last executing test programs: 3m7.688357951s ago: executing program 3 (id=4): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8000d8, 0x4dc680) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r4, 0x8, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)=ANY=[@ANYBLOB="b6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESDEC=r1], 0x1, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, 0x0}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8f) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) 3m3.949190852s ago: executing program 4 (id=5): socket(0x200000000000011, 0x2, 0xd) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) 3m3.256202563s ago: executing program 4 (id=13): unshare(0x6020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r0, 0xb) 3m2.479953052s ago: executing program 4 (id=16): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) read$FUSE(r1, &(0x7f0000001d40)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000003f80)={0x2020}, 0x2020) 3m1.649720457s ago: executing program 4 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x3, 0x8, 0x101}, 0x14}}, 0x0) 3m0.870290529s ago: executing program 4 (id=19): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x10079af, 0x1000, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2m59.495704502s ago: executing program 2 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x13e}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)='#', 0x1}], 0x1}, 0x40010) 2m59.304536255s ago: executing program 4 (id=21): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f00009bc000/0xc000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe}, 0x100}], 0x1, 0x60, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0x26c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x1, 0x1, 0x0, 0xffffffffffffffff, 0x701a, 0x726dc14, 0x6b18024f, 0x3, 0x1ff, 0x1, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 2m58.111193757s ago: executing program 2 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff27bd7100fddbdf2504000000", @ANYRES32=0x0, @ANYBLOB="880d0000231201003c0012800b000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 2m56.652033675s ago: executing program 2 (id=25): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}) 2m55.93113022s ago: executing program 3 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="57ab", 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m55.6609517s ago: executing program 2 (id=28): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x3) 2m50.556118878s ago: executing program 3 (id=30): socket$kcm(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 2m46.110173862s ago: executing program 2 (id=32): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 2m45.592485749s ago: executing program 0 (id=33): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="7da852a21e4cf41066086c108b08086da058dc9b", 0x14}, {0x0}, {0x0}], 0x3}}], 0x1, 0x1) sendto$unix(r1, &(0x7f00000008c0)='c', 0x1, 0x4008014, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m44.989614484s ago: executing program 2 (id=34): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x1) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000100)) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) gettid() syz_emit_ethernet(0xc2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="911040000000000095000000000000002b3cd7711ef800bb43ca12a2e76e281d514d08e3683a7a1ca7edb168eed5704aa5fc14bcbb581ae1da3138d7493424dab692066ddf42da89b170731d62ae693b5437f5e576fad954c020e6a824b51c63880f25eb1a1803cb8a164a9cb3400c7c69168d022a13f449519ff6c75ed18d48c7048af8b4edaeaf2b9f7a09b2763a0c95c42bec6264313a105240c914d8f83523c654583e387e67ad3fbae20c874696a9cb905504f7f86e5e6df4d77dd3d2270772791c7e23fc9d8fdf15ff64c49e39eb7c22040000000000000056f738d7aac5c492ec43bfad8a1956bc61de1e3b0e22b008731a892a6aaf171df8fc128fa716da902ba641ecce3982317a57ad3987c5aeb157052174d8de7fa0cbf41f27d2ce942bc6a37043415d934babe71e3dc933dfca101889e493d7e62ae1f4f7e1"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$inet(r0, 0x0, &(0x7f0000000340), 0x1800) socket(0x400000000010, 0x3, 0x0) 2m43.667286907s ago: executing program 32 (id=21): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f00009bc000/0xc000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/14, 0xe}, 0x100}], 0x1, 0x60, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwrite64(r5, 0x0, 0x0, 0x26c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000480)={0x1, 0x1, 0x0, 0xffffffffffffffff, 0x701a, 0x726dc14, 0x6b18024f, 0x3, 0x1ff, 0x1, 0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 2m43.585703903s ago: executing program 0 (id=37): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0xfffffffc) 2m42.897994424s ago: executing program 0 (id=38): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x14, 0x4) 2m36.535374113s ago: executing program 0 (id=41): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x2400c808) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) 2m32.968982488s ago: executing program 33 (id=30): socket$kcm(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) close_range(r2, 0xffffffffffffffff, 0x0) 2m32.457041932s ago: executing program 0 (id=44): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x20, 0x14}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2m29.301228616s ago: executing program 34 (id=34): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x1) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000100)) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) gettid() syz_emit_ethernet(0xc2, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4$inet(r0, 0x0, &(0x7f0000000340), 0x1800) socket(0x400000000010, 0x3, 0x0) 2m28.5297936s ago: executing program 0 (id=46): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = syz_usb_connect$rtl8150(0x2, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x81, 0x14, &(0x7f0000000040)=""/20) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = open(&(0x7f0000000000)='.\x00', 0x100, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)={0x6}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x1}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x63) 2m13.184944075s ago: executing program 35 (id=46): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = syz_usb_connect$rtl8150(0x2, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x81, 0x14, &(0x7f0000000040)=""/20) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = open(&(0x7f0000000000)='.\x00', 0x100, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)={0x6}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x1}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x63) 45.108559033s ago: executing program 7 (id=45): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x9, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x1, 0x6c7, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000000c0)={0x2, 0x102, 0x1, {0x8, 0x3, 0x7, 0x91}}) 33.188875886s ago: executing program 7 (id=145): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x2, @raw_data="c7f2990641fc5ea6c1e68b3daea5397345f15df1c42aaad691245d3e3f48b1c8b4ac08e684236f11915b2ac03b721ef4309c94b5e896e6347cb9fd360a4a8eef18b8155ccc9f504363c61a58a376ed4d9c13524233d43d62b7168895be677b0bcc1604fef55a0a0eaa1bb0e796d9bcbe4241dac5ad9855842fa4c562f36687b54b39aa8f86d83f7bc3d1b829959f76180b0320ccde0a87ea8db3a89d2d41ef1c2f6f1e4a1eaaa19b8c3827bbbf4703c387646155448d7c68638a0258701cfcc882643947f97a31ae"}) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 32.384204711s ago: executing program 7 (id=146): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x7ff, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0xf29b) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000001100), 0x0, &(0x7f0000001140)) syz_open_procfs(r4, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x0, 0xa, 0x80, "0200b30e25050e8bd9e466020100020000c2370000722a05000800", 0x50323234}) close_range(r7, 0xffffffffffffffff, 0x0) 23.172890829s ago: executing program 1 (id=164): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0x3) 21.894144577s ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) 19.215964403s ago: executing program 1 (id=167): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 18.225525446s ago: executing program 1 (id=170): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x2, @raw_data="c7f2990641fc5ea6c1e68b3daea5397345f15df1c42aaad691245d3e3f48b1c8b4ac08e684236f11915b2ac03b721ef4309c94b5e896e6347cb9fd360a4a8eef18b8155ccc9f504363c61a58a376ed4d9c13524233d43d62b7168895be677b0bcc1604fef55a0a0eaa1bb0e796d9bcbe4241dac5ad9855842fa4c562f36687b54b39aa8f86d83f7bc3d1b829959f76180b0320ccde0a87ea8db3a89d2d41ef1c2f6f1e4a1eaaa19b8c3827bbbf4703c387646155448d7c68638a0258701cfcc882643947f97a31ae"}) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 16.614462129s ago: executing program 36 (id=146): timer_create(0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80084) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x7ff, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0xf29b) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, &(0x7f0000001100), 0x0, &(0x7f0000001140)) syz_open_procfs(r4, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x0, 0xa, 0x80, "0200b30e25050e8bd9e466020100020000c2370000722a05000800", 0x50323234}) close_range(r7, 0xffffffffffffffff, 0x0) 16.562686012s ago: executing program 1 (id=175): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1, 0x6, 0x4) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 16.206544581s ago: executing program 5 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x503, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40800) 12.460520678s ago: executing program 5 (id=179): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8048802) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000440)={r6, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x38, {0x38, 0x0, "170dfe6354add2e48ccf6c91af367ddd267bc49930377b7e2a3ad8594eef4a6749262a3635386b4557909b5be7fee2ba5f849fe5a164"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x30, 0xc7, "cb0428440681138ca83b887070c7bb03a0789f78ee3a3648f6f72d74d1cbc87bb854c43852884f1d759752658fab8271564330bba9489e1890e3cff8f97c38c699c2a66aab44cca6cceb1c426c03500b9322571ee01bb90e7b8dad7e2b37032e05592fff94c95cdd54c2ac8f568e9d23317f3a81ce308e5c064ddcd6bcce8ed2d271f34cc815df128df6ddc45c84fb234655fe32982d3fc0feb2351c1915d408ac86ddc50898a1c12a4686644947f164a6ff9bd5ff89a27fc7055b26bb6fe1961992b461ce7043"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'I'}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "bc6625"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, 'GF'}, &(0x7f0000000800)={0x20, 0x85, 0x3, "09d3cc"}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=']) 10.14139755s ago: executing program 8 (id=181): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') writev(r0, &(0x7f0000000800)=[{0x0}], 0x1) 9.390105671s ago: executing program 8 (id=183): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 8.685662692s ago: executing program 8 (id=185): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"0f380a669766ba6100b000eeb98f090000b88c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cde08c461f8ae18"}}], 0x58}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x7f, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x2, 0x9, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) socket$kcm(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x6, 0x3436324d, 0x6, 0xb, [{0x80000004, 0x7}, {0x1, 0x9}, {0x10000001, 0x1}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0xc}, {0xff, 0x6}], 0x5, 0xc, 0x2, 0x0, 0x1}}, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffffa, 0x6, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0xd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040098}, 0x4000) 8.647059784s ago: executing program 5 (id=186): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) 7.935609033s ago: executing program 5 (id=187): open$dir(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(0x0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) 7.553311648s ago: executing program 6 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x503, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x20335}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1ff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40800) 5.422751651s ago: executing program 5 (id=189): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6fffe7fc, 0x5) 4.769942681s ago: executing program 8 (id=190): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, r0, 0x2000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.496439589s ago: executing program 5 (id=191): openat$mice(0xffffff9c, 0x0, 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.699663281s ago: executing program 6 (id=192): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='clear_refs\x00') writev(r0, &(0x7f0000000800)=[{&(0x7f00000000c0)}], 0x1) 2.911443534s ago: executing program 6 (id=193): unshare(0x28000600) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000100), 0x0, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0xe0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) 2.41141315s ago: executing program 6 (id=194): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 2.249136698s ago: executing program 1 (id=195): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8048802) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f0000000440)={r6, 0xdf, 0x20007, 0x6, 0x1, [], [0x7, 0x7, 0x2, 0x3], [0x1, 0x4, 0x6, 0x3abb], [0x7, 0x7, 0x3, 0x2]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000140)={0x20, 0x23, 0x38, {0x38, 0x0, "170dfe6354add2e48ccf6c91af367ddd267bc49930377b7e2a3ad8594eef4a6749262a3635386b4557909b5be7fee2ba5f849fe5a164"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x30, 