last executing test programs: 2m36.838163745s ago: executing program 0 (id=20): r0 = gettid() setpriority(0x0, r0, 0xb) 2m36.500654082s ago: executing program 0 (id=21): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) 2m35.598843904s ago: executing program 0 (id=26): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r4 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(r3, r4, 0x0, 0x0, 0x1000) getdents64(r3, 0x0, 0x0) 2m30.962976661s ago: executing program 0 (id=29): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x189042, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000040)='./bus\x00') lseek(r0, 0x5, 0x1) 2m29.827667849s ago: executing program 0 (id=33): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) r2 = socket$unix(0x1, 0x1, 0x0) getpeername$unix(r2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x1514, &(0x7f00000002c0)="$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") 2m27.602017235s ago: executing program 0 (id=41): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c002cce5331035f59cfe6081c1153cee170915c95ac72968c37c73ca077d8bfdcc880095b33831335cef0f28b27605393ceb6fd050d0000000000001cc3e9ec7c5bb3b867993cf16e436b36b338949eb9d3434cb994c1d3c83cbd224b9989e64a753936e8bdee2ad412626e48eeadb089c4e1abdda8aa1b82ec9afa"], 0x80, 0x1503, &(0x7f0000000580)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback, 0x32, r0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 2m12.337501393s ago: executing program 32 (id=41): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000000c0)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,discard,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c002cce5331035f59cfe6081c1153cee170915c95ac72968c37c73ca077d8bfdcc880095b33831335cef0f28b27605393ceb6fd050d0000000000001cc3e9ec7c5bb3b867993cf16e436b36b338949eb9d3434cb994c1d3c83cbd224b9989e64a753936e8bdee2ad412626e48eeadb089c4e1abdda8aa1b82ec9afa"], 0x80, 0x1503, &(0x7f0000000580)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback, 0x32, r0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) 2m11.724794282s ago: executing program 3 (id=80): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) inotify_init1(0x0) pselect6(0x40, &(0x7f0000000400)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40000000000, 0x0, 0x1}, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0) 2m10.448245699s ago: executing program 3 (id=81): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e8508"], 0x34}, {0x0}], 0x2, 0x0, 0x0, 0x20000080}, 0x4000) 2m9.549634043s ago: executing program 3 (id=83): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$vcsa(0xffffff9c, &(0x7f0000000300), 0x4480, 0x0) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, 0x0, r4) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r4) r5 = socket(0x2, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0xc2a10a980d0dcec8}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0xe88, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe5c, 0x2, [@TCA_FW_ACT={0xe58, 0x4, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0xb113, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0xf}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x4000, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x439d, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x4, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0xfffffffb, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0xff}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x558) 1m56.543556232s ago: executing program 3 (id=93): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m55.655492614s ago: executing program 3 (id=94): unshare(0x6a040000) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 1m52.853905472s ago: executing program 3 (id=97): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m37.497331761s ago: executing program 33 (id=97): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000, 0x0, {0x0, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m4.72282104s ago: executing program 6 (id=155): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0xc, 0xff2, &(0x7f0000002e00)=""/4082, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m3.123993403s ago: executing program 6 (id=158): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb03", 0x3e}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870", 0x1b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504", 0xc1}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000814, 0x0, 0x0) 1m1.88206932s ago: executing program 6 (id=161): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x1001}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) accept4(r4, 0x0, 0x0, 0x80800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @void, @eth={@empty, @random="0300", @val, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0x1ff, "f8", "d44534", 0x802}}}}}}}, 0x1e) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 49.506850112s ago: executing program 6 (id=183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x8, 0x7, 0x1, 0x0, '\'l\av'}]}], {0x14}}, 0x74}}, 0x0) 48.422461757s ago: executing program 6 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0), 0x0) 47.590318614s ago: executing program 6 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000100000000000000140020"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x82, 0x5, 0x6}}}}}}}]}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$alg(0x26, 0x5, 0x0) syz_clone(0x800000, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)="3230257fba12322ed5573507928e6f91d7a7b7142217cd771c90e685d7cdbcb9cdc61c3e02315a3616788e8e7b759d11d93a02c816bee155a648ccb0a063cd7c7fddb8c5") bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xb, @mcast1, 0x800a}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) 41.938132702s ago: executing program 4 (id=203): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 40.456579217s ago: executing program 4 (id=206): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 39.623668088s ago: executing program 4 (id=208): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x2000004) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/47, 0x2f}], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0xfffffffd) unshare(0x22020600) r1 = syz_open_dev$ndb(0x0, 0x0, 0x80080) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_procfs(r2, &(0x7f0000000200)='autogroup\x00') readahead(r1, 0x8, 0xd87) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"3fcd2093a08b18aa32719d81516bdd6706c0eb96aa11fabca3519470bc86441749f7235f5ae3b4c6cd16aa6e7adf1c5f53a1996c88bc068d3e4f7b2d66047e13ed5be1e512c1412c08284bc1997a54899e3d8e89c899b18f53c25a2cdefddf6fa9cad2f9a35955212f5e24240d9e3533496f2b8a7b567ab1c6c8c7678a2bbc6efb9a25b4f9adaeaa18efd7490f124b2cf7915eedc0760ac52853510aee6584f6fde1935f51cc0ccf14a729d908a35490de95fafd2b2cd58a3d2fb6e47bf9f65ea60adf923f3d59f1e7495f6a43dddfc86c09f09e8125a2492efa8bf8165e9e8588d679e3d9ab3b6a200c6896905423dc4404bb66c70311be8caea7d7d97d32bd83f9444e520059f75a366f3bbd9ef998484cbb0ad59b0cdd9557f5f40522ff714d3427a845f6bc66cd9244372120cd0108d9f93d6347dc3ad98180897af675d0d1dc4f530027e0a69a759f09c40cc17cdab8f33a87747afd4d88d940fdae2268325a37b320086a08a6ce658455d899c47bd5fd51380af8a4241095c70fe336a5ce33ceedf3206e7599e547ef2235c6bea09d9b03ee466f935e2562989d6e2035a363ff49c0c21aa3ed946932e90cecd259242e378d6225d23a4e0b6606e5e5a94d57451e5c8a29aca6cde93aa3ac7cd5fadaebf5f8fdce94b67b39789d7ec28cd2835bc8f7d2e96f3138ca91e789c766817076b49b6546e786290500f868b7234364b354bfe30509dbcf525c93e3ee1dac68c1baeeca27bc964ad589a22e239f5a8957ede67289f4c63655f3445d6e96411025db7271b4d3d3b13d3e0bdf601aa7ecb153572722b5f6a8f3f8898bd612af9dcfa25df8ed6c12e7d464c2b8990049fa4b94c5a01ead6feb092aacdb1628281df1e1c41bc50d593b3e210b99efe2bc9e355835edd1c6bbce7f0fa72b438a47689f57a9faaeadc51512aef4a049b31a8182aec5307377bba9e7fb12f1f7be7232ecc7e371526d6647c1482fc97b959d2c1ed290e38454305e7318043c192e1878e2c174d63cf0746d3574655f1b77701f8ee4a3a7a7e6838ec5498ae8abba1d31711c3e019811c28343b8f66c7fc54814d0c781a8345a8eaf020da34cf896b93e62df80946e433891b3cd55894195288cfa00f748bb0e06f5b5196682f68fa94a27d81289bcb8ef522f6b51e2e2f66dbaf4fe86aedbd5df3b47cd922ebca51f6252785669e5ae649e80cc75bb495a0cf3ec22a3b6f047a281229202bc51e24d0505212fd27db30464df0e4cab4c645d50c637d8808293a09d736041d89bf7bcb5dc989f1128aa473b58f9061cfc156696bba07e8aa14822651ed7bab61d236c0dbc09223f2ec00094eae4aa34592a19aae50dd04d79f83bcccb1620c98df76b9a7d56dd8888a865c52582fc3ae1e761e666d6e1e34cd5d5bc5d57a92c1ebc140c227d2b123a060ce52762b8ab1d4e1d1d7b31df58a585a52bb52cc4e33fd9e9774b5e29a77a6ea89a1609f389f546eefe5cbe69aa40141022cb577ad15f3c6f1381f3fec6dc728a406e5297290ec91305131fabfbf8edf1b9e317f419496467e36f8f63cd9562fee53c40364a51ff09d2b7115c5c72c07db6fa13b064d9f5c2cdaedbedcb738692780ac5c0265bab6ca4f2eb93b9c743ea5958236cbb428d74822b39a88d545544dedb7e3fa2f342e36d0834c0c1c71f533a33e284dd2fabb3363919996cf7b330f7cae19054b7661eb7a181a940ec9dab0abe96c0c05d81480b8ca929955bd2347aedd6af0fab4996a0f2b244ae4f4377e4d5cdae3fc42950013d10d0909012ebe86a52f8f3e0393e97bae8ad9e8af6b0f3e13a54af6990810ae45ea231c60bcd6773e5f64079dc050849dc41aefbabcd1cb31a450cb80ebed1bfd095a59bb582459631b79549d05bfef7259aa6ad5f015089f93b42e32cfb84215221440cbb703472da8474de917838aaf1379827241201f3e08c2fe10b3e6cb138a6cb9fab5131834f9cf2f90282bdcea623a8da797c48917147b7b504f6947d04754f72b69519c5aa064fb2af486880b2e7846333918cac6eacfc4712a536e65f9da6702bbdd307a89ecd373b9f9f59dcd089b499345389cd9de136046b23d8d15426f4f0028b180b420c24bad10e42642aab28fc70a7da2faf4b0767ff733992c46c59967ed0dedce9ab552bc00ba1bc9a71d9b3770abf240815164c47faa0dc27db5f8a8a9ad88b6eadda833a6618b4ac1c2a02d7987d93ae8438e477825f2664c9566171f29eaf5527f41af424a7a1b4e17b7171e09c405ed6515ddc7e7b2237d4acb94528b241a45991014976b500abc6cab2e6266136bdc34dc808c396d498b207d0be280be6698175d0099a2b1be2e6e0b0cd1d88fd21fc2e691504b0cc6cff1b64baea9b289a5681c90a09b329006d3c636f7931b9c34fb31a92b8f8e47f7ce76119cdcce2b9fefc51e45c4743bb1066ede1b8e6b70d77c3fa094e7a46a7431047113f194af3f88da2a85e0f6c8b1b6ade4a5aaf85c7849a993cfd47ebf27e006dda4c261ad1a28debd508a7f9538c8cadd1b2b262ba18560862f9243a28912409aa42eb4f79bf7c3503e97c4a1d13790b954931984ccc2f228ec610414a08ee5e7cc56f2da359cecf856935a3d4b40dce4547bf4def1a51441b3235783144f36659db3295333e0f8ff4976629c1c2cb5cac266207f10de9120c2ed5583271d297195a0b577736a052d0529fd782945dd4ec714351f3228f34a1c86bc0c07e9c62f5644f40936acc8a680d294a72195e1db443e3d66b7e827c4e2b5cd56d0c28ad98e153b52da2e12b523caa2f7ca7a0f9630cad58129b0a3abd9694ed0e5abbb81e650783a9077a46b7d8f49def81bd8c8fa3b06102a9fd8336266284bbfed1fff80f05b5d47934e301bcb02e6f55b292fa87bad31719b43321bc67459fc3b74980d85b5130f154f6a7bbd6f4c4dc2b595d330f8831afc4e858dcbbd07111047b96ae5573a471860131d12b3aec73045f0657f51e78aac1cd42bffbfa102d4a8b9e2323a9f844451150bdefd0e90bf76b7119003baa4a8a568a95738d04214d56f785b1d1b4cc91247924e382745c73aa3097eeb9dbb01b17d52f7804a1d8f5cec78b219979e83c845949691fa13bef0d4292a4ad16e5c8a908e330611f1fd3a4466785872ffd7fccf3042c079b38bf0fd3f91811797b6be9efe81042e284785f226ef317da886b13d4e8b177d4ee0a89d6a7622980d8708f4a67a4619c0ae677772bcb4bb78372078dea4f63f2f861417829c9c9058793c79bf9a130aa56b7cb5fc66a74d2136a998f68ff225506b19901679068c9f4ec5d4422017e38d4233d98767e0381bf526d46684846ebdbef4ed645331cf83f0ac2ff78bc1eb8ede1dfab2c72c7c1069697d5eab84f869cda1c3e5186ddc24f4da70b75f817620e15a1ad5c697afb267f8e4006df91a17e2ce29f281dfd9de4ee20eb89652d8a63bbef709fc49213a97fa1810bd34db8aea73b1687d910b3ca2d58b78ec19b6395a248e97527d8eb2575bd406f0df123ea7b80caa96e7795190f8cfac85c5f786ecfd86adf50904819cd3c3c8ec093d73f5864d166bfe73a6abc0ddb3fa972f6705100ed26e7f6944d62d89d73b1177afb289bbb5b0237c93a00c133e9bfbd701ba5f923ccdff76be6b3e50345291ed74b501bd80d1f7c0fdc4d282f24560e7d10bfd0fe09eb3a6f433aa33538bff000f561b3e049d880ac7f428993a9ec0444bddbe85edbfb07962d220c7fafa72c736b7fdb6666ff89e07639b7533c2f58133ee55bf599a2b7cf1645f563e26abcf48d6772d5bde59a2abf0ed86bfbd751a2a5f9c390f59bc26e24e51ff217c352a18fc2c14765be3c3dd476c2607c05e37b033a455f3a30d255f9dc7d15a65eaba65b001362eab0d222767cff52b4fd1213704072057c7a2343273d88b0de4ad1bbeb18ff6f59982b416330a26cb593616ccc0e1ff0f2ff38cf76ef1557455f4bade57e949391d3fddb5cf76bbccdd4d1374d9f6e0340e332344906f3c560f05bf52f2a79f33cdd5872d6d0a2ce14880ca250ab7389cb25fa047bef2211e19c2afd889a967761336c12e0d3840ada995cfbe76cd8deac948f041f87d074e20cdefca6ff531227a5008f2af4be0620df51832b36dfa2d0dad19c4b0fc920535f845fc4d7e7c385016bacbb7389176461a29118cb00e954c066597c2c5540b341c32c92f4d009c312940279e6e498ae357c3f826e6eedb92c8042d36c4bac19cc8c80561f7897e518f221a3a1e7f30dbec0b9bbfdae70cb64acf9a105bc0632459e903f53e09b2379180732482912160cd53477db889f34ebabd4c005b1ad3f024c10130724a7c903b303fccea6a318e1c2e0502e6809bb69bf23501937dacabff8bbb3ce6a1771b8794b44d501bc21bf69c9c408955843cd25713f120c318ea85f4cfab57cda49b25f64c189cb62ba53929b4e8987bc5f57c7b975b870f8bcf2145823822834e0e45dca04e0baba34a07cfaa2a02220f11f10e64210f704303eb79dd3460fecc24deaadea733fed7662dd951f94d5f1afc071aee65fa8c2d7556197f3cbac49c1d56de59c06c0fe2cb88680077a52ac05cba9c1248566943fdaa9e8be5dd5d4ed430df67c8ac088db72e0ca66b214123a9de709679804ca5dcab34e212ed36b55668f6b077970b7dd83e8438a03e3d537e6e83ced513a40d669ad64f73823ee5e7128804b83652eb3237e4f4a59665ed79c59addf7ae44d01c4871ee1649052ba8e8b36a04f6cecd7dcd369fc26d3e69195fba089cd86df06f27b54e2c478eef16e0e89a2e27ec1c4ef142c5a1aa56eda8282d653d6e010c10501771ae21d19905c3223b0e0753ecd8e2962f8918569171218a6d1f8a61aaa8f95ab251c935ffd4a91e7b6e4de0c8c3ce1074847d0da12bc52669c0c84208aa15f652fb50c36241bd351816b6a835b33514904cba959dd50d98c6c6d7aa30a0bb42d805b8d7a51055ad3b5e38b8774915dd41e9d00a6afbee0580545aa14e860d1a4a14d769a14a549a37cf0b0692bff5ccb192217272cbcc00b985cb924f9a0b07a375a0da7e8cbe86223d2eae87553a82fd36526dc1adeb3fbec972f7efb3fa3d46fc3f14c76cabdfc4fc76df20cc17e431b90d55cb766872d3b5d559e32756c12bcdcc1f660aa9d2de8b2df9debdb27f2306a64acd99c43cf8e5390bec410ff27337fc16f718e867fa4fa7af9f283e652a682ecd8825080823de8ba3ffec649dc3062a9f721905e5c7cd2b4c7da14595ab4ba74d72c23bcd1f9c3156cb4ec88dbbdc4221a8d712113ef686e3f741c3caeefb6716b8debd5480af2642775708c74cb2d008a3d3b1bde6d2727ae43870557cea37b7e9961ec9de4ade7bbc62c2f311b2e8ac2f39a6ccacc44332176c5f5f039773e255a8554300325b287bf8d974f96c66cd8fc99a25c12585be6dc8021b8f58a061272918d0de7896729c31f3b678da83a132028d43086ad1f0bf0db09098784d52be95ed324955491cbbcbf0f9f71eefb2bc246d28ea7ab1533221ab9f716a0b2f8dc49e68b7f23f3b50699401e2b5358c21d011d8e52f48243e142604a819ade990bca3b65f988487cbd7aa2c8b637d5a6660e8621d1a9d4911bd12f450203493b8d1c31e72902b2bbba55693b1e2ca866463aad5eb37884da5cc818e3f56233fc9d0f4774eacf793045769456910cd002c8c00e8628803031b59fd384065196179d55e2ecd71342d23ed8322a73610279c92b49a381c2ba74f8a7347779eb089c7e450009d75065", 