last executing test programs: 3m30.034919065s ago: executing program 3 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000002c0)={0xbfb, 0x3, 0x0, 0x0, 0x4, "8de41335ff7b3b0ffd24e78dcb55f5dc9f8e91"}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000095}]}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000240)={0x6, 0x8, 0xe}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x6c}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, r6, &(0x7f00000004c0)) 3m26.335337747s ago: executing program 3 (id=17): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 3m25.190865117s ago: executing program 3 (id=18): mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m24.317810521s ago: executing program 4 (id=20): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000240)={0x200000, 0x200003, 0x9, 0x0, 0x7, 0x3}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m23.914803571s ago: executing program 3 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') lseek(r4, 0xffffff60, 0x1) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0xe}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, 0x0, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x25, 0x301, 0x70bd26, 0x25dfdbf9, {0x15}, [@nested={0x8, 0x131, 0x0, 0x1, [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) write$sequencer(r6, &(0x7f0000000040)=[@generic={0xa}, @t={0x4, 0x0, 0x6, 0x81, @generic=0x5}, @s={0x5, @generic=0x1, 0x1f}], 0xd) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x8, 0x2, "a995"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r7, 0x0, &(0x7f0000002a80)={0x1c, &(0x7f0000002540)={0x60, 0x0, 0xf, "6dfdfeeb6e47d8033db17f0b1d99cb"}, 0x0, 0x0}) 3m23.626949657s ago: executing program 4 (id=22): openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3m20.969748249s ago: executing program 4 (id=25): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) unshare(0x28000600) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 3m19.592277804s ago: executing program 4 (id=27): r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x109540) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xffff, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0xe7d, 0x3ff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 3m19.418129403s ago: executing program 3 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x1, 0x67f3, 0x1, 0x8d1, 0x7, 0x101, 0x100, 0x6e60, 0x7, 0xe, 0xf}) 3m18.429914025s ago: executing program 4 (id=30): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) 3m16.610963343s ago: executing program 3 (id=36): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a00200067000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000046b5af24c87334b800ff010000000000000000000000000000000000000000000000000000000000000000005400000000000000037f00009b21562b39706cad9000000040000000000000000000000000000000000a0010000100"/133], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000f70a0010000104000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="e33f62f009", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3m15.24923741s ago: executing program 4 (id=38): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000019f00)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000400)=""/200, 0xc8}], 0x1, 0x1a, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0xa042, 0x88) 3m1.124165405s ago: executing program 32 (id=36): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff00000000000000004e2200000a00200067000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000046b5af24c87334b800ff010000000000000000000000000000000000000000000000000000000000000000005400000000000000037f00009b21562b39706cad9000000040000000000000000000000000000000000a0010000100"/133], 0xc4}, 0x1, 0x0, 0x0, 0xc000054}, 0x20044040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001d00010000000000000000f70a0010000104000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x40040e5}, 0x20040008) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="e33f62f009", 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2m59.711976444s ago: executing program 33 (id=38): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000019f00)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000400)=""/200, 0xc8}], 0x1, 0x1a, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0xa042, 0x88) 2m40.820298182s ago: executing program 0 (id=78): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) creat(0x0, 0x124) 2m40.098166119s ago: executing program 0 (id=79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 2m39.404190119s ago: executing program 0 (id=80): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) pipe(&(0x7f0000000080)) setfsgid(0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='2', 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) 2m36.104134457s ago: executing program 0 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x7, 0xe5e}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0xfffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 2m35.505224797s ago: executing program 0 (id=83): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2m34.182584512s ago: executing program 0 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m18.591603256s ago: executing program 34 (id=84): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19.827238506s ago: executing program 2 (id=193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xf) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 15.272301684s ago: executing program 7 (id=198): r0 = syz_open_dev$vim2m(0x0, 0x2, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d30000000109021200"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 15.110681142s ago: executing program 1 (id=199): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) capset(&(0x7f0000000140)={0x20071026}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b", 0x21}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 11.478558451s ago: executing program 1 (id=200): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) 10.482333537s ago: executing program 1 (id=201): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x800000000002) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0xa, 0x1, 0x2, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0x1, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@deltclass={0x60, 0x29, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {0xc, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @TCA_RATE={0x6, 0x5, {0x4e, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2c, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) close(r9) syz_open_dev$ttys(0xc, 0x2, 0x0) 10.306669681s ago: executing program 2 (id=202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 9.570616179s ago: executing program 2 (id=203): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.298514798s ago: executing program 2 (id=204): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x17b, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 8.134596418s ago: executing program 7 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 7.622288442s ago: executing program 2 (id=206): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x86) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6.876010399s ago: executing program 2 (id=207): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x90400, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18, 0xfffffffffffffffd) keyctl$revoke(0x3, r3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x148, 0x43, 0xa0, 0x148, 0x98, 0x258, 0x178, 0x178, 0x258, 0x178, 0x49, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010101, 0xff, 0x0, 'netpci0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x1, 0x3}, 0x12a, 0x98, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x5, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xb661, 0x2, 0x5, 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6e) 6.743645541s ago: executing program 7 (id=208): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) capset(&(0x7f0000000140)={0x20071026}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b", 0x21}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 6.29136308s ago: executing program 6 (id=56): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x28000600) 5.985953674s ago: executing program 5 (id=54): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x0) r3 = dup(r1) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001380)='R', 0x1}], 0x1}}], 0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) name_to_handle_at(r2, 0x0, &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{}, 0xd8eb, 0x2}}, 0x0, 0x400) close_range(r0, 0xffffffffffffffff, 0x0) 5.582057383s ago: executing program 1 (id=209): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) 5.576303817s ago: executing program 5 (id=210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xf) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x2}) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r8, r7, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 4.410580051s ago: executing program 1 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r1, &(0x7f0000000340), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 4.374233219s ago: executing program 6 (id=212): unshare(0x20000480) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 3.407456983s ago: executing program 1 (id=213): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.175976651s ago: executing program 6 (id=214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x196, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) 3.048320837s ago: executing program 7 (id=215): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000940), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x86) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) 2.171594637s ago: executing program 7 (id=216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 1.97375446s ago: executing program 6 (id=217): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000078000100000000000000000007"], 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 867.752839ms ago: executing program 6 (id=218): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0}) 658.414622ms ago: executing program 7 (id=219): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x6, 0x2, &(0x7f0000000040)={0x12, "cc9efc7ddb01702fa9a7ff7d040b00000000000700"}}) 0s ago: executing program 6 (id=220): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) write$proc_mixer(r2, 0x0, 0x33) close(r2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x50, 0x2004, @fd, 0x4, 0x3746, 0x2, 0x6, 0x1}) syz_open_dev$audion(&(0x7f0000000100), 0x6, 0x0) r3 = userfaultfd(0x80001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r3, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) syz_io_uring_submit(r4, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 154.737478][ T5754] cgroup: Unknown subsys name 'net' [ 154.864399][ T5754] cgroup: Unknown subsys name 'cpuset' [ 154.878028][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.459139][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.785121][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.797742][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.806886][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.819398][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.830224][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.863115][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.893849][ T5068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.924990][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.945208][ T5068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.956923][ T5068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.981784][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.981999][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.001863][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.011935][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.025303][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.036709][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.054165][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.064045][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.078814][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.091545][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.109892][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.131231][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.140821][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.173939][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.203912][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.541644][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 166.581513][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 166.607407][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 166.719385][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 166.845683][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 166.924860][ T5786] Bluetooth: hci0: command tx timeout [ 167.013093][ T5786] Bluetooth: hci1: command tx timeout [ 167.086195][ T5786] Bluetooth: hci3: command tx timeout [ 167.165041][ T5786] Bluetooth: hci2: command tx timeout [ 167.323098][ T5786] Bluetooth: hci4: command tx timeout [ 167.657969][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.666634][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.675667][ T5780] bridge_slave_0: entered allmulticast mode [ 167.686585][ T5780] bridge_slave_0: entered promiscuous mode [ 167.751895][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.761474][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.769312][ T5780] bridge_slave_1: entered allmulticast mode [ 167.777915][ T5780] bridge_slave_1: entered promiscuous mode [ 167.810784][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.818843][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.826812][ T5772] bridge_slave_0: entered allmulticast mode [ 167.835083][ T5772] bridge_slave_0: entered promiscuous mode [ 167.869441][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.876960][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.884647][ T5776] bridge_slave_0: entered allmulticast mode [ 167.892728][ T5776] bridge_slave_0: entered promiscuous mode [ 167.955732][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.963761][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.971295][ T5772] bridge_slave_1: entered allmulticast mode [ 167.980393][ T5772] bridge_slave_1: entered promiscuous mode [ 168.013365][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.020998][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.029390][ T5776] bridge_slave_1: entered allmulticast mode [ 168.037999][ T5776] bridge_slave_1: entered promiscuous mode [ 168.070419][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.078013][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.085995][ T5781] bridge_slave_0: entered allmulticast mode [ 168.094548][ T5781] bridge_slave_0: entered promiscuous mode [ 168.129344][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.137337][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.145066][ T5787] bridge_slave_0: entered allmulticast mode [ 168.153477][ T5787] bridge_slave_0: entered promiscuous mode [ 168.196563][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.209234][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.216959][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.225092][ T5781] bridge_slave_1: entered allmulticast mode [ 168.234106][ T5781] bridge_slave_1: entered promiscuous mode [ 168.268410][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.276151][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.285145][ T5787] bridge_slave_1: entered allmulticast mode [ 168.293844][ T5787] bridge_slave_1: entered promiscuous mode [ 168.336920][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.379506][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.423910][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.489560][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.616367][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.660313][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.703875][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.745917][ T5780] team0: Port device team_slave_0 added [ 168.759173][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.776742][ T5772] team0: Port device team_slave_0 added [ 168.789884][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.830157][ T5780] team0: Port device team_slave_1 added [ 168.866860][ T5772] team0: Port device team_slave_1 added [ 168.904899][ T5776] team0: Port device team_slave_0 added [ 169.003056][ T5786] Bluetooth: hci0: command tx timeout [ 169.010538][ T5776] team0: Port device team_slave_1 added [ 169.067197][ T5781] team0: Port device team_slave_0 added [ 169.083123][ T5786] Bluetooth: hci1: command tx timeout [ 169.106051][ T5787] team0: Port device team_slave_0 added [ 169.138015][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.145539][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.163211][ T5786] Bluetooth: hci3: command tx timeout [ 169.174351][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.197010][ T5781] team0: Port device team_slave_1 added [ 169.205731][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.213527][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.242054][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.253161][ T5786] Bluetooth: hci2: command tx timeout [ 169.259949][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.267520][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.294531][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.314686][ T5787] team0: Port device team_slave_1 added [ 169.322566][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.329980][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.356152][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.370215][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.377961][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.405290][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.413229][ T5786] Bluetooth: hci4: command tx timeout [ 169.519115][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.526358][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.553128][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.609746][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.618003][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.644940][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.685107][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.692256][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.718954][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.737075][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.744793][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.772217][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.808648][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.816053][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.842943][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.015968][ T5780] hsr_slave_0: entered promiscuous mode [ 170.025087][ T5780] hsr_slave_1: entered promiscuous mode [ 170.046629][ T5776] hsr_slave_0: entered promiscuous mode [ 170.055493][ T5776] hsr_slave_1: entered promiscuous mode [ 170.063209][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 170.069084][ T5776] Cannot create hsr debugfs directory [ 170.112435][ T5772] hsr_slave_0: entered promiscuous mode [ 170.120961][ T5772] hsr_slave_1: entered promiscuous mode [ 170.129136][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 170.135190][ T5772] Cannot create hsr debugfs directory [ 170.214212][ T5787] hsr_slave_0: entered promiscuous mode [ 170.224272][ T5787] hsr_slave_1: entered promiscuous mode [ 170.232721][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 170.238966][ T5787] Cannot create hsr debugfs directory [ 170.483234][ T5781] hsr_slave_0: entered promiscuous mode [ 170.491903][ T5781] hsr_slave_1: entered promiscuous mode [ 170.500451][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 170.506605][ T5781] Cannot create hsr debugfs directory [ 171.083522][ T5786] Bluetooth: hci0: command tx timeout [ 171.163087][ T5786] Bluetooth: hci1: command tx timeout [ 171.244277][ T5786] Bluetooth: hci3: command tx timeout [ 171.333100][ T5786] Bluetooth: hci2: command tx timeout [ 171.485519][ T5786] Bluetooth: hci4: command tx timeout [ 171.587331][ T5776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.629008][ T5776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.667044][ T5776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.686211][ T5776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.778390][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.869030][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.905438][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.955248][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.210942][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.232242][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.258025][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.276186][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.564909][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.589440][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.625290][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.680353][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.953993][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.977518][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.002728][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.028860][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.087155][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.164281][ T5786] Bluetooth: hci0: command tx timeout [ 173.188954][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.225824][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.246921][ T5786] Bluetooth: hci1: command tx timeout [ 173.323823][ T5786] Bluetooth: hci3: command tx timeout [ 173.397894][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.405483][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.413466][ T5786] Bluetooth: hci2: command tx timeout [ 173.442287][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.489788][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.555122][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.562556][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.572460][ T5786] Bluetooth: hci4: command tx timeout [ 173.588607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.596215][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.698231][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.705986][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.730164][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.852703][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.860427][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.891366][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.899113][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.030277][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.194391][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.297424][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.305188][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.377087][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.384650][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.615365][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.918461][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.061901][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.069508][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.229387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.237155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.301625][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.740184][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.186161][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.270722][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.484179][ T5772] veth0_vlan: entered promiscuous mode [ 176.743298][ T5772] veth1_vlan: entered promiscuous mode [ 176.758883][ T5787] veth0_vlan: entered promiscuous mode [ 176.850190][ T5787] veth1_vlan: entered promiscuous mode [ 177.017484][ T5781] veth0_vlan: entered promiscuous mode [ 177.109872][ T5776] veth0_vlan: entered promiscuous mode [ 177.136101][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.149071][ T5781] veth1_vlan: entered promiscuous mode [ 177.206774][ T5772] veth0_macvtap: entered promiscuous mode [ 177.268561][ T5776] veth1_vlan: entered promiscuous mode [ 177.288046][ T5772] veth1_macvtap: entered promiscuous mode [ 177.349251][ T5787] veth0_macvtap: entered promiscuous mode [ 177.416752][ T5787] veth1_macvtap: entered promiscuous mode [ 177.548698][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.578518][ T5781] veth0_macvtap: entered promiscuous mode [ 177.647369][ T5776] veth0_macvtap: entered promiscuous mode [ 177.669223][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.685071][ T5781] veth1_macvtap: entered promiscuous mode [ 177.713877][ T5776] veth1_macvtap: entered promiscuous mode [ 177.779348][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.788815][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.801548][ T5780] veth0_vlan: entered promiscuous mode [ 177.816576][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.855414][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.865197][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.956986][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.991447][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.034843][ T5780] veth1_vlan: entered promiscuous mode [ 178.059774][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.087405][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.145902][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.207008][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.218866][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.307622][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.321577][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.394414][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.415844][ T3413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.444234][ T3413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.483432][ T3413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.573346][ T3413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.582511][ T3413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.633599][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.674313][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.830329][ T5780] veth0_macvtap: entered promiscuous mode [ 178.952441][ T5780] veth1_macvtap: entered promiscuous mode [ 179.181224][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.278626][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.377305][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.421500][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.503187][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.547095][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.333448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.341550][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.613335][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.621853][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.981832][ T5772] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 184.433422][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.452174][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.552448][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.573405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.671736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.706037][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.737818][ T5960] process 'syz.0.1' launched '/dev/fd/6' with NULL argv: empty string added [ 184.879759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 184.921749][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.004223][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.307804][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.346370][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.877802][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.924276][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.204775][ T3413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.402328][ T3413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.452222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 186.698985][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.740066][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.145003][ T5980] fuse: Unknown parameter '0xffffffffffffffff' [ 187.543533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 187.553883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 187.774923][ T5981] Zero length message leads to an empty skb [ 188.279533][ T5989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'. [ 188.412521][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 189.087041][ T5991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.133117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 189.406020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 189.774076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 189.783763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 189.796229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.064241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.357367][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 192.513407][ T5836] usb 4-1: device descriptor read/64, error -71 [ 192.842610][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 193.033204][ T5836] usb 4-1: device descriptor read/64, error -71 [ 193.200948][ T5836] usb usb4-port1: attempt power cycle [ 193.593540][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 193.677089][ T5836] usb 4-1: device descriptor read/8, error -71 [ 193.965643][ T5836] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.014826][ T5836] usb 4-1: device descriptor read/8, error -71 [ 194.083085][ T5832] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 194.154747][ T5836] usb usb4-port1: unable to enumerate USB device [ 194.296727][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.359066][ T5832] usb 1-1: config 0 has no interfaces? [ 194.407442][ T5832] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 194.439278][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.509322][ T5832] usb 1-1: config 0 descriptor?? [ 195.742291][ T6027] mmap: syz.3.17 (6027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 197.638650][ T6035] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 198.543624][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.623145][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.818798][ T5832] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 198.843106][ T5836] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 198.851315][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.875908][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.933183][ T5832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.007379][ T5832] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.056110][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.117670][ T5836] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.139120][ T5832] usb 5-1: config 0 descriptor?? [ 199.164885][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.275610][ T5836] usb 4-1: config 0 descriptor?? [ 199.416851][ T5836] cp210x 4-1:0.0: cp210x converter detected [ 199.640809][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.660614][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.677631][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.707506][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.723721][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.743782][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.823261][ T5836] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.837272][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.862137][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.870173][ T29] audit: type=1326 audit(1773170399.563:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32039c799 code=0x7ffc0000 [ 199.936482][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.976874][ T5832] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 199.999149][ T29] audit: type=1326 audit(1773170399.623:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd32039c799 code=0x7ffc0000 [ 200.059907][ T5832] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 200.211101][ T5836] usb 4-1: cp210x converter now attached to ttyUSB0 [ 200.220039][ T5832] usb 5-1: USB disconnect, device number 2 [ 201.233680][ T6051] syz.4.