last executing test programs: 9m58.821724646s ago: executing program 4 (id=26): syz_pidfd_open(0x0, 0x0) r0 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRESOCT=0x0], 0x0) 9m56.215596294s ago: executing program 4 (id=31): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 9m46.96310374s ago: executing program 3 (id=42): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f80)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa000000000a00000000000000000000000000000000000000000000001a2f27c0688d140b32f3feb623949b72ff1377a92a9b26a7f33dfbb04bdaf5862c4b5d07c35fd1cc59c0c51d207cb4c4fa1c0d4993d3232693100e46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000002000000000000000000000000804000000000000000000800000000000000000000000000000000000003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e7e08b4aa0af67661a6aab8060ef55c5b8c181b56f38b569f98a9465916b86ce7876fe69c9729ed3f59c01e840904975a2772ce4ebfeb4a209f32c6126c6ff2bcbe632e37c440c1aeb184ff5de81db4587c3f09024c45c120fbb6f56c6ea2234cb13d553b65fc1646a39eb9f79ff32ab98f19283c5bc1ba108e4c30906135d98354974951fc40cd8caaa794b1dd9562bd99014aecb4de51b83cdbd015f2d27e37f81847ed56b5cbe2d6eb35286d4195c03f6e94bb2dce4df4bf93bfa788c705da4b59aee8c06980ed0633beb9ac4e0ccb8e26e0673d6ce48662bc477c9a075a9a82b0bbce4181ba9cbd42d49d449b15a432c535a5d4958dd397dbfaeba866e82461f2d9e84aa5af47e7f98827d38708b356ebe63120d362ce758cfd9bd3c5999de69c0182d69908dcf776b9d50a334d5d63d4f0d98486dcb5f57b3e1aad267320e25adc8a1eaf415266333742b3c20ae75b1db50ca55f17fd09743c9600381ef198544180791859af406865b36e31dc3e94e1c08cbfc404b34c5d65f835b75832705f06a049e136da12b9e9bf378f2f132166fb4113a0c9d1873513e60cc9cfaf6a81689c29f30ff64842014b33dc42022aab75b76612e8b8d152587cf84727c05fc6502e0a0af3a33a7c5fe7fc6340dee7cc1c2c3443990bd4b823ed4547c796e3d0a0afe80fa642ad9f56c1e2832b655d4409c11aa53849f90693a60d975c1da5c0d879ded68a2adc5554deb0edbe8542f2fdb5ad221c0e18d0a910b7d9bb1e8db31e949dea48237ba90b59f359fdd7607b78ad757c38cdddb3d41bca7497d84c26edd7599f48ffd2f628b95491c9e5fe3a44750091f1354bd31ae98187f189ef0fc8bf021cc0bda8c27a4b8c5d94ab09b3aa340bcfb8f15986c17b6cdb1964ae7b7d57b6ac035e736ae16ffccd1180a53eadc68b9402d50cd8cb552e2a4bed774f9dbf81d44e7a568793fc04c0224cef7384b4e1ea130bac3eaf6fee5629f33f80e6dbb37d588b568a4af7702300b7d98802abf0c41b82f06a0dc11dd6e79576301d186c01cf44b2686a0082a70461982ebc558d39c7e31e7eb5489360ba237ea5316077e5880f342e2e01e7a3589c8c397c06472cca4abd9bfddca5b5c80adff1dbbe1f2d0f2241d78a565fc3a549456e1b5c008171abe0c225a5604df37f871c49ba2e2f18f60fb15019b7df19ca9d82ccc16ce673e0dacde1d0203cb52bd8d8228e1bafd9d92fd3faee70893b4774d641e89364ea364aa65d4e1026fb7b470b3681ce14acaf68125bccafb9387d399e5401de9262f9d9b1858e9570eef3db81c9cc76cde76808441b7e183811a70b2c5b421e99d258ef921e943423b2baa030f3fdcd3b99537311f21da0ca95bed4000ca59fb830a4e8bc827faec9567017e0284c8d279e2d3bd92a44504ce908fb717130b835d3577ac64f76ca52576ee200cae5489d3010261fcae925d662e5cef45c97725f9e59618dab27480f63b863dc6886103bd004c71c83f940e694afd6fb1e1001b839e3db65c4d09d265a8919e51d036ba7c41f4a378307298cb351c491dd6460677811fca3575eb013fdbe8b75fbab97f7104f352fab91bedec2f81ed68ecfb138bef1aad8e3b1c82ba8c9fa936aded3db8865df550051a70efe5bf6c0b8acfd06e189623d2d2640479185a32676aea1279134ef016ad91f5f55ec2e1ff7ca5e6703323b232d9c060ac101b7d3ec5e5edf567b1b6adeaaf2c9cebb6e4a64ffcd852cf2da358d5ef9b92f43395258c352a316a30fc92b7f4dc049fbafc5a6b4e18ffcab06062e586e9b3a60589931f30507b02ade0dc25337ec9e46e266b4acd05ca8dc4fd58fb83f4ec9a265b5cf0f15cbeaf4e4ab851c4b48c73d406687594a2bbdc06fd4dda0d0287c0ae0f3148b12d1fdec4c45654678a287f2b7d63aaa3c328ae29d00801767e4af31f6f5f2544ae877ad402ba43f0109af89f8077c43d86242cdea320c514687e8a2eaf994adfdc05b00c9342f43746d75ed3715ef6a604486682705fa619e9a8e8678407be7db15fdf13ab356e4065a112f0770e7e39414076c02d1d28a15d58b2ec550ad127a3741320635119e26425136d7f8bb80c24915a12278b8efd1ed4516c7a5cc33137935950535013c17323668e28e533655b49cf0559458c1ef3bb4247d78911d82c8f705f0218547918043458db4dc508cd860a0bcfca2f776e9a73e76d56482e769b01bee41f32f83d50c9ea2725b6ec7456fd3b1672b34e5a2b9de1d69b21580e959f9999a192eedb931787c5224cdc1e52977b29bbc3099cf106af282bc82486d43b10268e9a5edcac97e25528d64b3e842d83bec52ed4f65c11366"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m46.131875945s ago: executing program 3 (id=44): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xe, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) 9m45.162888221s ago: executing program 3 (id=47): socket$netlink(0x10, 0x3, 0x8) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000740), 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x5e91, 0xbc03, 0x6, 0x0, 0x0) 9m45.10283741s ago: executing program 4 (id=48): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x41) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000140)=""/90, 0x5a) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) socket(0x1e, 0x4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x4ec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m42.906682526s ago: executing program 3 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 9m42.194290716s ago: executing program 4 (id=56): syz_pidfd_open(0x0, 0x0) r0 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 9m42.054513628s ago: executing program 3 (id=57): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0), 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 9m41.928760811s ago: executing program 0 (id=58): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x13, 0x65}]}}}}}}}, 0x0) 9m40.962738392s ago: executing program 4 (id=60): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x7f, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x5, 0x164, 0x0, 0x0) 9m40.020922364s ago: executing program 0 (id=64): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 9m39.739638926s ago: executing program 3 (id=65): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r3 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r4, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9m38.245959198s ago: executing program 0 (id=68): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x310f000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x18, 0x8a06, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 9m36.958609926s ago: executing program 0 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c130280781311"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m35.946651653s ago: executing program 0 (id=73): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 9m35.042866648s ago: executing program 0 (id=75): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x804) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xf0, 0x1f, 0x49, 0x10, 0x1a0a, 0x103, 0x708a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0xa, "", [{{0x9, 0x4, 0x10, 0x6, 0x0, 0x7e, 0x80, 0xb0, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 9m33.445002181s ago: executing program 4 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x200002, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) r4 = socket(0x18, 0x800, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200), 0x80) keyctl$invalidate(0x15, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 9m24.356280008s ago: executing program 32 (id=65): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x20000485, 0x100) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x7, {0x5d3, 0x4, 0xb, 0x40008001}}) r3 = open(0x0, 0x345842, 0x389b0d52417bb201) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r5, 0x3, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x1, r3}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x57f8ad59d87e25cd, 0x4, r4, &(0x7f0000000100)="12", 0x1, 0x7fff}]) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{0xfffc, 0x3, 0x0, 0x5}, 'syz0\x00', 0x42}) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0xee) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x123180, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) read(r8, &(0x7f0000000240)=""/123, 0x7b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9m18.934462156s ago: executing program 33 (id=75): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x804) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xf0, 0x1f, 0x49, 0x10, 0x1a0a, 0x103, 0x708a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x10, 0xa, "", [{{0x9, 0x4, 0x10, 0x6, 0x0, 0x7e, 0x80, 0xb0, 0x3}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 9m17.615467776s ago: executing program 34 (id=78): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x200002, 0x9, 0x6, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40400, 0x0) r4 = socket(0x18, 0x800, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200), 0x80) keyctl$invalidate(0x15, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 19.247519871s ago: executing program 7 (id=527): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000006bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000102, 0x0) 18.29367256s ago: executing program 7 (id=529): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0xa, 0x0, @fd, 0x0, 0x0, 0x0, {0x1214}, 0x1}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6fffe7fc, 0x5) 16.758538778s ago: executing program 7 (id=531): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 15.80962676s ago: executing program 7 (id=534): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa40c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14.303002282s ago: executing program 1 (id=537): unshare(0x26020480) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) 13.529074596s ago: executing program 1 (id=539): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@generic={0xfe, 0x6f, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x1, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x7, "e80ee304ecb784"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x200}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.432814606s ago: executing program 6 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b0000000000"], 0x38}}, 0x0) 11.305096127s ago: executing program 1 (id=543): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x18, 0x5136962206c80b7c}}], 0x1, 0x4044881) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6fffe7fc, 0x5) 10.217907486s ago: executing program 6 (id=545): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) read$watch_queue(r0, 0x0, 0x0) 10.144662512s ago: executing program 5 (id=546): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000600)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 9.011392691s ago: executing program 1 (id=548): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), r0) 7.728258648s ago: executing program 1 (id=550): syz_pidfd_open(0x0, 0x0) r0 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a00000001090224000100"], 0x0) 7.373267833s ago: executing program 2 (id=551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000070900010073797a31000000002c0004802800018007000100637400001c0002800800014000000001050003009a00000008000240000000050900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 6.733033756s ago: executing program 5 (id=552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 6.549187614s ago: executing program 2 (id=553): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 5.631118097s ago: executing program 6 (id=554): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x70) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f00000002c0)=0xfffffffffffffea8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000001c0)={0xbd83, 0x6, &(0x7f00000000c0)=[0x1ff, 0x100, 0x9, 0x4, 0x70, 0x3], &(0x7f0000000100)=[0x4], &(0x7f0000000140)=[0xfff, 0x9, 0xeca6, 0x0, 0xea1, 0x7, 0x8326], &(0x7f0000000180)=[0x2, 0x2, 0x63]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@private2, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c}, {@in6=@private1, 0xfe, 0x32}, @in6=@rand_addr=' \x01\x00', {0x0, 0x0, 0x0, 0x8, 0x9, 0x7, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2a, 0x3500, 0xa, 0x1, 0xb8, 0x50}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x20040000) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59ccd55d363d325a"}, 0x35) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r8 = socket(0x2, 0x3, 0xff) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendfile(r8, r6, 0x0, 0xffba83) 5.497510354s ago: executing program 2 (id=555): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003b7fe9208151403005d6501020301090212000100000000669078e58a8b"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x1f0}, 0x13}, 0x810) syz_usb_connect(0x1, 0x24, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.28398666s ago: executing program 1 (id=556): r0 = socket(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffd, 0xffffffff}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_procfs(0x0, 0x0) read$FUSE(r5, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0xfffffffe}}, {0x4}}]}]}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r8, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r7, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x0, 0x3, 0x1, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x59, 0x0, @fd, 0x0, 0x0, 0x0, {0x494}, 0x1}) syz_io_uring_submit(0x0, r10, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x5b, 0x0, @fd=r8, 0x5, &(0x7f0000000340)=[{&(0x7f0000000200)="3bcd4400a7aa6ba521d899889667a0ffccb98d2fc4d292b6d858c761efc843b10cbc0e4b1d3ccd903c0e75b1d46b3ab2b72c8666d8e4bc075c3937ec705fb9068debe58d64a4ac764f42", 0x4a}, {&(0x7f0000000100)="6ac65610959ccfef8b7bc05670ae81db49fca347", 0x14}], 0x2, 0x8, 0x0, {0x1}}) 4.435127681s ago: executing program 5 (id=557): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) 3.837996107s ago: executing program 7 (id=558): socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x6d682db9, 0x800) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x18, 0x5136962206c80b7c}}], 0x1, 0x4044881) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x6fffe7fc, 0x5) 3.425186818s ago: executing program 5 (id=559): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f0000000200)=[{0x0}], 0x1) 3.002987273s ago: executing program 2 (id=560): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x721401, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c8}, 0x24008000) socket$inet6(0xa, 0x80002, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x80, &(0x7f0000002280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080046e8007200650000042e9078ac1e0101ac1e010101000000d08a7c834afee87163c7ec8dc0c56f9c21178a82201fc7c673a2569d055847e1b666ff38ac0930bccb5c0dc9573a039600009d58dab1ba740e616607220d82e1f48526141fbb4c2c5231e7ea58661a7095a3bbf81038e97f63b6"], 0x0) dup(0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 2.770301994s ago: executing program 6 (id=561): unshare(0x26020480) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x7ff}) ppoll(&(0x7f0000000300)=[{r0, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0x3938700}, 0x0, 0x0) 2.493558218s ago: executing program 5 (id=562): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) r3 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0a, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002180)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r6, {0x403, 0x4, 0x8, 0xfff}}, 0x20) getdents64(r1, 0x0, 0x20000) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="3800000000000000d100000000000000030000000000000007000000000000001a"], 0x0, 0x0, 0x0, 0x0}) 2.216172692s ago: executing program 7 (id=563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000280)=""/6, &(0x7f0000000080)=0x6) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x8, @loopback}, 0x1c, 0x0}}], 0x1, 0xc1) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2400001b6800010003001000fdffff7f00000000000000000400020006000300010000005350028bd3bbfcbfb15ee2f9a89655124b028adc6c0f8952cc565f1a2c498b36d17b1ff3a5e02e36c39a76b7d5fef3df08d71c2f23eab595105b5f810300db9839c5448038f2d1f094b994c2505cfbda81d2b003e78f72e4a5b068866bd17e920a1dbc61fd13324fdfd157126071a017a04182c9e6ba46c9687d9ad1c921a6a22b1f5c286e2c5e866883187d38845f15a6e61eb1512f1cbd6c0c4bca2780677e419f1168c06e50470b3a974221da03985687886e9021ad2068be8961f6c6"], 