0x1000}}, 0x1006) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0x9, 0xe55, 0x6, 0x2, 0x1040, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x5, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 37.446387652s ago: executing program 4 (id=213): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c"], 0x1c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 36.275869377s ago: executing program 4 (id=217): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 35.255380348s ago: executing program 4 (id=218): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f000000000000109022400010000900009040000010300000009"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14001, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x7d6, 0xfffffe00}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002280)={@initdev, @loopback}, &(0x7f00000022c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002300)) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0xffffffffffffff6d, 0x1, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 31.963088882s ago: executing program 34 (id=189): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000100000000000000140020"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x4, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x82, 0x5, 0x6}}}}}}}]}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$alg(0x26, 0x5, 0x0) syz_clone(0x800000, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)="3230257fba12322ed5573507928e6f91d7a7b7142217cd771c90e685d7cdbcb9cdc61c3e02315a3616788e8e7b759d11d93a02c816bee155a648ccb0a063cd7c7fddb8c5") bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xb, @mcast1, 0x800a}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) 22.750804879s ago: executing program 1 (id=241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x4000009) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x0, 0x0, 0x0) 19.663289125s ago: executing program 35 (id=218): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r2, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000104000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f000000000000109022400010000900009040000010300000009"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x14001, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r4, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x7d6, 0xfffffe00}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002280)={@initdev, @loopback}, &(0x7f00000022c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002300)) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0xffffffffffffff6d, 0x1, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 17.728077881s ago: executing program 1 (id=249): socket(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x4048800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 13.760299612s ago: executing program 2 (id=252): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'veth1_macvtap\x00', 0x7ff}) 12.371585803s ago: executing program 2 (id=253): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 10.802026281s ago: executing program 2 (id=254): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) 9.775573016s ago: executing program 2 (id=256): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000440)=0xf1c, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 8.539113207s ago: executing program 2 (id=258): socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.643496814s ago: executing program 2 (id=259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) sendfile(r2, r2, 0x0, 0x4800000009) 4.826986472s ago: executing program 5 (id=262): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3.54738448s ago: executing program 5 (id=263): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x15, 0x2, 0x3, "b43d70dde5dbbbe40f00f401bbe6c9000000c67f00", 0x33524742}) 3.331731153s ago: executing program 1 (id=264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0xac, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x58, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x3c, 0x6, [@m_vlan={0x38, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.034563557s ago: executing program 5 (id=265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d412000000000000002900", 0x2a) 2.162202581s ago: executing program 5 (id=266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0xf8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x88, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0xf4, 0x7fffffff, 0x7, {0x9, 0x0, 0x4, 0xd0c7, 0xffff, 0x86}, {0x10, 0x0, 0x0, 0x11, 0x1, 0xfffffffd}, 0x9, 0x80000, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa71}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.839078504s ago: executing program 1 (id=267): socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.398908164s ago: executing program 5 (id=268): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0x1, 0x1, 0xc, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x47f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 1.192650485s ago: executing program 1 (id=269): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) 582.979675ms ago: executing program 5 (id=270): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)={0x20, 0x18}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000800)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=271): syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a1", 0x1c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 180.661764][ T5773] cgroup: Unknown subsys name 'net' [ 180.847661][ T5773] cgroup: Unknown subsys name 'cpuset' [ 180.864104][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.353959][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.361105][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 231.474141][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 237.011862][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.024887][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.034427][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.047546][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.059607][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.118987][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.138208][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.150016][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.177239][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.188929][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.218249][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.251860][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.261344][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.275908][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.289861][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.429026][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.448087][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.457317][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.467202][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.517911][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.528254][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.538700][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.560927][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.572665][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.588249][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.225616][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 239.158079][ T52] Bluetooth: hci0: command tx timeout [ 239.165704][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 239.248155][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.255626][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.263479][ T5789] bridge_slave_0: entered allmulticast mode [ 239.273037][ T5789] bridge_slave_0: entered promiscuous mode [ 239.284862][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 239.305424][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.307093][ T52] Bluetooth: hci1: command tx timeout [ 239.313010][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.326236][ T5789] bridge_slave_1: entered allmulticast mode [ 239.335497][ T5789] bridge_slave_1: entered promiscuous mode [ 239.377843][ T52] Bluetooth: hci2: command tx timeout [ 239.643291][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 239.680702][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.700260][ T52] Bluetooth: hci3: command tx timeout [ 239.706116][ T52] Bluetooth: hci4: command tx timeout [ 239.771607][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.959670][ T5789] team0: Port device team_slave_0 added [ 239.974782][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 240.014660][ T5789] team0: Port device team_slave_1 added [ 240.292944][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.300449][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.327461][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.451071][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.458822][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.466649][ T5796] bridge_slave_0: entered allmulticast mode [ 240.476313][ T5796] bridge_slave_0: entered promiscuous mode [ 240.491620][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.501363][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.509131][ T5796] bridge_slave_1: entered allmulticast mode [ 240.518638][ T5796] bridge_slave_1: entered promiscuous mode [ 240.550055][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.557395][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.583880][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.750912][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.758720][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.766596][ T5793] bridge_slave_0: entered allmulticast mode [ 240.776222][ T5793] bridge_slave_0: entered promiscuous mode [ 240.875675][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.883323][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.891276][ T5801] bridge_slave_0: entered allmulticast mode [ 240.900519][ T5801] bridge_slave_0: entered promiscuous mode [ 240.913372][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.925828][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.933843][ T5793] bridge_slave_1: entered allmulticast mode [ 240.943228][ T5793] bridge_slave_1: entered promiscuous mode [ 240.962701][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.079843][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.090432][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.098344][ T5801] bridge_slave_1: entered allmulticast mode [ 241.108134][ T5801] bridge_slave_1: entered promiscuous mode [ 241.201543][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.224884][ T52] Bluetooth: hci0: command tx timeout [ 241.311221][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.318972][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.326809][ T5802] bridge_slave_0: entered allmulticast mode [ 241.335722][ T5802] bridge_slave_0: entered promiscuous mode [ 241.376426][ T52] Bluetooth: hci1: command tx timeout [ 241.393809][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.417310][ T5789] hsr_slave_0: entered promiscuous mode [ 241.427153][ T5789] hsr_slave_1: entered promiscuous mode [ 241.448522][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.458352][ T52] Bluetooth: hci2: command tx timeout [ 241.500735][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.508636][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.516568][ T5802] bridge_slave_1: entered allmulticast mode [ 241.526108][ T5802] bridge_slave_1: entered promiscuous mode [ 241.655860][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.704235][ T5796] team0: Port device team_slave_0 added [ 241.776243][ T52] Bluetooth: hci4: command tx timeout [ 241.781906][ T52] Bluetooth: hci3: command tx timeout [ 241.802565][ T5793] team0: Port device team_slave_0 added [ 241.842794][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.861807][ T5793] team0: Port device team_slave_1 added [ 241.878460][ T5796] team0: Port device team_slave_1 added [ 241.895413][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.091174][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.187743][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.194936][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.221376][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.268295][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.275507][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.302067][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.364453][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.371780][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.398244][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.437919][ T5801] team0: Port device team_slave_0 added [ 242.464195][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.471631][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.498062][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.531221][ T5802] team0: Port device team_slave_0 added [ 242.581855][ T5801] team0: Port device team_slave_1 added [ 242.613094][ T5802] team0: Port device team_slave_1 added [ 242.862336][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.869797][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.896492][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.055688][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.063189][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.089588][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.103252][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.110672][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.138100][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.163276][ T5793] hsr_slave_0: entered promiscuous mode [ 243.173040][ T5793] hsr_slave_1: entered promiscuous mode [ 243.181325][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.189159][ T5793] Cannot create hsr debugfs directory [ 243.223626][ T5796] hsr_slave_0: entered promiscuous mode [ 243.233874][ T5796] hsr_slave_1: entered promiscuous mode [ 243.242699][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.250650][ T5796] Cannot create hsr debugfs directory [ 243.279964][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.287235][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.313834][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.336159][ T52] Bluetooth: hci0: command tx timeout [ 243.456244][ T52] Bluetooth: hci1: command tx timeout [ 243.536246][ T52] Bluetooth: hci2: command tx timeout [ 243.761182][ T5801] hsr_slave_0: entered promiscuous mode [ 243.771090][ T5801] hsr_slave_1: entered promiscuous mode [ 243.779971][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.787877][ T5801] Cannot create hsr debugfs directory [ 243.806605][ T5802] hsr_slave_0: entered promiscuous mode [ 243.815308][ T5802] hsr_slave_1: entered promiscuous mode [ 243.823709][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.831524][ T5802] Cannot create hsr debugfs directory [ 243.856310][ T52] Bluetooth: hci3: command tx timeout [ 243.867108][ T52] Bluetooth: hci4: command tx timeout [ 244.381704][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.417814][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.539453][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.631743][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.146625][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.257207][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.316685][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.341482][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.379924][ T52] Bluetooth: hci0: command tx timeout [ 245.517396][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.537026][ T52] Bluetooth: hci1: command tx timeout [ 245.623023][ T52] Bluetooth: hci2: command tx timeout [ 245.710809][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.758302][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.782467][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.809616][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.869783][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.938295][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.947613][ T52] Bluetooth: hci4: command tx timeout [ 245.948775][ T5794] Bluetooth: hci3: command tx timeout [ 245.983681][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.023459][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.060519][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.171987][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.250221][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.466642][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.743544][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.916111][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.923678][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.946504][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.016484][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.110096][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.117777][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.221260][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.384805][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.392311][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.448923][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.489306][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.496969][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.574975][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.631001][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.638768][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.659042][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.666687][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.738256][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.065194][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.121006][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.199007][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.206751][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.341298][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.398120][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.405812][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.545758][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.553546][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.690311][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.697968][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.612750][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.890570][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.972422][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.275776][ T5789] veth0_vlan: entered promiscuous mode [ 250.429942][ T5789] veth1_vlan: entered promiscuous mode [ 250.533588][ T5796] veth0_vlan: entered promiscuous mode [ 250.546147][ T5793] veth0_vlan: entered promiscuous mode [ 250.633803][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.677733][ T5796] veth1_vlan: entered promiscuous mode [ 250.747903][ T5793] veth1_vlan: entered promiscuous mode [ 250.934946][ T5789] veth0_macvtap: entered promiscuous mode [ 250.985511][ T5789] veth1_macvtap: entered promiscuous mode [ 251.079349][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.095163][ T5796] veth0_macvtap: entered promiscuous mode [ 251.165368][ T5796] veth1_macvtap: entered promiscuous mode [ 251.277981][ T5793] veth0_macvtap: entered promiscuous mode [ 251.322133][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.358082][ T5793] veth1_macvtap: entered promiscuous mode [ 251.403057][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.416181][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.430857][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.471361][ T5802] veth0_vlan: entered promiscuous mode [ 251.529625][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.590222][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.602437][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.613318][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.626181][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.641445][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.672037][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.682863][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.698860][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.741646][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.750948][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.762475][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.772204][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.802567][ T5802] veth1_vlan: entered promiscuous mode [ 251.828795][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.837946][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.847112][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.856312][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.894145][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.905065][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.916481][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.927256][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.944382][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.083923][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.093480][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.105413][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.114695][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.333864][ T5802] veth0_macvtap: entered promiscuous mode [ 252.424162][ T5802] veth1_macvtap: entered promiscuous mode [ 252.670814][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.683473][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.693771][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.704600][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.714934][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.725770][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.745755][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.891894][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.904177][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.915801][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.927018][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.937131][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.947912][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.962752][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.073660][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.082945][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.092250][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.101354][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.700577][ T5801] veth0_vlan: entered promiscuous mode [ 253.830074][ T5801] veth1_vlan: entered promiscuous mode [ 254.215703][ T5801] veth0_macvtap: entered promiscuous mode [ 254.273157][ T5801] veth1_macvtap: entered promiscuous mode [ 254.462229][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.475468][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.485725][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.496708][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.506841][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.517683][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.527935][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.538680][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.553798][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.761561][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.773735][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.785060][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.797551][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.807988][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.818928][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.829150][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.839973][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.854973][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.176998][ T5801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.187814][ T5801] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.197138][ T5801] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.206312][ T5801] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.824109][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.833462][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.177080][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.185169][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.263650][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.271963][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.579451][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.588580][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.640778][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.649011][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.991054][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.999335][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.040431][ T5789] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 259.353285][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.361534][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.760188][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.769024][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.334610][ T5973] loop3: detected capacity change from 0 to 256 [ 260.528706][ T5975] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 260.581180][ T5973] loop3: detected capacity change from 0 to 128 [ 260.640626][ T5973] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.647810][ T5973] EXT4-fs: quotafile must be on filesystem root [ 261.829936][ T5986] loop1: detected capacity change from 0 to 1024 [ 261.896612][ T5986] EXT4-fs: Ignoring removed orlov option [ 261.902674][ T5986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.299571][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.684939][ T5997] loop0: detected capacity change from 0 to 256 [ 262.837525][ T5997] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 262.867313][ T5997] exFAT-fs (loop0): error, data size is invalid(10) [ 262.874360][ T5997] exFAT-fs (loop0): Filesystem has been set read-only [ 263.695311][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.703603][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.396856][ T5999] exFAT-fs (loop0): error, data size is invalid(10) [ 264.733433][ T4135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.742005][ T4135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.935167][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.395513][ T6002] loop2: detected capacity change from 0 to 164 [ 265.909245][ T6005] loop3: detected capacity change from 0 to 256 [ 267.143610][ T6008] loop1: detected capacity change from 0 to 1024 [ 267.753761][ T6015] loop4: detected capacity change from 0 to 128 [ 268.377873][ T6016] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 268.385715][ T6016] FAT-fs (loop4): Filesystem has been set read-only [ 270.901897][ T6035] loop1: detected capacity change from 0 to 1024 [ 271.078857][ T6037] loop2: detected capacity change from 0 to 1024 [ 271.379574][ T6043] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 274.067550][ T6047] hfsplus: xattr search failed [ 275.379078][ T6049] loop3: detected capacity change from 0 to 512 [ 275.527093][ T6049] ======================================================= [ 