last executing test programs: 26m27.858560156s ago: executing program 32 (id=105): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r1, 0x7, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x20006, 0x1}) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x5, 0x1000004000003}) 25m1.984854189s ago: executing program 33 (id=296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0x2}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, r2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) unshare(0x20060400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ustat(0x801, 0x0) socket(0x10, 0x3, 0x0) 25m0.830340213s ago: executing program 34 (id=299): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 24m23.472014559s ago: executing program 35 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x80041) 24m23.048560119s ago: executing program 36 (id=349): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/46, 0x2e}, 0x7fffffff}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005a00)=ANY=[@ANYBLOB="8c3c00004600070128bd700000000000017c0000783c04"], 0x3c8c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getpid() syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)}], 0x2}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) lseek(0xffffffffffffffff, 0x8, 0x0) 24m3.282996423s ago: executing program 37 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 21m54.687889833s ago: executing program 38 (id=518): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000002d80)=""/53, 0x0, 0x7000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) 19m49.137036128s ago: executing program 39 (id=777): r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2, 0x3, 0xf8) sendto$unix(r3, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) recvmsg$qrtr(r0, &(0x7f0000001280)={&(0x7f0000001080), 0xc, &(0x7f0000001200)=[{&(0x7f00000010c0)=""/82, 0x52}, {&(0x7f0000001140)=""/186, 0xba}], 0x2, &(0x7f0000001240)=[{0x40, 0x0, 0x0, ""/43}], 0x40, 0x40010060}, 0x38, 0x1) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 18m44.937206043s ago: executing program 40 (id=836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="726177004000000000000000000000000000000000000000000000000000200002002b05065ea79bed2ccaa948000000000000000000000000000000000000000000000000000000000000000b0000009baab968fd5fe872fb000000790533484a0d853673067dbbaa4ae4221bc1d4a8d9d83b40720c1f7b71a2e952b10b0fdac86ec4f859d774d800ff60a613bb74cc38d3ea981f4936a431fc5a27c163f2fd745885e84d825d6d6a4adc5f9916bb633b060d19b7e2e3f9ebe5fb9ed453b3df"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc, 0x8, 0x800000000000000}}, [@algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x1100}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000001, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r7, &(0x7f00000003c0)=""/159, 0x9f, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r3, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 17m35.63114109s ago: executing program 41 (id=848): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd95) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x80, 0x384, 0x3c0, 0x280, 0x0, 0xc0e5, 0x8, 0x5, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0xa27f}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0xb}) r3 = inotify_init1(0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000380)="4ca6c3a1ab7c92831498389b1db0474174055d092a640a4535d6b9be4c44cfc8741721b96faa79413441a650da5bd82cd90e88631abf50822a52820f3c96673c3c1a13f0c7", 0x45}, {&(0x7f0000000580)="df6e88720b13b77b15acea34fbf3ae533d160305e4cf10856402c6f4a853dbd86a9ca24ed6a2aeee8d6c593e266c806f129d02996cf4ce99461edd35de5de61dfda499939bbbd1c390fcc3014128610976b90d944c9f0bf0bd4bca81fdb4db9e52635fedb5cb0dd2b12fe9a86ea776947312aa78ed9cc53bea450f9dc0d49837d26cfac253533c0d1db4d1b42ca7dd1f316a3b7f234440bec917def9122419cb73ddff58e8d86c3c695871d24c2b811e94c97626d6b5720afe8592ec1620069485271663320938fd7fa4c8147b9104c5b668b3236e77291b8e8dd5f7f9", 0xdd}, {&(0x7f0000000680)="b121bb5544be9db497afbd5b5107caf29b641de87ec29ed33c91831dac1f3b48659d6ce60e556b9db21914b831fd9af2f867495bd22fbe3d016079105456d8912f9828da303d275bea3d35de954f7fed7d9240c43509a614a29e2b758e64cd8c0cc0", 0x62}, {&(0x7f0000000700)="f95ded1ed16f50f2174e68dbf0a7d1e9b26a5de0bfccb0bbc6d29f22e5e1ce03780d75e8cd4fb94ba483c265b0dfa65bed0e2fa73af7d5e73c99b121402f48dec1f0706a6b858c42e93fe7152321b6e76ae58d7be3bf867c", 0x58}, {&(0x7f0000000780)="3d0587d6470de853bd4a4ca6059c5daf9377a0892ec7db8c060f566ef95a751d49f0340c3d687aaabe49b9afb14f02fded65a403f708e22ca3e22a0991747d019e33d07743ee0b05bd390f0b2918a3001ae5a5700897f2dc0c3fd9391616236ab7bdc51d9f04f44ebcfd69316256cc18af8c95219ee29ab74375bac035c481af8b", 0x81}, {&(0x7f0000000840)="0b1a7132435f69a3755e9b0d68e957741fff059c730bf6a4890e91b32f24e21b200d367f222a024535dee6f8de8ed05df5c0359a0732c236c179f42ed76463b3e5a02e7f0acbf4c7a4691a10b626ebc69e13fe7177afc2f70c277cee5e07ffb5490adc9c9b00", 0x66}], 0x6, &(0x7f0000000940)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x9f, 0x0, 0x5, [0xb, 0x200, 0x800]}, @lsrr={0x83, 0x7, 0x3f, [@private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0xde, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x68}, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r3], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r6, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000440)={0x4000001, "340000dce3000080000007000000000009000000e8ffffff1100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000240)={"0e337b42cc00d331ff0007000000000000001a00", r11}) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r12, 0x8, 0x1) 17m35.120108677s ago: executing program 42 (id=923): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x4f, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x9, 0xf0142) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x61}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r8, r7}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha3-384\x00'}}) syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) 17m33.283446004s ago: executing program 43 (id=926): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x7, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000800)={0x8, 0xff, 0x3, 0x10001, 0x0, 0x8, 0x6, 0x381}, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r9, @ANYBLOB="080002007f00000108000400ac1e00011400"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 15m0.106191196s ago: executing program 44 (id=1063): gettid() timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000100)) 11m56.371715915s ago: executing program 45 (id=1210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x0, 0x0, 0x40004}, 0x24008084) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x14, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9m37.247095458s ago: executing program 46 (id=1367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000300)="30800205e792080000", 0x9, r3) shutdown(r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000000)={0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc}) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r9 = dup(r8) write$binfmt_elf32(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000003000000fe03200001000700080007000000000003000000ffffff7f0200000000040000800900"], 0x79) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m28.162140729s ago: executing program 47 (id=1382): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r1 = dup(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, 0x0, 0x0) 8m32.161197568s ago: executing program 48 (id=1466): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r1]) 7m3.632424377s ago: executing program 49 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 6m44.026814822s ago: executing program 7 (id=1641): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3, 0xfffffffffffffffd, 0x544}, {0x8}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/56], 0xb8}}, 0x4000) 6m40.190800972s ago: executing program 7 (id=1645): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0xfffffffe, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 6m24.6823445s ago: executing program 50 (id=1645): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0xfffffffe, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 6m23.15086722s ago: executing program 51 (id=1647): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$video(0x0, 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x9) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x50}}, 0x0) 6m20.647374345s ago: executing program 52 (id=1651): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x2004, @remote, 0xe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @raw_data="a1f32fded73af9f8400daa2ccbdaf9240651a0c3647d3c59d66c623efd266e54d3cb25b97e34c435843774704ac8cc723d6360bb6612a42093fff4dfcc958eab14790174e25ec5a958d0549eb223941dc1b422f8582b7ac9ec54eecbf2a81fb9d69114228e8333e02a7190937663171cffa00effe0e763dc5d86bb6d6a35558a7b06dbfbd93ee91787ee65ddb75c2c3d34fb98c1e72a033fb2cb11b0739a2c398c226018d24dfffa4f964c7ab0dc6b174df7e8650c64b755de124889ff41b993a7ac921f882b06f0"}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x2, 0x0, 0x1, 0x8, 0xa, 0x100001ff, 0x9}) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2082) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a80000080005000100000005002b00050000000a000100aa"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000400)={&(0x7f00000003c0)=[{0x9, 0x10, 0x0, 0x0}], 0x1}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000054a3a4d9e8090bf92d2249600180000000000000cc4f70d169129b73eb1aa1c66371972d174545a7ec6095e920d45e9d3f8b79485dc9ec653b81baf347c9c0b1c5ad7fc3834d17c8b257e6e5c2a44ce29d94e166a4dc5e27c6cacca383bd927cd5ef53a600de6f2ae9237ac95b54364f1aad253e71e0650336b83d996b287b77", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf250900000005000500050000000800040003000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000cb4629a42ad5e66c6a753cf09771dbd433960ef4bb7ac9d1ab0f0ad338c117062ba8791fde6e099917f92af9861d2b9f2851c3ed75eab0a9aca704bbd320", @ANYRES16=0x0, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 6m20.175564984s ago: executing program 53 (id=1652): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x1000000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(r7, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3m58.990361621s ago: executing program 4 (id=1694): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000002580)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x0) 3m57.977784549s ago: executing program 4 (id=1695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) 3m56.858965663s ago: executing program 4 (id=1696): socket(0x400000000010, 0x3, 0x0) syz_io_uring_setup(0x2cf2, &(0x7f00000001c0)={0x0, 0x2000c684, 0x0, 0x6, 0x400250}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3m55.302141619s ago: executing program 4 (id=1698): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 3m54.582481978s ago: executing program 4 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 3m53.690336558s ago: executing program 4 (id=1700): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 3m50.505501465s ago: executing program 54 (id=1700): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_setup(0x3, &(0x7f0000000180)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 3m41.84498649s ago: executing program 8 (id=1709): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3m41.233031029s ago: executing program 8 (id=1710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 3m38.144520194s ago: executing program 55 (id=1710): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) 3m30.270436929s ago: executing program 56 (id=1718): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xa3, 0x8080) r1 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001d4f86540d804830047da010203010902380001020840b30904e4b10102020194052406008d"], 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10, 0x0, 0x8000000000000005}]}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000200)=0x8000) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000380)=[{r6}, {r6, 0x8000}], 0x2, 0x0, 0x0, 0x0) write$dsp(r2, &(0x7f0000002200)="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", 0x1000) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x3, 0x0, '\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES16=r8, @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x841) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB='enc=p'], 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r10, 0x8000000000000003}, 0x18) 2m49.201872625s ago: executing program 7 (id=1712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 2m47.998429476s ago: executing program 7 (id=1723): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 2m46.932421835s ago: executing program 7 (id=1725): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000d00)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2m45.88471287s ago: executing program 7 (id=1727): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) getpgid(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010207010902360001000000000904"], 0x0) 2m42.195203905s ago: executing program 57 (id=1727): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x46) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket(0x11, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) getpgid(0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000056544820e10508041125010207010902360001000000000904"], 0x0) 2m41.668460458s ago: executing program 9 (id=1733): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 2m40.737357372s ago: executing program 9 (id=1734): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 2m39.771857147s ago: executing program 9 (id=1736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 2m39.079015911s ago: executing program 9 (id=1738): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 2m38.401691073s ago: executing program 9 (id=1739): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r0, r1, 0x0, 0x101) 2m36.185339056s ago: executing program 9 (id=1741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 2m33.277928123s ago: executing program 58 (id=1741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) 2m4.013208323s ago: executing program 6 (id=1781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 2m0.906894961s ago: executing program 6 (id=1784): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) 1m59.946845415s ago: executing program 6 (id=1786): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x100040, 0x5]) 1m55.966893538s ago: executing program 6 (id=1790): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 1m54.749046972s ago: executing program 6 (id=1792): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 1m54.429800196s ago: executing program 5 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff02000000000000000000000000000104"], 0xfdef) 1m53.785169525s ago: executing program 6 (id=1794): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) 1m50.660185349s ago: executing program 59 (id=1794): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) 1m50.630827209s ago: executing program 5 (id=1796): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 1m47.205210898s ago: executing program 5 (id=1799): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x36, 0x4, 0x1, 0x8, 0xd8, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x1, 0xa, "791543c9579af35c"}]}, @rr={0x7, 0xb, 0x61, [@remote, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x1, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@remote, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x3, "96"}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x12, "557fe5af5be30afca74e621cbf66bf16"}, {0x7, 0x12, "6aa0a400db75c9498c86b37ef5342caa"}]}]}}}}}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m45.512367249s ago: executing program 5 (id=1800): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 1m44.597692332s ago: executing program 5 (id=1802): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 1m44.490602519s ago: executing program 1 (id=1803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff02000000000000000000000000000104"], 0xfdef) 1m43.776768445s ago: executing program 5 (id=1804): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001940)=ANY=[@ANYBLOB="120100008d1e502039102021a70201020301090212000100bfc0000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m40.918026939s ago: executing program 60 (id=1804): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001940)=ANY=[@ANYBLOB="120100008d1e502039102021a70201020301090212000100bfc0000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m40.848407311s ago: executing program 1 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x36, 0x4, 0x1, 0x8, 0xd8, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x1, 0xa, "791543c9579af35c"}]}, @rr={0x7, 0xb, 0x61, [@remote, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x1, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@loopback, @dev={0xac, 0x14, 0x14, 0x31}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@remote, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x3, "96"}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x12, "557fe5af5be30afca74e621cbf66bf16"}, {0x7, 0x12, "6aa0a400db75c9498c86b37ef5342caa"}]}]}}}}}) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m39.489865646s ago: executing program 1 (id=1808): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1ca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33d", 0xa2}, {&(0x7f00000002c0)="b1155498aa147d5345bf7f28767cb0160e43a397bd7570c1d12d3e06a6334296c872c191e6e2b68a08bd78c4988dcf59614cafcfa96f99140ac9f7193e8998f0993fb76c6481e13e3b648c286c934fe1c0fe868869f393b0f0373e25b390c5127c8952ea553daf116c8957ae988f8e6fa82216fa8f80a88894860903df4f387720a7d6657034ec7e335badeb31c379c1ebdd173d1971bdd9b1bfd1cad28c11471545a1e6d3", 0xa5}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m38.239404935s ago: executing program 1 (id=1810): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 1m37.319749267s ago: executing program 1 (id=1812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340e62e7f33245214c8edd78baf1610fba8bdaf6da4c8610f930717ffb79b5f422b"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0xffff000000000000, 0x0, 0x10040003}, 0x0) 1m34.78031419s ago: executing program 1 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000080) 1m32.733634526s ago: executing program 61 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000080) 1m7.585132523s ago: executing program 2 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340e62e7f33245214c8edd78baf1610fba8bdaf6da4c8610f930717ffb79b5f422b"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0xffff000000000000, 0x0, 0x10040003}, 0x0) 1m5.993828324s ago: executing program 2 (id=1842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x100040, 0x5]) 1m1.914398492s ago: executing program 2 (id=1845): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0xd0, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x20, 0x6, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 57.987387431s ago: executing program 2 (id=1846): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 56.909714836s ago: executing program 2 (id=1848): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x48043) r1 = dup(r0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x26e9, 0x0, 0x0, 0x10, 0x2, 0xf45}, 0x20) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x2) 49.442324779s ago: executing program 2 (id=1851): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x27) 45.769006074s ago: executing program 62 (id=1851): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x27) 44.220768782s ago: executing program 8 (id=1805): pipe2$9p(0x0, 0x4080) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 41.724890615s ago: executing program 8 (id=1855): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) 40.772396073s ago: executing program 8 (id=1856): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 39.652510865s ago: executing program 8 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340e62e7f33245214c8edd78baf1610fba8bdaf6da4c8610f930717ffb79b5f422b"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0xffff000000000000, 0x0, 0x10040003}, 0x0) 36.988870844s ago: executing program 63 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340e62e7f33245214c8edd78baf1610fba8bdaf6da4c8610f930717ffb79b5f422b"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0xffff000000000000, 0x0, 0x10040003}, 0x0) 18.892300403s ago: executing program 3 (id=1873): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 17.707362507s ago: executing program 3 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff02000000000000000000000000000104"], 0xfdef) 15.568826722s ago: executing program 3 (id=1876): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 10.527805177s ago: executing program 3 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) 10.318674186s ago: executing program 0 (id=1879): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdf7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x82, 0x1, "88"}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.967428307s ago: executing program 3 (id=1880): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6.336549733s ago: executing program 0 (id=1881): pipe2$9p(0x0, 0x4080) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x6361, 0x6, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.473405205s ago: executing program 0 (id=1882): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xc0040, 0x2c) 3.138609059s ago: executing program 0 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff02000000000000000000000000000104"], 0xfdef) 1.337525179s ago: executing program 0 (id=1884): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {0x7}, 0x0, 0x0, 0x2}}}, 0xf8}}, 0x0) 121.563078ms ago: executing program 0 (id=1885): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 3 (id=1886): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x4, 0x4, &(0x7f0000000080)={0x1d, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) kernel console output (not intermixed with test programs): 32 would solve the problem. [ 1657.313667][T14547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.409149][T14547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.442935][T14547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.523202][T14547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.723314][T14049] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.759905][T12624] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1657.986859][T12624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1658.026687][T12624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1658.091365][T12624] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1658.105985][T14049] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.123399][T12624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.171707][T12624] usb 9-1: config 0 descriptor?? [ 1658.510472][T12624] usbhid 9-1:0.0: can't add hid device: -71 [ 1658.523433][T12624] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1658.583017][T12624] usb 9-1: USB disconnect, device number 46 [ 1658.841854][T14547] hsr_slave_0: entered promiscuous mode [ 1658.857859][T14547] hsr_slave_1: entered promiscuous mode [ 1658.886874][T14547] debugfs: 'hsr0' already exists in 'hsr' [ 1658.907085][T14547] Cannot create hsr debugfs directory [ 1659.032846][T12624] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1659.239611][T12624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.272735][T12624] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.299389][T12624] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1659.343124][T12624] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1659.369212][T12624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.421388][T12624] usb 9-1: config 0 descriptor?? [ 1660.057336][T12624] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1660.362172][T14049] bridge_slave_1: left allmulticast mode [ 1660.402795][T14049] bridge_slave_1: left promiscuous mode [ 1660.409629][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.503964][T14049] bridge_slave_0: left allmulticast mode [ 1660.509982][T14049] bridge_slave_0: left promiscuous mode [ 1660.549337][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.596400][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1703'. [ 1661.313196][T10227] usb 9-1: reset high-speed USB device number 47 using dummy_hcd [ 1661.513000][T13812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1661.526540][T13812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1661.539132][T13812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1661.564824][T13812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1661.583383][T13812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1662.809124][ T794] usb 9-1: USB disconnect, device number 47 [ 1663.474845][T14049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.520578][T14049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.565212][T14049] bond0 (unregistering): Released all slaves [ 1663.709678][T10796] Bluetooth: hci2: command tx timeout [ 1664.429624][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1706'. [ 1664.481307][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1706'. [ 1664.497533][T14049] hsr_slave_0: left promiscuous mode [ 1664.512286][T14049] hsr_slave_1: left promiscuous mode [ 1664.555026][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.567909][T14049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.597846][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.613374][T14049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.718918][T14049] veth1_macvtap: left promiscuous mode [ 1664.737444][T14049] veth0_macvtap: left promiscuous mode [ 1664.759806][T14049] veth1_vlan: left promiscuous mode [ 1664.768564][T14049] veth0_vlan: left promiscuous mode [ 1665.783227][T10796] Bluetooth: hci2: command tx timeout [ 1666.647961][T14049] team0 (unregistering): Port device team_slave_1 removed [ 1666.762278][T14049] team0 (unregistering): Port device team_slave_0 removed [ 1667.882684][T10796] Bluetooth: hci2: command tx timeout [ 1668.427322][T14534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1668.537380][T14534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1668.889319][T14534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1668.991119][T14534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1668.991216][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 1669.279878][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.615947][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.909106][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.944805][T10796] Bluetooth: hci2: command tx timeout [ 1670.078732][ T5775] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1670.166272][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.318176][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.343294][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1670.372964][ T5775] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1670.388113][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.434325][ T5775] usb 1-1: config 0 descriptor?? [ 1670.704250][ T5775] usbhid 1-1:0.0: can't add hid device: -71 [ 1670.711182][ T5775] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1670.734632][ T5775] usb 1-1: USB disconnect, device number 17 [ 1671.227982][ T5775] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1671.293267][T14716] chnl_net:caif_netlink_parms(): no params data found [ 1671.434750][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.470786][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.513217][ T5775] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1671.552927][ T5775] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1671.572803][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.625274][ T5775] usb 1-1: config 0 descriptor?? [ 1671.871229][T14547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1671.986397][ T34] bridge_slave_1: left allmulticast mode [ 1672.013090][ T34] bridge_slave_1: left promiscuous mode [ 1672.020609][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.110427][ T34] bridge_slave_0: left allmulticast mode [ 1672.123474][ T34] bridge_slave_0: left promiscuous mode [ 1672.130406][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.254269][ T5775] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1672.793500][ T34] ip6gretap0 (unregistering): left promiscuous mode [ 1673.218239][T13812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1673.246182][T13812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1673.247914][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.257128][T13812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1673.279540][T13812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1673.292217][T13812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1673.297749][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.346390][ T34] bond0 (unregistering): Released all slaves [ 1673.360837][T14547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1673.499070][T14547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1673.504078][ T5775] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 1673.621845][T14547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1674.629038][T12615] usb 1-1: USB disconnect, device number 18 [ 1674.831893][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 1674.858047][T14791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1714'. [ 1674.936717][ T34] hsr_slave_0: left promiscuous mode [ 1674.947630][ T34] hsr_slave_1: left promiscuous mode [ 1674.962239][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1675.005409][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1675.017844][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1675.027062][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.060196][ T34] veth1_macvtap: left promiscuous mode [ 1675.074754][ T34] veth0_macvtap: left promiscuous mode [ 1675.085302][ T34] veth1_vlan: left promiscuous mode [ 1675.091379][ T34] veth0_vlan: left promiscuous mode [ 1675.383159][T10796] Bluetooth: hci0: command tx timeout [ 1676.244537][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1676.304863][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1676.579099][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.587530][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.597218][T14716] bridge_slave_0: entered allmulticast mode [ 1676.616635][T14716] bridge_slave_0: entered promiscuous mode [ 1676.704672][T14791] ip6gretap0: entered promiscuous mode [ 1676.723975][T14791] syz_tun: entered promiscuous mode [ 1676.821403][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.845558][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.871488][T14716] bridge_slave_1: entered allmulticast mode [ 1676.887085][T14716] bridge_slave_1: entered promiscuous mode [ 1677.460242][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.480805][T10796] Bluetooth: hci0: command tx timeout [ 1677.565785][T14534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.722323][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1678.120942][T14716] team0: Port device team_slave_0 added [ 1678.181664][ T34] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.259510][T14066] syz_tun (unregistering): left promiscuous mode [ 1678.376811][T14716] team0: Port device team_slave_1 added [ 1678.487085][ T34] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.938608][ T34] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.007845][T14534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.043916][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1679.051192][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.116082][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1679.163168][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1679.195715][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1679.248645][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1679.465704][ T34] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.543261][T10796] Bluetooth: hci0: command tx timeout [ 1679.686553][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.694335][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.080632][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.088503][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.154248][T14778] chnl_net:caif_netlink_parms(): no params data found [ 1680.249458][T14716] hsr_slave_0: entered promiscuous mode [ 1680.289816][T14716] hsr_slave_1: entered promiscuous mode [ 1680.308139][T14716] debugfs: 'hsr0' already exists in 'hsr' [ 1680.320418][T14716] Cannot create hsr debugfs directory [ 