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.543974][ T6047] fido_id[6047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 202.105733][ T5832] usb 4-1: USB disconnect, device number 6 [ 202.199200][ T5832] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 202.374025][ T5832] cp210x 4-1:0.0: device disconnected [ 202.673206][ T6058] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 202.823315][ T5832] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.039252][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.104409][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.155402][ T5832] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.183591][ T5832] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.243411][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.348443][ T5832] usb 4-1: config 0 descriptor?? [ 203.699163][ T5827] usb 1-1: USB disconnect, device number 2 [ 204.116283][ T5832] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 204.167218][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.167463][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.414157][ T5832] usb 4-1: USB disconnect, device number 7 [ 205.248078][ T6078] fido_id[6078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 205.428608][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 209.683136][ T5827] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 209.956482][ T5827] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.997774][ T5827] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 210.048782][ T6111] overlayfs: failed lookup in lower (newroot/10, name='file0', err=-40): overlapping layers [ 210.059579][ T5827] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 210.082200][ T5827] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 210.143199][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.151617][ T5827] usb 3-1: Product: syz [ 210.190297][ T5827] usb 3-1: Manufacturer: syz [ 210.223449][ T5827] usb 3-1: SerialNumber: syz [ 211.920375][ T29] audit: type=1326 audit(1773170411.363:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6113 comm="syz.0.46" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef86f9c799 code=0x0 [ 215.799267][ T5836] usb 3-1: USB disconnect, device number 2 [ 218.613263][ T5836] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 218.807480][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 218.912182][ T5836] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 218.943022][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.966104][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.036566][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.093070][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.151894][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.203019][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.483864][ T5836] usb 1-1: usb_control_msg returned -32 [ 219.553166][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 219.663767][ T5836] usb 1-1: USB disconnect, device number 3 [ 222.298067][ T5774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.317907][ T5774] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.334921][ T5774] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.369120][ T5774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.384353][ T5774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.535504][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.546453][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.565049][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.597143][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.613360][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 224.033989][ T6147] chnl_net:caif_netlink_parms(): no params data found [ 224.523096][ T5786] Bluetooth: hci5: command tx timeout [ 225.209206][ T6163] warning: `syz.2.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 226.666771][ T5786] Bluetooth: hci6: command tx timeout [ 226.666853][ T5774] Bluetooth: hci5: command tx timeout [ 227.552457][ T87] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.651300][ T6176] fuse: Unknown parameter 'group_i00000000000000000000' [ 227.735296][ T87] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.369850][ T87] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.683911][ T5786] Bluetooth: hci6: command tx timeout [ 228.690208][ T5774] Bluetooth: hci5: command tx timeout [ 229.258752][ T87] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.512092][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.543553][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.551307][ T6147] bridge_slave_0: entered allmulticast mode [ 229.655628][ T6147] bridge_slave_0: entered promiscuous mode [ 229.749549][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.795588][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.816417][ T6147] bridge_slave_1: entered allmulticast mode [ 229.859306][ T6147] bridge_slave_1: entered promiscuous mode [ 230.230816][ T6147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.317631][ T6147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.667449][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 230.731702][ T6147] team0: Port device team_slave_0 added [ 230.771796][ T5786] Bluetooth: hci6: command tx timeout [ 230.778244][ T5774] Bluetooth: hci5: command tx timeout [ 230.788681][ T6147] team0: Port device team_slave_1 added [ 231.452203][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.493009][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.586813][ T6147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.645714][ T87] bridge_slave_1: left allmulticast mode [ 231.651575][ T87] bridge_slave_1: left promiscuous mode [ 231.695988][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.732877][ T87] bridge_slave_0: left allmulticast mode [ 231.738716][ T87] bridge_slave_0: left promiscuous mode [ 231.756260][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.843185][ T5774] Bluetooth: hci6: command tx timeout [ 234.277674][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.757706][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.778691][ T87] bond0 (unregistering): Released all slaves [ 234.796660][ T6147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.805367][ T6147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.826318][ T6147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.243822][ T6147] hsr_slave_0: entered promiscuous mode [ 237.274869][ T6215] fuse: Unknown parameter 'group_i00000000000000000000' [ 237.277982][ T6147] hsr_slave_1: entered promiscuous mode [ 237.301485][ T6147] debugfs: 'hsr0' already exists in 'hsr' [ 237.328375][ T6147] Cannot create hsr debugfs directory [ 237.995785][ T87] hsr_slave_0: left promiscuous mode [ 238.017707][ T87] hsr_slave_1: left promiscuous mode [ 238.081140][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.103450][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.122486][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.138147][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.233336][ T87] veth1_macvtap: left promiscuous mode [ 238.238966][ T87] veth0_macvtap: left promiscuous mode [ 238.343207][ T87] veth1_vlan: left promiscuous mode [ 238.348762][ T87] veth0_vlan: left promiscuous mode [ 243.974906][ T87] team0 (unregistering): Port device team_slave_1 removed [ 244.392324][ T87] team0 (unregistering): Port device team_slave_0 removed [ 245.222098][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.253311][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.264751][ T6152] bridge_slave_0: entered allmulticast mode [ 245.555238][ T6152] bridge_slave_0: entered promiscuous mode [ 245.598008][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.683372][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.712066][ T6152] bridge_slave_1: entered allmulticast mode [ 245.728095][ T6152] bridge_slave_1: entered promiscuous mode [ 245.816892][ T6245] fuse: Unknown parameter 'group_id00000000000000000000' [ 246.451814][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.501121][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.528710][ T6152] team0: Port device team_slave_0 added [ 247.838720][ T87] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.942028][ T6152] team0: Port device team_slave_1 added [ 248.145712][ T87] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.781633][ T87] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.938211][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.984471][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.094615][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.206740][ T87] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.009799][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.017609][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.936927][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.998202][ T6152] hsr_slave_0: entered promiscuous mode [ 256.044688][ T6152] hsr_slave_1: entered promiscuous mode [ 256.111644][ T6152] debugfs: 'hsr0' already exists in 'hsr' [ 256.138567][ T6293] fuse: Unknown parameter 'group_id00000000000000000000' [ 256.151715][ T6152] Cannot create hsr debugfs directory [ 256.484407][ T6147] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.569199][ T6147] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.803037][ T6147] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.946977][ T6147] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.119415][ T87] bridge_slave_1: left allmulticast mode [ 257.148724][ T87] bridge_slave_1: left promiscuous mode [ 257.170410][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.231696][ T87] bridge_slave_0: left allmulticast mode [ 257.258105][ T87] bridge_slave_0: left promiscuous mode [ 257.301632][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.798308][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.841912][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.883400][ T87] bond0 (unregistering): Released all slaves [ 259.895044][ T87] hsr_slave_0: left promiscuous mode [ 259.933016][ T87] hsr_slave_1: left promiscuous mode [ 259.998380][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.037360][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.066067][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.093438][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.174073][ T87] veth1_macvtap: left promiscuous mode [ 260.184100][ T87] veth0_macvtap: left promiscuous mode [ 260.190043][ T87] veth1_vlan: left promiscuous mode [ 260.204276][ T87] veth0_vlan: left promiscuous mode [ 262.143773][ T87] team0 (unregistering): Port device