0xc7, "cb0428440681138ca83b887070c7bb03a0789f78ee3a3648f6f72d74d1cbc87bb854c43852884f1d759752658fab8271564330bba9489e1890e3cff8f97c38c699c2a66aab44cca6cceb1c426c03500b9322571ee01bb90e7b8dad7e2b37032e05592fff94c95cdd54c2ac8f568e9d23317f3a81ce308e5c064ddcd6bcce8ed2d271f34cc815df128df6ddc45c84fb234655fe32982d3fc0feb2351c1915d408ac86ddc50898a1c12a4686644947f164a6ff9bd5ff89a27fc7055b26bb6fe1961992b461ce7043"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000400)={0x20, 0x81, 0x1, 'I'}, &(0x7f00000004c0)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000740)={0x20, 0x83, 0x3, "bc6625"}, &(0x7f00000007c0)={0x20, 0x84, 0x2, 'GF'}, &(0x7f0000000800)={0x20, 0x85, 0x3, "09d3cc"}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=']) 1.593697113s ago: executing program 6 (id=196): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x0}) 1.235156683s ago: executing program 8 (id=197): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x84}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x2, @raw_data="c7f2990641fc5ea6c1e68b3daea5397345f15df1c42aaad691245d3e3f48b1c8b4ac08e684236f11915b2ac03b721ef4309c94b5e896e6347cb9fd360a4a8eef18b8155ccc9f504363c61a58a376ed4d9c13524233d43d62b7168895be677b0bcc1604fef55a0a0eaa1bb0e796d9bcbe4241dac5ad9855842fa4c562f36687b54b39aa8f86d83f7bc3d1b829959f76180b0320ccde0a87ea8db3a89d2d41ef1c2f6f1e4a1eaaa19b8c3827bbbf4703c387646155448d7c68638a0258701cfcc882643947f97a31ae"}) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 650.915842ms ago: executing program 6 (id=198): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000000)=0xabb8) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 0s ago: executing program 8 (id=199): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000440)=[@code={0xa, 0x58, {"0f380a669766ba6100b000eeb98f090000b88c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cde08c461f8ae18"}}], 0x58}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x9}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0x7f, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x2, 0x9, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) socket$kcm(0xa, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x8, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x6, 0x3436324d, 0x6, 0xb, [{0x80000004, 0x7}, {0x1, 0x9}, {0x10000001, 0x1}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0xc}, {0xff, 0x6}], 0x5, 0xc, 0x2, 0x0, 0x1}}, 0xfffffffd}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x2, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffffa, 0x6, 0x7, 0x9, 0x40, 0xffffffff, 0x2, 0xd}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040098}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 149.091593][ T5755] cgroup: Unknown subsys name 'net' [ 149.215072][ T5755] cgroup: Unknown subsys name 'cpuset' [ 149.229229][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 154.662257][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 158.647338][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.656897][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.666032][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.675122][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.689362][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.700254][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 158.714765][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.724400][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.749293][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.760191][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.815668][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 158.828593][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 158.838431][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 158.838735][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.851199][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 158.854610][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.869668][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.877035][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.892219][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.927233][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.019920][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.040607][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.051335][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.104556][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.115081][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.204182][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 160.442650][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 160.744281][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 160.802128][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 160.812459][ T5776] Bluetooth: hci0: command tx timeout [ 160.816668][ T49] Bluetooth: hci1: command tx timeout [ 160.966659][ T49] Bluetooth: hci2: command tx timeout [ 160.966705][ T5776] Bluetooth: hci3: command tx timeout [ 161.090513][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 161.195486][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.203671][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.212383][ T49] Bluetooth: hci4: command tx timeout [ 161.218847][ T5774] bridge_slave_0: entered allmulticast mode [ 161.229261][ T5774] bridge_slave_0: entered promiscuous mode [ 161.309506][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.317731][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.325301][ T5774] bridge_slave_1: entered allmulticast mode [ 161.340243][ T5774] bridge_slave_1: entered promiscuous mode [ 161.558623][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.576688][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.584167][ T5783] bridge_slave_0: entered allmulticast mode [ 161.598201][ T5783] bridge_slave_0: entered promiscuous mode [ 161.620063][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.653880][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.662707][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.671789][ T5783] bridge_slave_1: entered allmulticast mode [ 161.682241][ T5783] bridge_slave_1: entered promiscuous mode [ 161.736176][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.879097][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.887061][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.894887][ T5775] bridge_slave_0: entered allmulticast mode [ 161.909283][ T5775] bridge_slave_0: entered promiscuous mode [ 161.943781][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.951634][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.959314][ T5781] bridge_slave_0: entered allmulticast mode [ 161.968906][ T5781] bridge_slave_0: entered promiscuous mode [ 161.988036][ T5774] team0: Port device team_slave_0 added [ 162.015874][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.023778][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.031712][ T5775] bridge_slave_1: entered allmulticast mode [ 162.040029][ T5775] bridge_slave_1: entered promiscuous mode [ 162.058867][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.069290][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.076907][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.084362][ T5781] bridge_slave_1: entered allmulticast mode [ 162.093200][ T5781] bridge_slave_1: entered promiscuous mode [ 162.110735][ T5774] team0: Port device team_slave_1 added [ 162.169548][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.229276][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.237082][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.244553][ T5787] bridge_slave_0: entered allmulticast mode [ 162.253169][ T5787] bridge_slave_0: entered promiscuous mode [ 162.347002][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.450660][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.467340][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.474816][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.484596][ T5787] bridge_slave_1: entered allmulticast mode [ 162.493604][ T5787] bridge_slave_1: entered promiscuous mode [ 162.515565][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.554216][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.561438][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.589416][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.657189][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.673235][ T5783] team0: Port device team_slave_0 added [ 162.681538][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.688676][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.714967][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.801053][ T5783] team0: Port device team_slave_1 added [ 162.833524][ T5781] team0: Port device team_slave_0 added [ 162.847224][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.886952][ T49] Bluetooth: hci1: command tx timeout [ 162.886986][ T5776] Bluetooth: hci0: command tx timeout [ 162.917120][ T5781] team0: Port device team_slave_1 added [ 162.929814][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.984647][ T5775] team0: Port device team_slave_0 added [ 163.001374][ T5775] team0: Port device team_slave_1 added [ 163.046721][ T49] Bluetooth: hci2: command tx timeout [ 163.046793][ T5776] Bluetooth: hci3: command tx timeout [ 163.174969][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.182266][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.208836][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.224874][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.232301][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.258484][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.291422][ T49] Bluetooth: hci4: command tx timeout [ 163.338679][ T5787] team0: Port device team_slave_0 added [ 163.412334][ T5774] hsr_slave_0: entered promiscuous mode [ 163.421060][ T5774] hsr_slave_1: entered promiscuous mode [ 163.431858][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.439400][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.465989][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.484730][ T5787] team0: Port device team_slave_1 added [ 163.493447][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.500902][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.527368][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.543824][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.551300][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.577639][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.593926][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.601300][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.628857][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.702212][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.709554][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.736649][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.825489][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.832897][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.859423][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.971904][ T5783] hsr_slave_0: entered promiscuous mode [ 163.980391][ T5783] hsr_slave_1: entered promiscuous mode [ 163.988659][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 163.994535][ T5783] Cannot create hsr debugfs directory [ 164.183315][ T5781] hsr_slave_0: entered promiscuous mode [ 164.192053][ T5781] hsr_slave_1: entered promiscuous mode [ 164.200148][ T5781] debugfs: 'hsr0' already exists in 'hsr' [ 164.205995][ T5781] Cannot create hsr debugfs directory [ 164.224285][ T5775] hsr_slave_0: entered promiscuous mode [ 164.232813][ T5775] hsr_slave_1: entered promiscuous mode [ 164.240701][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 164.247134][ T5775] Cannot create hsr debugfs directory [ 164.360688][ T5787] hsr_slave_0: entered promiscuous mode [ 164.369505][ T5787] hsr_slave_1: entered promiscuous mode [ 164.377803][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 164.383794][ T5787] Cannot create hsr debugfs directory [ 164.966683][ T49] Bluetooth: hci1: command tx timeout [ 164.966874][ T5776] Bluetooth: hci0: command tx timeout [ 165.126647][ T5776] Bluetooth: hci3: command tx timeout [ 165.136721][ T5776] Bluetooth: hci2: command tx timeout [ 165.367402][ T5776] Bluetooth: hci4: command tx timeout [ 165.471449][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.494267][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.513122][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.548592][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.643980][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.696668][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.739386][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.777138][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.885258][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.920650][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.954824][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.978129][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 166.212652][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.233528][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.253374][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.275594][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.601992][ T5787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.623904][ T5787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.643704][ T5787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.665973][ T5787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.862681][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.975364][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.048353][ T5776] Bluetooth: hci1: command tx timeout [ 167.049063][ T49] Bluetooth: hci0: command