1681.149248][T13812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1681.159435][T13812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1681.169817][T13812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1681.185956][T13812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1681.189661][T14547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.205297][T13812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1681.396497][ T34] bridge_slave_1: left allmulticast mode [ 1681.412885][ T34] bridge_slave_1: left promiscuous mode [ 1681.424916][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.442174][ T34] bridge_slave_0: left allmulticast mode [ 1681.449582][ T34] bridge_slave_0: left promiscuous mode [ 1681.466056][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.628738][T13812] Bluetooth: hci0: command tx timeout [ 1682.123457][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1682.149771][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1682.170162][ T34] bond0 (unregistering): Released all slaves [ 1682.324942][ T34] tipc: Left network mode [ 1683.032083][T14778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.040839][T14778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.050333][T14778] bridge_slave_0: entered allmulticast mode [ 1683.065547][T14778] bridge_slave_0: entered promiscuous mode [ 1683.195394][T14778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.212824][T14778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.220724][T14778] bridge_slave_1: entered allmulticast mode [ 1683.242186][T14778] bridge_slave_1: entered promiscuous mode [ 1683.281193][T14547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.307750][T13812] Bluetooth: hci1: command tx timeout [ 1683.491348][ T34] hsr_slave_0: left promiscuous mode [ 1683.504070][ T34] hsr_slave_1: left promiscuous mode [ 1683.520930][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1683.528882][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.546071][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1683.564681][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.607813][ T34] veth1_macvtap: left promiscuous mode [ 1683.613799][ T34] veth0_macvtap: left promiscuous mode [ 1683.619752][ T34] veth1_vlan: left promiscuous mode [ 1683.633004][ T34] veth0_vlan: left promiscuous mode [ 1683.892551][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1683.900491][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1684.637799][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1684.670671][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1685.384395][T13812] Bluetooth: hci1: command tx timeout [ 1685.466521][T14778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.553292][T14778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.579520][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.587317][T14049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.100650][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.108367][T14049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.266866][T14778] team0: Port device team_slave_0 added [ 1686.331727][T14778] team0: Port device team_slave_1 added [ 1686.656667][T14778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.671233][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.723652][T14778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.825190][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.858006][T14778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.866156][T14778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.900104][T14778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.104131][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.201228][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.471104][T13812] Bluetooth: hci1: command tx timeout [ 1687.520833][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.786223][T14778] hsr_slave_0: entered promiscuous mode [ 1687.801846][T14778] hsr_slave_1: entered promiscuous mode [ 1687.817153][T14778] debugfs: 'hsr0' already exists in 'hsr' [ 1687.824376][T14778] Cannot create hsr debugfs directory [ 1688.072994][T14716] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1688.126114][T14832] chnl_net:caif_netlink_parms(): no params data found [ 1688.184938][T14716] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1688.219734][T14534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.661463][T14716] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1688.729448][T14716] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1689.543487][T13812] Bluetooth: hci1: command tx timeout [ 1689.807344][ T34] bridge_slave_1: left allmulticast mode [ 1689.823764][ T34] bridge_slave_1: left promiscuous mode [ 1689.853815][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.891874][ T34] bridge_slave_0: left allmulticast mode [ 1689.917214][ T34] bridge_slave_0: left promiscuous mode [ 1689.927247][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.295536][ T34] ip6gretap0 (unregistering): left promiscuous mode [ 1690.661880][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1690.688821][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1690.716276][ T34] bond0 (unregistering): Released all slaves [ 1691.123828][T14832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.131772][T14832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.146879][T14832] bridge_slave_0: entered allmulticast mode [ 1691.162165][T14832] bridge_slave_0: entered promiscuous mode [ 1691.187984][T14832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.213063][T14832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.221197][T14832] bridge_slave_1: entered allmulticast mode [ 1691.309404][T14832] bridge_slave_1: entered promiscuous mode [ 1692.098547][T14832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.167357][T14832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.298807][ T34] hsr_slave_0: left promiscuous mode [ 1692.327912][ T34] hsr_slave_1: left promiscuous mode [ 1692.340123][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.362620][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.376209][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.406769][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1692.420840][T10796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1692.431697][T10796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1692.445908][T10796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1692.464622][T10796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1692.476659][T10796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1692.496620][ T34] veth1_macvtap: left promiscuous mode [ 1692.507176][ T34] veth0_macvtap: left promiscuous mode [ 1692.513752][ T34] veth1_vlan: left promiscuous mode [ 1692.519502][ T34] veth0_vlan: left promiscuous mode [ 1693.430864][T13812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1693.449386][T13812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1693.477682][T13812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1693.494621][T13812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1693.509884][T13812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1693.770573][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1693.796888][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1694.175056][T14832] team0: Port device team_slave_0 added [ 1694.382120][T14832] team0: Port device team_slave_1 added [ 1694.592965][T10796] Bluetooth: hci3: command tx timeout [ 1694.643711][T14832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.651412][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.680352][T14832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.803228][T14832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.810590][T14832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.844464][T14832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.571180][T14832] hsr_slave_0: entered promiscuous mode [ 1695.588962][T14832] hsr_slave_1: entered promiscuous mode [ 1695.622842][T10796] Bluetooth: hci4: command tx timeout [ 1695.978692][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1696.040895][T14778] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1696.229393][T14778] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1696.256525][T14778] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1696.379864][T14778] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1696.648921][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1696.668587][T10796] Bluetooth: hci3: command tx timeout [ 1696.822510][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.830105][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1696.999221][T14926] chnl_net:caif_netlink_parms(): no params data found [ 1697.298046][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.305833][ T7419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.389271][T14929] chnl_net:caif_netlink_parms(): no params data found [ 1697.591817][ T34] bridge_slave_1: left allmulticast mode [ 1697.602643][ T34] bridge_slave_1: left promiscuous mode [ 1697.609370][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.656734][ T34] bridge_slave_0: left allmulticast mode [ 1697.672859][ T34] bridge_slave_0: left promiscuous mode [ 1697.679856][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.708186][T10796] Bluetooth: hci4: command tx timeout [ 1698.037934][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.054912][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.069749][ T34] bond0 (unregistering): Released all slaves [ 1698.374087][ T34] hsr_slave_0: left promiscuous mode [ 1698.381791][ T34] hsr_slave_1: left promiscuous mode [ 1698.393691][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1698.403893][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1698.743587][T10796] Bluetooth: hci3: command tx timeout [ 1698.846673][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1698.876312][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1699.562248][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.570942][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.579252][T14926] bridge_slave_0: entered allmulticast mode [ 1699.588574][T14926] bridge_slave_0: entered promiscuous mode [ 1699.689543][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.698020][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.706618][T14926] bridge_slave_1: entered allmulticast mode [ 1699.719045][T14926] bridge_slave_1: entered promiscuous mode [ 1699.760921][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.774231][T14929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.782108][T14929] bridge_slave_0: entered allmulticast mode [ 1699.790679][T10796] Bluetooth: hci4: command tx timeout [ 1699.798538][T14929] bridge_slave_0: entered promiscuous mode [ 1699.940834][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.964697][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.992587][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.000415][T14929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.008716][T14929] bridge_slave_1: entered allmulticast mode [ 1700.018024][T14929] bridge_slave_1: entered promiscuous mode [ 1700.229460][T14926] team0: Port device team_slave_0 added [ 1700.252238][T14926] team0: Port device team_slave_1 added [ 1700.306859][T14929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.331529][T14929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.586941][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.613269][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.649744][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.749974][T14929] team0: Port device team_slave_0 added [ 1700.795514][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.804236][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.833037][T10796] Bluetooth: hci3: command tx timeout [ 1700.840295][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.900276][T14929] team0: Port device team_slave_1 added [ 1701.267232][T14929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.282984][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.314630][T14929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.339490][T14778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.381191][T14926] hsr_slave_0: entered promiscuous mode [ 1701.396852][T14926] hsr_slave_1: entered promiscuous mode [ 1701.405267][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 1701.411321][T14926] Cannot create hsr debugfs directory [ 1701.418830][T14832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1701.450232][T14832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1701.495320][T14929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.506401][T14929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1701.533725][T14929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.637432][T14832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1701.659913][T14832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1701.862981][T10796] Bluetooth: hci4: command tx timeout [ 1701.888303][T14929] hsr_slave_0: entered promiscuous mode [ 1701.897894][T14929] hsr_slave_1: entered promiscuous mode [ 1701.906816][T14929] debugfs: 'hsr0' already exists in 'hsr' [ 1701.913198][T14929] Cannot create hsr debugfs directory [ 1702.363514][T14778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.450445][ T34] bridge_slave_1: left allmulticast mode [ 1702.457698][ T34] bridge_slave_1: left promiscuous mode [ 1702.465950][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.480235][ T34] bridge_slave_0: left allmulticast mode [ 1702.486737][ T34] bridge_slave_0: left promiscuous mode [ 1702.494544][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.782235][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.798995][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.821921][ T34] bond0 (unregistering): Released all slaves [ 1702.942600][ T7419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.950216][ T7419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.104356][T14716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1703.137944][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.145801][ T7419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.217113][ T34] hsr_slave_0: left promiscuous mode [ 1703.229384][ T34] hsr_slave_1: left promiscuous mode [ 1703.240197][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.250737][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.720080][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1703.743389][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1705.527613][T14832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1705.844683][T14832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1706.018509][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.026403][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.124094][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.131545][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.224321][T14926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1706.291285][T14716] veth0_vlan: entered promiscuous mode [ 1706.301076][T14926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1706.379791][T14926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1706.405372][T14926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1706.584822][T14778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.675258][T14929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1706.729953][T14716] veth1_vlan: entered promiscuous mode [ 1706.771345][T14929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1706.888597][T14929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1706.960279][T14929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1707.492084][T14716] veth0_macvtap: entered promiscuous mode [ 1707.693828][T14716] veth1_macvtap: entered promiscuous mode [ 1708.059378][T14716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.221891][T14716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.416554][ T34] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.426769][ T34] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.463804][ T34] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.473957][ T34] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.547650][T14926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.821261][T14832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1708.867466][T14926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.980746][T14778] veth0_vlan: entered promiscuous mode [ 