team_slave_1 removed [ 262.244839][ T87] team0 (unregistering): Port device team_slave_0 removed [ 264.014535][ T6152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.237096][ T6152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.326918][ T6152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 265.583872][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.590686][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.464790][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 266.507863][ T6152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 266.513481][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 266.524996][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 266.546963][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 266.558144][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.070649][ T6147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.606133][ T5786] Bluetooth: hci1: command tx timeout [ 270.138782][ T6147] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.418188][ T3413] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.425640][ T3413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.539331][ T3413] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.546798][ T3413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.627946][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 270.693276][ T5786] Bluetooth: hci1: command tx timeout [ 270.884521][ T6345] vlan2: entered allmulticast mode [ 270.890097][ T6345] bridge1: entered allmulticast mode [ 271.086068][ T6344] bridge1: port 1(bond0) entered blocking state [ 271.128932][ T6344] bridge1: port 1(bond0) entered disabled state [ 271.153475][ T6344] bond0: entered allmulticast mode [ 271.179817][ T6344] bond_slave_0: entered allmulticast mode [ 271.210515][ T6344] bond_slave_1: entered allmulticast mode [ 271.247062][ T6344] bond0: entered promiscuous mode [ 271.252620][ T6344] bond_slave_0: entered promiscuous mode [ 271.287800][ T6344] bond_slave_1: entered promiscuous mode [ 271.309391][ T6344] bridge1: port 1(bond0) entered blocking state [ 271.316242][ T6344] bridge1: port 1(bond0) entered forwarding state [ 272.090810][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.471897][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 272.764750][ T5786] Bluetooth: hci1: command tx timeout [ 272.898469][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.140996][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.148540][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.414962][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.423152][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.657406][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.703707][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.756371][ T6325] bridge_slave_0: entered allmulticast mode [ 274.776265][ T6325] bridge_slave_0: entered promiscuous mode [ 274.843212][ T5786] Bluetooth: hci1: command tx timeout [ 274.906271][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.943656][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.957271][ T6325] bridge_slave_1: entered allmulticast mode [ 274.977029][ T6325] bridge_slave_1: entered promiscuous mode [ 275.392437][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.618008][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.551980][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.615434][ T6325] team0: Port device team_slave_0 added [ 276.669263][ T6325] team0: Port device team_slave_1 added [ 277.156102][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.207287][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.355808][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.458435][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.545898][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.668057][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.433431][ T6325] hsr_slave_0: entered promiscuous mode [ 278.455744][ T6325] hsr_slave_1: entered promiscuous mode [ 278.495370][ T6325] debugfs: 'hsr0' already exists in 'hsr' [ 278.501331][ T6325] Cannot create hsr debugfs directory [ 278.991611][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.690110][ T6147] veth0_vlan: entered promiscuous mode [ 281.708530][ T6208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.060709][ T6208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.649418][ T6208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.847544][ T6325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.059218][ T6325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.330017][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.349122][ T6208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.360592][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.384273][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.417363][ T6325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.429383][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.453815][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.554742][ T6325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.906603][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 284.988416][ T6434] netlink: 'syz.1.108': attribute type 9 has an invalid length. [ 285.047228][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 285.066479][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.124382][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.141034][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.157655][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.184580][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.524481][ T49] Bluetooth: hci0: command tx timeout [ 286.588048][ T6208] bridge_slave_1: left allmulticast mode [ 286.626363][ T6208] bridge_slave_1: left promiscuous mode [ 286.633079][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.717635][ T6208] bridge_slave_0: left allmulticast mode [ 286.760515][ T6208] bridge_slave_0: left promiscuous mode [ 286.804496][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.324244][ T49] Bluetooth: hci2: command tx timeout [ 288.030085][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.123514][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 288.123567][ T5068] Bluetooth: hci4: command 0x0406 tx timeout [ 288.177576][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.528367][ T6208] bond0 (unregistering): Released all slaves [ 288.606562][ T5774] Bluetooth: hci0: command tx timeout [ 289.403641][ T5774] Bluetooth: hci2: command tx timeout [ 289.802983][ T6208] hsr_slave_0: left promiscuous mode [ 289.810493][ T6208] hsr_slave_1: left promiscuous mode [ 289.820595][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.841095][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.855518][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.873997][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.927730][ T6208] veth1_macvtap: left promiscuous mode [ 289.956989][ T6208] veth0_macvtap: left promiscuous mode [ 289.965491][ T6208] veth1_vlan: left promiscuous mode [ 289.983215][ T6208] veth0_vlan: left promiscuous mode [ 290.685421][ T5774] Bluetooth: hci0: command tx timeout [ 291.483587][ T5774] Bluetooth: hci2: command tx timeout [ 291.518461][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 291.582224][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 292.763224][ T5774] Bluetooth: hci0: command tx timeout [ 292.956180][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 293.188423][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.569383][ T5774] Bluetooth: hci2: command tx timeout [ 293.620372][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.720572][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 294.213531][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.221251][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.574818][ T6475] syz.1.113 uses obsolete (PF_INET,SOCK_PACKET) [ 295.126723][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.134126][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.829672][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.850482][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.894370][ T6423] bridge_slave_0: entered allmulticast mode [ 295.933316][ T6423] bridge_slave_0: entered promiscuous mode [ 296.191272][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.210812][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.251673][ T6423] bridge_slave_1: entered allmulticast mode [ 296.277989][ T6423] bridge_slave_1: entered promiscuous mode [ 296.786234][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.825322][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.874443][ T6435] bridge_slave_0: entered allmulticast mode [ 296.932021][ T6435] bridge_slave_0: entered promiscuous mode [ 297.149352][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.245097][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.252657][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.301142][ T6435] bridge_slave_1: entered allmulticast mode [ 297.343372][ T6435] bridge_slave_1: entered promiscuous mode [ 297.709866][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.917055][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.032588][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.352195][ T6435] team0: Port device team_slave_0 added [ 298.392193][ T6423] team0: Port device team_slave_0 added [ 298.524930][ T6435] team0: Port device team_slave_1 added [ 298.575684][ T6423] team0: Port device team_slave_1 added [ 299.164698][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.171851][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.213567][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.307117][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.348532][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.437803][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.462558][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.513355][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.553814][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.616875][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.624756][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.669561][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.082459][ T6435] hsr_slave_0: entered promiscuous mode [ 305.171144][ T6435] hsr_slave_1: entered promiscuous mode [ 305.207355][ T6435] debugfs: 'hsr0' already exists in 'hsr' [ 305.224462][ T6435] Cannot create hsr debugfs directory [ 305.755870][ T6423] hsr_slave_0: entered promiscuous mode [ 305.767688][ T6423] hsr_slave_1: entered promiscuous mode [ 305.833436][ T6423] debugfs: 'hsr0' already exists in 'hsr' [ 305.858834][ T6423] Cannot create hsr debugfs directory [ 306.009801][ T6208] bridge_slave_1: left allmulticast mode [ 306.053038][ T6208] bridge_slave_1: left promiscuous mode [ 