tx timeout [ 167.081085][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.088446][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.142552][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.149945][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.197016][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.208750][ T49] Bluetooth: hci2: command tx timeout [ 167.208787][ T5776] Bluetooth: hci3: command tx timeout [ 167.215714][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.354308][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.400490][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.448119][ T49] Bluetooth: hci4: command tx timeout [ 167.485049][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.492551][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.544838][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.561474][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.568974][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.590023][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.597491][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.707638][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.714962][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.952052][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.991160][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.149980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.157499][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.260160][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.267634][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.312795][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.429110][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.436744][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.602872][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.610428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.796913][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.384874][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.442992][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.551561][ T5774] veth0_vlan: entered promiscuous mode [ 169.785130][ T5774] veth1_vlan: entered promiscuous mode [ 170.242791][ T5783] veth0_vlan: entered promiscuous mode [ 170.271912][ T5781] veth0_vlan: entered promiscuous mode [ 170.308102][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.355520][ T5774] veth0_macvtap: entered promiscuous mode [ 170.384932][ T5781] veth1_vlan: entered promiscuous mode [ 170.414445][ T5783] veth1_vlan: entered promiscuous mode [ 170.445460][ T5774] veth1_macvtap: entered promiscuous mode [ 170.469916][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.695387][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.798357][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.852907][ T5783] veth0_macvtap: entered promiscuous mode [ 170.888020][ T5781] veth0_macvtap: entered promiscuous mode [ 170.987808][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.997592][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.009201][ T5775] veth0_vlan: entered promiscuous mode [ 171.021561][ T5783] veth1_macvtap: entered promiscuous mode [ 171.035980][ T5781] veth1_macvtap: entered promiscuous mode [ 171.053009][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.102256][ T1036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.216319][ T5775] veth1_vlan: entered promiscuous mode [ 171.300759][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.333307][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.422945][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.448742][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.561846][ T745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.621244][ T745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.668982][ T745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.679425][ T745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.738560][ T5775] veth0_macvtap: entered promiscuous mode [ 171.803410][ T745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.838134][ T745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.890536][ T745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.917554][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.957766][ T5775] veth1_macvtap: entered promiscuous mode [ 172.196927][ T5787] veth0_vlan: entered promiscuous mode [ 172.267101][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.337453][ T5787] veth1_vlan: entered promiscuous mode [ 172.415705][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.502755][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.527645][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.568077][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.599599][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.920521][ T5787] veth0_macvtap: entered promiscuous mode [ 173.043012][ T5787] veth1_macvtap: entered promiscuous mode [ 173.341711][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.538698][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.661933][ T745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.684267][ T745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.737898][ T745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.787439][ T745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.275861][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.309025][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.588535][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.625367][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.747926][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.755940][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.026238][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.034422][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.134116][ T5774] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 177.380178][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.427028][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.716907][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.724934][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.528690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 178.589496][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.617754][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.277663][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.286302][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.690638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 180.131136][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.131224][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.815575][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.815664][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.633130][ T29] audit: type=1326 audit(1773329040.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.2.11" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa767d9c799 code=0x0 [ 183.148119][ T5998] tipc: Started in network mode [ 183.169063][ T5998] tipc: Node identity 2eb175f874ab, cluster identity 4711 [ 183.191525][ T5998] tipc: Enabled bearer , priority 0 [ 183.219370][ T6000] syzkaller0: entered promiscuous mode [ 183.253234][ T6000] syzkaller0: entered allmulticast mode [ 183.370033][ T6000] tipc: Resetting bearer [ 183.451529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 183.731315][ T5997] tipc: Resetting bearer [ 183.751536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.855073][ T5997] tipc: Disabling bearer [ 184.092793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 185.788990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.516081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 186.529379][ T6023] syzkaller0: entered promiscuous mode [ 186.554912][ T6023] syzkaller0: entered allmulticast mode [ 186.808902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 187.247308][ T5945] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 187.439320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 187.531454][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 187.541818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 187.718658][ T6034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.22'. [ 187.790191][ T5945] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 187.827074][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.870442][ T5945] usb 5-1: Product: syz [ 187.874908][ T5945] usb 5-1: Manufacturer: syz [ 188.036726][ T5945] usb 5-1: SerialNumber: syz [ 188.107220][ T5945] usb 5-1: config 0 descriptor?? [ 188.195288][ T5945] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 188.234882][ T5945] pctv452e: pctv452e_power_ctrl: 1 [ 188.234882][ T5945] [ 188.311417][ T5945] usb 5-1: selecting invalid altsetting 3 [ 188.418255][ T5945] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 188.418255][ T5945] [ 188.482697][ T6028] netlink: 68 bytes leftover after parsing attributes in process `syz.4.21'. [ 188.557726][ T5945] dvb-usb: bulk message failed: -22 (5/0) [ 188.740684][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.818969][ T5945] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 188.857230][ T5945] usb 5-1: media controller created [ 188.862692][ T5945] dvb-usb: bulk message failed: -22 (8/0) [ 188.982717][ T5945] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 189.012084][ T6039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.024680][ T5945] dvb-usb: MAC address reading failed. [ 189.122561][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.877352][ T5945] DVB: Unable to find symbol stb0899_attach() [ 189.883586][ T5945] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 197.006648][ T5945] rc_core: IR keymap rc-tt-1500 not found [ 197.026813][ T5945] Registered IR keymap rc-empty [ 197.059726][ T5945] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 197.892952][ T5945] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input5 [ 198.988655][ T5945] dvb-usb: schedule remote query interval to 100 msecs. [ 198.995884][ T5945] pctv452e: pctv452e_power_ctrl: 0 [ 198.995884][ T5945] [ 199.096724][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 199.102690][ T30] dvb-usb: error -22 while querying for an remote control event. [ 199.361571][ T5945] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 199.486961][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 199.492881][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 199.656930][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 199.674143][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 199.856936][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 199.898481][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 200.071274][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 200.106831][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 200.276840][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 200.327558][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 200.446918][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 200.452870][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 200.655572][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 200.667726][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 200.796867][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 200.802854][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 201.029516][ T6084] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 201.091252][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 201.180134][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 201.496862][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.35'. [ 201.515338][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 201.594957][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 201.786924][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 201.819492][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 201.996907][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 202.046784][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 202.296912][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 202.311614][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 202.486666][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 202.555861][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 202.736816][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 202.742768][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 202.781809][ T6094] capability: warning: `syz.0.38' uses deprecated v2 capabilities in a way that may be insecure [ 202.916693][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 202.922647][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 203.540615][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 203.563169][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 204.540719][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 204.549037][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.555632][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.546773][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 207.617359][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 207.646624][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 207.889976][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 207.895940][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 209.706659][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 209.712546][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 209.956707][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 210.029987][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 210.048850][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.058132][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.073238][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.086807][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.097899][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.571641][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 