1709.040516][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.048249][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.166673][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.174406][T14049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.245275][T14929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1709.281732][T14778] veth1_vlan: entered promiscuous mode [ 1709.844591][T14929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.004649][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.012544][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.085883][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.093706][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.292195][T14778] veth0_macvtap: entered promiscuous mode [ 1710.311791][T14832] veth0_vlan: entered promiscuous mode [ 1710.524975][T14778] veth1_macvtap: entered promiscuous mode [ 1710.620455][T14832] veth1_vlan: entered promiscuous mode [ 1711.032140][T14778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.171748][T14778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1711.313773][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.331333][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.396052][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.427890][T12138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.533241][T14832] veth0_macvtap: entered promiscuous mode [ 1711.738366][T14832] veth1_macvtap: entered promiscuous mode [ 1712.172215][T14926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.217601][T14832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.369744][T14832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.542809][ T3482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.554975][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.597699][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.622960][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.111369][T14929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.298557][ T7419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.353687][ T7419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.687941][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.729859][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.882600][T14926] veth0_vlan: entered promiscuous mode [ 1716.099608][ T794] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1716.141629][T14926] veth1_vlan: entered promiscuous mode [ 1716.302733][ T794] usb 10-1: Using ep0 maxpacket: 32 [ 1716.326541][ T794] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 1716.358978][ T794] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1716.408378][ T794] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1716.432679][ T794] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1716.508141][ T794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1716.537353][ T794] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1716.559882][ T794] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1716.585936][ T794] usb 10-1: Product: syz [ 1716.590478][ T794] usb 10-1: Manufacturer: syz [ 1716.632249][ T794] usb 10-1: SerialNumber: syz [ 1716.675918][ T794] usb 10-1: config 0 descriptor?? [ 1716.751226][ T794] ldusb 10-1:0.0: Interrupt in endpoint not found [ 1716.895426][T14929] veth0_vlan: entered promiscuous mode [ 1716.998648][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1717.015870][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1717.019622][T14926] veth0_macvtap: entered promiscuous mode [ 1717.031091][T15029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1717.147400][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1702'. [ 1717.165748][T14926] veth1_macvtap: entered promiscuous mode [ 1717.177342][ T794] usb 10-1: USB disconnect, device number 61 [ 1717.403640][T14929] veth1_vlan: entered promiscuous mode [ 1717.811994][T14926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.044752][T14926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.217873][ T3482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.243627][ T3482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.327183][ T3482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.364519][ T3482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.562176][T14929] veth0_macvtap: entered promiscuous mode [ 1718.731155][T14929] veth1_macvtap: entered promiscuous mode [ 1719.270183][T14929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.387940][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1721'. [ 1719.438438][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1721'. [ 1719.515461][T14929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.659549][T15064] ip6gretap0: entered promiscuous mode [ 1719.688108][T15064] syz_tun: entered promiscuous mode [ 1719.869964][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.960009][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.006159][ T34] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.108810][ T34] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.322827][ T34] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.391125][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.583593][ T491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.591932][ T491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.923002][T10227] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 1721.140719][T10227] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1721.215575][T10227] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1721.258286][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.289080][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.297370][T10227] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1721.376494][T10227] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1721.472742][T10227] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1721.563469][T10227] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1721.619143][T10227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1721.693030][T10227] usb 10-1: Product: syz [ 1721.697938][T10227] usb 10-1: Manufacturer: syz [ 1721.718995][T10227] usb 10-1: SerialNumber: syz [ 1721.774324][T10227] usb 10-1: config 0 descriptor?? [ 1721.879339][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.959168][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.109600][T10227] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1722.143255][T10227] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -5 [ 1722.537024][T10227] usb 10-1: USB disconnect, device number 62 [ 1724.769525][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.166118][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.364390][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1728'. [ 1725.616446][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.849103][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.298864][T15126] tipc: Started in network mode [ 1726.323488][T15126] tipc: Node identity c28a82af3206, cluster identity 4711 [ 1726.377088][T15126] tipc: Enabled bearer , priority 0 [ 1726.541871][T15117] tipc: Disabling bearer [ 1727.636029][ T57] bridge_slave_1: left allmulticast mode [ 1727.642117][ T57] bridge_slave_1: left promiscuous mode [ 1727.673698][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.744316][ T57] bridge_slave_0: left allmulticast mode [ 1727.750255][ T57] bridge_slave_0: left promiscuous mode [ 1727.781712][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.547389][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 1728.584791][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 1729.191165][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1729.246631][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1729.324603][ T57] bond0 (unregistering): Released all slaves [ 1729.440960][T15146] ip6gretap0: entered promiscuous mode [ 1729.561598][T13812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1729.580586][T13812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1729.585650][T15146] syz_tun: entered promiscuous mode [ 1729.599627][T13812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1729.652541][T13812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1729.659304][T15146] debugfs: 'hsr1' already exists in 'hsr' [ 1729.679132][T13812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1729.722906][T15146] Cannot create hsr debugfs directory [ 1731.298298][ T57] hsr_slave_0: left promiscuous mode [ 1731.323939][ T57] hsr_slave_1: left promiscuous mode [ 1731.333548][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1731.341251][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1731.414259][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1731.421994][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1731.522773][ T57] veth1_macvtap: left promiscuous mode [ 1731.531748][ T57] veth0_macvtap: left promiscuous mode [ 1731.556559][ T57] veth1_vlan: left promiscuous mode [ 1731.611136][T15173] libceph: resolve '0..' (ret=-3): failed [ 1731.634298][ T57] veth0_vlan: left promiscuous mode [ 1731.792797][T13812] Bluetooth: hci0: command tx timeout [ 1733.202269][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1733.259676][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1733.728814][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1733.792058][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1733.865804][T13812] Bluetooth: hci0: command tx timeout [ 1734.073573][T14716] syz_tun (unregistering): left promiscuous mode [ 1734.531408][T12138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.581595][T12138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.836762][T15198] syzkaller0: entered promiscuous mode [ 1734.844287][ T9103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.894195][T15198] syzkaller0: entered allmulticast mode [ 1734.902870][ T9103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.200898][ T57] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.550227][ T57] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.765994][ T57] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.846472][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1735.875385][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1735.945575][T13812] Bluetooth: hci0: command tx timeout [ 1735.957770][ T57] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.399192][T15154] chnl_net:caif_netlink_parms(): no params data found [ 1737.146264][ T57] bridge_slave_1: left allmulticast mode [ 1737.152270][ T57] bridge_slave_1: left promiscuous mode [ 1737.186266][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.239520][ T57] bridge_slave_0: left allmulticast mode [ 1737.271542][ T57] bridge_slave_0: left promiscuous mode [ 1737.313560][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.738196][ T5775] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1737.912745][ T5775] usb 6-1: device descriptor read/64, error -71 [ 1738.025656][T13812] Bluetooth: hci0: command tx timeout [ 1738.163294][ T5775] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1738.323631][ T57] ip6gretap0 (unregistering): left promiscuous mode [ 1738.335787][ T5775] usb 6-1: device descriptor read/64, error -71 [ 1738.427836][T15226] binder_alloc: 15225: binder_alloc_buf, no vma [ 1738.483588][ T5775] usb usb6-port1: attempt power cycle [ 1738.846651][T10796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1738.875832][T10796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1738.884269][ T5775] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1738.897369][T10796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1738.935978][ T5775] usb 6-1: device descriptor read/8, error -71 [ 1738.944303][T10796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1738.984827][T10796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1739.214061][ T5775] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1739.286485][ T5775] usb 6-1: device descriptor read/8, error -71 [ 1739.414418][ T5775] usb usb6-port1: unable to enumerate USB device [ 1739.434570][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.611250][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.740328][ T57] bond0 (unregistering): Released all slaves [ 1741.063330][T13812] Bluetooth: hci2: command tx timeout [ 1741.082156][T15245] libceph: resolve '0..' (ret=-3): failed [ 1741.801602][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.814198][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1741.824350][T15154] bridge_slave_0: entered allmulticast mode [ 1741.838254][T15154] bridge_slave_0: entered promiscuous mode [ 1741.961096][ T57] hsr_slave_0: left promiscuous mode [ 1741.979685][ T57] hsr_slave_1: left promiscuous mode [ 1742.007851][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1742.051695][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.101289][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1742.145885][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.228541][ T57] veth1_macvtap: left promiscuous mode [ 1742.256664][ T57] veth0_macvtap: left promiscuous mode [ 1742.274278][ T57] veth1_vlan: left promiscuous mode [ 1742.279904][ T57] veth0_vlan: left promiscuous mode [ 1742.794253][T15264] vivid-002: disconnect [ 1742.812639][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1750'. [ 1743.193697][T13812] Bluetooth: hci2: command tx timeout [ 1744.387939][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1744.435125][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1744.658670][T15259] vivid-002: reconnect [ 1745.223559][T13812] Bluetooth: hci2: command tx timeout [ 1745.339195][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1745.346156][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1745.625788][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.666496][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.699063][T15154] bridge_slave_1: entered allmulticast mode [ 1745.746892][T15154] bridge_slave_1: entered promiscuous mode [ 1746.124013][T15284] tipc: Enabling of bearer rejected, failed to enable media [ 1747.013353][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.284711][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.303358][T13812] Bluetooth: hci2: command tx timeout [ 1747.661342][T15295] binder_alloc: 15292: binder_alloc_buf, no vma [ 1747.760616][T15154] team0: Port device team_slave_0 added [ 1747.846085][T15154] team0: Port device team_slave_1 added [ 1747.913807][ T794] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1748.129912][ T794] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1748.202764][ T794] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1748.211166][ T794] usb 7-1: Product: syz [ 1748.211750][T15229] chnl_net:caif_netlink_parms(): no params data found [ 1748.250138][ T794] usb 7-1: SerialNumber: syz [ 1748.327280][ T794] usb 7-1: config 0 descriptor?? [ 1748.449529][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.513918][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.606178][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.681644][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.723577][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.796004][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.850919][ T794] hso 7-1:0.0: Failed to find BULK IN ep [ 1749.065271][ T794] usb 7-1: USB disconnect, device number 42 [ 1749.668026][ T5944] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1749.818209][T15154] hsr_slave_0: entered promiscuous mode [ 1749.882884][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 1749.899827][T15154] hsr_slave_1: entered promiscuous mode [ 1749.952746][ T5944] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1749.978132][T15154] debugfs: 'hsr0' already exists in 'hsr' [ 1750.009446][ T5944] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1750.082566][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.083021][T15154] Cannot create hsr debugfs directory [ 1750.090923][ T5944] usb 6-1: Product: syz [ 1750.116647][ T5944] usb 6-1: Manufacturer: syz [ 1750.121521][ T5944] usb 6-1: SerialNumber: syz [ 1750.184940][ T5944] usb 6-1: config 0 descriptor?? [ 1750.489485][ T5944] usb 6-1: USB disconnect, device number 46 [ 1751.034616][ T5944] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1751.283073][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 1751.314944][ T5944] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1751.378119][ T5944] usb 6-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1751.400111][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.432891][ T5944] usb 6-1: Product: syz [ 1751.437347][ T5944] usb 6-1: Manufacturer: syz [ 1751.442184][ T5944] usb 6-1: SerialNumber: syz [ 1751.506850][ T5944] usb 6-1: config 0 descriptor?? [ 1751.866861][T15229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.903287][T15229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.951729][T15229] bridge_slave_0: entered allmulticast mode [ 1751.965639][ T5775] usb 6-1: USB disconnect, device number 47 [ 1752.021810][T15229] bridge_slave_0: entered promiscuous mode [ 1752.231197][T15229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.308546][T15229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.337990][T15229] bridge_slave_1: entered allmulticast mode [ 1752.390993][T15229] bridge_slave_1: entered promiscuous mode [ 1753.061904][T15229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.077348][ T794] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1753.153479][T15229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.324430][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1753.372733][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1753.398631][ T794] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1753.433079][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.488506][ T794] usb 2-1: config 0 descriptor?? [ 1753.947283][T15229] team0: Port device team_slave_0 added [ 1753.987562][ T794] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1754.006170][ T794] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1754.040715][T15229] team0: Port device team_slave_1 added [ 1754.080940][ T794] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001A/input/input36 [ 1754.202908][ T794] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1754.372886][ T5944] usb 2-1: USB disconnect, device number 60 [ 1755.059000][T15229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.100936][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.168376][T15333] fido_id[15333]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1755.242585][T15229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.318735][T15229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.347581][T15229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.483167][T15229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.844888][T15338] binder_alloc: 15337: binder_alloc_buf, no vma [ 1756.271301][T15342] tipc: Enabled bearer , priority 0 [ 1756.371328][T15229] hsr_slave_0: entered promiscuous mode [ 1756.408731][T15229] hsr_slave_1: entered promiscuous mode [ 1756.420083][T15229] debugfs: 'hsr0' already exists in 'hsr' [ 1756.427631][T15229] Cannot create hsr debugfs directory [ 1756.446717][T15335] tipc: Disabling bearer [ 1756.492254][T15154] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1756.541828][T15154] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1756.572821][ T5775] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1756.638853][T15154] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1756.751193][T15154] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1756.832563][ T5775] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1756.852948][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1756.872137][ T5775] usb 6-1: Product: syz [ 1756.882675][ T5775] usb 6-1: SerialNumber: syz [ 1756.956975][ T5775] usb 6-1: config 0 descriptor?? [ 1757.293271][ T5775] hso 6-1:0.0: Failed to find BULK IN ep [ 1757.492737][ T794] usb 6-1: USB disconnect, device number 48 [ 1757.583168][ T5944] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1757.802640][ T5944] usb 7-1: Using ep0 maxpacket: 32 [ 1757.881311][ T5944] usb 7-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1757.920756][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.941445][ T5944] usb 7-1: Product: syz [ 1757.950858][ T5944] usb 7-1: Manufacturer: syz [ 1757.951322][T15358] libceph: resolve '0..' (ret=-3): failed [ 1757.964729][ T5944] usb 7-1: SerialNumber: syz [ 1757.984395][ T5944] usb 7-1: config 0 descriptor?? [ 1758.397836][ T5944] usb 7-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1759.306405][ T5944] usb 7-1: [UEAGLE-ATM] interface 1 not found [ 1759.355328][ T5944] ueagle-atm 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1759.465356][ T5944] usb 7-1: USB disconnect, device number 43 [ 1759.807332][ T5775] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1759.926422][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1760.070736][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.105851][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.142774][ T5775] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1760.152242][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.248293][ T5775] usb 2-1: config 0 descriptor?? [ 1760.587998][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.634079][T15229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1760.756147][T15229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1760.813566][ T5775] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 1760.874648][ T5775] cm6533_jd 0003:0D8C:0022.001B: unknown main item tag 0x0 [ 1760.940599][ T5775] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.001B/input/input37 [ 1761.130569][ T5775] cm6533_jd 0003:0D8C:0022.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1761.190256][T15229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1761.267535][ T5775] usb 2-1: USB disconnect, device number 61 [ 1761.380359][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.388514][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.599988][T15229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1761.977712][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.985666][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.089470][T15383] fido_id[15383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1763.951929][T15395] tipc: Enabled bearer , priority 0 [ 1764.104745][T15394] tipc: Disabling bearer [ 1764.292971][ T5775] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1764.530030][ T5775] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1764.574512][ T5775] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1764.618414][ T5775] usb 7-1: Product: syz [ 1764.634008][ T5775] usb 7-1: SerialNumber: syz [ 1764.681139][T15229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.696341][ T5775] usb 7-1: config 0 descriptor?? [ 1765.137877][ T5775] hso 7-1:0.0: Failed to find BULK IN ep [ 1765.138265][T15229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.299945][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.308153][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.354622][T15408] libceph: resolve '0..' (ret=-3): failed [ 1765.368804][ T794] usb 7-1: USB disconnect, device number 44 [ 1765.431371][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.439179][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.982609][ T5775] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1766.193256][ T5775] usb 2-1: Using ep0 maxpacket: 32 [ 1766.269144][ T5775] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1766.353731][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.362047][ T5775] usb 2-1: Product: syz [ 1766.402880][ T5775] usb 2-1: Manufacturer: syz [ 1766.407871][ T5775] usb 2-1: SerialNumber: syz [ 1766.572916][ T5775] usb 2-1: config 0 descriptor?? [ 1766.593347][T15154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.885906][ T5775] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1767.263747][T10226] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1767.492244][T10226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.519626][T10226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.568862][T10226] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1767.657778][T10226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.752714][T10226] usb 7-1: config 0 descriptor?? [ 1767.780126][ T5775] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 1767.807340][T15154] veth0_vlan: entered promiscuous mode [ 1767.832892][ T5775] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1767.904222][ T5775] usb 2-1: USB disconnect, device number 62 [ 1768.145427][T15154] veth1_vlan: entered promiscuous mode [ 1768.340285][T10226] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1768.433437][T10226] cm6533_jd 0003:0D8C:0022.001C: unknown main item tag 0x0 [ 1768.573035][T10226] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.001C/input/input38 [ 1768.811325][T10226] cm6533_jd 0003:0D8C:0022.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 1768.975660][T10226] usb 7-1: USB disconnect, device number 45 [ 1769.868590][T15154] veth0_macvtap: entered promiscuous mode [ 1769.869616][T15438] fido_id[15438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1770.031371][T15154] veth1_macvtap: entered promiscuous mode [ 1770.296241][T15229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.796644][T15154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.006364][T15154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.287186][ T1074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.303880][T10226] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1771.335802][ T1074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.453232][T10226] usb 7-1: device descriptor read/64, error -71 [ 1771.535358][ T1074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.627077][ T1074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.714508][T10226] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1771.895524][T10226] usb 7-1: device descriptor read/64, error -71 [ 1771.927783][T15229] veth0_vlan: entered promiscuous mode [ 1772.036605][T10226] usb usb7-port1: attempt power cycle [ 1772.222665][T15454] tipc: Started in network mode [ 1772.229835][T15454] tipc: Node identity dee41c62a193, cluster identity 4711 [ 1772.274283][T15454] tipc: Enabled bearer , priority 0 [ 1772.395095][T15453] tipc: Disabling bearer [ 1772.435752][T10226] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1772.483223][T15229] veth1_vlan: entered promiscuous mode [ 1772.511725][T10226] usb 7-1: device descriptor read/8, error -71 [ 1772.807891][T10226] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1772.887066][T10226] usb 7-1: device descriptor read/8, error -71 [ 1772.973116][T15229] veth0_macvtap: entered promiscuous mode [ 1773.020165][T10226] usb usb7-port1: unable to enumerate USB device [ 1773.045276][T15229] veth1_macvtap: entered promiscuous mode [ 1773.347669][T15229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.524539][T15229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.734057][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.801533][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.843260][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.873156][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.966650][T15472] libceph: resolve '0..' (ret=-3): failed [ 1774.024563][ T5775] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1774.331054][ T5775] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1774.359885][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1774.404819][ T5775] usb 6-1: Product: syz [ 1774.426679][ T5775] usb 6-1: SerialNumber: syz [ 1774.496706][ T5775] usb 6-1: config 0 descriptor?? [ 1774.939635][ T5775] hso 6-1:0.0: Failed to find BULK IN ep [ 1775.138975][ T5775] usb 6-1: USB disconnect, device number 49 [ 1775.784713][T10226] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1775.971268][T10226] usb 2-1: Using ep0 maxpacket: 32 [ 1776.085894][T10226] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1776.115218][T10226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.127842][T10226] usb 2-1: Product: syz [ 1776.132300][T10226] usb 2-1: Manufacturer: syz [ 1776.158364][T10226] usb 2-1: SerialNumber: syz [ 1776.217114][T10226] usb 2-1: config 0 descriptor?? [ 1776.556598][T10226] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1776.706512][ T7419] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.948759][ T7419] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.197517][ T7419] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.414340][ T7419] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.492847][T10226] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 1777.499213][T10226] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1777.618801][T10226] usb 2-1: USB disconnect, device number 63 [ 1778.463076][ T7419] bridge_slave_1: left allmulticast mode [ 1778.469018][ T7419] bridge_slave_1: left promiscuous mode [ 1778.529742][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.645144][ T7419] bridge_slave_0: left allmulticast mode [ 1778.651284][ T7419] bridge_slave_0: left promiscuous mode [ 1778.728372][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.664364][ T7419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1779.732292][ T7419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1779.759467][ T7419] bond0 (unregistering): Released all slaves [ 1780.901201][T15525] tipc: Enabled bearer , priority 0 [ 1781.007024][T15524] tipc: Disabling bearer [ 1781.434992][T10796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1781.460256][T10796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1781.485569][T10796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1781.508848][T10796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1781.523565][T10796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1781.581325][ T7419] hsr_slave_0: left promiscuous mode [ 1781.597529][ T7419] hsr_slave_1: left promiscuous mode [ 1781.635006][ T7419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1781.674400][ T7419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.705858][ T7419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1781.738030][ T7419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1781.803587][ T7419] veth1_macvtap: left promiscuous mode [ 1781.809386][ T7419] veth0_macvtap: left promiscuous mode [ 1781.827579][ T7419] veth1_vlan: left promiscuous mode [ 1781.833912][ T7419] veth0_vlan: left promiscuous mode [ 1782.876118][T10226] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1783.053992][T10226] usb 2-1: device descriptor read/64, error -71 [ 1783.292682][T10226] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1783.452796][T10226] usb 2-1: device descriptor read/64, error -71 [ 1783.555009][ T7419] team0 (unregistering): Port device team_slave_1 removed [ 1783.564653][T10226] usb usb2-port1: attempt power cycle [ 1783.609425][ T7419] team0 (unregistering): Port device team_slave_0 removed [ 1783.707682][T13812] Bluetooth: hci4: command tx timeout [ 1783.887188][T15549] libceph: resolve '0..' (ret=-3): failed [ 1783.932634][T10226] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1783.956258][T10226] usb 2-1: device descriptor read/8, error -71 [ 1784.165857][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.190056][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.224355][T10226] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1784.305261][T10226] usb 2-1: device descriptor read/8, error -71 [ 1784.446964][T10226] usb usb2-port1: unable to enumerate USB device [ 1784.692669][T14049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.700764][T14049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1785.787168][T13812] Bluetooth: hci4: command tx timeout [ 1786.574708][T12615] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1786.760234][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.825881][T12615] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1786.842949][T12615] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1786.851743][T12615] usb 3-1: Product: syz [ 1786.858379][T12615] usb 3-1: SerialNumber: syz [ 1786.880467][T12615] usb 3-1: config 0 descriptor?? [ 1787.208074][T12615] hso 3-1:0.0: Failed to find BULK IN ep [ 1787.237231][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.294004][T15540] chnl_net:caif_netlink_parms(): no params data found [ 1787.398600][T12615] usb 3-1: USB disconnect, device number 69 [ 1787.566147][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.861224][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.873023][T13812] Bluetooth: hci4: command tx timeout [ 1787.953122][ T491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1787.992633][ T491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.502944][T14049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.511127][T14049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.849581][ T56] bridge_slave_1: left allmulticast mode [ 1788.863136][ T56] bridge_slave_1: left promiscuous mode [ 1788.869914][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.933663][ T56] bridge_slave_0: left allmulticast mode [ 1788.952587][ T56] bridge_slave_0: left promiscuous mode [ 1788.959492][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.804675][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'. [ 1789.832813][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1742'. [ 1789.895904][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1789.942768][T13812] Bluetooth: hci4: command tx timeout [ 1789.962027][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.026938][T15594] libceph: resolve '0..' (ret=-3): failed [ 1790.059586][ T56] bond0 (unregistering): Released all slaves [ 1790.416043][T15589] ip6gretap0: entered promiscuous mode [ 1790.491183][T15589] syz_tun: entered promiscuous mode [ 1790.615570][ T56] tipc: Left network mode [ 1790.972100][T10796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1790.996326][T10796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1791.019637][T10796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1791.084446][T10796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1791.113578][T10796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1792.103187][T15540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.110819][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.224072][T15540] bridge_slave_0: entered allmulticast mode [ 1792.270309][T15540] bridge_slave_0: entered promiscuous mode [ 1792.478919][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1792.544102][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.551905][T15540] bridge_slave_1: entered allmulticast mode [ 1792.593079][T15540] bridge_slave_1: entered promiscuous mode [ 1792.873337][ T56] hsr_slave_0: left promiscuous mode [ 1792.937586][ T56] hsr_slave_1: left promiscuous mode [ 1792.956283][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.967020][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1793.021265][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1793.046450][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1793.134176][ T56] veth1_macvtap: left promiscuous mode [ 1793.165587][ T56] veth0_macvtap: left promiscuous mode [ 1793.193342][ T56] veth1_vlan: left promiscuous mode [ 1793.199005][ T56] veth0_vlan: left promiscuous mode [ 1793.222820][T12615] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1793.238130][T10796] Bluetooth: hci3: command tx timeout [ 1793.393469][T12615] usb 4-1: device descriptor read/64, error -71 [ 1793.635087][T12615] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1793.801387][T12615] usb 4-1: device descriptor read/64, error -71 [ 1793.934713][T12615] usb usb4-port1: attempt power cycle [ 1794.304204][T12615] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1794.332980][ T5775] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1794.397716][T12615] usb 4-1: device descriptor read/8, error -71 [ 1794.565253][ T5775] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1794.598434][ T5775] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1794.612623][ T5775] usb 3-1: Product: syz [ 1794.619495][ T5775] usb 3-1: SerialNumber: syz [ 1794.652919][T12615] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1794.664585][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1794.695897][ T5775] usb 3-1: config 0 descriptor?? [ 1794.711561][T12615] usb 4-1: device descriptor read/8, error -71 [ 1794.764013][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1794.825162][T12615] usb usb4-port1: unable to enumerate USB device [ 1795.018574][ T5775] hso 3-1:0.0: Failed to find BULK IN ep [ 1795.218209][T10227] usb 3-1: USB disconnect, device number 70 [ 1795.306089][T10796] Bluetooth: hci3: command tx timeout [ 1795.407914][T14832] syz_tun (unregistering): left promiscuous mode [ 1795.532743][T15540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.726255][T15540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.069539][T15540] team0: Port device team_slave_0 added [ 1796.240232][T15540] team0: Port device team_slave_1 added [ 1796.698539][T15540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1796.731616][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.782492][T15540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.809551][T15540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.843127][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1796.892710][T15540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.974190][T14049] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.181375][T14049] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.348563][T14049] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.383109][T10796] Bluetooth: hci3: command tx timeout [ 1797.592290][T14049] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.080403][T15540] hsr_slave_0: entered promiscuous mode [ 1798.125235][T15647] libceph: resolve '0..' (ret=-3): failed [ 1798.135240][T15540] hsr_slave_1: entered promiscuous mode [ 1798.143973][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1798.182857][T15645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1817'. [ 1798.195079][T15540] debugfs: 'hsr0' already exists in 'hsr' [ 1798.211041][T15540] Cannot create hsr debugfs directory [ 1798.510565][T15600] chnl_net:caif_netlink_parms(): no params data found [ 1798.647164][T13812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1798.663948][T13812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1798.676466][T13812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1798.694563][T13812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1798.715110][T13812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1799.462712][T10796] Bluetooth: hci3: command tx timeout [ 1800.083697][ T9018] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1800.280123][ T9018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.348982][ T9018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.398728][ T9018] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1800.438047][ T9018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.500347][ T9018] usb 4-1: config 0 descriptor?? [ 1800.823306][T10796] Bluetooth: hci1: command tx timeout [ 1800.981524][ T9018] usbhid 4-1:0.0: can't add hid device: -71 [ 1801.030768][ T9018] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1801.052694][T14049] bridge_slave_1: left allmulticast mode [ 1801.058669][T14049] bridge_slave_1: left promiscuous mode [ 1801.087561][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.123120][ T9018] usb 4-1: USB disconnect, device number 26 [ 1801.159975][T14049] bridge_slave_0: left allmulticast mode [ 1801.198052][T14049] bridge_slave_0: left promiscuous mode [ 1801.219773][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.831924][T14049] ip6gretap0 (unregistering): left promiscuous mode [ 1802.479202][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 1802.554805][T14049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.671326][T14049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.729730][T14049] bond0 (unregistering): Released all slaves [ 1802.923289][T10796] Bluetooth: hci1: command tx timeout [ 1803.209477][T14049] tipc: Left network mode [ 1803.493958][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.523081][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.541914][T15600] bridge_slave_0: entered allmulticast mode [ 1803.567513][T15600] bridge_slave_0: entered promiscuous mode [ 1803.573713][T10226] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1803.774692][T10226] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1803.802890][T10226] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1803.811293][T10226] usb 4-1: Product: syz [ 1803.821978][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.828318][T10226] usb 4-1: SerialNumber: syz [ 1803.851183][T10226] usb 4-1: config 0 descriptor?? [ 1803.859615][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.873335][T15600] bridge_slave_1: entered allmulticast mode [ 1803.904172][T15600] bridge_slave_1: entered promiscuous mode [ 1804.033111][T10227] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1804.117195][T10226] hso 4-1:0.0: Failed to find BULK IN ep [ 1804.243051][T10227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.275287][T10227] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.292269][T10227] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1804.306486][T10227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.321779][ T5775] usb 4-1: USB disconnect, device number 27 [ 1804.366369][T10227] usb 3-1: config 0 descriptor?? [ 1804.421941][T14049] hsr_slave_0: left promiscuous mode [ 1804.474578][T14049] hsr_slave_1: left promiscuous mode [ 1804.496237][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.522653][T14049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.542392][T14049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.550224][T14049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1804.582283][T14049] veth1_macvtap: left promiscuous mode [ 1804.593208][T14049] veth0_macvtap: left promiscuous mode [ 1804.599619][T14049] veth1_vlan: left promiscuous mode [ 1804.605614][T14049] veth0_vlan: left promiscuous mode [ 1804.982802][T10796] Bluetooth: hci1: command tx timeout [ 1806.131872][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1806.158072][T14049] team0 (unregistering): Port device team_slave_1 removed [ 1806.159325][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1806.233966][T14049] team0 (unregistering): Port device team_slave_0 removed [ 1806.530627][ T5775] usb 3-1: USB disconnect, device number 71 [ 1806.791067][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1806.798316][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1807.008319][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1807.064540][T10796] Bluetooth: hci1: command tx timeout [ 1807.141443][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1808.006572][T15600] team0: Port device team_slave_0 added [ 1808.072635][T10227] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1808.083215][T15600] team0: Port device team_slave_1 added [ 1808.254992][T10227] usb 4-1: Using ep0 maxpacket: 32 [ 1808.284175][T10227] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1808.321556][T10227] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1808.357867][T10227] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1808.397853][T10227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1808.433453][T10227] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1808.472692][T10227] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1808.523323][T10227] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1808.541887][T10227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.596510][T10227] usb 4-1: config 0 descriptor?? [ 1808.704197][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1808.733023][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1808.864299][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1808.881827][T10227] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1808.927106][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1808.959986][T10227] usb 4-1: USB disconnect, device number 28 [ 1808.972928][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1809.040165][T10227] usblp0: removed [ 1809.085192][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.417867][T15651] chnl_net:caif_netlink_parms(): no params data found [ 1809.434553][T10227] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1809.602773][T10227] usb 4-1: Using ep0 maxpacket: 32 [ 1809.618482][T10227] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1809.662594][T10227] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1809.675430][T10227] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1809.686455][T10227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1809.697820][T10227] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1809.717336][T10227] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1809.737014][T10227] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1809.762508][T10227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.802557][T10227] usb 4-1: config 0 descriptor?? [ 1809.844984][T10226] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1810.031801][T15600] hsr_slave_0: entered promiscuous mode [ 1810.040859][T10227] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1810.075112][T15600] hsr_slave_1: entered promiscuous mode [ 1810.123908][T10226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.162801][T10226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.193003][T10226] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1810.216384][T10226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.256112][T10226] usb 3-1: config 0 descriptor?? [ 1810.496925][T15738] usblp0:failed reading printer status (-32) [ 1810.571193][T15540] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1810.592556][T10227] usb 4-1: USB disconnect, device number 29 [ 1810.639644][T10227] usblp0: removed [ 1810.816931][T10226] usbhid 3-1:0.0: can't add hid device: -71 [ 1810.838329][T10226] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1810.879694][T10226] usb 3-1: USB disconnect, device number 72 [ 1810.940355][T15540] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1811.018950][T15540] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1811.110878][T15540] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1811.914080][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 1812.469547][T15651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.503379][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.511865][T15651] bridge_slave_0: entered allmulticast mode [ 1812.536575][T15651] bridge_slave_0: entered promiscuous mode [ 1812.668239][T15651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.692683][T10226] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1812.693873][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.733743][T15651] bridge_slave_1: entered allmulticast mode [ 1812.745124][T15651] bridge_slave_1: entered promiscuous mode [ 1812.891506][T10226] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1812.924957][T10226] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1812.981876][T10226] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1813.002156][T10226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.022787][T10226] usb 4-1: Product: syz [ 1813.027336][T10226] usb 4-1: Manufacturer: syz [ 1813.042637][T10226] usb 4-1: SerialNumber: syz [ 1813.104118][T10226] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1813.259335][T10227] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1813.443435][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1813.545829][ T9018] usb 4-1: USB disconnect, device number 30 [ 1813.798447][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1814.355670][T15651] team0: Port device team_slave_0 added [ 1814.411812][T15651] team0: Port device team_slave_1 added [ 1814.502964][T10227] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1814.510939][T10227] ath9k_htc: Failed to initialize the device [ 1814.523380][ T9018] usb 4-1: ath9k_htc: USB layer deinitialized [ 1814.804298][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.835451][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.894662][ T9018] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1814.926475][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.963048][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.972741][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1815.006786][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.082657][ T9018] usb 4-1: Using ep0 maxpacket: 32 [ 1815.099983][ T9018] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1815.146655][ T9018] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1815.208331][ T9018] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1815.241125][ T9018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.282906][ T9018] usb 4-1: Product: syz [ 1815.287333][ T9018] usb 4-1: Manufacturer: syz [ 1815.292156][ T9018] usb 4-1: SerialNumber: syz [ 1815.388361][ T9018] ldusb 4-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1815.641270][T10227] usb 