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) ioprio_set$pid(0x2, 0x0, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 1.707410704s ago: executing program 6 (id=564): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0xffffffffffffffff, 0x42200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) 1.47458812s ago: executing program 2 (id=565): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) 734.363838ms ago: executing program 5 (id=566): syz_pidfd_open(0x0, 0x0) r0 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a00000001090224000100"], 0x0) 566.858849ms ago: executing program 6 (id=567): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0xf9, 0x3, &(0x7f0000000040)={0x19, "78b8142115db2c054906d8cf007efb564aaae98e0100000014000c00"}}) 0s ago: executing program 2 (id=568): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa40c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x264, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa4, 0xd4}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x2c0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): 943320][ T7000] bridge_slave_0: entered promiscuous mode [ 481.326222][ T7000] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.353105][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.361001][ T7000] bridge_slave_1: entered allmulticast mode [ 481.404025][ T7000] bridge_slave_1: entered promiscuous mode [ 482.127349][ T7000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.233286][ T49] Bluetooth: hci5: command tx timeout [ 482.431324][ T7000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.857441][ T7000] team0: Port device team_slave_0 added [ 482.915792][ T7000] team0: Port device team_slave_1 added [ 483.597912][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.622190][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.732241][ T7000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.969540][ T7000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.032172][ T7000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.132471][ T7000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.240328][ T7033] chnl_net:caif_netlink_parms(): no params data found [ 484.866024][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 485.136697][ T149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.661826][ T149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.886778][ T7000] hsr_slave_0: entered promiscuous mode [ 485.908400][ T7000] hsr_slave_1: entered promiscuous mode [ 485.973276][ T149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.398186][ T149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.403426][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.411276][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.420864][ T7033] bridge_slave_0: entered allmulticast mode [ 487.506741][ T7033] bridge_slave_0: entered promiscuous mode [ 487.745032][ T7033] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.776363][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.812732][ T7033] bridge_slave_1: entered allmulticast mode [ 487.866262][ T7033] bridge_slave_1: entered promiscuous mode [ 488.465032][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.483147][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.490805][ T7046] bridge_slave_0: entered allmulticast mode [ 488.543554][ T7046] bridge_slave_0: entered promiscuous mode [ 488.736560][ T7033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.807087][ T7033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.203462][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.262906][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.302522][ T7046] bridge_slave_1: entered allmulticast mode [ 489.326369][ T7046] bridge_slave_1: entered promiscuous mode [ 489.898168][ T149] bridge_slave_1: left allmulticast mode [ 489.904777][ T149] bridge_slave_1: left promiscuous mode [ 489.911163][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.966856][ T149] bridge_slave_0: left allmulticast mode [ 489.982713][ T149] bridge_slave_0: left promiscuous mode [ 490.004810][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.070273][ T149] bridge_slave_1: left allmulticast mode [ 490.090048][ T149] bridge_slave_1: left promiscuous mode [ 490.122963][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.155125][ T149] bridge_slave_0: left allmulticast mode [ 490.161047][ T149] bridge_slave_0: left promiscuous mode [ 490.213123][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.564842][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.624032][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.676771][ T149] bond0 (unregistering): Released all slaves [ 492.288201][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.325693][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.451850][ T149] bond0 (unregistering): Released all slaves [ 492.541050][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.628038][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.700875][ T7033] team0: Port device team_slave_0 added [ 492.813510][ T7033] team0: Port device team_slave_1 added [ 493.162218][ T149] hsr_slave_0: left promiscuous mode [ 493.239841][ T149] hsr_slave_1: left promiscuous mode [ 493.257849][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.292945][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.309354][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.332262][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.419132][ T149] hsr_slave_0: left promiscuous mode [ 493.450867][ T149] hsr_slave_1: left promiscuous mode [ 493.480652][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.502968][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.526083][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.533840][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.695704][ T149] veth1_macvtap: left promiscuous mode [ 493.701562][ T149] veth0_macvtap: left promiscuous mode [ 493.737494][ T149] veth1_vlan: left promiscuous mode [ 493.752661][ T149] veth0_vlan: left promiscuous mode [ 493.760231][ T149] veth1_macvtap: left promiscuous mode [ 493.768245][ T149] veth0_macvtap: left promiscuous mode [ 493.787963][ T149] veth1_vlan: left promiscuous mode [ 493.798803][ T149] veth0_vlan: left promiscuous mode [ 493.841671][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.174'. [ 494.711387][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 498.871606][ T149] team0 (unregistering): Port device team_slave_1 removed [ 498.961704][ T149] team0 (unregistering): Port device team_slave_0 removed [ 500.752744][ T149] team0 (unregistering): Port device team_slave_1 removed [ 500.859825][ T149] team0 (unregistering): Port device team_slave_0 removed [ 501.905800][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.932771][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.990674][ T7033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.105718][ T7046] team0: Port device team_slave_0 added [ 502.130449][ T7033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.139811][ T7033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.180633][ T7033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.298235][ T7046] team0: Port device team_slave_1 added [ 502.683353][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.700016][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.742654][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.780159][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.809945][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.872335][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.297254][ T7033] hsr_slave_0: entered promiscuous mode [ 503.347114][ T7033] hsr_slave_1: entered promiscuous mode [ 503.395801][ T7033] debugfs: 'hsr0' already exists in 'hsr' [ 503.411310][ T7033] Cannot create hsr debugfs directory [ 504.308386][ T7046] hsr_slave_0: entered promiscuous mode [ 504.525214][ T7046] hsr_slave_1: entered promiscuous mode [ 504.546794][ T7046] debugfs: 'hsr0' already exists in 'hsr' [ 504.603801][ T7046] Cannot create hsr debugfs directory [ 506.670365][ T7000] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.734126][ T7000] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 507.014495][ T7000] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 507.279233][ T7000] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 508.984425][ T7033] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 509.149364][ T7033] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 509.246059][ T7033] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 509.367660][ T7033] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 509.605121][ T7000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.957062][ T7046] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 510.054449][ T7046] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 510.167823][ T7000] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.240546][ T7046] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 510.356045][ T7046] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 510.432061][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.439694][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.565121][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.572923][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.206321][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.223331][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.231831][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 512.359725][ T7033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.808941][ T7033] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.979181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.986838][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.194134][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.410319][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.418222][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.826541][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.018566][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.026269][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.290947][ T7033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.345678][ T7033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.477827][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.485599][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.726852][ T7000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.346755][ T7033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.136455][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.908925][ T7000] veth0_vlan: entered promiscuous mode [ 519.172554][ T7000] veth1_vlan: entered promiscuous mode [ 520.048827][ T7000] veth0_macvtap: entered promiscuous mode [ 520.189138][ T7000] veth1_macvtap: entered promiscuous mode [ 520.776398][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.984700][ T7000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.307112][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.351054][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.490284][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.527196][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.113687][ T7033] veth0_vlan: entered promiscuous mode [ 522.481170][ T7033] veth1_vlan: entered promiscuous mode [ 522.841128][ T7046] veth0_vlan: entered promiscuous mode [ 523.114961][ T7046] veth1_vlan: entered promiscuous mode [ 523.787953][ T7033] veth0_macvtap: entered promiscuous mode [ 524.048121][ T7033] veth1_macvtap: entered promiscuous mode [ 524.436447][ T7046] veth0_macvtap: entered promiscuous mode [ 524.626820][ T7046] veth1_macvtap: entered promiscuous mode [ 524.727450][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.044664][ T7033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.343851][ T6379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.383905][ T6379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.527792][ T6379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.547903][ T6379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.636151][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.738327][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.949250][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.969398][ T5070] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.975471][ T165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.037220][ T5070] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 526.063228][ T5070] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 526.085963][ T165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.086580][ T5070] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.387827][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.431255][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.302619][ T5070] Bluetooth: hci0: command tx timeout [ 529.845800][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 530.383202][ T5070] Bluetooth: hci0: command tx timeout [ 530.709900][ T149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.903836][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.190'. [ 531.233548][ T149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.650226][ T149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.782848][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 531.863593][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 531.882555][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 531.918789][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 531.940332][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.230047][ T149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.475204][ T49] Bluetooth: hci0: command tx timeout [ 534.062601][ T5770] Bluetooth: hci3: command tx timeout [ 534.068921][ T5070] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.114415][ T5070] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.140692][ T5070] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.168392][ T5070] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.182983][ T5070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.246870][ T149] bridge_slave_1: left allmulticast mode [ 534.280490][ T149] bridge_slave_1: left promiscuous mode [ 534.293878][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.344008][ T149] bridge_slave_0: left allmulticast mode [ 534.349969][ T149] bridge_slave_0: left promiscuous mode [ 534.415833][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.542605][ T49] Bluetooth: hci0: command tx timeout [ 536.147315][ T49] Bluetooth: hci3: command tx timeout [ 536.222406][ T49] Bluetooth: hci6: command tx timeout [ 536.551617][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.655832][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.710334][ T149] bond0 (unregistering): Released all slaves [ 536.904167][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.926009][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.000464][ T7211] bridge_slave_0: entered allmulticast mode [ 537.047478][ T7211] bridge_slave_0: entered promiscuous mode [ 537.156062][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.183376][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.191629][ T7211] bridge_slave_1: entered allmulticast mode [ 537.249097][ T7211] bridge_slave_1: entered promiscuous mode [ 537.581588][ T7283] fuse: Unknown parameter '0x0000000000000003' [ 538.223118][ T49] Bluetooth: hci3: command tx timeout [ 538.315610][ T49] Bluetooth: hci6: command tx timeout [ 538.372828][ T149] hsr_slave_0: left promiscuous mode [ 