306.059621][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.166416][ T6208] bridge_slave_0: left allmulticast mode [ 306.172577][ T6208] bridge_slave_0: left promiscuous mode [ 306.198601][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.231186][ T6208] bridge_slave_1: left allmulticast mode [ 306.237625][ T6208] bridge_slave_1: left promiscuous mode [ 306.244349][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.258638][ T6208] bridge_slave_0: left allmulticast mode [ 306.271940][ T6208] bridge_slave_0: left promiscuous mode [ 306.293889][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.580266][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.611837][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.677618][ T6208] bond0 (unregistering): Released all slaves [ 308.207917][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.335605][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.354734][ T6208] bond0 (unregistering): Released all slaves [ 309.516434][ T6208] hsr_slave_0: left promiscuous mode [ 309.556534][ T6208] hsr_slave_1: left promiscuous mode [ 309.627474][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.649657][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.722635][ T6208] hsr_slave_0: left promiscuous mode [ 309.735357][ T6208] hsr_slave_1: left promiscuous mode [ 309.743641][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.773408][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.838072][ T6208] veth0_vlan: left promiscuous mode [ 311.492725][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 311.568244][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 312.662247][ T6208] team0 (unregistering): Port device team_slave_1 removed [ 312.732494][ T6208] team0 (unregistering): Port device team_slave_0 removed [ 314.154628][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.094652][ T6435] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 317.230886][ T6435] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 317.342230][ T6435] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 317.559855][ T6435] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.184724][ T6423] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.423328][ T6423] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.526500][ T6423] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.781432][ T6423] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.939969][ T6325] veth0_vlan: entered promiscuous mode [ 319.258202][ T6325] veth1_vlan: entered promiscuous mode [ 321.699862][ T6325] veth0_macvtap: entered promiscuous mode [ 322.086904][ T6325] veth1_macvtap: entered promiscuous mode [ 322.200678][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.925166][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.065143][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.111486][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.368386][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.376003][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.475273][ T6208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.530560][ T3413] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.671466][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.679654][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.797095][ T3413] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.867283][ T3413] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.149798][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.731753][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.986230][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.993663][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.307444][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.314961][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.617418][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.627292][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.645233][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.658871][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.670241][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.075580][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.082178][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.733769][ T5774] Bluetooth: hci5: command tx timeout [ 328.368201][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.819165][ T6591] chnl_net:caif_netlink_parms(): no params data found [ 329.314979][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.764405][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.803255][ T5774] Bluetooth: hci5: command tx timeout [ 330.459782][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.559169][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.930818][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.790949][ T6591] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.810310][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.853638][ T6591] bridge_slave_0: entered allmulticast mode [ 331.885665][ T5774] Bluetooth: hci5: command tx timeout [ 331.898091][ T6591] bridge_slave_0: entered promiscuous mode [ 331.914148][ T6591] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.921658][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.930992][ T6591] bridge_slave_1: entered allmulticast mode [ 331.941417][ T6591] bridge_slave_1: entered promiscuous mode [ 332.266800][ T57] bridge_slave_1: left allmulticast mode [ 332.272644][ T57] bridge_slave_1: left promiscuous mode [ 332.289522][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.345369][ T57] bridge_slave_0: left allmulticast mode [ 332.351218][ T57] bridge_slave_0: left promiscuous mode [ 332.397921][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.299608][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.343940][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.367217][ T57] bond0 (unregistering): Released all slaves [ 333.469376][ T6591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.566815][ T6591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.802251][ T57] hsr_slave_0: left promiscuous mode [ 333.879281][ T57] hsr_slave_1: left promiscuous mode [ 333.913790][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.921432][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.976590][ T5774] Bluetooth: hci5: command tx timeout [ 334.578607][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.588766][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.015787][ T57] veth1_macvtap: left promiscuous mode [ 335.021679][ T57] veth0_macvtap: left promiscuous mode [ 335.052283][ T57] veth1_vlan: left promiscuous mode [ 335.058657][ T57] veth0_vlan: left promiscuous mode [ 336.259843][ T57] team0 (unregistering): Port device team_slave_1 removed [ 336.350619][ T57] team0 (unregistering): Port device team_slave_0 removed [ 337.072677][ T6591] team0: Port device team_slave_0 added [ 337.188178][ T6591] team0: Port device team_slave_1 added [ 337.482407][ T6435] veth0_vlan: entered promiscuous mode [ 337.531687][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.571958][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.707451][ T6591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.834538][ T6591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.875552][ T6591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.989841][ T6591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.252569][ T6435] veth1_vlan: entered promiscuous mode [ 338.557161][ T6591] hsr_slave_0: entered promiscuous mode [ 338.576896][ T6591] hsr_slave_1: entered promiscuous mode [ 338.643557][ T6591] debugfs: 'hsr0' already exists in 'hsr' [ 338.684213][ T6591] Cannot create hsr debugfs directory [ 339.443940][ T6423] veth0_vlan: entered promiscuous mode [ 339.915161][ T6423] veth1_vlan: entered promiscuous mode [ 340.296659][ T6435] veth0_macvtap: entered promiscuous mode [ 340.527794][ T6435] veth1_macvtap: entered promiscuous mode [ 341.296101][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.494574][ T6423] veth0_macvtap: entered promiscuous mode [ 341.546788][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.762515][ T6423] veth1_macvtap: entered promiscuous mode [ 341.790245][ T153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.829454][ T153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.946040][ T153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.033161][ T153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.562120][ T6591] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.754854][ T6591] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.904866][ T6591] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 343.064651][ T6591] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.041037][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.067106][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.083925][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.107589][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.151128][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.421089][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.454066][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.477947][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.498475][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.509873][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.848879][ T6591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.286604][ T5774] Bluetooth: hci1: command tx timeout [ 347.181102][ T6591] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.663414][ T5774] Bluetooth: hci6: command tx timeout [ 348.365210][ T5774] Bluetooth: hci1: command tx timeout [ 349.065763][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.073222][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.151268][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 349.725209][ T5774] Bluetooth: hci6: command tx timeout [ 349.752206][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.759747][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.443532][ T5774] Bluetooth: hci1: command tx timeout [ 350.694751][ T6720] chnl_net:caif_netlink_parms(): no params data found [ 351.804130][ T5774] Bluetooth: hci6: command tx timeout [ 352.023824][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.047516][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.073526][ T6714] bridge_slave_0: entered allmulticast mode [ 352.113513][ T6714] bridge_slave_0: entered promiscuous mode [ 352.420581][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.463584][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.471432][ T6714] bridge_slave_1: entered allmulticast mode [ 352.527895][ T5774] Bluetooth: hci1: command tx timeout [ 352.593399][ T6714] bridge_slave_1: entered promiscuous mode [ 353.250955][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.396654][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.643468][ T87] bridge_slave_1: left