4-1: USB disconnect, device number 31 [ 1815.715064][T10227] ldusb 4-1:1.0: LD USB Device #0 now disconnected [ 1815.878975][T15651] hsr_slave_0: entered promiscuous mode [ 1815.918852][T15651] hsr_slave_1: entered promiscuous mode [ 1815.984663][T15651] debugfs: 'hsr0' already exists in 'hsr' [ 1815.990743][T15651] Cannot create hsr debugfs directory [ 1816.363078][T10226] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1816.467427][T15600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1816.584361][T10226] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1816.601916][T15600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1816.608985][T10226] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1816.609140][T10226] usb 4-1: Product: syz [ 1816.609256][T10226] usb 4-1: SerialNumber: syz [ 1816.652059][T10226] usb 4-1: config 0 descriptor?? [ 1816.850658][T15600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1816.923238][T10226] hso 4-1:0.0: Failed to find BULK IN ep [ 1817.120876][ T5775] usb 4-1: USB disconnect, device number 32 [ 1817.260609][T15600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1817.565171][T15540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.207592][T15540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.474612][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.482159][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.781222][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.789005][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1819.522832][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1819.573114][T15790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1835'. [ 1820.715599][T15651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1820.775155][T15651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1820.902102][T15651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1821.022744][T15600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.061080][T15651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1821.163291][T10226] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1821.351669][T10226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.413321][T10226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.442942][T10226] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1821.453897][T15600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.494176][T10226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.594411][T14049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.595335][T10226] usb 4-1: config 0 descriptor?? [ 1821.601969][T14049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.756376][T14049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.764149][T14049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.172893][T10226] usbhid 4-1:0.0: can't add hid device: -71 [ 1822.179624][T10226] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1822.293604][T10226] usb 4-1: USB disconnect, device number 33 [ 1822.921727][T15540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.411016][T15651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.706261][T15651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.838339][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.846018][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.851824][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'. [ 1824.009467][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.017338][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.396572][T15816] batadv0: entered promiscuous mode [ 1824.419245][T15816] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1824.485887][T15816] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 1824.554914][T15816] batadv0: left promiscuous mode [ 1825.252915][T10227] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1825.281768][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.586302][T10227] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.625291][T10227] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1825.672570][T10227] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1825.733619][T10227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.781873][T10227] usb 3-1: config 0 descriptor?? [ 1826.290856][T15540] veth0_vlan: entered promiscuous mode [ 1826.505759][T15540] veth1_vlan: entered promiscuous mode [ 1827.177438][T15540] veth0_macvtap: entered promiscuous mode [ 1827.325101][T15540] veth1_macvtap: entered promiscuous mode [ 1828.311568][T12624] usb 3-1: USB disconnect, device number 73 [ 1828.344031][T15540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.411478][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1828.669093][T15540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.006222][T12138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.032897][T12138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.042003][T12138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.216257][T12138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.305019][ T5944] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1829.612911][ T5944] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1829.692792][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.785644][T15600] veth0_vlan: entered promiscuous mode [ 1829.788911][ T5944] usb 3-1: Product: syz [ 1829.804917][ T5944] usb 3-1: Manufacturer: syz [ 1829.813514][ T5944] usb 3-1: SerialNumber: syz [ 1830.238105][T15600] veth1_vlan: entered promiscuous mode [ 1830.382857][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1830.429404][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1830.522034][T15651] veth0_vlan: entered promiscuous mode [ 1830.898932][T15651] veth1_vlan: entered promiscuous mode [ 1831.183088][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1831.254349][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1831.280938][ T5944] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1831.320111][T15600] veth0_macvtap: entered promiscuous mode [ 1831.429849][ T5944] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1831.617107][T15600] veth1_macvtap: entered promiscuous mode [ 1831.869639][T15651] veth0_macvtap: entered promiscuous mode [ 1831.962515][T15651] veth1_macvtap: entered promiscuous mode [ 1832.140864][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.341318][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.447308][ T9018] usb 3-1: USB disconnect, device number 74 [ 1832.643819][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.834759][T12138] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.923663][ T491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.009469][ T491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.027891][ T57] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.117604][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1833.311708][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.407423][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.488890][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.603498][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.993088][ T9018] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1835.232274][ T9018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.272613][ T9018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.323277][ T9018] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1835.376950][ T9018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.420026][ T3482] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.434564][ T9018] usb 4-1: config 0 descriptor?? [ 1835.755319][ T3482] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.908317][ T9018] usbhid 4-1:0.0: can't add hid device: -71 [ 1835.931940][ T9018] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1836.013302][ T9018] usb 4-1: USB disconnect, device number 34 [ 1836.055637][ T3482] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.268453][ T3482] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.241469][ T3482] bridge_slave_1: left allmulticast mode [ 1837.266749][ T3482] bridge_slave_1: left promiscuous mode [ 1837.286890][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.353827][ T3482] bridge_slave_0: left allmulticast mode [ 1837.360028][ T3482] bridge_slave_0: left promiscuous mode [ 1837.389223][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.279802][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.325115][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.367462][ T3482] bond0 (unregistering): Released all slaves [ 1838.969275][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.017746][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1839.592898][ T3482] hsr_slave_0: left promiscuous mode [ 1839.608077][ T3482] hsr_slave_1: left promiscuous mode [ 1839.647190][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1839.673089][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.700145][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1839.710399][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1839.835278][ T3482] veth1_macvtap: left promiscuous mode [ 1839.841613][ T3482] veth0_macvtap: left promiscuous mode [ 1839.892916][ T3482] veth1_vlan: left promiscuous mode [ 1839.898690][ T3482] veth0_vlan: left promiscuous mode [ 1841.809780][T13812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1841.819339][T13812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1841.835098][T13812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1841.878823][T13812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1841.892866][T13812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1841.987936][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 1842.024713][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 1844.032777][T13812] Bluetooth: hci0: command tx timeout [ 1844.125336][T15909] chnl_net:caif_netlink_parms(): no params data found [ 1845.113749][T14049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.162563][T10226] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1845.163199][T14049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1845.425371][T10226] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1845.473967][T10226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.482269][T10226] usb 4-1: Product: syz [ 1845.516966][T10226] usb 4-1: Manufacturer: syz [ 1845.521807][T10226] usb 4-1: SerialNumber: syz [ 1845.548889][T14049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.623921][T14049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.113427][T13812] Bluetooth: hci0: command tx timeout [ 1846.124860][T10226] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1846.153891][T10226] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1846.202745][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.252796][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.466150][T10796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1846.514320][T10796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1846.526090][T10796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1846.549635][T10796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1846.563042][T10796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1846.742682][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.813437][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.816432][T10226] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1846.821326][T15909] bridge_slave_0: entered allmulticast mode [ 1846.859811][T10226] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1846.905423][T15909] bridge_slave_0: entered promiscuous mode [ 1846.912930][T10226] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1846.939280][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1846.972620][T10226] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1846.972983][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.010116][T15909] bridge_slave_1: entered allmulticast mode [ 1847.044920][T15909] bridge_slave_1: entered promiscuous mode [ 1847.495664][T15952] tipc: Started in network mode [ 1847.504196][T15952] tipc: Node identity b22625b529ac, cluster identity 4711 [ 1847.534992][T15952] tipc: Enabled bearer , priority 0 [ 1847.603278][T12138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.829546][T15945] tipc: Disabling bearer [ 1847.841725][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.855556][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.914388][T12138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.056204][ T5775] usb 4-1: USB disconnect, device number 35 [ 1848.176202][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.192951][T13812] Bluetooth: hci0: command tx timeout [ 1848.257832][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.411631][T12138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.662997][T13812] Bluetooth: hci5: command tx timeout [ 1848.725808][T15909] team0: Port device team_slave_0 added [ 1848.937031][T15909] team0: Port device team_slave_1 added [ 1849.084766][T12138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.652155][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.682677][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1849.754161][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1849.873612][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1849.881160][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1849.992750][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1850.265818][T13812] Bluetooth: hci0: command tx timeout [ 1850.742784][T13812] Bluetooth: hci5: command tx timeout [ 1851.626053][T15909] hsr_slave_0: entered promiscuous mode [ 1851.652038][T15909] hsr_slave_1: entered promiscuous mode [ 1851.686731][T15909] debugfs: 'hsr0' already exists in 'hsr' [ 1851.700363][T15909] Cannot create hsr debugfs directory [ 1852.041496][T12138] bridge_slave_1: left allmulticast mode [ 1852.052682][T12138] bridge_slave_1: left promiscuous mode [ 1852.059499][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.199776][T12138] bridge_slave_0: left allmulticast mode [ 1852.264922][T12138] bridge_slave_0: left promiscuous mode [ 1852.271788][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.831246][T13812] Bluetooth: hci5: command tx timeout [ 1853.790494][T12138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1853.843633][T12138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1853.880219][T12138] bond0 (unregistering): Released all slaves [ 1854.668036][ T5775] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1854.734175][T10796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1854.750466][T10796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1854.760293][T10796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1854.776025][T10796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1854.793192][T10796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1854.902935][T10796] Bluetooth: hci5: command tx timeout [ 1854.937272][ T5775] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1854.984639][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.028981][ T5775] usb 1-1: Product: syz [ 1855.036130][ T5775] usb 1-1: Manufacturer: syz [ 1855.041068][ T5775] usb 1-1: SerialNumber: syz [ 1855.549177][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1855.594979][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1855.620394][T12138] hsr_slave_0: left promiscuous mode [ 1855.636376][T12138] hsr_slave_1: left promiscuous mode [ 1855.666418][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1855.675449][T12138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1855.717924][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1855.726033][T12138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1855.843945][T12138] veth1_macvtap: left promiscuous mode [ 1855.853576][T12138] veth0_macvtap: left promiscuous mode [ 1855.859532][T12138] veth1_vlan: left promiscuous mode [ 1855.886245][T12138] veth0_vlan: left promiscuous mode [ 1856.271947][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1856.302722][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1856.341041][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1856.404158][ T5775] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1856.823459][T10796] Bluetooth: hci3: command tx timeout [ 1857.179877][T12138] team0 (unregistering): Port device team_slave_1 removed [ 1857.252869][T12138] team0 (unregistering): Port device team_slave_0 removed [ 1857.526566][ T5775] usb 1-1: USB disconnect, device number 