last executing test programs: 2m48.879398833s ago: executing program 4 (id=5): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 2m47.741564706s ago: executing program 4 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 2m46.854726759s ago: executing program 4 (id=12): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x10000000000f, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) 2m45.944760787s ago: executing program 4 (id=15): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r0, &(0x7f0000000240)=""/4096, 0xfffffdef) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120114007516b7108c0d0e008f8e0418030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) membarrier(0x20, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 2m43.125734571s ago: executing program 4 (id=22): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2m41.727783849s ago: executing program 4 (id=26): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x805) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x78b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m34.9157522s ago: executing program 1 (id=32): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r0, &(0x7f0000000240)=""/4096, 0xfffffdef) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120114007516b7108c0d0e008f8e0418030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) membarrier(0x20, 0x0) 2m32.072867724s ago: executing program 1 (id=38): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x110, 0xe}], 0x10}, 0x20000000) 2m30.935423522s ago: executing program 1 (id=42): syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0) 2m30.557539472s ago: executing program 0 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000054000680"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2m30.007968931s ago: executing program 1 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xa70410b) 2m29.512018979s ago: executing program 0 (id=47): write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x5) 2m29.162557997s ago: executing program 1 (id=48): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r0, &(0x7f0000000240)=""/4096, 0xfffffdef) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120114007516b7108c0d0e008f8e0418030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x10, 0x0) membarrier(0x20, 0x0) 2m28.619245188s ago: executing program 0 (id=51): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x3, 0x8, 0xb01, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044040}, 0x0) 2m27.635679289s ago: executing program 0 (id=53): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) 2m26.514835707s ago: executing program 1 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20044040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)={0x4, 0x1, 0xfffffffd, 0x3, 0x7, 0x485}) r5 = gettid() r6 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r7 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r6, @ANYBLOB="2c63e4eb1ec0ee7766646e6f", @ANYRESHEX=r7]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0xaf4, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x749200, 0x0) 2m26.198861602s ago: executing program 32 (id=26): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x805) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x78b) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m23.366166827s ago: executing program 0 (id=57): sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0) 2m21.61430774s ago: executing program 0 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) close(r1) 2m10.448552199s ago: executing program 33 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(0x0, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20044040) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000200)={0x4, 0x1, 0xfffffffd, 0x3, 0x7, 0x485}) r5 = gettid() r6 = creat(&(0x7f0000000040)='./file0\x00', 0x81) r7 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r6, @ANYBLOB="2c63e4eb1ec0ee7766646e6f", @ANYRESHEX=r7]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0xaf4, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x749200, 0x0) 2m5.388023949s ago: executing program 34 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) close(r1) 1m14.55451039s ago: executing program 2 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4001040}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1m13.634984743s ago: executing program 6 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xa70410b) 1m13.510465062s ago: executing program 2 (id=136): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) 1m12.897894911s ago: executing program 6 (id=137): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120114007516b7108c0d0e008f8e0418030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m12.497081769s ago: executing program 2 (id=140): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x84800, 0x24) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 1m11.630982001s ago: executing program 2 (id=143): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x11d, 0xf, 0x0, &(0x7f0000000240)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000040)='^', 0x1, 0xfffffffffffffffd, 0x0, 0x0, r2}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) 1m10.443524686s ago: executing program 2 (id=145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4001040}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1m9.929007209s ago: executing program 6 (id=147): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000004c0)={0xffffffff, 0xa, 0x0, 0x10, 0xe74, 0x6}) 1m9.18651047s ago: executing program 2 (id=150): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m8.891560768s ago: executing program 6 (id=151): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) 1m7.8396523s ago: executing program 6 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m7.166906342s ago: executing program 5 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000b0000040"]) 1m5.767500448s ago: executing program 5 (id=157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0xaf, "1b14c1e23b439b85b278ebd0d8618fade01dddc55ca02f3290ccef68da3814e41116e9185d30885cfc7c5e69405bad0125f4a240be3dd0f1976042c781755bef67824ca60823ee3a3f89edb4ea1f41c3d4208239b23e0dbf69df408bcdb23d148b14bcede369c30401dc95f1e9242fbc47b353815e6d4300d9348194b1c5c3004cc175be6d90c4fd6d5deca0b3b0783f4828f7269c3378211727c19a54b261d8118521dd9026993b6ba4f72cfa98bf"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xa}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m2.158615553s ago: executing program 5 (id=160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r3, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0xa, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/244, 0x27, 0xf4, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0xd0c, 0x2, 0x4, 0x8, r1, 0x9, '\x00', r3, r6, 0x5, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000040)='./file0\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x91058, &(0x7f0000000380)={[{}], [{@hash}, {@fowner_lt}]}) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 1m0.736078028s ago: executing program 5 (id=163): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) 59.285704114s ago: executing program 5 (id=165): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@flat, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 57.8213322s ago: executing program 5 (id=168): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x204cc1, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000080)) 53.286009518s ago: executing program 35 (id=150): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x1, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 52.240224822s ago: executing program 36 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1, 0x0, {}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="08030005c7373d5b04", 0x9}}, 0xee) close(r2) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0x8}, {0x5, 0xffff}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 41.455344651s