212.066676][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 212.168264][ T5776] Bluetooth: hci5: command tx timeout [ 212.208392][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 212.214273][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 212.376780][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 212.433652][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 212.596677][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 212.655793][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 212.826856][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 212.846871][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 213.101293][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 213.166627][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 213.277772][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 213.329441][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 213.494226][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 213.543498][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 213.736674][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 213.742644][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 213.826928][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 213.986708][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 214.003307][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 214.115143][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.147335][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 214.159500][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 214.168232][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 214.189078][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 214.210806][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.233738][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 214.247744][ T5776] Bluetooth: hci5: command tx timeout [ 214.301518][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 214.390339][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 214.394429][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 214.456298][ T10] usb 1-1: Product: syz [ 214.460976][ T10] usb 1-1: Manufacturer: syz [ 214.465808][ T10] usb 1-1: SerialNumber: syz [ 214.476718][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 214.629018][ T10] usb 1-1: config 0 descriptor?? [ 214.683086][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 214.740524][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 214.906774][ T10] radio-si470x 1-1:0.0: DeviceID=0x6465 ChipID=0x7669 [ 214.924859][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 214.962337][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 214.995549][ T6107] chnl_net:caif_netlink_parms(): no params data found [ 215.076103][ T10] radio-si470x 1-1:0.0: software version 100, hardware version 101 [ 215.156769][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 215.195096][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 215.264768][ T10] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 215.322556][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.333865][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.343366][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.371119][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.382096][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.389496][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 215.406823][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 215.526798][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 215.532846][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 215.656693][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 215.696755][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 215.866740][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 215.925385][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 216.081003][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 216.097140][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 216.103080][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 216.153164][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 216.257590][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 216.286805][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 216.327167][ T49] Bluetooth: hci5: command tx timeout [ 216.384792][ T10] usb 1-1: USB disconnect, device number 2 [ 216.456939][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 216.462882][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 216.676723][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 216.682673][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 216.986699][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 216.992609][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 217.216702][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 217.246616][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 217.366910][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 217.390117][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 217.446894][ T49] Bluetooth: hci6: command tx timeout [ 217.536770][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 217.568441][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 217.721079][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 217.774494][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 217.957697][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.966166][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.975318][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.982618][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.001828][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 218.062174][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.073341][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.197523][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.203491][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 218.357497][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.429859][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 218.471692][ T5776] Bluetooth: hci5: command tx timeout [ 218.587107][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.593057][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 218.736917][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.742878][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 218.946730][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 218.952679][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 219.100619][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 219.221895][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 219.696686][ T5776] Bluetooth: hci6: command tx timeout [ 219.816704][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 219.822660][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 219.987089][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 219.992972][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 220.134237][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.236724][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 220.279478][ T30] dvb-usb: error -22 while querying for an remote control event. [ 220.297302][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.304924][ T6107] bridge_slave_0: entered allmulticast mode [ 220.326822][ T5776] Bluetooth: hci2: command tx timeout [ 220.427875][ T6107] bridge_slave_0: entered promiscuous mode [ 220.486818][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 220.492765][ T30] dvb-usb: error -22 while querying for an remote control event. [ 220.496045][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.596926][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.604558][ T6107] bridge_slave_1: entered allmulticast mode [ 220.666896][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 220.672813][ T30] dvb-usb: error -22 while querying for an remote control event. [ 220.737964][ T6107] bridge_slave_1: entered promiscuous mode [ 220.909964][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 220.915856][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 221.142333][ T6126] chnl_net:caif_netlink_parms(): no params data found [ 221.146611][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 221.155429][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 221.276788][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 221.282858][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 221.506767][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 221.512641][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 221.707084][ T5945] dvb-usb: bulk message failed: -22 (4/0) [ 221.712962][ T5945] dvb-usb: error -22 while querying for an remote control event. [ 221.769916][ T5776] Bluetooth: hci6: command tx timeout [ 221.792568][ T5945] usb 5-1: USB disconnect, device number 2 [ 222.320843][ T6107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.407053][ T5776] Bluetooth: hci2: command tx timeout [ 222.494418][ T5945] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 222.530519][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.830603][ T6107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.075171][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.449744][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.802146][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.848465][ T5776] Bluetooth: hci6: command tx timeout [ 223.915071][ T6107] team0: Port device team_slave_0 added [ 224.180489][ T6107] team0: Port device team_slave_1 added [ 224.487116][ T5776] Bluetooth: hci2: command tx timeout [ 224.561420][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.48'. [ 224.972881][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.007226][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.014903][ T6126] bridge_slave_0: entered allmulticast mode [ 225.053815][ T6126] bridge_slave_0: entered promiscuous mode [ 225.117023][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.136652][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.216803][ T6107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.271935][ T6107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.326319][ T6107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.432466][ T6107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.460238][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.490259][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.512410][ T6126] bridge_slave_1: entered allmulticast mode [ 226.072156][ T6126] bridge_slave_1: entered promiscuous mode [ 226.566636][ T5776] Bluetooth: hci2: command tx timeout [ 232.115958][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.453397][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.503501][ T6136] chnl_net:caif_netlink_parms(): no params data found [ 232.731127][ T6107] hsr_slave_0: entered promiscuous mode [ 232.759524][ T6107] hsr_slave_1: entered promiscuous mode [ 232.780283][ T6107] debugfs: 'hsr0' already exists in 'hsr' [ 232.805776][ T6107] Cannot create hsr debugfs directory [ 233.035949][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.045335][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.057532][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.072268][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.083743][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.188732][ T35] bridge_slave_1: left allmulticast mode [ 233.207170][ T35] bridge_slave_1: left promiscuous mode [ 233.221384][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.252197][ T35] bridge_slave_0: left allmulticast mode [ 233.275538][ T35] bridge_slave_0: left promiscuous mode [ 233.288961][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.083542][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.137946][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.154649][ T35] bond0 (unregistering): Released all slaves [ 234.370327][ T6126] team0: Port device team_slave_0 added [ 234.890048][ T6126] team0: Port device team_slave_1 added [ 235.126667][ T49] Bluetooth: hci3: command tx timeout [ 235.194949][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.202976][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.261257][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 235.278918][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.308182][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.315592][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.350820][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.434330][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.450892][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.465729][ T30] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 235.478350][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.516173][ T30] usb 2-1: config 0 descriptor?? [ 235.642029][ T35] hsr_slave_0: left promiscuous mode [ 235.650256][ T35] hsr_slave_1: left promiscuous mode [ 235.658833][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.676175][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.693500][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.701155][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.723080][ T35] veth1_macvtap: left promiscuous mode [ 235.729282][ T35] veth0_macvtap: left promiscuous mode [ 235.735081][ T35] veth1_vlan: left promiscuous mode [ 235.740742][ T35] veth0_vlan: left promiscuous mode [ 236.413518][ T30] usbhid 2-1:0.0: can't add hid device: -71 [ 236.433279][ T30] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 236.458154][ T30] usb 2-1: USB disconnect, device number 2 [ 236.499742][ T35] team0 (unregistering): Port device team_slave_1 removed [ 236.533951][ T35] team0 (unregistering): Port device team_slave_0 removed [ 237.022471][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.032705][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.041237][ T6136] bridge_slave_0: entered allmulticast mode [ 237.051642][ T6136] bridge_slave_0: entered promiscuous mode [ 237.176679][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.186121][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.194589][ T6136] bridge_slave_1: entered allmulticast mode [ 237.231742][ T6136] bridge_slave_1: entered promiscuous mode [ 237.296755][ T5776] Bluetooth: hci3: command tx timeout [ 237.433410][ T6126] hsr_slave_0: entered promiscuous mode [ 237.443809][ T6126] hsr_slave_1: entered promiscuous mode [ 237.463398][ T6126] debugfs: 'hsr0' already exists in 'hsr' [ 237.473767][ T6126] Cannot create hsr debugfs directory [ 237.998560][ T6136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.115737][ T6136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.376507][ T49] Bluetooth: hci3: command tx timeout [ 239.583258][ T6136] team0: Port device team_slave_0 added [ 239.653186][ T6136] team0: Port device team_slave_1 added [ 240.154463][ T6107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.310607][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.574330][ T6107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.609899][ T6107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.650013][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.714776][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.722379][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.765700][ T6136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.815120][ T6107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.847126][ T6169] chnl_net:caif_netlink_parms(): no params data found [ 240.981505][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.115924][ T6136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.166805][ T6136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.326747][ T6136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.450238][ T49] Bluetooth: hci3: command tx timeout [ 242.003049][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.592816][ T6136] hsr_slave_0: entered promiscuous mode [ 243.748545][ T6136] hsr_slave_1: entered promiscuous mode [ 243.863841][ T6136] debugfs: 'hsr0' already exists in 'hsr' [ 243.912301][ T6136] Cannot create hsr debugfs directory [ 245.094319][ T6234] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.477018][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 245.540847][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.690028][ T10] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 245.710139][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.726789][ T10] usb 2-1: config 0 has no interfaces? [ 245.747643][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 245.769649][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.831283][ T10] usb 2-1: config 0 descriptor?? [ 245.871251][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.962785][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.977556][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.985326][ T6169] bridge_slave_0: entered allmulticast mode [ 246.024541][ T6169] bridge_slave_0: entered promiscuous mode [ 246.226693][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.259878][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.270331][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.281180][ T6169] bridge_slave_1: entered allmulticast mode [ 246.293678][ T6169] bridge_slave_1: entered promiscuous mode [ 246.387688][ T6126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.414926][ T6126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.517375][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.741347][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.756823][ T6126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.882003][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.946923][ T6126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 247.383487][ T6169] team0: Port device team_slave_0 added [ 247.432725][ T6169] team0: Port device team_slave_1 added [ 247.689337][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.708028][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.776628][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.812476][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.836731][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.876567][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.201736][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.396868][ T6107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.432968][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.619218][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.732266][ T6169] hsr_slave_0: entered promiscuous mode [ 248.751033][ T6169] hsr_slave_1: entered promiscuous mode [ 248.787483][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 248.793348][ T6169] Cannot create hsr debugfs directory [ 248.885065][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.963106][ T6136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.001029][ T6136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.145222][ T6136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.438651][ T6107] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.460810][ T6136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.614455][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.621930][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.824189][ T10] usb 2-1: USB disconnect, device number 3 [ 249.832269][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.839630][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.288792][ T3075] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 250.491654][ T3075] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 250.526638][ T3075] usb 2-1: config 1 interface 0 has no altsetting 0 [ 250.561194][ T3075] usb 2-1: string descriptor 0 read error: -22 [ 250.577074][ T3075] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 250.592525][ T3075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.626347][ T6241] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.653804][ T35] bridge_slave_1: left allmulticast mode [ 250.681874][ T35] bridge_slave_1: left promiscuous mode [ 250.694070][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.736159][ T35] bridge_slave_0: left allmulticast mode [ 250.749223][ T35] bridge_slave_0: left promiscuous mode [ 250.755821][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.803210][ T35] bridge_slave_1: left allmulticast mode [ 250.819854][ T35] bridge_slave_1: left promiscuous mode [ 250.834986][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.857016][ T35] bridge_slave_0: left allmulticast mode [ 250.866831][ T35] bridge_slave_0: left promiscuous mode [ 250.873431][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.903034][ T35] bridge_slave_1: left allmulticast mode [ 250.915665][ T35] bridge_slave_1: left promiscuous mode [ 250.951769][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.982859][ T35] bridge_slave_0: left allmulticast mode [ 250.989837][ T35] bridge_slave_0: left promiscuous mode [ 250.999194][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.103009][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.128555][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.167247][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.187185][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.194596][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.224532][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.256860][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.264321][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.289080][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.303072][ T3075] logitech 0003:046D:C298.0001: unknown main item tag 0x0 [ 251.448950][ T3075] logitech 0003:046D:C298.0001: hidraw0: USB HID vff.7f Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0 [ 251.482497][ T3075] logitech 0003:046D:C298.0001: no inputs found [ 251.521449][ T3075] usb 2-1: USB disconnect, device number 4 [ 251.825687][ T6254] fido_id[6254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 252.305757][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.331373][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.373720][ T35] bond0 (unregistering): Released all slaves [ 252.612915][ T6264] process 'syz.1.66' launched './file0' with NULL argv: empty string added [ 253.082139][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.511092][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.532140][ T35] bond0 (unregistering): Released all slaves [ 253.849766][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.870239][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.901003][ T35] bond0 (unregistering): Released all slaves [ 254.644532][ T6264] geneve2: entered promiscuous mode [ 254.654699][ T6264] geneve2: entered allmulticast mode [ 254.707359][ T35] tipc: Left network mode [ 255.473924][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.555642][ T6169] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 255.608880][ T6169] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.886057][ T6169] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.998766][ T6169] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.124665][ T6136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.560583][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.622795][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.630385][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.802526][ T6136] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.869268][ T35] hsr_slave_0: left promiscuous mode [ 256.904240][ T35] hsr_slave_1: left promiscuous mode [ 256.919886][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.945803][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.962323][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.974825][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.001903][ T35] hsr_slave_0: left promiscuous mode [ 257.009873][ T35] hsr_slave_1: left promiscuous mode [ 257.018865][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.036886][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.057036][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.064623][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.140276][ T35] hsr_slave_0: left promiscuous mode [ 257.151208][ T35] hsr_slave_1: left promiscuous mode [ 257.162937][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.181331][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.192951][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.201615][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.347750][ T35] veth1_macvtap: left promiscuous mode [ 257.353455][ T35] veth0_macvtap: left promiscuous mode [ 257.377487][ T35] veth1_vlan: left promiscuous mode [ 257.382918][ T35] veth0_vlan: left promiscuous mode [ 257.405376][ T35] veth1_macvtap: left promiscuous mode [ 257.412955][ T35] veth0_macvtap: left promiscuous mode [ 257.440229][ T6289] trusted_key: encrypted_key: key user:syZ not found [ 257.441746][ T35] veth1_vlan: left promiscuous mode [ 257.454859][ T35] veth0_vlan: left promiscuous mode [ 257.462653][ T35] veth1_macvtap: left promiscuous mode [ 257.468670][ T35] veth0_macvtap: left promiscuous mode [ 257.474581][ T35] veth1_vlan: left promiscuous mode [ 257.523877][ T35] veth0_vlan: left promiscuous mode [ 259.159940][ T35] team0 (unregistering): Port device team_slave_1 removed [ 259.184993][ T35] team0 (unregistering): Port device team_slave_0 removed [ 259.937194][ T35] team0 (unregistering): Port device team_slave_1 removed [ 259.979162][ T35] team0 (unregistering): Port device team_slave_0 removed [ 260.961798][ T35] team0 (unregistering): Port device team_slave_1 removed [ 261.009322][ T35] team0 (unregistering): Port device team_slave_0 removed [ 261.487919][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.495364][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.650980][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.658397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.772812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.780356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.922035][ T6107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.808210][ T5832] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 263.010352][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 263.028770][ T5832] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.063592][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.116625][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.176770][ T5832] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.230714][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.291689][ T5832] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.356938][ T5832] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.365163][ T5832] usb 2-1: Manufacturer: syz [ 263.446164][ T5832] usb 2-1: config 0 descriptor?? [ 263.496869][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.714618][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.752423][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.764957][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.797302][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.809518][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.958682][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.039847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.047946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.191062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.198670][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.216548][ T5832] rc_core: IR keymap rc-hauppauge not found [ 264.222635][ T5832] Registered IR keymap rc-empty [ 264.257112][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.318797][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.379789][ T5832] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 264.433130][ T5832] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 264.520804][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.600150][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.648218][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.668475][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.687931][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.737424][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.768983][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.825107][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.893638][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.927092][ T5832] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 264.967155][ T5832] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.994562][ T5832] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 265.068158][ T5832] usb 2-1: USB disconnect, device number 5 [ 265.393861][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.404549][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.420954][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.926643][ T49] Bluetooth: hci1: command tx timeout [ 266.050231][ T6136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.251125][ T6310] chnl_net:caif_netlink_parms(): no params data found [ 267.342364][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 268.010041][ T49] Bluetooth: hci1: command tx timeout [ 268.518025][ T53] bridge_slave_1: left allmulticast mode [ 268.540874][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 268.550545][ T53] bridge_slave_1: left promiscuous mode [ 268.568975][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.600438][ T53] bridge_slave_0: left allmulticast mode [ 268.624229][ T53] bridge_slave_0: left promiscuous mode [ 268.641637][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.024402][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.043369][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.071381][ T53] bond0 (unregistering): Released all slaves [ 269.317620][ T6310] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.327200][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.334859][ T6310] bridge_slave_0: entered allmulticast mode [ 269.350993][ T6310] bridge_slave_0: entered promiscuous mode [ 269.374650][ T6310] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.382407][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.391629][ T6310] bridge_slave_1: entered allmulticast mode [ 269.407236][ T6310] bridge_slave_1: entered promiscuous mode [ 269.552362][ T53] hsr_slave_0: left promiscuous mode [ 269.569753][ T53] hsr_slave_1: left promiscuous mode [ 269.588120][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.610443][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.087134][ T49] Bluetooth: hci1: command tx timeout [ 270.152925][ T53] team0 (unregistering): Port device team_slave_1 removed [ 270.189372][ T53] team0 (unregistering): Port device team_slave_0 removed [ 270.434895][ T6310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.551141][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.582869][ T6310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.743103][ T6126] veth0_vlan: entered promiscuous mode [ 270.881262][ T6310] team0: Port device team_slave_0 added [ 270.916105][ T6310] team0: Port device team_slave_1 added [ 271.114338][ T6126] veth1_vlan: entered promiscuous mode [ 271.190884][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.201253][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.230857][ T6310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.381472][ T6310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.406594][ T6310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.466917][ T6310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.883073][ T6310] hsr_slave_0: entered promiscuous mode [ 271.893808][ T6310] hsr_slave_1: entered promiscuous mode [ 271.904419][ T6310] debugfs: 'hsr0' already exists in 'hsr' [ 271.911282][ T6310] Cannot create hsr debugfs directory [ 271.926159][ T6136] veth0_vlan: entered promiscuous mode [ 272.167164][ T49] Bluetooth: hci1: command tx timeout [ 272.366460][ T6136] veth1_vlan: entered promiscuous mode [ 272.557934][ T6410] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 272.592602][ T6126] veth0_macvtap: entered promiscuous mode [ 272.998642][ T6126] veth1_macvtap: entered promiscuous mode [ 273.449520][ T6169] veth0_vlan: entered promiscuous mode [ 273.547314][ T6136] veth0_macvtap: entered promiscuous mode [ 273.718979][ T6136] veth1_macvtap: entered promiscuous mode [ 273.852514][ T6169] veth1_vlan: entered promiscuous mode [ 274.000068][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.013152][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.022975][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.073050][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.084392][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.258541][ T6427] syz.1.86 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 274.338446][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.667242][ T6136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.811216][ T6169] veth0_macvtap: entered promiscuous mode [ 274.999823][ T3439] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.019491][ T3439] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.082168][ T6169] veth1_macvtap: entered promiscuous mode [ 275.146692][ T3439] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.188752][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.235083][ T6310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 275.378027][ T6310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 275.468189][ T6310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.741522][ T6310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 276.166620][ T49] Bluetooth: hci4: command tx timeout [ 276.303091][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.560683][ T6169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.151057][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.199921][ T53] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.433624][ T53] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.626821][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.877684][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.898325][ T5776] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.908375][ T5776] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.922318][ T5776] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.941891][ T5776] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.246931][ T49] Bluetooth: hci4: command tx timeout [ 278.788039][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 278.867023][ T12] bridge_slave_1: left allmulticast mode [ 278.872786][ T12] bridge_slave_1: left promiscuous mode [ 278.917494][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.962311][ T12] bridge_slave_0: left allmulticast mode [ 278.986623][ T12] bridge_slave_0: left promiscuous mode [ 278.993046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.567996][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.596253][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.644843][ T12] bond0 (unregistering): Released all slaves [ 279.918729][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.025691][ T49] Bluetooth: hci5: command tx timeout [ 280.067328][ T12] hsr_slave_0: left promiscuous mode [ 280.083371][ T12] hsr_slave_1: left promiscuous mode [ 280.094948][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.129444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.170452][ T12] veth1_macvtap: left promiscuous mode [ 280.186580][ T12] veth0_macvtap: left promiscuous mode [ 280.192442][ T12] veth1_vlan: left promiscuous mode [ 280.208345][ T12] veth0_vlan: left promiscuous mode [ 280.328129][ T49] Bluetooth: hci4: command tx timeout [ 280.519619][ T5827] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 280.691668][ T12] team0 (unregistering): Port device team_slave_1 removed [ 280.706915][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 280.717368][ T12] team0 (unregistering): Port device team_slave_0 removed [ 280.721858][ T5827] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.743241][ T5827] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.764371][ T5827] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.794652][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.814603][ T5827] usb 2-1: Product: syz [ 280.825077][ T5827] usb 2-1: Manufacturer: syz [ 280.830670][ T5827] usb 2-1: SerialNumber: syz [ 281.073725][ T5827] usb 2-1: 0:2 : does not exist [ 281.100097][ T5827] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 281.361734][ T6310] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.483368][ T5827] usb 2-1: USB disconnect, device number 6 [ 281.526284][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.533928][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.665456][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.791336][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.798942][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.086732][ T5776] Bluetooth: hci5: command tx timeout [ 282.095423][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.410312][ T5776] Bluetooth: hci4: command tx timeout [ 282.623016][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.747077][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.765216][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.787212][ T6424] bridge_slave_0: entered allmulticast mode [ 282.816776][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 282.853184][ T6424] bridge_slave_0: entered promiscuous mode [ 282.985566][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.054839][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.087014][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.094735][ T6424] bridge_slave_1: entered allmulticast mode [ 283.130269][ T6424] bridge_slave_1: entered promiscuous mode [ 283.281501][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.575740][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.635558][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 283.834933][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.166628][ T49] Bluetooth: hci5: command tx timeout [ 284.493580][ T6424] team0: Port device team_slave_0 added [ 284.566191][ T6424] team0: Port device team_slave_1 added [ 285.751180][ T12] bridge_slave_1: left allmulticast mode [ 285.776686][ T12] bridge_slave_1: left promiscuous mode [ 285.783172][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.803488][ T12] bridge_slave_0: left allmulticast mode [ 285.810139][ T12] bridge_slave_0: left promiscuous mode [ 285.821331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.251773][ T49] Bluetooth: hci5: command tx timeout [ 286.560542][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.589405][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.619445][ T12] bond0 (unregistering): Released all slaves [ 286.633642][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.642735][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.720043][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.783142][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.798854][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.887889][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.010174][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.039066][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.106552][ T12] hsr_slave_0: left promiscuous mode [ 287.128283][ T12] hsr_slave_1: left promiscuous mode [ 287.135379][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.164484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.187868][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.195420][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.245337][ T12] veth1_macvtap: left promiscuous mode [ 287.251166][ T12] veth0_macvtap: left promiscuous mode [ 287.257612][ T12] veth1_vlan: left promiscuous mode [ 287.268032][ T12] veth0_vlan: left promiscuous mode [ 288.390623][ T12] team0 (unregistering): Port device team_slave_1 removed [ 288.465542][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.232688][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.243622][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.251617][ T6453] bridge_slave_0: entered allmulticast mode [ 289.272550][ T6453] bridge_slave_0: entered promiscuous mode [ 289.354005][ T6424] hsr_slave_0: entered promiscuous mode [ 289.367923][ T6424] hsr_slave_1: entered promiscuous mode [ 289.379244][ T6424] debugfs: 'hsr0' already exists in 'hsr' [ 289.385659][ T6424] Cannot create hsr debugfs directory [ 289.397216][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.410852][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.424669][ T6453] bridge_slave_1: entered allmulticast mode [ 289.442763][ T6453] bridge_slave_1: entered promiscuous mode [ 289.501049][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 289.537495][ T6527] team0: Port device batadv1 added [ 289.590863][ T6059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.600023][ T6059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.777994][ T6310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.178747][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.285262][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.722217][ T6453] team0: Port device team_slave_0 added [ 290.802982][ T6453] team0: Port device team_slave_1 added [ 291.553795][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.562670][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.656888][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.902776][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.912841][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.024779][ T6453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.678913][ T6453] hsr_slave_0: entered promiscuous mode [ 292.708123][ T6453] hsr_slave_1: entered promiscuous mode [ 292.732317][ T6453] debugfs: 'hsr0' already exists in 'hsr' [ 292.760690][ T6453] Cannot create hsr debugfs directory [ 294.053611][ T6310] veth0_vlan: entered promiscuous mode [ 294.778189][ T6310] veth1_vlan: entered promiscuous mode [ 295.083075][ T6424] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 295.273542][ T6424] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 295.304431][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 295.409598][ T6424] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 295.557989][ T6424] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 295.897967][ T6310] veth0_macvtap: entered promiscuous mode [ 296.105177][ T6310] veth1_macvtap: entered promiscuous mode [ 296.582784][ T6453] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 296.785330][ T6453] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 296.840990][ T6453] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 296.973653][ T6453] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 297.086024][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.309422][ T6310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.901999][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.945567][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.047485][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.109411][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.925996][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.152709][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.292463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.300035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.444826][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.452323][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.777455][ T6453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.246248][ T6453] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.452076][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.8.103'. [ 300.462609][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.470004][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.623268][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.630650][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.060090][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.820225][ T6453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.740516][ T6059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.786785][ T6059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.483272][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.524754][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.784278][ T6424] veth0_vlan: entered promiscuous mode [ 307.024915][ T6424] veth1_vlan: entered promiscuous mode [ 307.533252][ T6453] veth0_vlan: entered promiscuous mode [ 307.706478][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.36'. [ 307.897085][ T6453] veth1_vlan: entered promiscuous mode [ 308.132717][ T6424] veth0_macvtap: entered promiscuous mode [ 308.333805][ T6424] veth1_macvtap: entered promiscuous mode [ 308.745312][ T6453] veth0_macvtap: entered promiscuous mode [ 308.872158][ T6453] veth1_macvtap: entered promiscuous mode [ 309.114596][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.190808][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.111'. [ 309.370125][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.451502][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.614946][ T6453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.766535][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.810910][ T6235] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.825589][ T6235] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.954562][ T3439] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.982020][ T3439] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.088937][ T3439] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.125459][ T3439] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.238869][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.395698][ T6713] loop8: detected capacity change from 0 to 512 [ 313.616987][ T6713] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.116: inode has both inline data and extents flags [ 313.717132][ T6713] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 313.726479][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 313.742462][ C1] EXT4-fs (loop8): initial error at time 1773329172: ext4_orphan_get:1391: inode 15 [ 313.752172][ C1] EXT4-fs (loop8): last error at time 1773329172: ext4_orphan_get:1391: inode 15 [ 313.787546][ T6713] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.116: couldn't read orphan inode 15 (err -117) [ 313.830582][ T6713] loop8: lost filesystem error report for type 5 error -117 [ 313.858449][ T6713] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.099883][ T6169] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.756646][ T5945] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 317.979317][ T5945] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 318.011084][ T5945] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.062584][ T5945] usb 9-1: Product: syz [ 318.072929][ T5945] usb 9-1: Manufacturer: syz [ 318.107002][ T5945] usb 9-1: SerialNumber: syz [ 318.150856][ T5945] usb 9-1: config 0 descriptor?? [ 318.210999][ T5945] hub 9-1:0.0: bad descriptor, ignoring hub [ 318.241109][ T5945] hub 9-1:0.0: probe with driver hub failed with error -5 [ 318.466796][ T5945] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 318.592645][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 318.797617][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.854370][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.263977][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.314683][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.747315][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.755322][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.188178][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.239976][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.967780][ T5438] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 322.237828][ T5438] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 322.265800][ T5438] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.321065][ T5438] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.393136][ T5438] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.448412][ T6781] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 322.465514][ T5438] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.980842][ T6777] x_tables: duplicate underflow at hook 3 [ 323.456776][ T6781] veth0: entered promiscuous mode [ 323.462442][ T6781] vlan2: entered promiscuous mode [ 323.700301][ T5945] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 323.779567][ T5945] usb 9-1: media controller created [ 324.273466][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.539896][ T3075] usb 7-1: USB disconnect, device number 2 [ 325.526107][ T5945] DVB: Unable to find symbol dib7000p_attach() [ 325.566564][ T5945] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 326.196686][ T5945] rc_core: IR keymap rc-dib0700-rc5 not found [ 326.202953][ T5945] Registered IR keymap rc-empty [ 326.300878][ T5945] dvb-usb: could not initialize remote control. [ 326.383843][ T5945] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 326.471985][ T5945] usb 9-1: USB disconnect, device number 2 [ 326.829030][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.835647][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.931293][ T6806] loop5: detected capacity change from 0 to 512 [ 327.073527][ T5945] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 327.131731][ T6806] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.127: inode has both inline data and extents flags [ 327.237011][ T6806] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 327.246494][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 327.262686][ C1] EXT4-fs (loop5): initial error at time 1773329185: ext4_orphan_get:1391: inode 15 [ 327.272456][ C1] EXT4-fs (loop5): last error at time 1773329185: ext4_orphan_get:1391: inode 15 [ 327.287436][ T6806] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.127: couldn't read orphan inode 15 (err -117) [ 327.347312][ T6806] loop5: lost filesystem error report for type 5 error -117 [ 327.468619][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.040706][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.679247][ T6827] bond1: entered promiscuous mode [ 329.752794][ T6827] bond1: entered allmulticast mode [ 329.787020][ T6827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.496795][ T5945] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 330.698206][ T5945] usb 9-1: Using ep0 maxpacket: 32 [ 330.733684][ T5945] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 330.776718][ T5945] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.885702][ T5945] usb 9-1: config 0 descriptor?? [ 331.219445][ T5945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 331.351333][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.376763][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 331.384647][ T5945] usb 9-1: media controller created [ 331.568505][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.520790][ T6857] loop5: detected capacity change from 0 to 512 [ 332.592039][ T6835] fuse: Bad value for 'fd' [ 332.598933][ T5945] stb0899_attach: Driver disabled by Kconfig [ 332.605066][ T5945] az6027: no front-end attached [ 332.605066][ T5945] [ 332.651725][ T6857] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.143: inode has both inline data and extents flags [ 332.669479][ T6857] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.673381][ T6857] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.143: couldn't read orphan inode 15 (err -117) [ 332.682970][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 332.683056][ C1] EXT4-fs (loop5): initial error at time 1773329191: ext4_orphan_get:1391: inode 15 [ 332.683204][ C1] EXT4-fs (loop5): last error at time 1773329191: ext4_orphan_get:1391: inode 15 [ 332.765402][ T5945] az6027: usb out operation failed. (-71) [ 332.776627][ T5832] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 332.797063][ T6857] loop5: lost filesystem error report for type 5 error -117 [ 332.807649][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 332.832944][ T6857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.907711][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input8 [ 332.956635][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 332.985663][ T5945] dvb-usb: schedule remote query interval to 400 msecs. [ 333.010294][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.054552][ T5945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 333.090915][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.162558][ T5945] usb 9-1: USB disconnect, device number 3 [ 333.180833][ T5832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.260961][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.312303][ T5832] usb 2-1: Product: syz [ 333.326816][ T5832] usb 2-1: Manufacturer: syz [ 333.342733][ T5832] usb 2-1: SerialNumber: syz [ 333.629874][ T5832] usb 2-1: 0:2 : does not exist [ 333.710394][ T5832] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 333.834721][ T5945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 334.507069][ T5832] usb 2-1: USB disconnect, device number 7 [ 334.515727][ T6310] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.092343][ T6886] bond1: entered promiscuous mode [ 335.143166][ T6886] bond1: entered allmulticast mode [ 335.191719][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.297610][ T5945] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 335.354650][ T6302] udevd[6302]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.592868][ T5945] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 335.655915][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.784253][ T5945] usb 7-1: config 0 descriptor?? [ 336.079577][ T5945] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 340.143060][ T5945] [drm:udl_init] *ERROR* Selecting channel failed [ 340.270032][ T5945] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 340.325965][ T5945] [drm] Initialized udl on minor 2 [ 340.399028][ T5945] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.437946][ T5945] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 340.459391][ T3075] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.520379][ T3075] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.534003][ T5945] usb 7-1: USB disconnect, device number 3 [ 340.576975][ T3075] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 341.256627][ T5945] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 341.482239][ T5945] usb 7-1: Using ep0 maxpacket: 32 [ 341.573230][ T5945] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 341.606710][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.638859][ T6931] mmap: syz.8.159 (6931) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 341.692693][ T5945] usb 7-1: config 0 descriptor?? [ 341.997189][ T5945] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 342.038239][ T5945] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.119861][ T5945] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 342.188223][ T5945] usb 7-1: media controller created [ 342.392897][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.012961][ T6938] bond1: entered promiscuous mode [ 343.066624][ T6938] bond1: entered allmulticast mode [ 343.117856][ T6938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.616552][ T5945] stb0899_attach: Driver disabled by Kconfig [ 343.622789][ T5945] az6027: no front-end attached [ 343.622789][ T5945] [ 343.633392][ T6919] fuse: Bad value for 'fd' [ 343.702613][ T5945] az6027: usb out operation failed. (-71) [ 343.713351][ T5945] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 343.807155][ T5945] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9 [ 343.900808][ T5945] dvb-usb: schedule remote query interval to 400 msecs. [ 343.997436][ T5945] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 344.148568][ T5945] usb 7-1: USB disconnect, device number 4 [ 346.762243][ T5945] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 350.005266][ T6989] bond2: Unable to set down delay as MII monitoring is disabled [ 350.512523][ T6989] bond2 (unregistering): Released all slaves [ 352.663308][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.687335][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.698316][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.751819][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.793617][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.877690][ T5832] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 353.144580][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.226926][ T5832] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 353.273950][ T5832] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 353.366562][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.445962][ T5832] usb 7-1: config 0 descriptor?? [ 353.526739][ T5438] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 353.717099][ T5438] usb 6-1: Using ep0 maxpacket: 32 [ 353.842525][ T5438] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 353.887425][ T5832] ath6kl: Failed to submit usb control message: -71 [ 353.894230][ T5832] ath6kl: unable to send the bmi data to the device: -71 [ 353.917340][ T5438] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.982134][ T5832] ath6kl: Unable to send get target info: -71 [ 354.006829][ T5832] ath6kl: Failed to init ath6kl core: -71 [ 354.016127][ T5438] usb 6-1: config 0 descriptor?? [ 354.045212][ T5832] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 354.237003][ T5832] usb 7-1: USB disconnect, device number 5 [ 354.338671][ T5438] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 354.400190][ T5438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 354.485619][ T5438] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 354.594946][ T5438] usb 6-1: media controller created [ 354.771171][ T5438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.897338][ T5776] Bluetooth: hci2: command tx timeout [ 355.755174][ T7003] fuse: Bad value for 'fd' [ 355.760064][ T5438] stb0899_attach: Driver disabled by Kconfig [ 355.766186][ T5438] az6027: no front-end attached [ 355.766186][ T5438] [ 355.830589][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 355.863982][ T5438] az6027: usb out operation failed. (-32) [ 355.891939][ T5438] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 355.969207][ T5438] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 356.097701][ T5438] dvb-usb: schedule remote query interval to 400 msecs. [ 356.105006][ T5438] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 356.249064][ T5438] usb 6-1: USB disconnect, device number 2 [ 356.287429][ T7000] chnl_net:caif_netlink_parms(): no params data found [ 356.629844][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.889654][ T5438] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 356.968632][ T5776] Bluetooth: hci2: command tx timeout [ 357.478879][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.930517][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.046637][ T49] Bluetooth: hci2: command tx timeout [ 359.606546][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 360.193787][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.488776][ T7040] bond2: Unable to set down delay as MII monitoring is disabled [ 360.645825][ T7040] bond2 (unregistering): Released all slaves [ 361.126854][ T5776] Bluetooth: hci2: command tx timeout [ 361.227820][ T5438] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 361.442276][ T5438] usb 9-1: device descriptor read/64, error -71 [ 361.746855][ T5438] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 361.947301][ T5438] usb 9-1: device descriptor read/64, error -71 [ 362.079418][ T5438] usb usb9-port1: attempt power cycle [ 362.353289][ T53] bridge_slave_1: left allmulticast mode [ 362.363476][ T53] bridge_slave_1: left promiscuous mode [ 362.374169][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.498614][ T53] bridge_slave_0: left allmulticast mode [ 362.504379][ T53] bridge_slave_0: left promiscuous mode [ 362.506855][ T5438] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 362.564559][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.589196][ T5438] usb 9-1: device descriptor read/8, error -71 [ 362.906657][ T5438] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 362.978889][ T5438] usb 9-1: device descriptor read/8, error -71 [ 363.191665][ T5438] usb usb9-port1: unable to enumerate USB device [ 363.746942][ T5438] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.958079][ T5438] usb 2-1: Using ep0 maxpacket: 32 [ 363.985471][ T5438] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 364.009641][ T5438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.045668][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.068464][ T5438] usb 2-1: config 0 descriptor?? [ 364.292066][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.340585][ T5438] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 364.421659][ T5438] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.459329][ T53] bond0 (unregistering): Released all slaves [ 364.492170][ T5438] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 364.526943][ T7000] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.559704][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.578827][ T5438] usb 2-1: media controller created [ 364.579156][ T7000] bridge_slave_0: entered allmulticast mode [ 364.677010][ T7000] bridge_slave_0: entered promiscuous mode [ 364.757799][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.785167][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.853393][ T7000] bridge_slave_1: entered allmulticast mode [ 364.908933][ T7000] bridge_slave_1: entered promiscuous mode [ 365.043727][ T5438] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.577641][ T5832] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 365.619893][ T7000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.735255][ T7000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.814594][ T5832] usb 7-1: Using ep0 maxpacket: 16 [ 365.888491][ T5832] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 365.900868][ T53] hsr_slave_0: left promiscuous mode [ 365.932383][ T5832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.947143][ T53] hsr_slave_1: left promiscuous mode [ 365.966053][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.974169][ T5832] usb 7-1: Product: syz [ 365.974270][ T5832] usb 7-1: Manufacturer: syz [ 365.974362][ T5832] usb 7-1: SerialNumber: syz [ 365.999920][ T5438] stb0899_attach: Driver disabled by Kconfig [ 366.006060][ T5438] az6027: no front-end attached [ 366.006060][ T5438] [ 366.013516][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.085630][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.114527][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.272737][ T53] veth1_macvtap: left promiscuous mode [ 366.301759][ T53] veth0_macvtap: left promiscuous mode [ 366.357849][ T53] veth1_vlan: left promiscuous mode [ 366.395838][ T5832] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 366.395992][ T53] veth0_vlan: left promiscuous mode [ 366.473961][ T5832] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 366.563221][ T7083] ===================================================== [ 366.571041][ T7083] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 366.572520][ T5832] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 366.580690][ T7083] _copy_to_user+0xcc/0x120 [ 366.593351][ T7083] i2cdev_ioctl_smbus+0x586/0x660 [ 366.598829][ T7083] i2cdev_ioctl+0xa14/0xf40 [ 366.603477][ T7083] __se_sys_ioctl+0x23c/0x400 [ 366.608559][ T7083] __x64_sys_ioctl+0x97/0xe0 [ 366.613389][ T7083] x64_sys_call+0x1975/0x3ea0 [ 366.618961][ T7083] do_syscall_64+0x134/0xf80 [ 366.623799][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.633251][ T7083] [ 366.638626][ T7083] Uninit was stored to memory at: [ 366.643886][ T7083] __i2c_smbus_xfer+0x25b3/0x3120 [ 366.650503][ T7083] i2c_smbus_xfer+0x2d8/0x480 [ 366.655433][ T7083] i2cdev_ioctl_smbus+0x4a1/0x660 [ 366.660908][ T7083] i2cdev_ioctl+0xa14/0xf40 [ 366.665597][ T7083] __se_sys_ioctl+0x23c/0x400 [ 366.670707][ T7083] __x64_sys_ioctl+0x97/0xe0 [ 366.675478][ T7083] x64_sys_call+0x1975/0x3ea0 [ 366.681862][ T7083] do_syscall_64+0x134/0xf80 [ 366.686774][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.692818][ T7083] [ 366.695213][ T7083] Local variable msgbuf1.i created at: [ 366.700335][ T5832] usb 7-1: media controller created [ 366.700955][ T7083] __i2c_smbus_xfer+0x853/0x3120 [ 366.711631][ T7083] i2c_smbus_xfer+0x2d8/0x480 [ 366.716686][ T7083] [ 366.719074][ T7083] Byte 0 of 1 is uninitialized [ 366.723912][ T7083] Memory access of size 1 starts at ffff88810dfebd06 [ 366.730892][ T7083] Data copied to user address 0000200000000240 [ 366.740404][ T7083] [ 366.742884][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.6.198 Not tainted syzkaller #0 PREEMPT(full) [ 366.753557][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 366.763916][ T7083] ===================================================== [ 366.771235][ T7083] Disabling lock debugging due to kernel taint [ 366.827306][ T5438] az6027: usb out operation failed. (-71) [ 366.833224][ T5438] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 366.913265][ T7083] Kernel panic - not syncing: kmsan.panic set ... [ 366.919838][ T7083] CPU: 0 UID: 0 PID: 7083 Comm: syz.6.198 Tainted: G B syzkaller #0 PREEMPT(full) [ 366.930789][ T7083] Tainted: [B]=BAD_PAGE [ 366.935046][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 366.945190][ T7083] Call Trace: [ 366.948556][ T7083] [ 366.951541][ T7083] __dump_stack+0x26/0x30 [ 366.956010][ T7083] dump_stack_lvl+0x50/0x1c0 [ 366.960702][ T7083] ? dump_stack+0x12/0x25 [ 366.965121][ T7083] dump_stack+0x1e/0x25 [ 366.969374][ T7083] vpanic+0x7b4/0x1430 [ 366.973569][ T7083] panic+0x15d/0x160 [ 366.977585][ T7083] kmsan_report+0x31a/0x320 [ 366.982220][ T7083] ? kmsan_internal_check_memory+0x1e8/0x240 [ 366.988299][ T7083] ? kmsan_copy_to_user+0xef/0x190 [ 366.993514][ T7083] ? _copy_to_user+0xcc/0x120 [ 366.998269][ T7083] ? i2cdev_ioctl_smbus+0x586/0x660 [ 367.003556][ T7083] ? i2cdev_ioctl+0xa14/0xf40 [ 367.008308][ T7083] ? __se_sys_ioctl+0x23c/0x400 [ 367.013255][ T7083] ? __x64_sys_ioctl+0x97/0xe0 [ 367.018122][ T7083] ? x64_sys_call+0x1975/0x3ea0 [ 367.023073][ T7083] ? do_syscall_64+0x134/0xf80 [ 367.027914][ T7083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.034127][ T7083] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 367.039594][ T7083] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 367.045029][ T7083] ? __i2c_transfer+0x1179/0x3280 [ 367.050201][ T7083] ? kmsan_get_metadata+0xf1/0x160 [ 367.055505][ T7083] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 367.062017][ T7083] ? kmsan_get_metadata+0xf1/0x160 [ 367.067315][ T7083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 367.073311][ T7083] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 367.078675][ T7083] ? kmsan_get_metadata+0xf1/0x160 [ 367.083965][ T7083] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 367.089997][ T7083] kmsan_internal_check_memory+0x1e8/0x240 [ 367.095998][ T7083] kmsan_copy_to_user+0xef/0x190 [ 367.101109][ T7083] _copy_to_user+0xcc/0x120 [ 367.105808][ T7083] i2cdev_ioctl_smbus+0x586/0x660 [ 367.111006][ T7083] i2cdev_ioctl+0xa14/0xf40 [ 367.115646][ T7083] ? kmsan_get_shadow_origin_ptr+0x3d/0xb0 [ 367.121630][ T7083] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 367.126785][ T7083] __se_sys_ioctl+0x23c/0x400 [ 367.131639][ T7083] __x64_sys_ioctl+0x97/0xe0 [ 367.136421][ T7083] x64_sys_call+0x1975/0x3ea0 [ 367.141267][ T7083] do_syscall_64+0x134/0xf80 [ 367.145982][ T7083] ? clear_bhb_loop+0x50/0xa0 [ 367.150798][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.156842][ T7083] RIP: 0033:0x7f5029d9c799 [ 367.161368][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.181194][ T7083] RSP: 002b:00007f502ac31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.189743][ T7083] RAX: ffffffffffffffda RBX: 00007f502a015fa0 RCX: 00007f5029d9c799 [ 367.197822][ T7083] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000007 [ 367.205889][ T7083] RBP: 00007f5029e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 367.214485][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.222546][ T7083] R13: 00007f502a016038 R14: 00007f502a015fa0 R15: 00007ffe28555378 [ 367.230658][ T7083] [ 367.234033][ T7083] Kernel Offset: disabled [ 367.238461][ T7083] Rebooting in 86400 seconds..