allmulticast mode [ 353.649315][ T87] bridge_slave_1: left promiscuous mode [ 353.690939][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.750822][ T87] bridge_slave_0: left allmulticast mode [ 353.823358][ T87] bridge_slave_0: left promiscuous mode [ 353.829896][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.888758][ T5774] Bluetooth: hci6: command tx timeout [ 354.855613][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.913547][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.958936][ T87] bond0 (unregistering): Released all slaves [ 355.311468][ T6714] team0: Port device team_slave_0 added [ 355.362137][ T87] hsr_slave_0: left promiscuous mode [ 355.411707][ T87] hsr_slave_1: left promiscuous mode [ 355.449856][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.482744][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.589002][ T87] veth1_macvtap: left promiscuous mode [ 355.603427][ T87] veth0_macvtap: left promiscuous mode [ 355.609297][ T87] veth1_vlan: left promiscuous mode [ 355.644930][ T87] veth0_vlan: left promiscuous mode [ 357.006504][ T87] team0 (unregistering): Port device team_slave_1 removed [ 357.099423][ T87] team0 (unregistering): Port device team_slave_0 removed [ 357.873046][ T6720] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.915918][ T6720] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.943556][ T6720] bridge_slave_0: entered allmulticast mode [ 357.983338][ T6720] bridge_slave_0: entered promiscuous mode [ 358.053987][ T6714] team0: Port device team_slave_1 added [ 358.073350][ T6720] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.084441][ T6720] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.092673][ T6720] bridge_slave_1: entered allmulticast mode [ 358.104097][ T6720] bridge_slave_1: entered promiscuous mode [ 358.465131][ T6720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.531600][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.541135][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.582641][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.602476][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.702342][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.751913][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.075858][ T6720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.440839][ T6591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.502011][ T6720] team0: Port device team_slave_0 added [ 359.600611][ T6720] team0: Port device team_slave_1 added [ 360.149445][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.165558][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.231839][ T6720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.277337][ T6720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.307750][ T6720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.413545][ T6720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.548163][ T6714] hsr_slave_0: entered promiscuous mode [ 360.601378][ T6714] hsr_slave_1: entered promiscuous mode [ 360.630103][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 360.655611][ T6714] Cannot create hsr debugfs directory [ 360.752462][ T153] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.926879][ T153] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.339414][ T153] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.753387][ T5930] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 361.795909][ T6720] hsr_slave_0: entered promiscuous mode [ 361.829902][ T6720] hsr_slave_1: entered promiscuous mode [ 361.855028][ T6720] debugfs: 'hsr0' already exists in 'hsr' [ 361.863594][ T6720] Cannot create hsr debugfs directory [ 361.905220][ T153] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.920969][ T5930] usb 3-1: device descriptor read/64, error -71 [ 362.173219][ T5930] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 362.343348][ T5930] usb 3-1: device descriptor read/64, error -71 [ 362.454200][ T5930] usb usb3-port1: attempt power cycle [ 362.837389][ T5930] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 362.895401][ T5930] usb 3-1: device descriptor read/8, error -71 [ 363.143136][ T5930] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 363.208721][ T5930] usb 3-1: device descriptor read/8, error -71 [ 363.343829][ T5930] usb usb3-port1: unable to enumerate USB device [ 363.410988][ T153] bridge_slave_1: left allmulticast mode [ 363.443040][ T153] bridge_slave_1: left promiscuous mode [ 363.454390][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.511925][ T153] bridge_slave_0: left allmulticast mode [ 363.538525][ T153] bridge_slave_0: left promiscuous mode [ 363.563754][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.223077][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.240049][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.261459][ T153] bond0 (unregistering): Released all slaves [ 364.456843][ T153] hsr_slave_0: left promiscuous mode [ 364.471487][ T153] hsr_slave_1: left promiscuous mode [ 364.485307][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.495955][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.510664][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.518817][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.553412][ T153] veth1_macvtap: left promiscuous mode [ 364.559394][ T153] veth0_macvtap: left promiscuous mode [ 364.571867][ T153] veth1_vlan: left promiscuous mode [ 364.577959][ T153] veth0_vlan: left promiscuous mode [ 365.986990][ T153] team0 (unregistering): Port device team_slave_1 removed [ 366.037347][ T153] team0 (unregistering): Port device team_slave_0 removed [ 366.757310][ T5832] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 366.901837][ T6591] veth0_vlan: entered promiscuous mode [ 366.933172][ T5832] usb 3-1: device descriptor read/64, error -71 [ 367.068373][ T6591] veth1_vlan: entered promiscuous mode [ 367.203803][ T5832] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 367.359025][ T6591] veth0_macvtap: entered promiscuous mode [ 367.368110][ T5832] usb 3-1: device descriptor read/64, error -71 [ 367.444399][ T6591] veth1_macvtap: entered promiscuous mode [ 367.495954][ T5832] usb usb3-port1: attempt power cycle [ 367.600463][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.672616][ T6591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.740027][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.785885][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.817640][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.860100][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.871952][ T5832] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 367.943135][ T5832] usb 3-1: device descriptor read/8, error -71 [ 367.960839][ T6720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 368.026095][ T6720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 368.207136][ T6720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 368.214726][ T5832] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 368.246241][ T5832] usb 3-1: device descriptor read/8, error -71 [ 368.261688][ T6720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 368.364468][ T5832] usb usb3-port1: unable to enumerate USB device [ 368.615605][ T6876] syzkaller0: entered promiscuous mode [ 368.621469][ T6876] syzkaller0: entered allmulticast mode [ 368.663345][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 368.718214][ T6714] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.748913][ T6714] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.796501][ T6714] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.846181][ T6714] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.913702][ T5930] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 368.940560][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.951453][ T5930] usb 2-1: Product: syz [ 368.984440][ T5930] usb 2-1: Manufacturer: syz [ 368.989342][ T5930] usb 2-1: SerialNumber: syz [ 369.267065][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 369.310116][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 369.363061][ T5930] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 369.398915][ T5930] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 369.445196][ T5930] usb 2-1: USB disconnect, device number 2 [ 370.697905][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.402583][ T6720] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.663545][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.671794][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.939197][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.946977][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.555818][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.346308][ T6714] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.079041][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.086647][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.199034][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.207208][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.990498][ T5090] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 377.158060][ T5090] usb 3-1: device descriptor read/64, error -71 [ 377.405285][ T5090] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 377.464700][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.516263][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.603185][ T5090] usb 3-1: device descriptor read/64, error -71 [ 377.717959][ T6208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.728318][ T5090] usb usb3-port1: attempt power cycle [ 377.758242][ T6208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.124824][ T5090] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 378.167336][ T5090] usb 3-1: device descriptor read/8, error -71 [ 378.513469][ T5090] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 378.564769][ T6720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.567118][ T5090] usb 3-1: device descriptor read/8, error -71 [ 378.708446][ T5090] usb usb3-port1: unable to enumerate USB device [ 379.207740][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.273311][ T5090] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 379.467745][ T5090] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 379.533623][ T5090] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 379.608688][ T5090] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 379.660330][ T5090] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 379.741903][ T5090] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 379.842331][ T5090] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 379.880503][ T5090] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 379.958976][ T5090] usb 8-1: Product: syz [ 379.978395][ T5090] usb 8-1: Manufacturer: syz [ 380.189484][ T5090] cdc_wdm 8-1:1.0: skipping garbage [ 380.234600][ T5090] cdc_wdm 8-1:1.0: skipping garbage [ 