275.527093][ T6049] WARNING: The mand mount option has been deprecated and [ 275.527093][ T6049] and is ignored by this kernel. Remove the mand [ 275.527093][ T6049] option from the mount to silence this warning. [ 275.527093][ T6049] ======================================================= [ 275.928339][ T6049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.300435][ T6049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.313859][ T6049] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.947199][ T1988] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 276.969780][ T6063] loop0: detected capacity change from 0 to 512 [ 277.067750][ T6063] EXT4-fs: Ignoring removed bh option [ 277.079424][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.127683][ T1988] usb 5-1: Using ep0 maxpacket: 32 [ 277.153183][ T1988] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.164788][ T1988] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.170112][ T6063] EXT4-fs error (device loop0): __ext4_iget:5025: inode #15: block 1803188595: comm syz.0.33: invalid block [ 277.187720][ T6068] syz.1.34 uses obsolete (PF_INET,SOCK_PACKET) [ 277.215848][ T1988] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 277.225423][ T1988] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 277.234693][ T1988] usb 5-1: Product: syz [ 277.245125][ T1988] usb 5-1: Manufacturer: syz [ 277.254467][ T6063] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.33: couldn't read orphan inode 15 (err -117) [ 277.288663][ T6063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.330489][ T1988] hub 5-1:4.0: USB hub found [ 277.558614][ T1988] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 277.877592][ T5840] usb 5-1: USB disconnect, device number 2 [ 277.921331][ T1988] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 278.006659][ T6075] loop2: detected capacity change from 0 to 1024 [ 278.167144][ T6075] hfsplus: bad catalog entry type [ 278.167248][ T1988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.184559][ T1988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.194824][ T1988] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 278.204321][ T1988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.370199][ T1988] usb 4-1: config 0 descriptor?? [ 278.515077][ T12] hfsplus: b-tree write err: -5, ino 4 [ 278.843555][ T1988] apple 0003:05AC:0262.0001: unbalanced delimiter at end of report description [ 278.916933][ T1988] apple 0003:05AC:0262.0001: parse failed [ 278.923372][ T1988] apple 0003:05AC:0262.0001: probe with driver apple failed with error -22 [ 279.076616][ T1988] usb 4-1: USB disconnect, device number 2 [ 279.148363][ T6079] loop4: detected capacity change from 0 to 512 [ 279.180608][ T6079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.245678][ T6081] loop2: detected capacity change from 0 to 1024 [ 279.303862][ T6081] EXT4-fs: Ignoring removed bh option [ 279.327983][ T6079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.341333][ T6079] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.421649][ T6081] EXT4-fs: Mount option(s) incompatible with ext3 [ 279.521709][ T30] audit: type=1800 audit(1747127063.053:2): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.39" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 279.729129][ T6081] loop2: detected capacity change from 0 to 512 [ 279.785398][ T6081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.933373][ T5801] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.938388][ T6087] loop1: detected capacity change from 0 to 1024 [ 280.131465][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.144872][ T6081] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.396761][ T30] audit: type=1800 audit(1747127063.933:3): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 280.423768][ T30] audit: type=1800 audit(1747127063.943:4): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 280.489616][ T6092] loop3: detected capacity change from 0 to 512 [ 280.779896][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.793360][ T6092] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.099402][ T5802] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.462062][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.598564][ T6103] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.654763][ T6103] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 282.471641][ T6111] capability: warning: `syz.1.50' uses deprecated v2 capabilities in a way that may be insecure [ 282.505557][ T6107] loop2: detected capacity change from 0 to 2048 [ 282.703811][ T6107] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.092129][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 283.346667][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 283.363846][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.375267][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.387467][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 283.397447][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.559203][ T9] usb 4-1: config 0 descriptor?? [ 284.087756][ T9] apple 0003:05AC:029C.0002: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.3-1/input0 [ 284.156604][ T1988] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 284.258148][ T9] usb 4-1: USB disconnect, device number 3 [ 284.288602][ T12] wlan1: Trigger new scan to find an IBSS to join [ 284.364965][ T1988] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 284.373932][ T1988] usb 3-1: config 0 has no interface number 0 [ 284.380856][ T1988] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 284.392202][ T1988] usb 3-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 284.403616][ T1988] usb 3-1: config 0 interface 230 has no altsetting 0 [ 284.482984][ T1988] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 284.492856][ T1988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.502158][ T1988] usb 3-1: Product: syz [ 284.507147][ T1988] usb 3-1: Manufacturer: syz [ 284.517474][ T1988] usb 3-1: SerialNumber: syz [ 284.564820][ T1988] usb 3-1: config 0 descriptor?? [ 284.575597][ T6122] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 284.619871][ T6122] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 284.678203][ T1988] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 284.739672][ T1988] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 285.094923][ T6131] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 285.803986][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.811148][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.029581][ T6137] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.974935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 286.985718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.293107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 287.309094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 287.331241][ T1988] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 287.428787][ T1988] usb 3-1: USB disconnect, device number 2 [ 287.561478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 288.607976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 288.838383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 288.849019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.469519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 289.689028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.893677][ T6188] xt_cgroup: invalid path, errno=-2 [ 292.628315][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'. [ 293.344038][ T6199] process 'syz.4.76' launched './file2' with NULL argv: empty string added [ 294.658206][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 294.894915][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 295.015316][ T9] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 295.024891][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.033414][ T9] usb 5-1: Product: syz [ 295.037959][ T9] usb 5-1: Manufacturer: syz [ 295.042873][ T9] usb 5-1: SerialNumber: syz [ 295.231301][ T9] usb 5-1: config 0 descriptor?? [ 295.675750][ T9] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 295.684038][ T9] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 295.893184][ T9] usb 5-1: USB disconnect, device number 3 [ 296.211054][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.227378][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.238017][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.320830][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.349787][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.659433][ T6221] chnl_net:caif_netlink_parms(): no params data found [ 297.846384][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 298.171570][ T9] usb 4-1: config 0 has no interfaces? [ 298.199241][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 298.208763][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.217119][ T9] usb 4-1: Product: syz [ 298.221454][ T9] usb 4-1: Manufacturer: syz [ 298.226312][ T9] usb 4-1: SerialNumber: syz [ 298.426457][ T52] Bluetooth: hci5: command tx timeout [ 298.459327][ T9] usb 4-1: config 0 descriptor?? [ 299.036441][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 299.336579][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.348158][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.358351][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 299.367732][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.534354][ T9] usb 5-1: config 0 descriptor?? [ 300.057906][ T9] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 300.126974][ T9] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 300.190314][ T6221] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.197978][ T6221] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.205576][ T6221] bridge_slave_0: entered allmulticast mode [ 300.214252][ T6221] bridge_slave_0: entered promiscuous mode [ 300.307717][ T9] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 300.405937][ T6221] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.413593][ T6221] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.421407][ T6221] bridge_slave_1: entered allmulticast mode [ 300.429867][ T6221] bridge_slave_1: entered promiscuous mode [ 300.471500][ T9] usb 5-1: USB disconnect, device number 4 [ 300.506236][ T52] Bluetooth: hci5: command tx timeout [ 300.540485][ T9] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 300.969729][ T6221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.097650][ T6221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.334666][ T6252] use of bytesused == 0 is deprecated and will be removed in the future, [ 301.343453][ T6252] use the actual size instead. [ 301.925783][ T6221] team0: Port device team_slave_0 added [ 302.068188][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.247326][ T6221] team0: Port device team_slave_1 added [ 302.324940][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.582521][ T52] Bluetooth: hci5: command tx timeout [ 302.617061][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.930311][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.365161][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.372458][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.398965][ T6221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.630995][ T6221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.639635][ T6221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.666872][ T6221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.794327][ T2989] bridge_slave_1: left allmulticast mode [ 303.800469][ T2989] bridge_slave_1: left promiscuous mode [ 303.807673][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.904826][ T2989] bridge_slave_0: left allmulticast mode [ 303.911272][ T2989] bridge_slave_0: left promiscuous mode [ 303.917792][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.584962][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.637790][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.656897][ T52] Bluetooth: hci5: command tx timeout [ 304.696865][ T2989] bond0 (unregistering): Released all slaves [ 305.192237][ T6221] hsr_slave_0: entered promiscuous mode [ 305.204683][ T6221] hsr_slave_1: entered promiscuous mode [ 305.212582][ T6221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.220482][ T6221] Cannot create hsr debugfs directory [ 305.897415][ T2989] hsr_slave_0: left promiscuous mode [ 305.947268][ T2989] hsr_slave_1: left promiscuous mode [ 305.955368][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.963292][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.017447][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.025210][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.127310][ T2989] veth1_macvtap: left promiscuous mode [ 306.133106][ T2989] veth0_macvtap: left promiscuous mode [ 306.139362][ T2989] veth1_vlan: left promiscuous mode [ 306.144959][ T2989] veth0_vlan: left promiscuous mode [ 306.717581][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.646185][ T30] audit: type=1326 audit(1747127091.163:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.2.90" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893e78e969 code=0x0 [ 307.786974][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.808010][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.817803][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.855457][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.926665][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.302300][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 308.343380][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 309.326528][ T5840] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 309.539542][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 309.579045][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 309.588756][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.597193][ T5840] usb 3-1: Product: syz [ 309.601521][ T5840] usb 3-1: Manufacturer: syz [ 309.606398][ T5840] usb 3-1: SerialNumber: syz [ 309.723000][ T5840] usb 3-1: config 0 descriptor?? [ 309.791442][ T6221] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.877505][ T6221] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.934847][ T9] usb 4-1: USB disconnect, device number 4 [ 309.980314][ T5840] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 310.081008][ T6221] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.106451][ T52] Bluetooth: hci0: command tx timeout [ 310.238917][ T2989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.396992][ T6221] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.489819][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 310.632260][ T2989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.664508][ T5840] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 310.724521][ T5840] usb 3-1: USB disconnect, device number 3 [ 310.900431][ T2989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.104752][ T2989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.524152][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 311.756514][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 311.839651][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.850257][ T9] usb 4-1: config 0 has no interfaces? [ 312.101264][ T9] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 312.110760][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.119132][ T9] usb 4-1: Product: syz [ 312.123432][ T9] usb 4-1: Manufacturer: syz [ 312.128224][ T9] usb 4-1: SerialNumber: syz [ 312.181939][ T52] Bluetooth: hci0: command tx timeout [ 312.222083][ T6221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.280110][ T2989] bridge_slave_1: left allmulticast mode [ 312.287368][ T2989] bridge_slave_1: left promiscuous mode [ 312.294036][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.379454][ T9] usb 4-1: config 0 descriptor?? [ 312.386680][ T2989] bridge_slave_0: left allmulticast mode [ 312.392736][ T2989] bridge_slave_0: left promiscuous mode [ 312.399506][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.530880][ T6304] Zero length message leads to an empty skb [ 312.766995][ T5840] usb 4-1: USB disconnect, device number 5 [ 313.324236][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.408562][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.445705][ T2989] bond0 (unregistering): Released all slaves [ 313.704721][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.840273][ T4079] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.847955][ T4079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.077861][ T1988] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 314.140496][ T4079] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.147937][ T4079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.266280][ T52] Bluetooth: hci0: command tx timeout [ 314.370260][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.379029][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.387318][ T6278] bridge_slave_0: entered allmulticast mode [ 314.398078][ T6278] bridge_slave_0: entered promiscuous mode [ 314.420411][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.431680][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.440090][ T6278] bridge_slave_1: entered allmulticast mode [ 314.451467][ T6278] bridge_slave_1: entered promiscuous mode [ 314.489088][ T1988] usb 3-1: config 0 has no interfaces? [ 315.070664][ T1988] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 315.080295][ T1988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.088655][ T1988] usb 3-1: Product: syz [ 315.092951][ T1988] usb 3-1: Manufacturer: syz [ 315.097899][ T1988] usb 3-1: SerialNumber: syz [ 315.287373][ T2989] hsr_slave_0: left promiscuous mode [ 315.309561][ T1988] usb 3-1: config 0 descriptor?? [ 315.336599][ T2989] hsr_slave_1: left promiscuous mode [ 315.347162][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.355166][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.476816][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.484524][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.642521][ T2989] veth1_macvtap: left promiscuous mode [ 315.648679][ T2989] veth0_macvtap: left promiscuous mode [ 315.654572][ T2989] veth1_vlan: left promiscuous mode [ 315.660181][ T2989] veth0_vlan: left promiscuous mode [ 316.337544][ T52] Bluetooth: hci0: command tx timeout [ 317.009331][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880147fa400: rx timeout, send abort [ 317.517941][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880147fa400: abort rx timeout. Force session deactivation [ 317.709651][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 317.828168][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 318.243766][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.444494][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.926458][ T6278] team0: Port device team_slave_0 added [ 319.096136][ T6278] team0: Port device team_slave_1 added [ 319.470733][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.478604][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.504967][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.868801][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.877535][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.903915][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.879033][ T6278] hsr_slave_0: entered promiscuous mode [ 320.888123][ T6278] hsr_slave_1: entered promiscuous mode [ 321.582057][ T6221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.600950][ T6278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.738220][ T6278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.827645][ T6278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.975527][ T6278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.819919][ T6221] veth0_vlan: entered promiscuous mode [ 324.912741][ T6221] veth1_vlan: entered promiscuous mode [ 325.363957][ T6221] veth0_macvtap: entered promiscuous mode [ 325.458140][ T6221] veth1_macvtap: entered promiscuous mode [ 325.497528][ T1988] usb 3-1: USB disconnect, device number 4 [ 325.843756][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.854745][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.866263][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.877341][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.887364][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.898109][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.911710][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.958014][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.060064][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.071132][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.081398][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.092236][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.102558][ T6221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.113368][ T6221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.128898][ T6221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.350211][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.417770][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.425452][ T3884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.550644][ T6221] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.559887][ T6221] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.569053][ T6221] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.578883][ T6221] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.686670][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.694343][ T3884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.373605][ T1988] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 327.590915][ T1988] usb 3-1: Using ep0 maxpacket: 32 [ 327.625671][ T1988] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.634553][ T1988] usb 3-1: config 0 has no interface number 0 [ 327.641050][ T1988] usb 3-1: config 0 interface 184 has no altsetting 0 [ 327.763284][ T1988] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 327.773301][ T1988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.782875][ T1988] usb 3-1: Product: syz [ 327.787392][ T1988] usb 3-1: Manufacturer: syz [ 327.792147][ T1988] usb 3-1: SerialNumber: syz [ 327.949325][ T1988] usb 3-1: config 0 descriptor?? [ 328.010259][ T1988] smsc75xx v1.0.0 [ 328.612352][ T1988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 328.624029][ T1988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 329.211709][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.899053][ T1988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 329.910310][ T1988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 329.920679][ T1988] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 329.930872][ T1988] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 330.135569][ T1988] usb 3-1: USB disconnect, device number 5 [ 330.228899][ T6278] veth0_vlan: entered promiscuous mode [ 330.442434][ T6278] veth1_vlan: entered promiscuous mode [ 330.849684][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.877840][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.907273][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.962820][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.990888][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.054829][ T6278] veth0_macvtap: entered promiscuous mode [ 331.229945][ T6278] veth1_macvtap: entered promiscuous mode [ 331.809725][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.820493][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.830717][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.841407][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.851414][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.864173][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.874925][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.885742][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.901733][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.930139][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 332.187057][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.197895][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.208110][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.218845][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.228846][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.239484][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.249574][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.260847][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.274484][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.657455][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 332.917935][ T6278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.927137][ T6278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.936214][ T6278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.945219][ T6278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.218253][ T52] Bluetooth: hci2: command tx timeout [ 334.964107][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.973669][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.981691][ T6395] bridge_slave_0: entered allmulticast mode [ 334.991318][ T6395] bridge_slave_0: entered promiscuous mode [ 335.116961][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.124587][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.133927][ T6395] bridge_slave_1: entered allmulticast mode [ 335.225523][ T6395] bridge_slave_1: entered promiscuous mode [ 335.300561][ T52] Bluetooth: hci2: command tx timeout [ 335.323397][ T3604] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.509839][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 335.511876][ T3604] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.762073][ T3604] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.782102][ T9] usb 5-1: config 0 has an invalid interface number: 47 but max is 0 [ 335.791341][ T9] usb 5-1: config 0 has no interface number 0 [ 335.798975][ T9] usb 5-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.905812][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.922992][ T9] usb 5-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97 [ 335.934199][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.942724][ T9] usb 5-1: Product: syz [ 335.947231][ T9] usb 5-1: Manufacturer: syz [ 335.952063][ T9] usb 5-1: SerialNumber: syz [ 336.046640][ T3604] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.078893][ T9] usb 5-1: config 0 descriptor?? [ 336.120550][ T9] cdc_ncm 5-1:0.47: CDC Union missing and no IAD found [ 336.128004][ T9] cdc_ncm 5-1:0.47: bind() failure [ 336.180977][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.299207][ T6438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.310716][ T6438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.420040][ T9] usb 5-1: USB disconnect, device number 5 [ 336.800222][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.808799][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.828823][ T6395] team0: Port device team_slave_0 added [ 336.936784][ T6395] team0: Port device team_slave_1 added [ 337.133588][ T3604] bridge_slave_1: left allmulticast mode [ 337.140509][ T3604] bridge_slave_1: left promiscuous mode [ 337.147270][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.207372][ T3604] bridge_slave_0: left allmulticast mode [ 337.213294][ T3604] bridge_slave_0: left promiscuous mode [ 337.222043][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.377378][ T52] Bluetooth: hci2: command tx timeout [ 337.989673][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.034304][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.051255][ T3604] bond0 (unregistering): Released all slaves [ 338.207000][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.214249][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.242203][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.280285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.290013][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.487359][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.494535][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.520799][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.927733][ T3604] hsr_slave_0: left promiscuous mode [ 338.957022][ T3604] hsr_slave_1: left promiscuous mode [ 338.965033][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.973081][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.019775][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.040740][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.170257][ T3604] veth1_macvtap: left promiscuous mode [ 339.176251][ T3604] veth0_macvtap: left promiscuous mode [ 339.182305][ T3604] veth1_vlan: left promiscuous mode [ 339.188119][ T3604] veth0_vlan: left promiscuous mode [ 339.468931][ T52] Bluetooth: hci2: command tx timeout [ 339.800006][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 339.848263][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 340.348656][ T6395] hsr_slave_0: entered promiscuous mode [ 340.357495][ T6395] hsr_slave_1: entered promiscuous mode [ 340.365180][ T6395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.373050][ T6395] Cannot create hsr debugfs directory [ 342.093751][ T6395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.175790][ T6395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.288126][ T6395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.379297][ T6395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.863643][ T3922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.871904][ T3922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.109680][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.118013][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.967893][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.246646][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.379431][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.387110][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.563987][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.571824][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.208771][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.261193][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.268699][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.467725][ T6538] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 348.666954][ T1988] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 348.880437][ T1988] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.960193][ T1988] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 348.970723][ T1988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.979270][ T1988] usb 2-1: Product: syz [ 348.983696][ T1988] usb 2-1: Manufacturer: syz [ 348.988660][ T1988] usb 2-1: SerialNumber: syz [ 349.138443][ T1988] usb 2-1: config 0 descriptor?? [ 349.239572][ T1988] option 2-1:0.0: GSM modem (1-port) converter detected [ 349.417159][ T5846] usb 2-1: USB disconnect, device number 2 [ 349.469089][ T5846] option 2-1:0.0: device disconnected [ 349.830510][ T6395] veth0_vlan: entered promiscuous mode [ 350.023694][ T6395] veth1_vlan: entered promiscuous mode [ 350.432964][ T6395] veth0_macvtap: entered promiscuous mode [ 350.498271][ T6571] batman_adv: batadv0: Adding interface: ip6gretap1 [ 350.505106][ T6571] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.531782][ T6571] batman_adv: batadv0: Interface activated: ip6gretap1 [ 350.567139][ T6395] veth1_macvtap: entered promiscuous mode [ 350.594048][ T6575] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 350.884132][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.895854][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.907206][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.917929][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.928115][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.939201][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.949295][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.959991][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.974766][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.319723][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.331201][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.341969][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.352729][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.366320][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.378011][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.388308][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.398941][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.412522][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.472711][ T6395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.483834][ T6395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.493196][ T6395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.502176][ T6395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.943436][ T6587] netlink: 'syz.4.139': attribute type 27 has an invalid length. [ 352.096381][ T30] audit: type=1326 audit(1747127135.603:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.119853][ T30] audit: type=1326 audit(1747127135.603:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c78e969 code=0x7ffc0000 [ 352.142640][ T30] audit: type=1326 audit(1747127135.603:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.165042][ T30] audit: type=1326 audit(1747127135.603:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.756478][ T30] audit: type=1326 audit(1747127135.733:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.779347][ T30] audit: type=1326 audit(1747127135.733:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.802325][ T30] audit: type=1326 audit(1747127135.733:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c78e969 code=0x7ffc0000 [ 352.826633][ T30] audit: type=1326 audit(1747127135.763:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 352.849646][ T30] audit: type=1326 audit(1747127135.763:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312c78e969 code=0x7ffc0000 [ 352.872180][ T30] audit: type=1326 audit(1747127135.773:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.5.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f312c72ab39 code=0x7ffc0000 [ 354.636529][ T1988] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 354.976622][ T1988] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.987287][ T1988] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.001347][ T1988] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 355.010961][ T1988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.273066][ T1988] usb 5-1: config 0 descriptor?? [ 355.339217][ T1988] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 356.177560][ T1988] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 356.356661][ T1988] usb 2-1: device descriptor read/64, error -71 [ 356.479959][ T6636] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.486454][ T6636] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 356.556268][ T6636] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 356.618464][ T6636] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.625151][ T6636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.636275][ T1988] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 356.787112][ T6636] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 356.788950][ T1988] usb 2-1: device descriptor read/64, error -71 [ 356.826653][ T6636] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 356.832873][ T6636] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 356.918824][ T1988] usb usb2-port1: attempt power cycle [ 356.973719][ T6636] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 357.089729][ T6636] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 357.097612][ T6636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 357.132209][ T6636] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 357.213523][ T6636] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 357.222218][ T6636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 357.250032][ T6636] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 357.317570][ T1988] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 357.379098][ T1988] usb 2-1: device descriptor read/8, error -71 [ 357.656749][ T1988] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 357.759897][ T1988] usb 2-1: device descriptor read/8, error -71 [ 357.797095][ T5840] usb 5-1: USB disconnect, device number 6 [ 357.905050][ T1988] usb usb2-port1: unable to enumerate USB device [ 358.496440][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.657162][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.922846][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 358.942398][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.950700][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.130941][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.139291][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 359.145599][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.296216][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.151865][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 360.322436][ T6672] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 360.513017][ T5840] usb 2-1: config 0 has no interfaces? [ 360.554305][ T5840] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 360.564079][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.573150][ T5840] usb 2-1: Product: syz [ 360.577906][ T5840] usb 2-1: Manufacturer: syz [ 360.582658][ T5840] usb 2-1: SerialNumber: syz [ 360.608028][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 360.636695][ T5840] usb 2-1: config 0 descriptor?? [ 360.736644][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.756852][ T52] Bluetooth: hci5: command 0x0c1a tx timeout [ 361.763168][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.769828][ T5794] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.595739][ T6672] syz.5.151 (6672) used greatest stack depth: 4488 bytes left [ 362.680106][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 362.816404][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.859719][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.866283][ T5791] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.874721][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 365.826420][ T5840] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.134232][ T5840] usb 7-1: config 0 has no interfaces? [ 366.337998][ T5840] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.348149][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.356953][ T5840] usb 7-1: Product: syz [ 366.361371][ T5840] usb 7-1: Manufacturer: syz [ 366.366290][ T5840] usb 7-1: SerialNumber: syz [ 366.387716][ T5840] usb 7-1: config 0 descriptor?? [ 368.519985][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d8f2400: rx timeout, send abort [ 368.596661][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 368.826796][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 368.907099][ T5840] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 368.916567][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.028644][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d8f2400: abort rx timeout. Force session deactivation [ 369.049437][ T5840] usb 3-1: config 0 descriptor?? [ 369.089193][ T5840] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 370.181685][ T5840] gspca_nw80x: reg_w err -71 [ 370.186988][ T5840] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 370.306954][ T5840] usb 3-1: USB disconnect, device number 6 [ 370.339374][ T5951] udevd[5951]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory [ 372.379697][ T5791] Bluetooth: hci4: unexpected event for opcode 0x203c [ 373.871026][ T9] usb 2-1: USB disconnect, device number 7 [ 374.631737][ T5791] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 374.982664][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 1 < 9 [ 374.990072][ T5791] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 376.964406][ T9] usb 7-1: USB disconnect, device number 2 [ 377.683427][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.695717][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.756710][ T6802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.764650][ T6802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.948339][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.189'. [ 383.994324][ T6859] trusted_key: syz.5.201 sent an empty control message without MSG_MORE. [ 384.180542][ T6861] mmap: syz.4.202 (6861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 387.706339][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 387.989645][ T5840] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.999204][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.115453][ T5840] usb 2-1: config 0 descriptor?? [ 388.183034][ T5840] cp210x 2-1:0.0: cp210x converter detected [ 388.620820][ T5840] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 388.806777][ T5840] usb 2-1: cp210x converter now attached to ttyUSB0 [ 388.878356][ T5840] usb 2-1: USB disconnect, device number 8 [ 388.974484][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 389.090271][ T5840] cp210x 2-1:0.0: device disconnected [ 391.192178][ T6915] netlink: 44 bytes leftover after parsing attributes in process `syz.5.216'. [ 392.476372][ T5846] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 393.270502][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 393.379700][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 393.406824][ T6925] bridge0: entered promiscuous mode [ 393.412348][ T6925] macvlan2: entered promiscuous mode [ 393.711076][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.721186][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.267393][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.218'. [ 395.278269][ T6940] dvmrp0: entered allmulticast mode [ 395.285374][ T1988] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 395.676906][ T1988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 