+0x35/0x790 [ 963.736803][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.742103][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 963.748093][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 963.753369][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 963.759358][ C0] __x64_sys_sendmsg+0x211/0x3e0 [ 963.764472][ C0] x64_sys_call+0x1e20/0x3ea0 [ 963.769304][ C0] do_syscall_64+0x134/0xf80 [ 963.774031][ C0] ? clear_bhb_loop+0x50/0xa0 [ 963.778845][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.784870][ C0] RIP: 0033:0x7f85e9b64407 [ 963.789423][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 963.809244][ C0] RSP: 002b:00007ffc3e1e8650 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 963.817797][ C0] RAX: ffffffffffffffda RBX: 00007f85e9ada780 RCX: 00007f85e9b64407 [ 963.825881][ C0] RDX: 0000000000000000 RSI: 00007ffc3e1e86d0 RDI: 000000000000000c [ 963.833959][ C0] RBP: 00007ffc3e1ec8f0 R08: 0000000000000000 R09: 0000000000000000 [ 963.842024][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e060d9fc60 [ 963.850092][ C0] R13: 000000000000000c R14: 00007ffc3e1ec8b0 R15: 00007ffc3e1ec8f0 [ 963.858278][ C0] [ 963.861790][ C0] Kernel Offset: disabled [ 963.866164][ C0] Rebooting in 86400 seconds..