538.472155][ T149] hsr_slave_1: left promiscuous mode [ 538.525303][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.562825][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.608914][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.640118][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.791043][ T149] veth1_macvtap: left promiscuous mode [ 538.797524][ T149] veth0_macvtap: left promiscuous mode [ 538.805559][ T149] veth1_vlan: left promiscuous mode [ 538.827153][ T149] veth0_vlan: left promiscuous mode [ 540.302537][ T49] Bluetooth: hci3: command tx timeout [ 540.392396][ T49] Bluetooth: hci6: command tx timeout [ 540.681599][ T149] team0 (unregistering): Port device team_slave_1 removed [ 540.873801][ T149] team0 (unregistering): Port device team_slave_0 removed [ 541.253862][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 542.146220][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.302647][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.462496][ T49] Bluetooth: hci6: command tx timeout [ 542.520099][ T7211] team0: Port device team_slave_0 added [ 542.677087][ T7211] team0: Port device team_slave_1 added [ 543.886692][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 543.922593][ T7318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.200'. [ 543.986464][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.020906][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.068052][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.265083][ T149] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.401329][ T7318] ip6gretap0: entered promiscuous mode [ 544.438287][ T7318] syz_tun: entered promiscuous mode [ 544.537132][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.562294][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.648030][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.997305][ T149] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.346015][ T149] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.398927][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 545.545853][ T149] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.496789][ T7211] hsr_slave_0: entered promiscuous mode [ 546.587618][ T7211] hsr_slave_1: entered promiscuous mode [ 547.985463][ T7346] fuse: Unknown parameter '0x0000000000000003' [ 548.558017][ T149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.712817][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.743310][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.756035][ T7247] bridge_slave_0: entered allmulticast mode [ 548.793988][ T7247] bridge_slave_0: entered promiscuous mode [ 548.845182][ T7266] chnl_net:caif_netlink_parms(): no params data found [ 549.053836][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.062511][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.080155][ T7247] bridge_slave_1: entered allmulticast mode [ 549.111533][ T7247] bridge_slave_1: entered promiscuous mode [ 549.199275][ T149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.988169][ T149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.528616][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.662931][ T149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.770433][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.466858][ T7247] team0: Port device team_slave_0 added [ 551.779326][ T7374] tipc: Enabling of bearer rejected, failed to enable media [ 551.976856][ T7247] team0: Port device team_slave_1 added [ 552.389314][ T7374] syzkaller0: entered promiscuous mode [ 552.411354][ T7374] syzkaller0: entered allmulticast mode [ 552.584942][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 552.629700][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.637760][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.661326][ T7266] bridge_slave_0: entered allmulticast mode [ 552.689017][ T7266] bridge_slave_0: entered promiscuous mode [ 552.913448][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.938016][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.953625][ T7266] bridge_slave_1: entered allmulticast mode [ 552.978848][ T7266] bridge_slave_1: entered promiscuous mode [ 553.038663][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.072583][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.136106][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.385291][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.396957][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.445875][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.619939][ T7266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.642770][ T149] bridge_slave_1: left allmulticast mode [ 553.648661][ T149] bridge_slave_1: left promiscuous mode [ 553.670136][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.717569][ T149] bridge_slave_0: left allmulticast mode [ 553.727396][ T149] bridge_slave_0: left promiscuous mode [ 553.736273][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.774440][ T149] bridge_slave_1: left allmulticast mode [ 553.780329][ T149] bridge_slave_1: left promiscuous mode [ 553.810719][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.857588][ T149] bridge_slave_0: left allmulticast mode [ 553.872415][ T149] bridge_slave_0: left promiscuous mode [ 553.878948][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.354043][ T7398] fuse: Unknown parameter '0x0000000000000003' [ 555.269636][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.448444][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.476355][ T149] bond0 (unregistering): Released all slaves [ 556.072549][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.154109][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.202576][ T149] bond0 (unregistering): Released all slaves [ 556.384834][ T7266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.144511][ T7247] hsr_slave_0: entered promiscuous mode [ 557.168374][ T7247] hsr_slave_1: entered promiscuous mode [ 557.189559][ T7247] debugfs: 'hsr0' already exists in 'hsr' [ 557.219660][ T7247] Cannot create hsr debugfs directory [ 557.256902][ T7266] team0: Port device team_slave_0 added [ 557.329352][ T149] hsr_slave_0: left promiscuous mode [ 557.353264][ T149] hsr_slave_1: left promiscuous mode [ 557.376135][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.402163][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.446402][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.500956][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.617513][ T149] hsr_slave_0: left promiscuous mode [ 557.662863][ T149] hsr_slave_1: left promiscuous mode [ 557.687675][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.698823][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.724128][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.762432][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.965305][ T149] veth1_macvtap: left promiscuous mode [ 557.971250][ T149] veth0_macvtap: left promiscuous mode [ 558.013736][ T149] veth1_vlan: left promiscuous mode [ 558.019378][ T149] veth0_vlan: left promiscuous mode [ 558.047508][ T149] veth1_macvtap: left promiscuous mode [ 558.072530][ T149] veth0_macvtap: left promiscuous mode [ 558.078493][ T149] veth1_vlan: left promiscuous mode [ 558.102523][ T149] veth0_vlan: left promiscuous mode [ 561.187531][ T149] team0 (unregistering): Port device team_slave_1 removed [ 561.235132][ T149] team0 (unregistering): Port device team_slave_0 removed [ 562.715149][ T149] team0 (unregistering): Port device team_slave_1 removed [ 562.857855][ T149] team0 (unregistering): Port device team_slave_0 removed [ 563.707364][ T7266] team0: Port device team_slave_1 added [ 563.815307][ T7422] tipc: Enabling of bearer rejected, failed to enable media [ 564.579568][ T7211] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 564.730072][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.756218][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.832098][ T7266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.861334][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 564.885700][ T7211] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.053613][ T7266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.060706][ T7266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.089728][ T7266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.177593][ T7211] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.400795][ T7211] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 566.284440][ T7266] hsr_slave_0: entered promiscuous mode [ 566.317848][ T7266] hsr_slave_1: entered promiscuous mode [ 566.347322][ T7266] debugfs: 'hsr0' already exists in 'hsr' [ 566.353838][ T7266] Cannot create hsr debugfs directory [ 568.487038][ T7454] fuse: Unknown parameter '0x0000000000000003' [ 569.037067][ T7247] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.164611][ T7247] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.326078][ T7247] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.455964][ T7247] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.800846][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.957248][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 570.393744][ T5932] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 570.445294][ T5932] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 570.482845][ T5932] usb 3-1: Product: syz [ 570.503312][ T5932] usb 3-1: Manufacturer: syz [ 570.534945][ T5932] usb 3-1: config 0 descriptor?? [ 570.550086][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.620370][ T5932] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 570.675785][ T5932] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 570.816503][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'. [ 570.950944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.958642][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.070904][ T5822] usb 3-1: USB disconnect, device number 3 [ 571.111582][ T5822] ftdi_sio 3-1:0.0: device disconnected [ 571.150874][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.158554][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.813784][ T7266] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 571.875184][ T7266] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 572.002461][ T7266] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 572.198148][ T7266] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 572.645203][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.652105][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.439857][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.952626][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.218483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.226450][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.478710][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.486396][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.628368][ T7496] tipc: Enabling of bearer rejected, failed to enable media [ 574.708280][ T7497] syzkaller0: entered promiscuous mode [ 574.728020][ T7497] syzkaller0: entered allmulticast mode [ 575.369975][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.776828][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 576.130418][ T7266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.610021][ T7266] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.771302][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.779067][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.007991][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.015668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.754167][ T7523] fuse: Unknown parameter 'fd0x0000000000000003' [ 578.835220][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.606124][ T7211] veth0_vlan: entered promiscuous mode [ 579.827221][ T7211] veth1_vlan: entered promiscuous mode [ 580.548205][ T7266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.962313][ T7205] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 581.045770][ T7211] veth0_macvtap: entered promiscuous mode [ 581.176452][ T7211] veth1_macvtap: entered promiscuous mode [ 581.326428][ T7205] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 581.365518][ T7205] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 581.391566][ T7205] usb 3-1: Product: syz [ 581.423320][ T7205] usb 3-1: Manufacturer: syz [ 581.475155][ T7205] usb 3-1: config 0 descriptor?? [ 581.650532][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.707120][ T7205] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 581.823146][ T7205] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 581.924411][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.030325][ T7541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.230'. [ 582.104234][ T9] usb 3-1: USB disconnect, device number 4 [ 582.189600][ T9] ftdi_sio 3-1:0.0: device disconnected [ 582.226896][ T149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.302313][ T149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.496124][ T149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.530854][ T149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.403733][ T7247] veth0_vlan: entered promiscuous mode [ 583.708617][ T7247] veth1_vlan: entered promiscuous mode [ 584.833010][ T7266] veth0_vlan: entered promiscuous mode [ 584.911730][ T7247] veth0_macvtap: entered promiscuous mode [ 585.112722][ T7247] veth1_macvtap: entered promiscuous mode [ 585.368574][ T7266] veth1_vlan: entered promiscuous mode [ 585.666692][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.849465][ T7576] tipc: Enabling of bearer rejected, failed to enable media [ 586.007027][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.075616][ T7577] syzkaller0: entered promiscuous mode [ 586.102488][ T7577] syzkaller0: entered allmulticast mode [ 586.476956][ T76] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.528014][ T76] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.595108][ T76] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.668717][ T76] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.092641][ T7266] veth0_macvtap: entered promiscuous mode [ 587.275964][ T7266] veth1_macvtap: entered promiscuous mode [ 587.416458][ T5070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.428859][ T5070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.444591][ T5070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.477092][ T5070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.498415][ T5070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.720696][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.978330][ T7266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.094143][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 588.492762][ T6699] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.543468][ T6699] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.715098][ T6699] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.778662][ T6699] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.596496][ T49] Bluetooth: hci4: command tx timeout [ 590.455760][ T7612] loop8: detected capacity change from 0 to 8 [ 590.529337][ T7612] Dev loop8: unable to read RDB block 8 [ 590.609727][ T7612] loop8: unable to read partition table [ 590.633319][ T7612] loop8: partition table beyond EOD, truncated [ 590.663283][ T7612] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 590.741443][ T7616] fuse: Unknown parameter 'fd0x0000000000000003' [ 591.397714][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.664836][ T49] Bluetooth: hci4: command tx timeout [ 591.671017][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.736471][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 591.903038][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.346038][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.710402][ T13] bridge_slave_1: left allmulticast mode [ 593.734171][ T5070] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 593.744468][ T5070] Bluetooth: hci4: command tx timeout [ 593.753129][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.762756][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.782934][ T13] bridge_slave_1: left promiscuous mode [ 593.789665][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.830034][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.866103][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.089558][ T13] bridge_slave_0: left allmulticast mode [ 594.148575][ T13] bridge_slave_0: left promiscuous mode [ 594.178268][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.056006][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 595.665796][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 595.679684][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 595.714259][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 595.753625][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 595.776775][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.823051][ T49] Bluetooth: hci4: command tx timeout [ 595.982299][ T5070] Bluetooth: hci0: command tx timeout [ 596.434118][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.545988][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.607042][ T13] bond0 (unregistering): Released all slaves [ 596.810342][ T7651] tipc: Enabling of bearer rejected, failed to enable media [ 597.451626][ T13] hsr_slave_0: left promiscuous mode [ 597.497751][ T13] hsr_slave_1: left promiscuous mode [ 597.535029][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.563642][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.617746][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.652168][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.743689][ T13] veth1_macvtap: left promiscuous mode [ 597.749630][ T13] veth0_macvtap: left promiscuous mode [ 597.822532][ T13] veth1_vlan: left promiscuous mode [ 597.828388][ T13] veth0_vlan: left promiscuous mode [ 597.902395][ T5070] Bluetooth: hci5: command tx timeout [ 598.062611][ T5070] Bluetooth: hci0: command tx timeout [ 598.510460][ T7686] loop8: detected capacity change from 0 to 8 [ 598.559798][ T7686] Dev loop8: unable to read RDB block 8 [ 598.596914][ T7686] loop8: unable to read partition table [ 598.613669][ T7686] loop8: partition table beyond EOD, truncated [ 598.649585][ T7686] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 599.166027][ T7689] fuse: Unknown parameter 'fd0x0000000000000003' [ 599.992359][ T5070] Bluetooth: hci5: command tx timeout [ 599.993602][ C1] hrtimer: interrupt took 735197 ns [ 600.034196][ T13] team0 (unregistering): Port device team_slave_1 removed [ 600.090042][ T13] team0 (unregistering): Port device team_slave_0 removed [ 600.145947][ T5070] Bluetooth: hci0: command tx timeout [ 600.827896][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 601.370026][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.398143][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.442072][ T7586] bridge_slave_0: entered allmulticast mode [ 601.469825][ T7586] bridge_slave_0: entered promiscuous mode [ 601.955434][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.975141][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.003128][ T7586] bridge_slave_1: entered allmulticast mode [ 602.043840][ T7586] bridge_slave_1: entered promiscuous mode [ 602.064928][ T5070] Bluetooth: hci5: command tx timeout [ 602.202472][ T7708] tipc: Enabling of bearer rejected, failed to enable media [ 602.223592][ T5070] Bluetooth: hci0: command tx timeout [ 602.806826][ T7710] syzkaller0: entered promiscuous mode [ 602.820108][ T7710] syzkaller0: entered allmulticast mode [ 602.879060][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.063915][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.078442][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.142433][ T5070] Bluetooth: hci5: command tx timeout [ 604.186760][ T7586] team0: Port device team_slave_0 added [ 604.349005][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.431480][ T7586] team0: Port device team_slave_1 added [ 604.769474][ T7738] loop8: detected capacity change from 0 to 8 [ 604.803082][ T7473] Dev loop8: unable to read RDB block 8 [ 604.808995][ T7473] loop8: unable to read partition table [ 604.852133][ T7473] loop8: partition table beyond EOD, truncated [ 604.873149][ T7738] Dev loop8: unable to read RDB block 8 [ 604.903900][ T7738] loop8: unable to read partition table [ 604.933803][ T7738] loop8: partition table beyond EOD, truncated [ 604.973026][ T7738] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 605.177891][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.346018][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.362482][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.454505][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.648113][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.713863][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.722446][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.759560][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.932968][ T7668] chnl_net:caif_netlink_parms(): no params data found [ 607.114468][ T7586] hsr_slave_0: entered promiscuous mode [ 607.178996][ T7586] hsr_slave_1: entered promiscuous mode [ 607.670352][ T7643] chnl_net:caif_netlink_parms(): no params data found [ 609.053895][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.707685][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.889291][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.922688][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.943908][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 609.954976][ T7668] bridge_slave_0: entered allmulticast mode [ 609.983165][ T7668] bridge_slave_0: entered promiscuous mode [ 610.034959][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.063333][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.102884][ T7668] bridge_slave_1: entered allmulticast mode [ 610.128430][ T7668] bridge_slave_1: entered promiscuous mode [ 610.221151][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.525939][ T7781] tipc: Enabling of bearer rejected, failed to enable media [ 610.749351][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.048716][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.095248][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.127657][ T7782] syzkaller0: entered promiscuous mode [ 611.151014][ T7782] syzkaller0: entered allmulticast mode [ 611.509730][ T7643] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.562501][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.570687][ T7643] bridge_slave_0: entered allmulticast mode [ 611.633167][ T7643] bridge_slave_0: entered promiscuous mode [ 611.767916][ T7794] loop8: detected capacity change from 0 to 8 [ 611.799522][ T7794] Dev loop8: unable to read RDB block 8 [ 611.817096][ T7794] loop8: unable to read partition table [ 611.844430][ T7794] loop8: partition table beyond EOD, truncated [ 611.871284][ T7794] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 612.056026][ T7643] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.090616][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.110573][ T7643] bridge_slave_1: entered allmulticast mode [ 612.135683][ T7643] bridge_slave_1: entered promiscuous mode [ 612.353391][ T7668] team0: Port device team_slave_0 added [ 612.419433][ T7668] team0: Port device team_slave_1 added [ 613.296816][ T7643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.429252][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.457628][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.532418][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.711530][ T7643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.780853][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.816912][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.889477][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.145269][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 614.296043][ T13] bridge_slave_1: left allmulticast mode [ 614.324389][ T13] bridge_slave_1: left promiscuous mode [ 614.342141][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.368927][ T13] bridge_slave_0: left allmulticast mode [ 614.376756][ T13] bridge_slave_0: left promiscuous mode [ 614.385573][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.428028][ T13] bridge_slave_1: left allmulticast mode [ 614.435726][ T13] bridge_slave_1: left promiscuous mode [ 614.444029][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.477008][ T13] bridge_slave_0: left allmulticast mode [ 614.485133][ T13] bridge_slave_0: left promiscuous mode [ 614.493668][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.768541][ T7826] loop8: detected capacity change from 0 to 8 [ 615.799981][ T7826] Dev loop8: unable to read RDB block 8 [ 615.806963][ T7826] loop8: unable to read partition table [ 615.816470][ T7826] loop8: partition table beyond EOD, truncated [ 615.829293][ T7826] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 615.878954][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.930017][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.996475][ T13] bond0 (unregistering): Released all slaves [ 616.677348][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.754245][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.813663][ T13] bond0 (unregistering): Released all slaves [ 616.987954][ T7643] team0: Port device team_slave_0 added [ 617.054702][ T7643] team0: Port device team_slave_1 added [ 617.245899][ T7830] tipc: Enabling of bearer rejected, failed to enable media [ 617.755016][ T13] hsr_slave_0: left promiscuous mode [ 617.794724][ T13] hsr_slave_1: left promiscuous mode [ 617.824157][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.831787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.889732][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.912652][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.972159][ T13] hsr_slave_0: left promiscuous mode [ 618.012318][ T13] hsr_slave_1: left promiscuous mode [ 618.041447][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.072819][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.100872][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.130364][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.261460][ T13] veth1_macvtap: left promiscuous mode [ 618.296077][ T13] veth0_macvtap: left promiscuous mode [ 618.316000][ T13] veth1_vlan: left promiscuous mode [ 618.328568][ T13] veth0_vlan: left promiscuous mode [ 618.379484][ T13] veth1_macvtap: left promiscuous mode [ 618.392319][ T13] veth0_macvtap: left promiscuous mode [ 618.427539][ T13] veth1_vlan: left promiscuous mode [ 618.451652][ T13] veth0_vlan: left promiscuous mode [ 618.966326][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 620.566010][ T13] team0 (unregistering): Port device team_slave_1 removed [ 620.627507][ T13] team0 (unregistering): Port device team_slave_0 removed [ 621.706717][ T13] team0 (unregistering): Port device team_slave_1 removed [ 621.760813][ T13] team0 (unregistering): Port device team_slave_0 removed [ 622.412834][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.435590][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.512719][ T7643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.562732][ T7643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.583863][ T7643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.672516][ T7643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.899430][ T7668] hsr_slave_0: entered promiscuous mode [ 622.945877][ T7668] hsr_slave_1: entered promiscuous mode [ 622.966407][ T7668] debugfs: 'hsr0' already exists in 'hsr' [ 623.017341][ T7668] Cannot create hsr debugfs directory [ 623.055291][ T7878] loop8: detected capacity change from 0 to 8 [ 623.103127][ T7878] Dev loop8: unable to read RDB block 8 [ 623.128481][ T7878] loop8: unable to read partition table [ 623.156402][ T7878] loop8: partition table beyond EOD, truncated [ 623.184506][ T7878] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 623.852148][ T7586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 623.955505][ T7586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 624.266032][ T7643] hsr_slave_0: entered promiscuous mode [ 624.296630][ T7643] hsr_slave_1: entered promiscuous mode [ 624.330512][ T7643] debugfs: 'hsr0' already exists in 'hsr' [ 624.362268][ T7643] Cannot create hsr debugfs directory [ 624.392392][ T7586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 624.531438][ T7586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.049939][ T7896] syzkaller0: entered promiscuous mode [ 626.065324][ T7896] syzkaller0: entered allmulticast mode [ 628.101287][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.283'. [ 628.359412][ T7668] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 628.428017][ T7668] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 628.633685][ T7668] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 628.857471][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.896087][ T7668] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 629.231459][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.369091][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.377011][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.578984][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.586994][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.725351][ T7929] loop8: detected capacity change from 0 to 8 [ 629.740088][ T7929] Dev loop8: unable to read RDB block 8 [ 629.764381][ T7929] loop8: unable to read partition table [ 629.796145][ T7929] loop8: partition table beyond EOD, truncated [ 629.812483][ T7929] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 630.388611][ T7643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 630.531798][ T7643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 630.641603][ T7643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 630.735693][ T7643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 631.528449][ T7941] syzkaller0: entered promiscuous mode [ 631.536556][ T7941] syzkaller0: entered allmulticast mode [ 633.191026][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.765305][ T7643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.851283][ T7668] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.089121][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.101684][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.108019][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.110355][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.128449][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'. [ 634.239160][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.246935][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.531708][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.628533][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.813839][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.821500][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.258929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.266911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.527984][ T7996] loop8: detected capacity change from 0 to 8 [ 638.646508][ T7996] Dev loop8: unable to read RDB block 8 [ 638.722785][ T7996] loop8: unable to read partition table [ 638.749260][ T7996] loop8: partition table beyond EOD, truncated [ 638.786951][ T7996] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 639.175426][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.256794][ T7586] veth0_vlan: entered promiscuous mode [ 639.713846][ T7643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.746955][ T7586] veth1_vlan: entered promiscuous mode [ 640.320294][ T7586] veth0_macvtap: entered promiscuous mode [ 640.435090][ T7586] veth1_macvtap: entered promiscuous mode [ 640.850549][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.013253][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.268875][ T149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.311052][ T8015] syzkaller0: entered promiscuous mode [ 641.355647][ T8015] syzkaller0: entered allmulticast mode [ 641.399439][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.444581][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.500760][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.729773][ T7668] veth0_vlan: entered promiscuous mode [ 643.070917][ T7668] veth1_vlan: entered promiscuous mode [ 643.197964][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 643.709671][ T7643] veth0_vlan: entered promiscuous mode [ 643.900531][ T7668] veth0_macvtap: entered promiscuous mode [ 644.047035][ T7668] veth1_macvtap: entered promiscuous mode [ 644.123770][ T7643] veth1_vlan: entered promiscuous mode [ 644.571259][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.767400][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.899018][ T7643] veth0_macvtap: entered promiscuous mode [ 645.069138][ T8042] loop8: detected capacity change from 0 to 8 [ 645.092469][ T165] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.121461][ T8042] Dev loop8: unable to read RDB block 8 [ 645.142477][ T165] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.166214][ T8042] loop8: unable to read partition table [ 645.178251][ T165] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.211248][ T8042] loop8: partition table beyond EOD, truncated [ 645.232294][ T7643] veth1_macvtap: entered promiscuous mode [ 645.253139][ T8042] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 645.325807][ T165] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.757396][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.996007][ T7643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.298669][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.344477][ T1143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.468282][ T1143] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.503282][ T1143] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.722797][ T8055] syzkaller0: entered promiscuous mode [ 646.760824][ T8055] syzkaller0: entered allmulticast mode [ 648.630770][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.640639][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.652567][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.666863][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.696809][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.783600][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 650.862804][ T5770] Bluetooth: hci3: command tx timeout [ 651.455470][ T8098] loop8: detected capacity change from 0 to 8 [ 651.525219][ T8098] Dev loop8: unable to read RDB block 8 [ 651.531359][ T8098] loop8: unable to read partition table [ 651.568753][ T8098] loop8: partition table beyond EOD, truncated [ 651.619067][ T8098] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 651.664282][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 652.035060][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.467876][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.827641][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.949248][ T5770] Bluetooth: hci3: command tx timeout [ 653.143831][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.386190][ T8111] syzkaller0: entered promiscuous mode [ 653.415906][ T8111] syzkaller0: entered allmulticast mode [ 654.565692][ T57] bridge_slave_1: left allmulticast mode [ 654.571501][ T57] bridge_slave_1: left promiscuous mode [ 654.656867][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.799562][ T57] bridge_slave_0: left allmulticast mode [ 654.877333][ T57] bridge_slave_0: left promiscuous mode [ 654.893107][ T5070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.903313][ T5070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.905219][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.923871][ T5070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.994333][ T5070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 655.016714][ T5070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.025554][ T5070] Bluetooth: hci3: command tx timeout [ 656.773655][ T8125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 656.811026][ T8125] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 656.845718][ T8125] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 656.896951][ T8125] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 656.916289][ T8125] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 657.104720][ T8125] Bluetooth: hci3: command tx timeout [ 657.137503][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.182372][ T8125] Bluetooth: hci4: command tx timeout [ 657.268869][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.350602][ T57] bond0 (unregistering): Released all slaves [ 657.978051][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.002749][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.010667][ T8071] bridge_slave_0: entered allmulticast mode [ 658.068725][ T8071] bridge_slave_0: entered promiscuous mode [ 658.420737][ T57] hsr_slave_0: left promiscuous mode [ 658.462503][ T57] hsr_slave_1: left promiscuous mode [ 658.471115][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.471127][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 658.471265][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.564959][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.602271][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.697297][ T57] veth1_macvtap: left promiscuous mode [ 658.703911][ T57] veth0_macvtap: left promiscuous mode [ 658.710047][ T57] veth1_vlan: left promiscuous mode [ 658.739452][ T57] veth0_vlan: left promiscuous mode [ 659.027652][ T8125] Bluetooth: hci6: command tx timeout [ 659.262447][ T8125] Bluetooth: hci4: command tx timeout [ 660.780318][ T57] team0 (unregistering): Port device team_slave_1 removed [ 660.850926][ T57] team0 (unregistering): Port device team_slave_0 removed [ 661.114111][ T8125] Bluetooth: hci6: command tx timeout [ 661.342752][ T8125] Bluetooth: hci4: command tx timeout [ 661.402371][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.435483][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.445916][ T8071] bridge_slave_1: entered allmulticast mode [ 661.456397][ T8071] bridge_slave_1: entered promiscuous mode [ 661.975812][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.024440][ T8142] loop8: detected capacity change from 0 to 8 [ 662.063666][ T8142] Dev loop8: unable to read RDB block 8 [ 662.069588][ T8142] loop8: unable to read partition table [ 662.078904][ T8142] loop8: partition table beyond EOD, truncated [ 662.121718][ T8142] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 662.248740][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.940229][ T8071] team0: Port device team_slave_0 added [ 663.170365][ T8071] team0: Port device team_slave_1 added [ 663.182637][ T8125] Bluetooth: hci6: command tx timeout [ 663.422814][ T8125] Bluetooth: hci4: command tx timeout [ 663.556549][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.601296][ T8150] syzkaller0: entered promiscuous mode [ 663.620437][ T8150] syzkaller0: entered allmulticast mode [ 663.830867][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.884694][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.909645][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.992584][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.153377][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.165243][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.212268][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.550681][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.631702][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 664.779486][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.262503][ T8125] Bluetooth: hci6: command tx timeout [ 665.490969][ T8071] hsr_slave_0: entered promiscuous mode [ 665.568585][ T8071] hsr_slave_1: entered promiscuous mode [ 665.789557][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 666.268581][ T8122] chnl_net:caif_netlink_parms(): no params data found [ 666.502225][ T8179] loop8: detected capacity change from 0 to 8 [ 666.579473][ T7647] Dev loop8: unable to read RDB block 8 [ 666.620273][ T7647] loop8: unable to read partition table [ 666.639356][ T7647] loop8: partition table beyond EOD, truncated [ 666.656321][ T8179] Dev loop8: unable to read RDB block 8 [ 666.723379][ T8179] loop8: unable to read partition table [ 666.754888][ T8179] loop8: partition table beyond EOD, truncated [ 666.761651][ T8179] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 667.426357][ T57] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.747566][ T57] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.366673][ T57] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.860161][ T57] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.615132][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.652751][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.661007][ T8132] bridge_slave_0: entered allmulticast mode [ 669.718980][ T8132] bridge_slave_0: entered promiscuous mode [ 669.989905][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.012905][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.033031][ T8132] bridge_slave_1: entered allmulticast mode [ 670.063789][ T8132] bridge_slave_1: entered promiscuous mode [ 670.195014][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 670.493039][ T8122] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.547648][ T8122] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.570479][ T8122] bridge_slave_0: entered allmulticast mode [ 670.610064][ T8122] bridge_slave_0: entered promiscuous mode [ 670.747848][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.836608][ T8122] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.870117][ T8122] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.894466][ T8122] bridge_slave_1: entered allmulticast mode [ 670.943233][ T8122] bridge_slave_1: entered promiscuous mode [ 671.359921][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.643103][ T57] bridge_slave_1: left allmulticast mode [ 671.658250][ T57] bridge_slave_1: left promiscuous mode [ 671.683232][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.711071][ T57] bridge_slave_0: left allmulticast mode [ 671.719475][ T57] bridge_slave_0: left promiscuous mode [ 671.733812][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.776916][ T57] bridge_slave_1: left allmulticast mode [ 671.790736][ T57] bridge_slave_1: left promiscuous mode [ 671.808170][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.870886][ T57] bridge_slave_0: left allmulticast mode [ 671.903119][ T57] bridge_slave_0: left promiscuous mode [ 671.909785][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.456989][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.712781][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.068572][ T57] bond0 (unregistering): Released all slaves [ 674.845856][ T8230] netlink: 'syz.1.339': attribute type 8 has an invalid length. [ 675.294118][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.463755][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.495585][ T57] bond0 (unregistering): Released all slaves [ 675.795510][ T8122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.874622][ T8122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.367812][ T8132] team0: Port device team_slave_0 added [ 676.434077][ T57] hsr_slave_0: left promiscuous mode [ 676.463407][ T57] hsr_slave_1: left promiscuous mode [ 676.471649][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.523084][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.552265][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.570653][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.655893][ T57] hsr_slave_0: left promiscuous mode [ 676.695219][ T57] hsr_slave_1: left promiscuous mode [ 676.716301][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.762091][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.785445][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.804859][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.917042][ T57] veth1_macvtap: left promiscuous mode [ 676.933456][ T57] veth0_macvtap: left promiscuous mode [ 676.939401][ T57] veth1_vlan: left promiscuous mode [ 676.992211][ T57] veth0_vlan: left promiscuous mode [ 677.012911][ T57] veth1_macvtap: left promiscuous mode [ 677.018688][ T57] veth0_macvtap: left promiscuous mode [ 677.052464][ T57] veth1_vlan: left promiscuous mode [ 677.058086][ T57] veth0_vlan: left promiscuous mode [ 678.376630][ T8235] loop8: detected capacity change from 0 to 8 [ 678.395962][ T8232] Dev loop8: unable to read RDB block 8 [ 678.403468][ T8232] loop8: unable to read partition table [ 678.430191][ T8232] loop8: partition table beyond EOD, truncated [ 678.475847][ T8235] Dev loop8: unable to read RDB block 8 [ 678.482472][ T8235] loop8: unable to read partition table [ 678.496965][ T8235] loop8: partition table beyond EOD, truncated [ 678.530962][ T8235] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 680.492510][ T57] team0 (unregistering): Port device team_slave_1 removed [ 680.600546][ T57] team0 (unregistering): Port device team_slave_0 removed [ 681.936376][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 682.084859][ T57] team0 (unregistering): Port device team_slave_1 removed [ 682.123060][ T57] team0 (unregistering): Port device team_slave_0 removed [ 682.514680][ T8122] team0: Port device team_slave_0 added [ 682.580045][ T8132] team0: Port device team_slave_1 added [ 682.876342][ T8122] team0: Port device team_slave_1 added [ 683.241289][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.257623][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.314138][ T8132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.370421][ T8122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.386466][ T8122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.419022][ T8122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.494392][ T8122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.519949][ T8122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.568899][ T8122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.623718][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.640788][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.672834][ T8132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.736459][ T8122] hsr_slave_0: entered promiscuous mode [ 684.775472][ T8122] hsr_slave_1: entered promiscuous mode [ 684.788263][ T8122] debugfs: 'hsr0' already exists in 'hsr' [ 684.802527][ T8122] Cannot create hsr debugfs directory [ 684.902138][ T8071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 685.038914][ T8132] hsr_slave_0: entered promiscuous mode [ 685.092128][ T8132] hsr_slave_1: entered promiscuous mode [ 685.103333][ T8132] debugfs: 'hsr0' already exists in 'hsr' [ 685.110781][ T8132] Cannot create hsr debugfs directory [ 685.132879][ T8071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 685.243850][ T8071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.713485][ T8071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 689.705389][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.994863][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.106075][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.113619][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.360292][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.368111][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.969831][ T8132] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 691.040354][ T8132] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 691.097001][ T8132] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 691.218578][ T8132] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 691.405698][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 691.446545][ T8311] syzkaller0: entered promiscuous mode [ 691.466739][ T8311] syzkaller0: entered allmulticast mode [ 691.859292][ T8122] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 692.009557][ T8122] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 692.226665][ T8122] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 692.299044][ T8122] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 693.796866][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.872331][ T5815] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 694.043346][ T5815] usb 3-1: device descriptor read/64, error -71 [ 694.198790][ T8132] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.303291][ T5815] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 694.416929][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.424621][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.473534][ T5815] usb 3-1: device descriptor read/64, error -71 [ 694.569478][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.583548][ T5815] usb usb3-port1: attempt power cycle [ 694.749735][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.757375][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.993348][ T5815] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 695.059382][ T5815] usb 3-1: device descriptor read/8, error -71 [ 695.114707][ T8122] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.279880][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.287840][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.349727][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.357110][ T5815] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 695.394791][ T5815] usb 3-1: device descriptor read/8, error -71 [ 695.486979][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.494954][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.540417][ T5815] usb usb3-port1: unable to enumerate USB device [ 695.558295][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.565713][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.380911][ T8132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.790076][ T8371] syzkaller0: entered promiscuous mode [ 699.812638][ T8371] syzkaller0: entered allmulticast mode [ 699.990428][ T8071] veth0_vlan: entered promiscuous mode [ 700.257207][ T8122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.495668][ T8071] veth1_vlan: entered promiscuous mode [ 701.155278][ T8071] veth0_macvtap: entered promiscuous mode [ 701.223550][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 701.293888][ T8071] veth1_macvtap: entered promiscuous mode [ 701.647483][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.944238][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.251335][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.282903][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.424465][ T165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.517315][ T165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.181249][ T8132] veth0_vlan: entered promiscuous mode [ 703.450610][ T8132] veth1_vlan: entered promiscuous mode [ 704.460612][ T8132] veth0_macvtap: entered promiscuous mode [ 704.784590][ T8132] veth1_macvtap: entered promiscuous mode [ 704.838413][ T8122] veth0_vlan: entered promiscuous mode [ 705.061563][ T8122] veth1_vlan: entered promiscuous mode [ 705.388819][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.604253][ T8132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.886110][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.955141][ T149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.992542][ T149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.102376][ T149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.425125][ T8122] veth0_macvtap: entered promiscuous mode [ 706.549056][ T8122] veth1_macvtap: entered promiscuous mode [ 706.703076][ T796] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 706.874789][ T796] usb 2-1: device descriptor read/64, error -71 [ 706.959058][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.113852][ T796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 707.251443][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.302494][ T796] usb 2-1: device descriptor read/64, error -71 [ 707.434305][ T796] usb usb2-port1: attempt power cycle [ 707.506722][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.562575][ T1143] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.579142][ T149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.679333][ T149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.822366][ T796] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 707.888030][ T796] usb 2-1: device descriptor read/8, error -71 [ 708.192800][ T796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 708.265053][ T796] usb 2-1: device descriptor read/8, error -71 [ 708.416765][ T796] usb usb2-port1: unable to enumerate USB device [ 708.753561][ T8442] syzkaller0: entered promiscuous mode [ 708.805599][ T8442] syzkaller0: entered allmulticast mode [ 709.894037][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 709.928222][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 709.947430][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.961222][ T5770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.981541][ T5770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 710.135110][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 712.156956][ T5770] Bluetooth: hci0: command tx timeout [ 712.839963][ T165] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.209273][ T165] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.635257][ T165] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.728611][ T8450] chnl_net:caif_netlink_parms(): no params data found [ 713.988434][ T165] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.222432][ T5770] Bluetooth: hci0: command tx timeout [ 715.634013][ T8125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 715.672942][ T8125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 715.694534][ T8125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 715.716943][ T165] bridge_slave_1: left allmulticast mode [ 715.746521][ T8125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 715.754720][ T165] bridge_slave_1: left promiscuous mode [ 715.767683][ T8125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 715.779416][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.896439][ T165] bridge_slave_0: left allmulticast mode [ 715.923884][ T165] bridge_slave_0: left promiscuous mode [ 715.930265][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.302364][ T5770] Bluetooth: hci0: command tx timeout [ 716.815641][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.882093][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.947876][ T165] bond0 (unregistering): Released all slaves [ 716.982218][ T5301] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 717.132834][ T5301] usb 3-1: device descriptor read/64, error -71 [ 717.382332][ T5301] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 717.543877][ T5301] usb 3-1: device descriptor read/64, error -71 [ 717.552451][ T165] hsr_slave_0: left promiscuous mode [ 717.597882][ T165] hsr_slave_1: left promiscuous mode [ 717.634753][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.654913][ T5301] usb usb3-port1: attempt power cycle [ 717.671058][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.701241][ T8125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 717.717360][ T8125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 717.738791][ T8125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 717.745352][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.775285][ T8125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 717.787459][ T8125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 717.791671][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.889849][ T165] veth1_macvtap: left promiscuous mode [ 717.897882][ T165] veth0_macvtap: left promiscuous mode [ 717.905253][ T5770] Bluetooth: hci3: command tx timeout [ 717.917058][ T165] veth1_vlan: left promiscuous mode [ 717.923620][ T165] veth0_vlan: left promiscuous mode [ 718.022388][ T5301] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 718.054540][ T5301] usb 3-1: device descriptor read/8, error -71 [ 718.292231][ T5301] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 718.347461][ T5301] usb 3-1: device descriptor read/8, error -71 [ 718.383921][ T5770] Bluetooth: hci0: command tx timeout [ 718.464968][ T5301] usb usb3-port1: unable to enumerate USB device [ 718.985523][ T165] team0 (unregistering): Port device team_slave_1 removed [ 719.037459][ T165] team0 (unregistering): Port device team_slave_0 removed [ 719.750853][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.759556][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.791041][ T8450] bridge_slave_0: entered allmulticast mode [ 719.828895][ T8450] bridge_slave_0: entered promiscuous mode [ 719.921239][ T5770] Bluetooth: hci4: command tx timeout [ 719.989006][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.997269][ T5770] Bluetooth: hci3: command tx timeout [ 720.012867][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.020935][ T8450] bridge_slave_1: entered allmulticast mode [ 720.031618][ T8450] bridge_slave_1: entered promiscuous mode [ 720.422861][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 720.588499][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.632828][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.895730][ T5301] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 721.194162][ T5301] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 721.237299][ T5301] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 721.249104][ T8450] team0: Port device team_slave_0 added [ 721.289917][ T8450] team0: Port device team_slave_1 added [ 721.321685][ T5301] usb 3-1: Product: syz [ 721.326841][ T5301] usb 3-1: Manufacturer: syz [ 721.374147][ T5301] usb 3-1: config 0 descriptor?? [ 721.450035][ T5301] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 721.480377][ T5301] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 721.549865][ T165] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.675460][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.380'. [ 721.982272][ T5770] Bluetooth: hci4: command tx timeout [ 722.062397][ T7205] usb 3-1: USB disconnect, device number 13 [ 722.072947][ T5770] Bluetooth: hci3: command tx timeout [ 722.085550][ T7205] ftdi_sio 3-1:0.0: device disconnected [ 722.186670][ T165] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.570524][ T165] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.669565][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.685451][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.803828][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.947593][ T165] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.075973][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.091068][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.166349][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.072719][ T5770] Bluetooth: hci4: command tx timeout [ 724.099388][ T8450] hsr_slave_0: entered promiscuous mode [ 724.142373][ T5770] Bluetooth: hci3: command tx timeout [ 724.159296][ T8450] hsr_slave_1: entered promiscuous mode [ 725.559285][ T165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.792651][ T165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.078905][ T165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.143176][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 726.152720][ T5770] Bluetooth: hci4: command tx timeout [ 726.324290][ T8515] chnl_net:caif_netlink_parms(): no params data found [ 726.448415][ T165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.571535][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.612731][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.620766][ T8501] bridge_slave_0: entered allmulticast mode [ 728.681757][ T8501] bridge_slave_0: entered promiscuous mode [ 728.760631][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.772544][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.780762][ T8501] bridge_slave_1: entered allmulticast mode [ 728.846052][ T8501] bridge_slave_1: entered promiscuous mode [ 728.882293][ T5828] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 729.059165][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 729.082366][ T5828] usb 3-1: no configurations [ 729.087191][ T5828] usb 3-1: can't read configurations, error -22 [ 729.272304][ T5828] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 729.465243][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 729.481957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 729.496649][ T5828] usb 3-1: no configurations [ 729.501505][ T5828] usb 3-1: can't read configurations, error -22 [ 729.519770][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.535839][ T5828] usb usb3-port1: attempt power cycle [ 729.556488][ T8515] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.573157][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.592913][ T8515] bridge_slave_0: entered allmulticast mode [ 729.640552][ T8515] bridge_slave_0: entered promiscuous mode [ 729.731667][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.836086][ T8515] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.845309][ T8515] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.857511][ T8515] bridge_slave_1: entered allmulticast mode [ 729.912564][ T5828] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 729.920863][ T8515] bridge_slave_1: entered promiscuous mode [ 729.954333][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 729.964843][ T5828] usb 3-1: no configurations [ 729.969718][ T5828] usb 3-1: can't read configurations, error -22 [ 730.059964][ T165] bridge_slave_1: left allmulticast mode [ 730.068251][ T165] bridge_slave_1: left promiscuous mode [ 730.080481][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.097433][ T165] bridge_slave_0: left allmulticast mode [ 730.105096][ T165] bridge_slave_0: left promiscuous mode [ 730.112332][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.139775][ T165] bridge_slave_1: left allmulticast mode [ 730.142889][ T5828] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 730.164058][ T165] bridge_slave_1: left promiscuous mode [ 730.171764][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.180648][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 730.191566][ T5828] usb 3-1: no configurations [ 730.198134][ T5828] usb 3-1: can't read configurations, error -22 [ 730.207757][ T5828] usb usb3-port1: unable to enumerate USB device [ 730.233092][ T165] bridge_slave_0: left allmulticast mode [ 730.239270][ T165] bridge_slave_0: left promiscuous mode [ 730.265729][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.216527][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.233036][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.251230][ T165] bond0 (unregistering): Released all slaves [ 731.487651][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.509777][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.533209][ T165] bond0 (unregistering): Released all slaves [ 731.599062][ T8501] team0: Port device