380.324690][ T5090] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 380.381814][ T5090] cdc_wdm 8-1:1.0: Unknown control protocol [ 381.121074][ T5090] usb 8-1: USB disconnect, device number 2 [ 381.645761][ T6720] veth0_vlan: entered promiscuous mode [ 381.850905][ T6720] veth1_vlan: entered promiscuous mode [ 382.960918][ T6714] veth0_vlan: entered promiscuous mode [ 383.071933][ T6720] veth0_macvtap: entered promiscuous mode [ 383.223593][ T6720] veth1_macvtap: entered promiscuous mode [ 383.365476][ T6714] veth1_vlan: entered promiscuous mode [ 383.893028][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.057808][ T6720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.359460][ T34] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.418034][ T34] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.472103][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.532541][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.599306][ T6714] veth0_macvtap: entered promiscuous mode [ 384.789943][ T6714] veth1_macvtap: entered promiscuous mode [ 385.256633][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.456359][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.674379][ T6239] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.717283][ T6239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.833155][ T6208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.911013][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.233211][ T5836] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 387.298633][ T5090] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 387.423026][ T5836] usb 2-1: device descriptor read/64, error -71 [ 387.571117][ T5090] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.623137][ T5090] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.676237][ T5836] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 387.738213][ T5090] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 387.782978][ T5090] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.869297][ T5090] usb 8-1: config 0 descriptor?? [ 387.897671][ T5836] usb 2-1: device descriptor read/64, error -71 [ 388.293425][ T5836] usb usb2-port1: attempt power cycle [ 388.469252][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.476862][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.547374][ T5090] usb 8-1: string descriptor 0 read error: -71 [ 388.617794][ T5090] usb 8-1: USB disconnect, device number 3 [ 388.673142][ T5836] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 388.730567][ T5836] usb 2-1: device descriptor read/8, error -71 [ 389.021743][ T5836] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 389.059277][ T5836] usb 2-1: device descriptor read/8, error -71 [ 389.201469][ T5836] usb usb2-port1: unable to enumerate USB device [ 394.036940][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.081649][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.449635][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.479936][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.793712][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.859732][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.987133][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.053470][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.463386][ T5836] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 395.694264][ T5836] usb 8-1: device descriptor read/64, error -71 [ 395.980927][ T5836] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 396.183181][ T5836] usb 8-1: device descriptor read/64, error -71 [ 396.304039][ T5836] usb usb8-port1: attempt power cycle [ 396.713208][ T5836] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 397.023691][ T5836] usb 8-1: device descriptor read/8, error -71 [ 397.334498][ T5836] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 397.524293][ T5836] usb 8-1: device descriptor read/8, error -71 [ 397.656711][ T5836] usb usb8-port1: unable to enumerate USB device [ 397.954264][ T29] audit: type=1326 audit(1773170597.663:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.116381][ T29] audit: type=1326 audit(1773170597.663:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.260853][ T29] audit: type=1326 audit(1773170597.663:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.463135][ T29] audit: type=1326 audit(1773170597.713:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.634897][ T29] audit: type=1326 audit(1773170597.713:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.829443][ T29] audit: type=1326 audit(1773170597.713:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 398.985138][ T29] audit: type=1326 audit(1773170597.743:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 399.182593][ T29] audit: type=1326 audit(1773170597.743:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 399.333166][ T29] audit: type=1326 audit(1773170597.743:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 399.441689][ T29] audit: type=1326 audit(1773170597.743:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.6.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5cd9c799 code=0x7ffc0000 [ 401.645080][ T5836] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 401.899035][ T5836] usb 8-1: Using ep0 maxpacket: 32 [ 401.928573][ T5836] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 401.992465][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.074462][ T5836] usb 8-1: config 0 descriptor?? [ 402.358764][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 402.460867][ T5836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.489516][ T7137] ALSA: mixer_oss: invalid OSS volume '' [ 402.554459][ T7129] ===================================================== [ 402.561868][ T7129] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 402.569373][ T7129] _copy_to_user+0xcc/0x120 [ 402.574254][ T7129] i2cdev_ioctl_smbus+0x586/0x660 [ 402.579584][ T7129] i2cdev_ioctl+0xa14/0xf40 [ 402.587526][ T7129] __se_sys_ioctl+0x23c/0x400 [ 402.592518][ T7129] __x64_sys_ioctl+0x97/0xe0 [ 402.597433][ T7129] x64_sys_call+0x1975/0x3ea0 [ 402.602320][ T7129] do_syscall_64+0x134/0xf80 [ 402.607639][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.613941][ T7129] [ 402.616298][ T7129] Uninit was stored to memory at: [ 402.621449][ T7129] __i2c_smbus_xfer+0x25b3/0x3120 [ 402.626736][ T7129] i2c_smbus_xfer+0x2d8/0x480 [ 402.631788][ T7129] i2cdev_ioctl_smbus+0x4a1/0x660 [ 402.637193][ T7129] i2cdev_ioctl+0xa14/0xf40 [ 402.641881][ T7129] __se_sys_ioctl+0x23c/0x400 [ 402.646778][ T7129] __x64_sys_ioctl+0x97/0xe0 [ 402.651487][ T7129] x64_sys_call+0x1975/0x3ea0 [ 402.656474][ T7129] do_syscall_64+0x134/0xf80 [ 402.661211][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.667431][ T7129] [ 402.669836][ T7129] Local variable msgbuf1.i created at: [ 402.676284][ T7129] __i2c_smbus_xfer+0x853/0x3120 [ 402.681395][ T7129] i2c_smbus_xfer+0x2d8/0x480 [ 402.688353][ T7129] [ 402.690722][ T7129] Byte 0 of 1 is uninitialized [ 402.696160][ T7129] Memory access of size 1 starts at ffff8880554bbd06 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 402.703053][ T7129] Data copied to user address 0000200000000040 [ 402.709244][ T7129] [ 402.711631][ T7129] CPU: 1 UID: 0 PID: 7129 Comm: syz.7.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.722621][ T7129] Tainted: [L]=SOFTLOCKUP [ 402.727072][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.737309][ T7129] ===================================================== [ 402.744413][ T7129] Disabling lock debugging due to kernel taint [ 402.752264][ T5836] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 402.823212][ T7129] Kernel panic - not syncing: kmsan.panic set ... [ 402.829789][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.7.219 Tainted: G B L syzkaller #0 PREEMPT(full) [ 402.840663][ T7129] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 402.846251][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.856623][ T7129] Call Trace: [ 402.860022][ T7129] [ 402.863038][ T7129] __dump_stack+0x26/0x30 [ 402.867537][ T7129] dump_stack_lvl+0x50/0x1c0 [ 402.872293][ T7129] ? dump_stack+0x12/0x25 [ 402.876877][ T7129] dump_stack+0x1e/0x25 [ 402.881529][ T7129] vpanic+0x7b4/0x1430 [ 402.885770][ T7129] panic+0x15d/0x160 [ 402.889963][ T7129] kmsan_report+0x31a/0x320 [ 402.894663][ T7129] ? kmsan_internal_check_memory+0x1e8/0x240 [ 402.900824][ T7129] ? kmsan_copy_to_user+0xef/0x190 [ 402.906099][ T7129] ? _copy_to_user+0xcc/0x120 [ 402.910905][ T7129] ? i2cdev_ioctl_smbus+0x586/0x660 [ 402.916244][ T7129] ? i2cdev_ioctl+0xa14/0xf40 [ 402.921096][ T7129] ? __se_sys_ioctl+0x23c/0x400 [ 402.926112][ T7129] ? __x64_sys_ioctl+0x97/0xe0 [ 402.931031][ T7129] ? x64_sys_call+0x1975/0x3ea0 [ 402.936040][ T7129] ? do_syscall_64+0x134/0xf80 [ 402.940938][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.947153][ T7129] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 402.952756][ T7129] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 402.958180][ T7129] ? __i2c_transfer+0x1179/0x3280 [ 402.963349][ T7129] ? kmsan_get_metadata+0xf1/0x160 [ 402.968635][ T7129] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 402.975143][ T7129] ? kmsan_get_metadata+0xf1/0x160 [ 402.980434][ T7129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 402.986515][ T7129] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 402.991881][ T7129] ? kmsan_get_metadata+0xf1/0x160 [ 402.997266][ T7129] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 403.003314][ T7129] kmsan_internal_check_memory+0x1e8/0x240 [ 403.009415][ T7129] kmsan_copy_to_user+0xef/0x190 [ 403.014959][ T7129] _copy_to_user+0xcc/0x120 [ 403.019610][ T7129] i2cdev_ioctl_smbus+0x586/0x660 [ 403.024892][ T7129] i2cdev_ioctl+0xa14/0xf40 [ 403.029557][ T7129] ? kmsan_get_shadow_origin_ptr+0x16/0xb0 [ 403.035637][ T7129] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 403.040801][ T7129] __se_sys_ioctl+0x23c/0x400 [ 403.045658][ T7129] __x64_sys_ioctl+0x97/0xe0 [ 403.050507][ T7129] x64_sys_call+0x1975/0x3ea0 [ 403.055344][ T7129] do_syscall_64+0x134/0xf80 [ 403.060195][ T7129] ? clear_bhb_loop+0x50/0xa0 [ 403.065009][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.071205][ T7129] RIP: 0033:0x7f567579c799 [ 403.075824][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.095653][ T7129] RSP: 002b:00007f5676710028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.104242][ T7129] RAX: ffffffffffffffda RBX: 00007f5675a15fa0 RCX: 00007f567579c799 [ 403.112328][ T7129] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000004 [ 403.120515][ T7129] RBP: 00007f5675832c99 R08: 0000000000000000 R09: 0000000000000000 [ 403.128794][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.137358][ T7129] R13: 00007f5675a16038 R14: 00007f5675a15fa0 R15: 00007ffd84e4b288 [ 403.145512][ T7129] [ 403.148943][ T7129] Kernel Offset: disabled [ 403.153529][ T7129] Rebooting in 86400 seconds..