395.688982][ T1988] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.892506][ T1988] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 395.902410][ T1988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.910904][ T1988] usb 2-1: Product: syz [ 395.915291][ T1988] usb 2-1: Manufacturer: syz [ 395.922646][ T1988] usb 2-1: SerialNumber: syz [ 396.058539][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 396.078818][ T6946] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.259218][ T1988] usb 2-1: config 0 descriptor?? [ 396.268997][ T6942] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 396.339080][ T1988] usb 2-1: ucan: probing device on interface #0 [ 396.345604][ T1988] usb 2-1: ucan: invalid EP count (1) [ 396.351746][ T1988] usb 2-1: ucan: probe failed; try to update the device firmware [ 397.238074][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 397.254635][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 397.266372][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 397.287242][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 397.326373][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.192863][ T1988] usb 2-1: USB disconnect, device number 9 [ 398.419448][ T5846] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.438019][ T5846] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 398.445879][ T5846] usb 5-1: chopping to 0 config(s) [ 398.451524][ T5846] usb 5-1: can't read configurations, error -32 [ 398.646168][ T5846] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 398.886501][ T5846] usb 5-1: device descriptor read/64, error -32 [ 399.033556][ T5846] usb usb5-port1: attempt power cycle [ 399.386594][ T52] Bluetooth: hci1: command tx timeout [ 399.407748][ T5846] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 399.546330][ T5846] usb 5-1: device descriptor read/8, error -32 [ 399.608217][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 400.491189][ T5846] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 400.586650][ T5846] usb 5-1: device descriptor read/8, error -32 [ 400.726677][ T5846] usb usb5-port1: unable to enumerate USB device [ 401.126744][ T5846] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 401.356247][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 401.441382][ T5846] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 401.452806][ T5846] usb 3-1: config 0 has no interface number 0 [ 401.463786][ T5846] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.466647][ T52] Bluetooth: hci1: command tx timeout [ 401.707070][ T5846] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 401.717039][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.725233][ T5846] usb 3-1: Product: syz [ 401.729707][ T5846] usb 3-1: Manufacturer: syz [ 401.734442][ T5846] usb 3-1: SerialNumber: syz [ 401.980239][ T5846] usb 3-1: config 0 descriptor?? [ 402.039461][ T5846] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 402.050186][ T5846] em28xx 3-1:0.132: Video interface 132 found: isoc [ 402.305730][ T5846] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 402.462984][ T5846] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 402.472579][ T5846] em28xx 3-1:0.132: board has no eeprom [ 402.597136][ T5846] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 402.605439][ T5846] em28xx 3-1:0.132: analog set to isoc mode. [ 402.613272][ T2043] em28xx 3-1:0.132: Registering V4L2 extension [ 402.791431][ T5846] usb 3-1: USB disconnect, device number 7 [ 402.799046][ T5846] em28xx 3-1:0.132: Disconnecting em28xx [ 403.116431][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.123981][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.131765][ T6955] bridge_slave_0: entered allmulticast mode [ 403.140265][ T6955] bridge_slave_0: entered promiscuous mode [ 403.184423][ T4324] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.312303][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.321343][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.329314][ T6955] bridge_slave_1: entered allmulticast mode [ 403.339058][ T6955] bridge_slave_1: entered promiscuous mode [ 403.460927][ T4324] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.566420][ T52] Bluetooth: hci1: command tx timeout [ 404.006250][ T4324] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.265502][ T2043] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 404.273192][ T2043] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 404.280891][ T2043] em28xx 3-1:0.132: No AC97 audio processor [ 404.302168][ T4324] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.382876][ T2043] usb 3-1: Decoder not found [ 404.387926][ T2043] em28xx 3-1:0.132: failed to create media graph [ 404.394672][ T2043] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 404.399798][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.528282][ T2043] em28xx 3-1:0.132: Remote control support is not available for this card. [ 404.594242][ T5846] em28xx 3-1:0.132: Closing input extension [ 404.616677][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.719117][ T5846] em28xx 3-1:0.132: Freeing device [ 405.218456][ T5846] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 405.459224][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 405.502448][ T4324] bridge_slave_1: left allmulticast mode [ 405.509209][ T4324] bridge_slave_1: left promiscuous mode [ 405.509533][ T5846] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.515819][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.524992][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.542272][ T5846] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.555194][ T5846] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.569793][ T5846] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.579319][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.631041][ T52] Bluetooth: hci1: command tx timeout [ 406.298260][ T4324] bridge_slave_0: left allmulticast mode [ 406.304226][ T4324] bridge_slave_0: left promiscuous mode [ 406.311089][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.282756][ T5846] usb 3-1: can't set config #16, error -71 [ 407.390809][ T5846] usb 3-1: USB disconnect, device number 8 [ 407.860064][ T4324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.947979][ T4324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.035209][ T4324] bond0 (unregistering): Released all slaves [ 408.071172][ T6955] team0: Port device team_slave_0 added [ 408.218018][ T6955] team0: Port device team_slave_1 added [ 408.690446][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.697891][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.897128][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 408.950389][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.957739][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.987382][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.115392][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.127727][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.146779][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.159852][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.170185][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 409.186558][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 409.257646][ T5840] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.267106][ T5840] usb 3-1: config 0 has no interface number 0 [ 409.274376][ T5840] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 409.285526][ T5840] usb 3-1: config 0 interface 1 has no altsetting 0 [ 409.500036][ T4324] hsr_slave_0: left promiscuous mode [ 409.509804][ T4324] hsr_slave_1: left promiscuous mode [ 409.518180][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.525872][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.570396][ T4324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.578364][ T4324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.613077][ T4324] veth1_macvtap: left promiscuous mode [ 409.620015][ T4324] veth0_macvtap: left promiscuous mode [ 409.625845][ T4324] veth1_vlan: left promiscuous mode [ 409.631623][ T4324] veth0_vlan: left promiscuous mode [ 409.774714][ T5840] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 409.784537][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.792990][ T5840] usb 3-1: Product: syz [ 409.797383][ T5840] usb 3-1: Manufacturer: syz [ 409.802133][ T5840] usb 3-1: SerialNumber: syz [ 409.868810][ T5840] usb 3-1: config 0 descriptor?? [ 410.405556][ T5840] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 410.558215][ T5840] cx231xx 3-1:0.1: Failed to read PCB config [ 410.568795][ T5840] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 410.705426][ T5840] usb 3-1: USB disconnect, device number 9 [ 411.096736][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 411.116286][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 411.296717][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 411.296787][ T5791] Bluetooth: hci2: command tx timeout [ 411.323261][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 411.335370][ T9] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 411.343956][ T9] usb 6-1: config 0 has no interface number 0 [ 411.350354][ T9] usb 6-1: config 0 interface 12 has no altsetting 0 [ 411.458059][ T5840] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.466765][ T5840] usb 3-1: config 0 has no interface number 0 [ 411.473517][ T5840] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 411.487362][ T5840] usb 3-1: config 0 interface 1 has no altsetting 0 [ 411.522609][ T9] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 411.532331][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.540645][ T9] usb 6-1: Product: syz [ 411.545035][ T9] usb 6-1: Manufacturer: syz [ 411.549959][ T9] usb 6-1: SerialNumber: syz [ 411.709655][ T9] usb 6-1: config 0 descriptor?? [ 412.040102][ T4324] team0 (unregistering): Port device team_slave_1 removed [ 412.229962][ T4324] team0 (unregistering): Port device team_slave_0 removed [ 412.709591][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.718239][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.749956][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.831027][ T5840] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 412.842684][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.089465][ T5840] usb 3-1: config 0 descriptor?? [ 413.141996][ T5840] usb 3-1: can't set config #0, error -71 [ 413.191186][ T5840] usb 3-1: USB disconnect, device number 10 [ 413.398087][ T5791] Bluetooth: hci2: command tx timeout [ 414.374251][ T6955] hsr_slave_0: entered promiscuous mode [ 414.384274][ T6955] hsr_slave_1: entered promiscuous mode [ 414.393322][ T6955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.401242][ T6955] Cannot create hsr debugfs directory [ 415.506693][ T5791] Bluetooth: hci2: command tx timeout [ 415.517639][ T7053] can: request_module (can-proto-0) failed. [ 415.809232][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 415.869446][ T9] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 415.877604][ T9] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 415.885172][ T9] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 415.894720][ T9] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 416.168333][ T9] usb 6-1: USB disconnect, device number 2 [ 416.901547][ T3604] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.193304][ T3604] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.389947][ T3604] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.548454][ T5791] Bluetooth: hci2: command tx timeout [ 417.568022][ T3604] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.584194][ T6955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 417.610479][ T6955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 417.684503][ T6955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 417.941610][ T6955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.956813][ T2043] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 418.208513][ T2043] usb 6-1: Using ep0 maxpacket: 16 [ 418.231367][ T2043] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.242979][ T2043] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.337501][ T2043] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.348148][ T2043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.356867][ T2043] usb 6-1: Product: syz [ 418.361284][ T2043] usb 6-1: Manufacturer: syz [ 418.366821][ T2043] usb 6-1: SerialNumber: syz [ 418.493516][ T3604] bridge_slave_1: left allmulticast mode [ 418.500117][ T3604] bridge_slave_1: left promiscuous mode [ 418.507035][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.575457][ T3604] bridge_slave_0: left allmulticast mode [ 418.581672][ T3604] bridge_slave_0: left promiscuous mode [ 418.588751][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.756683][ T2043] usb 6-1: 0:2 : does not exist [ 418.802275][ T2043] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 418.987550][ T2043] usb 6-1: USB disconnect, device number 3 [ 419.465004][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.090828][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.225830][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.261651][ T3604] bond0 (unregistering): Released all slaves [ 420.390997][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.400137][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.408081][ T7039] bridge_slave_0: entered allmulticast mode [ 420.417746][ T7039] bridge_slave_0: entered promiscuous mode [ 420.568706][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.576436][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.583984][ T7039] bridge_slave_1: entered allmulticast mode [ 420.592930][ T7039] bridge_slave_1: entered promiscuous mode [ 421.132722][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.315429][ T3604] hsr_slave_0: left promiscuous mode [ 421.380334][ T3604] hsr_slave_1: left promiscuous mode [ 