19 [ 1857.938415][T16018] tipc: Started in network mode [ 1857.953250][T16018] tipc: Node identity 2e1ff2395309, cluster identity 4711 [ 1857.974622][T16018] tipc: Enabled bearer , priority 0 [ 1858.168477][T16008] tipc: Disabling bearer [ 1858.912828][T10796] Bluetooth: hci3: command tx timeout [ 1859.023515][T15941] chnl_net:caif_netlink_parms(): no params data found [ 1860.156421][T12138] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.431688][T12138] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.628540][T12138] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.789948][T12138] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.985488][T10796] Bluetooth: hci3: command tx timeout [ 1861.422716][T15941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.464448][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.492600][T15941] bridge_slave_0: entered allmulticast mode [ 1861.522264][T15941] bridge_slave_0: entered promiscuous mode [ 1861.827696][T15941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1861.843369][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1861.864691][T15941] bridge_slave_1: entered allmulticast mode [ 1861.903732][T15941] bridge_slave_1: entered promiscuous mode [ 1862.434535][T15941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.516371][T15941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1862.545724][T15909] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1862.678588][T15909] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1863.068508][T13812] Bluetooth: hci3: command tx timeout [ 1863.148156][T15909] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1863.316296][T15941] team0: Port device team_slave_0 added [ 1863.323978][T16004] chnl_net:caif_netlink_parms(): no params data found [ 1863.618990][T15909] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1863.792544][T15941] team0: Port device team_slave_1 added [ 1864.371562][T12138] bridge_slave_1: left allmulticast mode [ 1864.405694][T12138] bridge_slave_1: left promiscuous mode [ 1864.430336][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.495902][T12138] bridge_slave_0: left allmulticast mode [ 1864.536161][T12138] bridge_slave_0: left promiscuous mode [ 1864.554234][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.142870][T16073] Bluetooth: hci2: command 0x0406 tx timeout [ 1865.931704][T12138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.993472][T12138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1866.031667][T12138] bond0 (unregistering): Released all slaves [ 1866.116500][T15941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.126874][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.208449][T15941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.494152][T12138] tipc: Left network mode [ 1866.501958][T15941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.523994][T15941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1866.602538][T15941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.859510][T15941] hsr_slave_0: entered promiscuous mode [ 1867.914742][T15941] hsr_slave_1: entered promiscuous mode [ 1867.938577][T15941] debugfs: 'hsr0' already exists in 'hsr' [ 1867.954956][T15941] Cannot create hsr debugfs directory [ 1868.216770][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1868.224188][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1868.263210][T16004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.271526][T16004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.273027][ T5775] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1868.279853][T16004] bridge_slave_0: entered allmulticast mode [ 1868.298412][T16004] bridge_slave_0: entered promiscuous mode [ 1868.361293][T12138] hsr_slave_0: left promiscuous mode [ 1868.377131][T12138] hsr_slave_1: left promiscuous mode [ 1868.395941][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.442687][T12138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.471720][T12138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.493162][T12138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.522558][ T5775] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1868.552541][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.560984][ T5775] usb 1-1: Product: syz [ 1868.575814][ T5775] usb 1-1: Manufacturer: syz [ 1868.580772][ T5775] usb 1-1: SerialNumber: syz [ 1868.587358][T12138] veth1_macvtap: left promiscuous mode [ 1868.597382][T12138] veth0_macvtap: left promiscuous mode [ 1868.633413][T12138] veth1_vlan: left promiscuous mode [ 1868.639153][T12138] veth0_vlan: left promiscuous mode [ 1869.069020][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1869.111793][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1869.789168][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1869.821106][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1869.867164][ T5775] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1869.932868][ T5775] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1870.291330][T12138] team0 (unregistering): Port device team_slave_1 removed [ 1870.332912][T12138] team0 (unregistering): Port device team_slave_0 removed [ 1870.802220][T16004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.841903][T16004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.865897][T16004] bridge_slave_1: entered allmulticast mode [ 1870.889562][T16004] bridge_slave_1: entered promiscuous mode [ 1871.050906][ T794] usb 1-1: USB disconnect, device number 20 [ 1871.217545][T16119] tipc: Enabling of bearer rejected, failed to enable media [ 1871.658011][T16004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.923517][T16004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1872.273615][T16004] team0: Port device team_slave_0 added [ 1872.380199][T16004] team0: Port device team_slave_1 added [ 1874.588259][T16004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.612584][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.678023][T16004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.749432][T16004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.782984][T16004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.881885][T16004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.817570][T16004] hsr_slave_0: entered promiscuous mode [ 1875.904053][T16004] hsr_slave_1: entered promiscuous mode [ 1876.685224][T15909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1877.030032][T15909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1877.245746][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.253443][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1877.597508][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.605235][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1878.868031][T15941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1879.016096][T15941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1879.124881][T15941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1879.342574][T15941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1880.951021][T16004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1880.959323][ T5775] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1881.055612][T16004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1881.153054][ T5775] usb 1-1: Using ep0 maxpacket: 8 [ 1881.171957][T16004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1881.219028][ T5775] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1881.264744][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.310750][ T5775] usb 1-1: Product: syz [ 1881.332839][ T5775] usb 1-1: Manufacturer: syz [ 1881.343718][ T5775] usb 1-1: SerialNumber: syz [ 1881.380485][ T5775] usb 1-1: config 0 descriptor?? [ 1881.388036][T16004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1881.481028][ T5775] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1882.174095][T15941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1882.682665][T15941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1882.797759][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1882.805404][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1882.883069][ T5775] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 1882.946678][T15909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1882.996704][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.004453][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1883.139784][ T5775] gspca_sq930x: Sensor ov9630 not yet treated [ 1883.154655][ T5775] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 1883.188105][ T5775] usb 1-1: USB disconnect, device number 21 [ 1884.680464][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1884.797211][T16226] tipc: Started in network mode [ 1884.827853][T16226] tipc: Node identity 7a2eb96c525e, cluster identity 4711 [ 1884.854494][T16226] tipc: Enabled bearer , priority 0 [ 1884.993594][T16225] tipc: Disabling bearer [ 1885.315271][T16004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1885.477050][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.484834][T12138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.670035][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.677736][T12138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1886.801630][T15909] veth0_vlan: entered promiscuous mode [ 1887.060626][T15909] veth1_vlan: entered promiscuous mode [ 1887.161269][T15941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1888.294812][T15909] veth0_macvtap: entered promiscuous mode [ 1888.594337][T15909] veth1_macvtap: entered promiscuous mode [ 1888.854764][T15909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1889.058820][T15909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1889.398174][T14049] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.452661][T14049] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.472832][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.484357][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1889.809335][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 1890.334099][T16004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.292876][ T5775] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1891.492756][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 1891.499671][T15941] veth0_vlan: entered promiscuous mode [ 1891.581452][ T5775] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1891.622573][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.681128][ T5775] usb 4-1: config 0 descriptor?? [ 1891.714429][T15941] veth1_vlan: entered promiscuous mode [ 1891.944034][ T5775] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1892.007016][ T5775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1892.050560][ T5775] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1892.138249][ T5775] usb 4-1: media controller created [ 1892.168475][T16275] ===================================================== [ 1892.176766][T16275] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1892.184337][T16275] _copy_to_user+0xcc/0x120 [ 1892.189263][T16275] i2cdev_ioctl_smbus+0x586/0x660 [ 1892.195133][T16275] compat_i2cdev_ioctl+0x48f/0xb40 [ 1892.200495][T16275] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1892.206690][T16275] ia32_sys_call+0x2854/0x4360 [ 1892.211882][T16275] __do_fast_syscall_32+0x17f/0x3f0 [ 1892.217954][T16275] do_fast_syscall_32+0x37/0x80 [ 1892.223427][T16275] do_SYSENTER_32+0x1f/0x30 [ 1892.228167][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1892.237591][T16275] [ 1892.239987][T16275] Uninit was stored to memory at: [ 1892.245411][T16275] __i2c_smbus_xfer+0x25a0/0x3120 [ 1892.250547][T16275] i2c_smbus_xfer+0x2d8/0x480 [ 1892.255533][T16275] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1892.261530][T16275] compat_i2cdev_ioctl+0x48f/0xb40 [ 1892.267285][T16275] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1892.273592][T16275] ia32_sys_call+0x2854/0x4360 [ 1892.278766][T16275] __do_fast_syscall_32+0x17f/0x3f0 [ 1892.285817][T16275] do_fast_syscall_32+0x37/0x80 [ 1892.291181][T16275] do_SYSENTER_32+0x1f/0x30 [ 1892.296110][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1892.303157][T16275] [ 1892.305540][T16275] Local variable msgbuf1.i created at: [ 1892.311069][T16275] __i2c_smbus_xfer+0x853/0x3120 [ 1892.316401][T16275] i2c_smbus_xfer+0x2d8/0x480 [ 1892.321310][T16275] [ 1892.323869][T16275] Bytes 0-1 of 2 are uninitialized [ 1892.329197][T16275] Memory access of size 2 starts at ffff88813f51bc76 [ 1892.336497][T16275] Data copied to user address 0000000080000080 [ 1892.342955][T16275] [ 1892.345430][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.3.1886 Tainted: G L syzkaller #0 PREEMPT(full) [ 1892.356982][T16275] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1892.361607][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1892.373168][T16275] ===================================================== [ 1892.380806][T16275] Disabling lock debugging due to kernel taint [ 1892.490406][T16275] Kernel panic - not syncing: kmsan.panic set ... [ 1892.497327][T16275] CPU: 1 UID: 0 PID: 16275 Comm: syz.3.1886 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1892.508647][T16275] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1892.514332][T16275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1892.524737][T16275] Call Trace: [ 1892.528154][T16275] [ 1892.531205][T16275] __dump_stack+0x26/0x30 [ 1892.535780][T16275] dump_stack_lvl+0x50/0x1c0 [ 1892.540623][T16275] ? dump_stack+0x12/0x25 [ 1892.545174][T16275] dump_stack+0x1e/0x25 [ 1892.549868][T16275] vpanic+0x7b4/0x1430 [ 1892.554223][T16275] panic+0x15d/0x160 [ 1892.558409][T16275] kmsan_report+0x31a/0x320 [ 1892.563248][T16275] ? kmsan_internal_check_memory+0x1e8/0x240 [ 1892.569646][T16275] ? kmsan_copy_to_user+0xef/0x190 [ 1892.575199][T16275] ? _copy_to_user+0xcc/0x120 [ 1892.580145][T16275] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1892.585704][T16275] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1892.591291][T16275] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1892.597307][T16275] ? ia32_sys_call+0x2854/0x4360 [ 1892.602485][T16275] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1892.608151][T16275] ? do_fast_syscall_32+0x37/0x80 [ 1892.613520][T16275] ? do_SYSENTER_32+0x1f/0x30 [ 1892.618466][T16275] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1892.625232][T16275] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1892.630833][T16275] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1892.636388][T16275] ? __i2c_transfer+0x1179/0x3280 [ 1892.641747][T16275] ? kmsan_get_metadata+0xf1/0x160 [ 1892.646998][T16275] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1892.653599][T16275] ? kmsan_get_metadata+0xf1/0x160 [ 1892.658851][T16275] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1892.665057][T16275] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 1892.670422][T16275] ? kmsan_get_metadata+0xf1/0x160 [ 1892.675821][T16275] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1892.681776][T16275] kmsan_internal_check_memory+0x1e8/0x240 [ 1892.687850][T16275] kmsan_copy_to_user+0xef/0x190 [ 1892.693062][T16275] _copy_to_user+0xcc/0x120 [ 1892.697728][T16275] i2cdev_ioctl_smbus+0x586/0x660 [ 1892.703028][T16275] compat_i2cdev_ioctl+0x48f/0xb40 [ 1892.708359][T16275] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1892.714170][T16275] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1892.719957][T16275] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1892.726042][T16275] ? kmsan_get_metadata+0xf1/0x160 [ 1892.731287][T16275] ia32_sys_call+0x2854/0x4360 [ 1892.736168][T16275] __do_fast_syscall_32+0x17f/0x3f0 [ 1892.741623][T16275] do_fast_syscall_32+0x37/0x80 [ 1892.746737][T16275] do_SYSENTER_32+0x1f/0x30 [ 1892.751504][T16275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1892.757985][T16275] RIP: 0023:0xf6fdef6c [ 1892.762329][T16275] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1892.782423][T16275] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1892.791240][T16275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1892.799330][T16275] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1892.807397][T16275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1892.815803][T16275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1892.823953][T16275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1892.832172][T16275] [ 1892.835890][T16275] Kernel Offset: disabled [ 1892.840294][T16275] Rebooting in 86400 seconds..