team_slave_0 added [ 731.908585][ T8501] team0: Port device team_slave_1 added [ 732.086889][ T8515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.214976][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 732.258787][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.306235][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.334092][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.390220][ T8515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.494637][ T165] hsr_slave_0: left promiscuous mode [ 732.508627][ T165] hsr_slave_1: left promiscuous mode [ 732.517922][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.529432][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.554802][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.567837][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.631540][ T165] hsr_slave_0: left promiscuous mode [ 732.651188][ T165] hsr_slave_1: left promiscuous mode [ 732.667921][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.683523][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.706011][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.729938][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.856652][ T165] veth1_macvtap: left promiscuous mode [ 732.871289][ T165] veth0_macvtap: left promiscuous mode [ 732.885402][ T165] veth1_vlan: left promiscuous mode [ 732.895322][ T165] veth0_vlan: left promiscuous mode [ 732.912220][ T165] veth1_macvtap: left promiscuous mode [ 732.922822][ T165] veth0_macvtap: left promiscuous mode [ 732.928819][ T165] veth1_vlan: left promiscuous mode [ 732.946696][ T165] veth0_vlan: left promiscuous mode [ 733.592393][ T7205] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 733.893369][ T7205] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 733.929309][ T7205] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 733.946811][ T7205] usb 2-1: Product: syz [ 733.968007][ T7205] usb 2-1: Manufacturer: syz [ 734.000427][ T7205] usb 2-1: config 0 descriptor?? [ 734.072402][ T7205] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 734.127238][ T7205] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 734.256171][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.391'. [ 735.521138][ T165] team0 (unregistering): Port device team_slave_1 removed [ 735.556108][ T165] team0 (unregistering): Port device team_slave_0 removed [ 736.693209][ T165] team0 (unregistering): Port device team_slave_1 removed [ 736.769959][ T165] team0 (unregistering): Port device team_slave_0 removed [ 737.329303][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.358995][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.398245][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.887586][ T8515] team0: Port device team_slave_0 added [ 737.948323][ T5828] usb 2-1: USB disconnect, device number 8 [ 737.963251][ T5828] ftdi_sio 2-1:0.0: device disconnected [ 738.187860][ T8515] team0: Port device team_slave_1 added [ 738.665900][ T8501] hsr_slave_0: entered promiscuous mode [ 738.697464][ T8501] hsr_slave_1: entered promiscuous mode [ 738.739348][ T8501] debugfs: 'hsr0' already exists in 'hsr' [ 738.751408][ T8501] Cannot create hsr debugfs directory [ 738.922125][ T5828] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 738.949862][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.971662][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.016730][ T8515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.044728][ T8450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 739.133309][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 739.155591][ T5828] usb 2-1: no configurations [ 739.160429][ T5828] usb 2-1: can't read configurations, error -22 [ 739.256392][ T8515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.275633][ T8515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.319280][ T5828] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 739.348571][ T8515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.454488][ T8450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 739.475957][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 739.484424][ T5828] usb 2-1: no configurations [ 739.489234][ T5828] usb 2-1: can't read configurations, error -22 [ 739.505442][ T5828] usb usb2-port1: attempt power cycle [ 739.598924][ T8450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 739.765369][ T8450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 739.887616][ T5828] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 739.963607][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 739.973570][ T5828] usb 2-1: no configurations [ 739.978422][ T5828] usb 2-1: can't read configurations, error -22 [ 740.150683][ T8515] hsr_slave_0: entered promiscuous mode [ 740.182455][ T5828] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 740.206148][ T8515] hsr_slave_1: entered promiscuous mode [ 740.215295][ T8515] debugfs: 'hsr0' already exists in 'hsr' [ 740.221180][ T8515] Cannot create hsr debugfs directory [ 740.239407][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 740.277560][ T5828] usb 2-1: no configurations [ 740.288191][ T5828] usb 2-1: can't read configurations, error -22 [ 740.304245][ T5828] usb usb2-port1: unable to enumerate USB device [ 742.557603][ T8625] syzkaller0: entered promiscuous mode [ 742.592084][ T8625] syzkaller0: entered allmulticast mode [ 743.158869][ T8450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.451033][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.593444][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.601019][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 743.788547][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 743.836768][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.844455][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.027974][ T8515] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 744.220457][ T8515] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 744.361419][ T8515] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 744.524673][ T8515] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 745.180142][ T8501] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.389641][ T8501] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 745.516906][ T8501] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 745.701884][ T8501] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.736636][ T8653] loop8: detected capacity change from 0 to 8 [ 746.823942][ T8653] Dev loop8: unable to read RDB block 8 [ 746.830207][ T8653] loop8: unable to read partition table [ 746.895401][ T8653] loop8: partition table beyond EOD, truncated [ 746.922586][ T8653] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 747.345833][ T8515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.385426][ T5301] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 747.604896][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 747.624523][ T5301] usb 3-1: no configurations [ 747.642372][ T5301] usb 3-1: can't read configurations, error -22 [ 747.776578][ T8515] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.793017][ T5301] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 747.801743][ T8659] syzkaller0: entered promiscuous mode [ 747.807679][ T8659] syzkaller0: entered allmulticast mode [ 747.895902][ T8450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.982979][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 747.993995][ T5301] usb 3-1: no configurations [ 748.002205][ T5301] usb 3-1: can't read configurations, error -22 [ 748.034134][ T5301] usb usb3-port1: attempt power cycle [ 748.044874][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.052546][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.276108][ T165] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.284018][ T165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.430623][ T5301] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 748.478019][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.504169][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 748.513090][ T5301] usb 3-1: no configurations [ 748.518055][ T5301] usb 3-1: can't read configurations, error -22 [ 748.703374][ T5301] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 748.778660][ T5301] usb 3-1: Using ep0 maxpacket: 32 [ 748.788480][ T5301] usb 3-1: no configurations [ 748.813781][ T5301] usb 3-1: can't read configurations, error -22 [ 748.886715][ T5301] usb usb3-port1: unable to enumerate USB device [ 749.122850][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.328789][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.336687][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.543925][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.551665][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.712460][ T5831] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 750.912648][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 750.932095][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 751.016464][ T5831] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 751.058605][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.109069][ T5831] usb 2-1: Product: syz [ 751.155487][ T5831] usb 2-1: Manufacturer: syz [ 751.183256][ T5831] usb 2-1: SerialNumber: syz [ 751.240702][ T5831] usb 2-1: config 0 descriptor?? [ 751.336003][ T5831] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 751.400683][ T8450] veth0_vlan: entered promiscuous mode [ 751.682668][ T8450] veth1_vlan: entered promiscuous mode [ 751.691707][ T5831] pwc: send_video_command error -71 [ 751.697528][ T5831] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 751.751015][ T5831] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 751.854086][ T5831] usb 2-1: USB disconnect, device number 13 [ 752.187564][ T8515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.553338][ T8450] veth0_macvtap: entered promiscuous mode [ 752.641522][ T8450] veth1_macvtap: entered promiscuous mode [ 753.250579][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.453098][ T8450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.663854][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.732691][ T76] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.843979][ T76] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.923722][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.012355][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.109693][ T8515] veth0_vlan: entered promiscuous mode [ 756.297782][ T8515] veth1_vlan: entered promiscuous mode [ 756.909623][ T8515] veth0_macvtap: entered promiscuous mode [ 756.979903][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.993759][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.149077][ T8515] veth1_macvtap: entered promiscuous mode [ 757.305785][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 757.512293][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 757.548477][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.603720][ T9] usb 3-1: config 0 has no interfaces? [ 757.631531][ T9] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 757.642072][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.650326][ T9] usb 3-1: Product: syz [ 757.656666][ T9] usb 3-1: Manufacturer: syz [ 757.661483][ T9] usb 3-1: SerialNumber: syz [ 757.691456][ T9] usb 3-1: config 0 descriptor?? [ 757.794853][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.090842][ T8515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.344787][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.372501][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.398341][ T8501] veth0_vlan: entered promiscuous mode [ 758.436744][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.494140][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.707468][ T8501] veth1_vlan: entered promiscuous mode [ 759.496367][ T8501] veth0_macvtap: entered promiscuous mode [ 759.637456][ T8501] veth1_macvtap: entered promiscuous mode [ 760.057718][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.152945][ T5822] usb 3-1: USB disconnect, device number 22 [ 760.525056][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.775805][ T1143] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.821398][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'. [ 760.912597][ T139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.982363][ T139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.991731][ T139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.224068][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.303951][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.706879][ T6379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.775525][ T6379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.310314][ T8813] veth0_to_hsr: entered allmulticast mode [ 766.352649][ T8813] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 767.388443][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 767.492806][ T5831] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 767.712082][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 767.737598][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.759870][ T5831] usb 3-1: config 0 has no interfaces? [ 767.807620][ T5831] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 767.867855][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.888461][ T5831] usb 3-1: Product: syz [ 767.898877][ T5831] usb 3-1: Manufacturer: syz [ 767.962421][ T5831] usb 3-1: SerialNumber: syz [ 767.970604][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.018297][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.038764][ T5831] usb 3-1: config 0 descriptor?? [ 768.491332][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.536806][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.022468][ T5831] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 770.251745][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 770.316869][ T5831] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 770.411595][ T5831] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 770.531659][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.587004][ T5831] usb 8-1: config 0 descriptor?? [ 770.846126][ T9] usb 3-1: USB disconnect, device number 23 [ 770.868304][ T5831] ath6kl: Failed to submit usb control message: -71 [ 770.946502][ T5831] ath6kl: unable to send the bmi data to the device: -71 [ 770.968455][ T5831] ath6kl: Unable to send get target info: -71 [ 771.043416][ T5831] ath6kl: Failed to init ath6kl core: -71 [ 771.129204][ T5831] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 771.214506][ T5831] usb 8-1: USB disconnect, device number 2 [ 771.274176][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.333032][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.250403][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.422102][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.307055][ T796] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 776.562307][ T796] usb 6-1: Using ep0 maxpacket: 32 [ 776.600541][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.640865][ T796] usb 6-1: config 0 has no interfaces? [ 776.727697][ T796] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 776.768825][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.828248][ T796] usb 6-1: Product: syz [ 776.850242][ T796] usb 6-1: Manufacturer: syz [ 776.882534][ T796] usb 6-1: SerialNumber: syz [ 776.931215][ T796] usb 6-1: config 0 descriptor?? [ 779.255381][ T796] usb 6-1: USB disconnect, device number 2 [ 779.273364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 782.647566][ T796] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 782.892429][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 782.950097][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.022065][ T796] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 783.116812][ T796] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 783.147726][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.222292][ T796] usb 3-1: Product: syz [ 783.226755][ T796] usb 3-1: Manufacturer: syz [ 783.231473][ T796] usb 3-1: SerialNumber: syz [ 783.323060][ T796] usb 3-1: config 0 descriptor?? [ 783.644487][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 785.970357][ T5831] usb 3-1: USB disconnect, device number 24 [ 787.375329][ T8951] misc userio: Invalid payload size [ 787.432792][ T8953] misc userio: No port type given on /dev/userio [ 787.487791][ T8951] misc userio: The device must be registered before sending interrupts [ 789.970654][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 790.162120][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 790.248151][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.337564][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 790.397494][ T9] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 790.447283][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.511456][ T9] usb 6-1: Product: syz [ 790.526958][ T9] usb 6-1: Manufacturer: syz [ 790.548141][ T9] usb 6-1: SerialNumber: syz [ 790.617274][ T9] usb 6-1: config 0 descriptor?? [ 793.004119][ T9] usb 6-1: USB disconnect, device number 3 [ 796.032606][ T8998] misc userio: Invalid payload size [ 796.103513][ T8998] misc userio: No port type given on /dev/userio [ 796.110997][ T8998] misc userio: The device must be registered before sending interrupts [ 797.881532][ T9008] netlink: 'syz.6.485': attribute type 2 has an invalid length. [ 797.890018][ T9008] netlink: 132 bytes leftover after parsing attributes in process `syz.6.485'. [ 800.794681][ T9018] input: syz0 as /devices/virtual/input/input11 [ 801.132222][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 801.423536][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 801.475508][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.515865][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.611525][ T9] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 801.687946][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.707811][ T9] usb 3-1: Product: syz [ 801.735269][ T9] usb 3-1: Manufacturer: syz [ 801.772815][ T9] usb 3-1: SerialNumber: syz [ 801.789910][ T9] usb 3-1: config 0 descriptor?? [ 804.010576][ T5831] usb 3-1: USB disconnect, device number 25 [ 804.816433][ T9037] misc userio: Invalid payload size [ 804.877712][ T9039] misc userio: No port type given on /dev/userio [ 804.915051][ T9037] misc userio: The device must be registered before sending interrupts [ 805.012402][ T5831] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 805.212255][ T5831] usb 6-1: Using ep0 maxpacket: 8 [ 805.302325][ T5831] usb 6-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 805.372562][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.381203][ T5831] usb 6-1: Product: syz [ 805.445784][ T5831] usb 6-1: Manufacturer: syz [ 805.478687][ T5831] usb 6-1: SerialNumber: syz [ 805.515007][ T5831] usb 6-1: config 0 descriptor?? [ 805.874045][ T5831] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 805.925870][ T5831] pwc: send_video_command error -71 [ 805.931570][ T5831] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 806.011464][ T5831] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 806.133708][ T5831] usb 6-1: USB disconnect, device number 4 [ 806.162203][ T7205] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 806.432308][ T7205] usb 8-1: Using ep0 maxpacket: 16 [ 806.492222][ T7205] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.571554][ T7205] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.683775][ T7205] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 806.792346][ T7205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.800983][ T7205] usb 8-1: Product: syz [ 806.877302][ T7205] usb 8-1: Manufacturer: syz [ 806.902061][ T7205] usb 8-1: SerialNumber: syz [ 808.031013][ T7205] usb 8-1: skipping empty audio interface (v1) [ 809.434778][ T7205] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 809.553455][ T7205] usb 8-1: USB disconnect, device number 3 [ 810.077926][ T8328] udevd[8328]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 812.202463][ T7205] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 812.435681][ T7205] usb 8-1: Using ep0 maxpacket: 32 [ 812.513888][ T7205] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.610907][ T7205] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 812.632460][ T7205] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.641606][ T7205] usb 8-1: Product: syz [ 812.690690][ T7205] usb 8-1: Manufacturer: syz [ 812.743261][ T7205] usb 8-1: SerialNumber: syz [ 812.915928][ T7205] usb 8-1: config 0 descriptor?? [ 815.391052][ T9] usb 8-1: USB disconnect, device number 4 [ 816.742677][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 817.007066][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 817.119399][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 817.182693][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.190977][ T9] usb 7-1: Product: syz [ 817.275624][ T9] usb 7-1: Manufacturer: syz [ 817.280499][ T9] usb 7-1: SerialNumber: syz [ 817.349529][ T9] usb 7-1: config 0 descriptor?? [ 817.474601][ T9] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 817.802311][ T9] pwc: send_video_command error -71 [ 817.807704][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 817.913861][ T9] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 817.991700][ T9] usb 7-1: USB disconnect, device number 2 [ 818.414604][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.421294][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 822.313581][ T9109] misc userio: Invalid payload size [ 822.354638][ T9109] misc userio: The device must be registered before sending interrupts [ 822.532611][ T5831] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 822.742260][ T5831] usb 8-1: Using ep0 maxpacket: 32 [ 822.797832][ T5831] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 822.882914][ T5831] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 822.952044][ T5831] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.960651][ T5831] usb 8-1: Product: syz [ 822.992659][ T5831] usb 8-1: Manufacturer: syz [ 823.012097][ T5831] usb 8-1: SerialNumber: syz [ 823.055789][ T5831] usb 8-1: config 0 descriptor?? [ 824.199243][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 824.462268][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 824.608995][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 824.632040][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.683021][ T9] usb 2-1: Product: syz [ 824.687542][ T9] usb 2-1: Manufacturer: syz [ 824.717942][ T9] usb 2-1: SerialNumber: syz [ 824.749946][ T9] usb 2-1: config 0 descriptor?? [ 824.854057][ T9] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 825.160817][ T9] pwc: send_video_command error -71 [ 825.191631][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 825.199999][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 825.357630][ T9] usb 2-1: USB disconnect, device number 14 [ 825.499408][ T5831] usb 8-1: USB disconnect, device number 5 [ 828.056675][ T9133] tipc: Started in network mode [ 828.099392][ T9133] tipc: Node identity 0ee39fedb473, cluster identity 4711 [ 828.162643][ T9133] tipc: Enabled bearer , priority 0 [ 828.242745][ T9136] syzkaller0: entered promiscuous mode [ 828.248487][ T9136] syzkaller0: entered allmulticast mode [ 828.570999][ T9140] tipc: Resetting bearer [ 828.673370][ T9132] tipc: Resetting bearer [ 828.750291][ T9132] tipc: Disabling bearer [ 830.003301][ T9146] misc userio: Invalid payload size [ 830.039951][ T9146] misc userio: The device must be registered before sending interrupts [ 834.098329][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.6.541'. [ 835.829581][ T8125] Bluetooth: hci0: command 0x0406 tx timeout [ 837.464065][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 838.832455][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 839.102225][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.192958][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.231415][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 839.289206][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.322718][ T9] usb 2-1: config 0 descriptor?? [ 839.564602][ T9] usb 2-1: USB disconnect, device number 15 [ 839.846265][ T9209] misc userio: Invalid payload size [ 840.942585][ T5070] Bluetooth: hci4: command 0x0406 tx timeout [ 840.949507][ T5070] Bluetooth: hci3: command 0x0406 tx timeout [ 841.142155][ T5831] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 841.765791][ T5831] usb 3-1: unable to get BOS descriptor or descriptor too short [ 841.820409][ T5831] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 841.926679][ T5831] usb 3-1: can't read configurations, error -71 [ 842.100933][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.554'. [ 844.591317][ T9241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.599896][ T9241] batadv_slave_0: entered promiscuous mode [ 845.142363][ T9245] misc userio: Invalid payload size [ 845.982411][ T5831] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 845.985441][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 846.247057][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 846.277157][ T9] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 846.288918][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.340373][ T5831] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.362162][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.404193][ T9] usb 7-1: config 0 descriptor?? [ 846.441354][ T5831] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 846.515397][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.623930][ T5831] usb 6-1: config 0 descriptor?? [ 846.730798][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 846.816300][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 846.905492][ T5831] usb 6-1: USB disconnect, device number 5 [ 846.944012][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 846.972702][ T9249] ===================================================== [ 846.980727][ T9249] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 846.988438][ T9249] _copy_to_user+0xcc/0x120 [ 846.993598][ T9249] i2cdev_ioctl_smbus+0x586/0x660 [ 846.999090][ T9249] compat_i2cdev_ioctl+0x48f/0xb40 [ 847.004687][ T9249] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 847.010591][ T9249] ia32_sys_call+0x2854/0x4360 [ 847.015890][ T9249] __do_fast_syscall_32+0x17f/0x3f0 [ 847.021514][ T9249] do_fast_syscall_32+0x37/0x80 [ 847.026988][ T9249] do_SYSENTER_32+0x1f/0x30 [ 847.031919][ T9249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.038516][ T9249] [ 847.040939][ T9249] Uninit was stored to memory at: [ 847.046487][ T9249] __i2c_smbus_xfer+0x25a0/0x3120 [ 847.051633][ T9249] i2c_smbus_xfer+0x2d8/0x480 [ 847.056619][ T9249] i2cdev_ioctl_smbus+0x4a1/0x660 [ 847.066573][ T9249] compat_i2cdev_ioctl+0x48f/0xb40 [ 847.073179][ T9249] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 847.078951][ T9249] ia32_sys_call+0x2854/0x4360 [ 847.084068][ T9249] __do_fast_syscall_32+0x17f/0x3f0 [ 847.089468][ T9249] do_fast_syscall_32+0x37/0x80 [ 847.094591][ T9249] do_SYSENTER_32+0x1f/0x30 [ 847.099303][ T9249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.105942][ T9249] [ 847.108324][ T9249] Local variable msgbuf1.i created at: [ 847.114021][ T9249] __i2c_smbus_xfer+0x853/0x3120 [ 847.119142][ T9249] i2c_smbus_xfer+0x2d8/0x480 [ 847.124126][ T9249] [ 847.126533][ T9249] Bytes 0-1 of 2 are uninitialized [ 847.131968][ T9249] Memory access of size 2 starts at ffff88812a42fc76 [ 847.138724][ T9249] Data copied to user address 0000000080000040 [ 847.145249][ T9249] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 847.147680][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.6.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.158706][ T9249] Tainted: [L]=SOFTLOCKUP [ 847.167731][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.179134][ T9249] ===================================================== [ 847.186332][ T9249] Disabling lock debugging due to kernel taint [ 847.242243][ T9] usb 7-1: media controller created [ 847.247975][ T9249] Kernel panic - not syncing: kmsan.panic set ... [ 847.254594][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.6.567 Tainted: G B L syzkaller #0 PREEMPT(full) [ 847.265613][ T9249] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 847.271290][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.281535][ T9249] Call Trace: [ 847.284944][ T9249] [ 847.287997][ T9249] __dump_stack+0x26/0x30 [ 847.292550][ T9249] dump_stack_lvl+0x50/0x1c0 [ 847.297570][ T9249] ? dump_stack+0x12/0x25 [ 847.302210][ T9249] dump_stack+0x1e/0x25 [ 847.306563][ T9249] vpanic+0x7b4/0x1430 [ 847.310853][ T9249] panic+0x15d/0x160 [ 847.314992][ T9249] kmsan_report+0x31a/0x320 [ 847.319733][ T9249] ? kmsan_internal_check_memory+0x1e8/0x240 [ 847.325940][ T9249] ? kmsan_copy_to_user+0xef/0x190 [ 847.331280][ T9249] ? _copy_to_user+0xcc/0x120 [ 847.336156][ T9249] ? i2cdev_ioctl_smbus+0x586/0x660 [ 847.341575][ T9249] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 847.347067][ T9249] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 847.353015][ T9249] ? ia32_sys_call+0x2854/0x4360 [ 847.358150][ T9249] ? __do_fast_syscall_32+0x17f/0x3f0 [ 847.363739][ T9249] ? do_fast_syscall_32+0x37/0x80 [ 847.368965][ T9249] ? do_SYSENTER_32+0x1f/0x30 [ 847.373886][ T9249] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.380674][ T9249] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 847.386316][ T9249] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 847.391813][ T9249] ? __i2c_transfer+0x1179/0x3280 [ 847.397114][ T9249] ? kmsan_get_metadata+0xf1/0x160 [ 847.402477][ T9249] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 847.409124][ T9249] ? kmsan_get_metadata+0xf1/0x160 [ 847.414477][ T9249] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 847.420533][ T9249] ? __i2c_smbus_xfer+0x1f6c/0x3120 [ 847.425902][ T9249] ? kmsan_get_metadata+0xf1/0x160 [ 847.431281][ T9249] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 847.437350][ T9249] kmsan_internal_check_memory+0x1e8/0x240 [ 847.443404][ T9249] kmsan_copy_to_user+0xef/0x190 [ 847.448579][ T9249] _copy_to_user+0xcc/0x120 [ 847.453323][ T9249] i2cdev_ioctl_smbus+0x586/0x660 [ 847.458586][ T9249] compat_i2cdev_ioctl+0x48f/0xb40 [ 847.463944][ T9249] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 847.469826][ T9249] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 847.475652][ T9249] ? fpregs_restore_userregs+0x213/0x3e0 [ 847.481685][ T9249] ? kmsan_get_metadata+0xf1/0x160 [ 847.487063][ T9249] ? kmsan_get_metadata+0xf1/0x160 [ 847.492516][ T9249] ia32_sys_call+0x2854/0x4360 [ 847.497475][ T9249] __do_fast_syscall_32+0x17f/0x3f0 [ 847.502899][ T9249] do_fast_syscall_32+0x37/0x80 [ 847.507957][ T9249] do_SYSENTER_32+0x1f/0x30 [ 847.512675][ T9249] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 847.519233][ T9249] RIP: 0023:0xf6fcef6c [ 847.523445][ T9249] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 847.543240][ T9249] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 847.551847][ T9249] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 847.559998][ T9249] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 847.568106][ T9249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 847.576218][ T9249] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 847.584343][ T9249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 847.592524][ T9249] [ 847.596289][ T9249] Kernel Offset: disabled [ 847.600696][ T9249] Rebooting in 86400 seconds..