421.388461][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.396298][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.479005][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.486815][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.606964][ T3604] veth1_macvtap: left promiscuous mode [ 421.612793][ T3604] veth0_macvtap: left promiscuous mode [ 421.618999][ T3604] veth1_vlan: left promiscuous mode [ 421.625725][ T3604] veth0_vlan: left promiscuous mode [ 423.674892][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 423.701574][ T3604] team0 (unregistering): Port device team_slave_0 removed [ 423.904571][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.467640][ T7039] team0: Port device team_slave_0 added [ 424.527640][ T7039] team0: Port device team_slave_1 added [ 424.944262][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.953291][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.981022][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.182063][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.189977][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.219463][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.435035][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.659538][ T7039] hsr_slave_0: entered promiscuous mode [ 425.668597][ T7039] hsr_slave_1: entered promiscuous mode [ 425.676509][ T7039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.684213][ T7039] Cannot create hsr debugfs directory [ 425.772062][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.869494][ T3922] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.877183][ T3922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.999999][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.007781][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.557043][ T45] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 426.788278][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 426.829712][ T45] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 426.838378][ T45] usb 6-1: config 1 has no interface number 0 [ 426.847301][ T45] usb 6-1: config 1 interface 242 has no altsetting 0 [ 426.980022][ T45] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 426.989759][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.998117][ T45] usb 6-1: Product: syz [ 427.002423][ T45] usb 6-1: Manufacturer: syz [ 427.007267][ T45] usb 6-1: SerialNumber: syz [ 427.206428][ T5840] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 427.498269][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 427.696815][ T5840] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 427.706762][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.715376][ T5840] usb 2-1: Product: syz [ 427.720486][ T5840] usb 2-1: Manufacturer: syz [ 427.725324][ T5840] usb 2-1: SerialNumber: syz [ 427.905221][ T7039] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 427.938879][ T5840] usb 2-1: config 0 descriptor?? [ 428.029765][ T5840] empeg 2-1:0.0: empeg converter detected [ 428.036083][ T5840] usb 2-1: active config #0 != 1 ?? [ 428.051063][ T7039] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 428.184594][ T45] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 428.239240][ T7039] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 428.410028][ T7039] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 428.421813][ T45] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 428.433121][ T45] ===================================================== [ 428.440617][ T45] BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 [ 428.447992][ T45] usbnet_probe+0x2e57/0x4390 [ 428.452903][ T45] usb_probe_interface+0xd01/0x1310 [ 428.458389][ T45] really_probe+0x4d1/0xd90 [ 428.463105][ T45] __driver_probe_device+0x268/0x380 [ 428.469166][ T45] driver_probe_device+0x70/0x8b0 [ 428.474403][ T45] __device_attach_driver+0x4ee/0x950 [ 428.480062][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.488713][ T45] __device_attach+0x3c8/0x5c0 [ 428.493683][ T45] device_initial_probe+0x33/0x40 [ 428.500198][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.505287][ T45] device_add+0x12a9/0x1c10 [ 428.510197][ T45] usb_set_configuration+0x3493/0x3b70 [ 428.516028][ T45] usb_generic_driver_probe+0xfc/0x290 [ 428.521724][ T45] usb_probe_device+0x38a/0x690 [ 428.526977][ T45] really_probe+0x4d1/0xd90 [ 428.531717][ T45] __driver_probe_device+0x268/0x380 [ 428.537344][ T45] driver_probe_device+0x70/0x8b0 [ 428.542570][ T45] __device_attach_driver+0x4ee/0x950 [ 428.548435][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.553526][ T45] __device_attach+0x3c8/0x5c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 428.559499][ T45] device_initial_probe+0x33/0x40 [ 428.564713][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.569934][ T45] device_add+0x12a9/0x1c10 [ 428.574697][ T45] usb_new_device+0x104b/0x20c0 [ 428.579872][ T45] hub_event+0x5588/0x7580 [ 428.588326][ T45] process_scheduled_works+0xb97/0x1d90 [ 428.594106][ T45] worker_thread+0xedf/0x1590 [ 428.600285][ T45] kthread+0xd59/0xf00 [ 428.604575][ T45] ret_from_fork+0x6e/0x90 [ 428.609336][ T45] ret_from_fork_asm+0x1a/0x30 [ 428.614334][ T45] [ 428.616888][ T45] Uninit was stored to memory at: [ 428.622202][ T45] dev_addr_mod+0xb0/0x550 [ 428.626919][ T45] aqc111_bind+0x35f/0x1150 [ 428.631628][ T45] usbnet_probe+0xbe6/0x4390 [ 428.636575][ T45] usb_probe_interface+0xd01/0x1310 [ 428.642248][ T45] really_probe+0x4d1/0xd90 [ 428.647025][ T45] __driver_probe_device+0x268/0x380 [ 428.652487][ T45] driver_probe_device+0x70/0x8b0 [ 428.658037][ T45] __device_attach_driver+0x4ee/0x950 [ 428.663628][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.668907][ T45] __device_attach+0x3c8/0x5c0 [ 428.673885][ T45] device_initial_probe+0x33/0x40 [ 428.679257][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.684337][ T45] device_add+0x12a9/0x1c10 [ 428.692806][ T45] usb_set_configuration+0x3493/0x3b70 [ 428.699576][ T45] usb_generic_driver_probe+0xfc/0x290 [ 428.705312][ T45] usb_probe_device+0x38a/0x690 [ 428.710524][ T45] really_probe+0x4d1/0xd90 [ 428.715225][ T45] __driver_probe_device+0x268/0x380 [ 428.720974][ T45] driver_probe_device+0x70/0x8b0 [ 428.726413][ T45] __device_attach_driver+0x4ee/0x950 [ 428.732013][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.737293][ T45] __device_attach+0x3c8/0x5c0 [ 428.742221][ T45] device_initial_probe+0x33/0x40 [ 428.747525][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.752583][ T45] device_add+0x12a9/0x1c10 [ 428.757443][ T45] usb_new_device+0x104b/0x20c0 [ 428.762510][ T45] hub_event+0x5588/0x7580 [ 428.767252][ T45] process_scheduled_works+0xb97/0x1d90 [ 428.773003][ T45] worker_thread+0xedf/0x1590 [ 428.778148][ T45] kthread+0xd59/0xf00 [ 428.782429][ T45] ret_from_fork+0x6e/0x90 [ 428.787180][ T45] ret_from_fork_asm+0x1a/0x30 [ 428.797105][ T45] [ 428.799540][ T45] Uninit was stored to memory at: [ 428.804793][ T45] aqc111_bind+0x774/0x1150 [ 428.809640][ T45] usbnet_probe+0xbe6/0x4390 [ 428.814480][ T45] usb_probe_interface+0xd01/0x1310 [ 428.820001][ T45] really_probe+0x4d1/0xd90 [ 428.824695][ T45] __driver_probe_device+0x268/0x380 [ 428.830281][ T45] driver_probe_device+0x70/0x8b0 [ 428.835481][ T45] __device_attach_driver+0x4ee/0x950 [ 428.841588][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.846775][ T45] __device_attach+0x3c8/0x5c0 [ 428.851710][ T45] device_initial_probe+0x33/0x40 [ 428.857026][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.862134][ T45] device_add+0x12a9/0x1c10 [ 428.867285][ T45] usb_set_configuration+0x3493/0x3b70 [ 428.872982][ T45] usb_generic_driver_probe+0xfc/0x290 [ 428.878795][ T45] usb_probe_device+0x38a/0x690 [ 428.883900][ T45] really_probe+0x4d1/0xd90 [ 428.888773][ T45] __driver_probe_device+0x268/0x380 [ 428.898190][ T45] driver_probe_device+0x70/0x8b0 [ 428.903432][ T45] __device_attach_driver+0x4ee/0x950 [ 428.911393][ T45] bus_for_each_drv+0x3e0/0x680 [ 428.916574][ T45] __device_attach+0x3c8/0x5c0 [ 428.921498][ T45] device_initial_probe+0x33/0x40 [ 428.926897][ T45] bus_probe_device+0x3ba/0x5e0 [ 428.932013][ T45] device_add+0x12a9/0x1c10 [ 428.936873][ T45] usb_new_device+0x104b/0x20c0 [ 428.941953][ T45] hub_event+0x5588/0x7580 [ 428.946727][ T45] process_scheduled_works+0xb97/0x1d90 [ 428.952641][ T45] worker_thread+0xedf/0x1590 [ 428.957579][ T45] kthread+0xd59/0xf00 [ 428.961849][ T45] ret_from_fork+0x6e/0x90 [ 428.966641][ T45] ret_from_fork_asm+0x1a/0x30 [ 428.971633][ T45] [ 428.974060][ T45] Local variable buf.i created at: [ 428.979463][ T45] aqc111_bind+0x221/0x1150 [ 428.984145][ T45] usbnet_probe+0xbe6/0x4390 [ 428.989149][ T45] [ 428.991647][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 429.007859][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.019297][ T45] Workqueue: usb_hub_wq hub_event [ 429.024595][ T45] ===================================================== [ 429.031794][ T45] Disabling lock debugging due to kernel taint [ 429.038250][ T45] Kernel panic - not syncing: kmsan.panic set ... [ 429.044844][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 429.058644][ T45] Tainted: [B]=BAD_PAGE [ 429.062931][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.073261][ T45] Workqueue: usb_hub_wq hub_event [ 429.078555][ T45] Call Trace: [ 429.081996][ T45] [ 429.085060][ T45] __dump_stack+0x26/0x30 [ 429.089634][ T45] dump_stack_lvl+0x53/0x270 [ 429.094468][ T45] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.100541][ T45] dump_stack+0x1e/0x25 [ 429.104921][ T45] panic+0x4bd/0xd50 [ 429.109129][ T45] kmsan_report+0x29d/0x2a0 [ 429.113868][ T45] ? __netdev_printk+0x677/0xa00 [ 429.119009][ T45] ? __msan_warning+0x96/0x120 [ 429.124491][ T45] ? usbnet_probe+0x2e57/0x4390 [ 429.129721][ T45] ? usb_probe_interface+0xd01/0x1310 [ 429.135306][ T45] ? really_probe+0x4d1/0xd90 [ 429.140194][ T45] ? __driver_probe_device+0x268/0x380 [ 429.145857][ T45] ? driver_probe_device+0x70/0x8b0 [ 429.151253][ T45] ? __device_attach_driver+0x4ee/0x950 [ 429.156992][ T45] ? bus_for_each_drv+0x3e0/0x680 [ 429.162251][ T45] ? __device_attach+0x3c8/0x5c0 [ 429.167386][ T45] ? device_initial_probe+0x33/0x40 [ 429.172783][ T45] ? bus_probe_device+0x3ba/0x5e0 [ 429.178057][ T45] ? device_add+0x12a9/0x1c10 [ 429.182986][ T45] ? usb_set_configuration+0x3493/0x3b70 [ 429.188879][ T45] ? usb_generic_driver_probe+0xfc/0x290 [ 429.194773][ T45] ? usb_probe_device+0x38a/0x690 [ 429.200098][ T45] ? really_probe+0x4d1/0xd90 [ 429.204974][ T45] ? __driver_probe_device+0x268/0x380 [ 429.210728][ T45] ? driver_probe_device+0x70/0x8b0 [ 429.216104][ T45] ? __device_attach_driver+0x4ee/0x950 [ 429.221827][ T45] ? bus_for_each_drv+0x3e0/0x680 [ 429.227058][ T45] ? __device_attach+0x3c8/0x5c0 [ 429.232168][ T45] ? device_initial_probe+0x33/0x40 [ 429.237524][ T45] ? bus_probe_device+0x3ba/0x5e0 [ 429.242756][ T45] ? device_add+0x12a9/0x1c10 [ 429.247638][ T45] ? usb_new_device+0x104b/0x20c0 [ 429.252843][ T45] ? hub_event+0x5588/0x7580 [ 429.257627][ T45] ? process_scheduled_works+0xb97/0x1d90 [ 429.263527][ T45] ? worker_thread+0xedf/0x1590 [ 429.268563][ T45] ? kthread+0xd59/0xf00 [ 429.272991][ T45] ? ret_from_fork+0x6e/0x90 [ 429.277790][ T45] ? ret_from_fork_asm+0x1a/0x30 [ 429.282967][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.288364][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.293786][ T45] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 429.300239][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.305652][ T45] __msan_warning+0x96/0x120 [ 429.310409][ T45] usbnet_probe+0x2e57/0x4390 [ 429.315318][ T45] ? pm_runtime_enable+0x3b2/0x4d0 [ 429.320695][ T45] ? __pfx_usbnet_probe+0x10/0x10 [ 429.325930][ T45] usb_probe_interface+0xd01/0x1310 [ 429.331327][ T45] ? __pfx_usb_probe_interface+0x10/0x10 [ 429.337120][ T45] really_probe+0x4d1/0xd90 [ 429.341793][ T45] __driver_probe_device+0x268/0x380 [ 429.347253][ T45] driver_probe_device+0x70/0x8b0 [ 429.352520][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.357905][ T45] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.363918][ T45] __device_attach_driver+0x4ee/0x950 [ 429.369508][ T45] bus_for_each_drv+0x3e0/0x680 [ 429.374555][ T45] ? __pfx___device_attach_driver+0x10/0x10 [ 429.380647][ T45] __device_attach+0x3c8/0x5c0 [ 429.385573][ T45] device_initial_probe+0x33/0x40 [ 429.390765][ T45] bus_probe_device+0x3ba/0x5e0 [ 429.395809][ T45] device_add+0x12a9/0x1c10 [ 429.400542][ T45] usb_set_configuration+0x3493/0x3b70 [ 429.406307][ T45] usb_generic_driver_probe+0xfc/0x290 [ 429.411991][ T45] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 429.418270][ T45] usb_probe_device+0x38a/0x690 [ 429.423337][ T45] ? __pfx_usb_probe_device+0x10/0x10 [ 429.428911][ T45] really_probe+0x4d1/0xd90 [ 429.433586][ T45] __driver_probe_device+0x268/0x380 [ 429.439046][ T45] driver_probe_device+0x70/0x8b0 [ 429.444233][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.449645][ T45] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.455678][ T45] __device_attach_driver+0x4ee/0x950 [ 429.461228][ T45] bus_for_each_drv+0x3e0/0x680 [ 429.466252][ T45] ? __pfx___device_attach_driver+0x10/0x10 [ 429.472391][ T45] __device_attach+0x3c8/0x5c0 [ 429.477392][ T45] device_initial_probe+0x33/0x40 [ 429.482618][ T45] bus_probe_device+0x3ba/0x5e0 [ 429.487708][ T45] device_add+0x12a9/0x1c10 [ 429.492465][ T45] usb_new_device+0x104b/0x20c0 [ 429.497566][ T45] hub_event+0x5588/0x7580 [ 429.502276][ T45] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 429.508331][ T45] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 429.514066][ T45] ? kmsan_get_metadata+0x105/0x1b0 [ 429.519506][ T45] ? __pfx_hub_event+0x10/0x10 [ 429.524496][ T45] process_scheduled_works+0xb97/0x1d90 [ 429.530309][ T45] worker_thread+0xedf/0x1590 [ 429.535205][ T45] kthread+0xd59/0xf00 [ 429.539469][ T45] ? __pfx_worker_thread+0x10/0x10 [ 429.544775][ T45] ? __pfx_kthread+0x10/0x10 [ 429.549582][ T45] ret_from_fork+0x6e/0x90 [ 429.554204][ T45] ? __pfx_kthread+0x10/0x10 [ 429.558991][ T45] ret_from_fork_asm+0x1a/0x30 [ 429.564017][ T45] [ 429.567561][ T45] Kernel Offset: disabled [ 429.571979][ T45] Rebooting in 86400 seconds..