ago: executing program 37 (id=168): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000300)) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x204cc1, 0x0) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000fff000/0x1000)=nil) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, 0x0, &(0x7f0000000080)) 8.531160355s ago: executing program 7 (id=223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 6.940965641s ago: executing program 3 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 6.176499302s ago: executing program 3 (id=226): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) 5.243191074s ago: executing program 7 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000020000008500000086000000181100"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r3, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0xa, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f]}}, &(0x7f0000000780)=""/244, 0x27, 0xf4, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0xd0c, 0x2, 0x4, 0x8, r1, 0x9, '\x00', r3, r6, 0x5, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x91058, &(0x7f0000000380)={[{}], [{@hash}, {@fowner_lt}]}) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) 5.049461707s ago: executing program 3 (id=228): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.387938511s ago: executing program 7 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@flat, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@handle={0x73682a85, 0x1001, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) 3.206182242s ago: executing program 7 (id=230): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x240000c0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000f40ab487b1b512f33a8dbd67a8b84040000000000001ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8aff3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c00"], 0x558}, 0x1, 0x0, 0x0, 0xa6975b0d20b3dc1e}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.09706212s ago: executing program 3 (id=231): openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, &(0x7f0000000500)) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmmsg$inet(r0, 0x0, 0x0, 0xc0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) timer_create(0x7, 0x0, &(0x7f00000000c0)) mq_notify(0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) read$msr(r4, &(0x7f0000000300)=""/204, 0xcc) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x16) 1.295633066s ago: executing program 7 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 805.947629ms ago: executing program 3 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 70.672079ms ago: executing program 7 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x1, 0xaf, "1b14c1e23b439b85b278ebd0d8618fade01dddc55ca02f3290ccef68da3814e41116e9185d30885cfc7c5e69405bad0125f4a240be3dd0f1976042c781755bef67824ca60823ee3a3f89edb4ea1f41c3d4208239b23e0dbf69df408bcdb23d148b14bcede369c30401dc95f1e9242fbc47b353815e6d4300d9348194b1c5c3004cc175be6d90c4fd6d5deca0b3b0783f4828f7269c3378211727c19a54b261d8118521dd9026993b6ba4f72cfa98bf"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xa}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=235): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000001c80)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e1f, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 197.674402][ T5769] cgroup: Unknown subsys name 'net' [ 197.823436][ T5769] cgroup: Unknown subsys name 'cpuset' [ 197.840013][ T5769] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.630717][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.637688][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.796429][ T5769] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 256.250842][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.259328][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.267655][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.276563][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.284972][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.294685][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.309527][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.321368][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.335720][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.346437][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.357828][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.357996][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.373166][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.380917][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.382966][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.401279][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.409890][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.410265][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.428194][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.434689][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.448897][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.463431][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.476171][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.487411][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.488874][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.958663][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 258.072299][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 258.525756][ T5809] Bluetooth: hci1: command tx timeout [ 258.531498][ T5801] Bluetooth: hci0: command tx timeout [ 258.605675][ T5801] Bluetooth: hci3: command tx timeout [ 258.606892][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 258.611283][ T5801] Bluetooth: hci2: command tx timeout [ 258.624271][ T5801] Bluetooth: hci4: command tx timeout [ 259.037416][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 259.137863][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.145908][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.155842][ T5798] bridge_slave_0: entered allmulticast mode [ 259.165789][ T5798] bridge_slave_0: entered promiscuous mode [ 259.292632][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.300339][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.308252][ T5798] bridge_slave_1: entered allmulticast mode [ 259.318192][ T5798] bridge_slave_1: entered promiscuous mode [ 259.416836][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.425043][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.433009][ T5791] bridge_slave_0: entered allmulticast mode [ 259.442766][ T5791] bridge_slave_0: entered promiscuous mode [ 259.466240][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 259.573217][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.580923][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.588911][ T5791] bridge_slave_1: entered allmulticast mode [ 259.606266][ T5791] bridge_slave_1: entered promiscuous mode [ 259.652397][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.790426][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.867157][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.018586][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.150559][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.158517][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.166577][ T5792] bridge_slave_0: entered allmulticast mode [ 260.176601][ T5792] bridge_slave_0: entered promiscuous mode [ 260.373148][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.380783][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.390602][ T5792] bridge_slave_1: entered allmulticast mode [ 260.400331][ T5792] bridge_slave_1: entered promiscuous mode [ 260.418888][ T5798] team0: Port device team_slave_0 added [ 260.564998][ T5791] team0: Port device team_slave_0 added [ 260.572465][ T5809] Bluetooth: hci0: command tx timeout [ 260.578749][ T5809] Bluetooth: hci1: command tx timeout [ 260.590348][ T5798] team0: Port device team_slave_1 added [ 260.611637][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.652362][ T5801] Bluetooth: hci4: command tx timeout [ 260.658067][ T5801] Bluetooth: hci2: command tx timeout [ 260.667702][ T5809] Bluetooth: hci3: command tx timeout [ 260.716653][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.725028][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.732907][ T5804] bridge_slave_0: entered allmulticast mode [ 260.742807][ T5804] bridge_slave_0: entered promiscuous mode [ 260.764827][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.774718][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.784882][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.792748][ T5804] bridge_slave_1: entered allmulticast mode [ 260.802835][ T5804] bridge_slave_1: entered promiscuous mode [ 260.865864][ T5791] team0: Port device team_slave_1 added [ 261.110329][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.118138][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.144713][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.229077][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.236967][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.246514][ T5793] bridge_slave_0: entered allmulticast mode [ 261.256414][ T5793] bridge_slave_0: entered promiscuous mode [ 261.269678][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.277106][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.303697][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.323062][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.330241][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.356710][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.372558][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.379728][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.406481][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.428965][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.446684][ T5792] team0: Port device team_slave_0 added [ 261.455333][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.463257][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.470964][ T5793] bridge_slave_1: entered allmulticast mode [ 261.480572][ T5793] bridge_slave_1: entered promiscuous mode [ 261.498851][ T5792] team0: Port device team_slave_1 added [ 261.591059][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.773814][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.785584][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.792867][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.819339][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.918478][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.930317][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.937903][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.964303][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.023887][ T5804] team0: Port device team_slave_0 added [ 262.171396][ T5804] team0: Port device team_slave_1 added [ 262.209077][ T5791] hsr_slave_0: entered promiscuous mode [ 262.218375][ T5791] hsr_slave_1: entered promiscuous mode [ 262.241608][ T5798] hsr_slave_0: entered promiscuous mode [ 262.250743][ T5798] hsr_slave_1: entered promiscuous mode [ 262.259684][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.267538][ T5798] Cannot create hsr debugfs directory [ 262.321110][ T5793] team0: Port device team_slave_0 added [ 262.420025][ T5793] team0: Port device team_slave_1 added [ 262.521873][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.529224][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.555943][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.653007][ T5809] Bluetooth: hci1: command tx timeout [ 262.658696][ T5809] Bluetooth: hci0: command tx timeout [ 262.680362][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.689051][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.716692][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.731765][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.732731][ T5809] Bluetooth: hci2: command tx timeout [ 262.739307][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.752802][ T5801] Bluetooth: hci4: command tx timeout [ 262.770779][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.787628][ T5809] Bluetooth: hci3: command tx timeout [ 262.858210][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.865640][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.892259][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.969083][ T5792] hsr_slave_0: entered promiscuous mode [ 262.979242][ T5792] hsr_slave_1: entered promiscuous mode [ 262.988165][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.996119][ T5792] Cannot create hsr debugfs directory [ 263.499273][ T5793] hsr_slave_0: entered promiscuous mode [ 263.509770][ T5793] hsr_slave_1: entered promiscuous mode [ 263.518390][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.526275][ T5793] Cannot create hsr debugfs directory [ 263.550074][ T5804] hsr_slave_0: entered promiscuous mode [ 263.559186][ T5804] hsr_slave_1: entered promiscuous mode [ 263.568232][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.576089][ T5804] Cannot create hsr debugfs directory [ 264.507635][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.533258][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.557397][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.709725][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.768492][ T5802] Bluetooth: hci0: command tx timeout [ 264.769392][ T5801] Bluetooth: hci1: command tx timeout [ 264.812741][ T5801] Bluetooth: hci4: command tx timeout [ 264.818466][ T5801] Bluetooth: hci3: command tx timeout [ 264.825008][ T5801] Bluetooth: hci2: command tx timeout [ 265.054626][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.079362][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.123059][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.148861][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.291439][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.368917][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.436068][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.528068][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.647636][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.700964][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.784297][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.818203][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.928117][ T5804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.040692][ T5804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.078569][ T5804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.104736][ T5804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.358680][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.608060][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.764200][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.785165][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.793077][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.810671][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.818401][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.010745][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.082773][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.162803][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.170511][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.258010][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.265739][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.374040][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.440528][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.448233][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.472481][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.480071][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.533910][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.688400][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.790344][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.798067][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.949361][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.957084][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.121593][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.153300][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.179967][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.190818][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.228168][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.241815][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.478294][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.584000][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.591608][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.751701][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.759490][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.118202][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.979113][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.497859][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.570836][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.608793][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.629621][ T5791] veth0_vlan: entered promiscuous mode [ 270.769309][ T5791] veth1_vlan: entered promiscuous mode [ 271.149728][ T5798] veth0_vlan: entered promiscuous mode [ 271.180330][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.222843][ T5791] veth0_macvtap: entered promiscuous mode [ 271.290354][ T5793] veth0_vlan: entered promiscuous mode [ 271.331332][ T5791] veth1_macvtap: entered promiscuous mode [ 271.387779][ T5798] veth1_vlan: entered promiscuous mode [ 271.472118][ T5793] veth1_vlan: entered promiscuous mode [ 271.720537][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.818129][ T5804] veth0_vlan: entered promiscuous mode [ 271.849465][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.966703][ T5793] veth0_macvtap: entered promiscuous mode [ 271.984197][ T5798] veth0_macvtap: entered promiscuous mode [ 272.020978][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.031467][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.041007][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.050221][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.097094][ T5793] veth1_macvtap: entered promiscuous mode [ 272.142387][ T5798] veth1_macvtap: entered promiscuous mode [ 272.161263][ T5804] veth1_vlan: entered promiscuous mode [ 272.349313][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.424460][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.487185][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.567052][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.576406][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.585885][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.595086][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.632675][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.661113][ T5804] veth0_macvtap: entered promiscuous mode [ 272.683494][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.692758][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.701810][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.711182][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.800673][ T5804] veth1_macvtap: entered promiscuous mode [ 273.117522][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.226236][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.355026][ T5804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.364299][ T5804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.374662][ T5804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.383878][ T5804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.488937][ T5792] veth0_vlan: entered promiscuous mode [ 273.609425][ T5792] veth1_vlan: entered promiscuous mode [ 274.030668][ T5792] veth0_macvtap: entered promiscuous mode [ 274.144170][ T5792] veth1_macvtap: entered promiscuous mode [ 274.406882][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.561982][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.621512][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.631555][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.640855][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.650080][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.926550][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.937836][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.003203][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.011322][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.167267][ T4035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.178881][ T4035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.278880][ T4091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.287246][ T4091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.451284][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.459857][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.490139][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.500644][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.768540][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.776744][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.784987][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.797981][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.869332][ T5798] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 281.800155][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 282.166989][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 282.192526][ T4091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.206273][ T4091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.465190][ T4035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.474101][ T4035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.147131][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 283.355497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 283.377325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 286.346490][ T6016] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 286.504492][ T6016] vlan2: entered allmulticast mode [ 286.509935][ T6016] geneve1: entered allmulticast mode [ 287.037484][ T5854] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.264021][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 287.314643][ T5854] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 287.323131][ T5854] usb 5-1: config 0 has no interface number 0 [ 287.329516][ T5854] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 287.452806][ T5854] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 287.462375][ T5854] usb 5-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 287.470773][ T5854] usb 5-1: Product: syz [ 287.475417][ T5854] usb 5-1: Manufacturer: syz [ 287.480287][ T5854] usb 5-1: SerialNumber: syz [ 287.528031][ T5854] usb 5-1: config 0 descriptor?? [ 287.631214][ T5854] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 287.643309][ T5854] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input5 [ 288.176957][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 288.185020][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 288.201146][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 288.211177][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 288.215958][ T1581] usb 5-1: USB disconnect, device number 2 [ 288.218324][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 288.289972][ T1581] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 289.651880][ T6041] binder: 6039:6041 ioctl c0306201 800003c0 returned -14 [ 290.008233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.089153][ T30] audit: type=1326 audit(1751271120.803:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.114622][ T30] audit: type=1326 audit(1751271120.803:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.137531][ T30] audit: type=1326 audit(1751271120.803:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.159572][ T30] audit: type=1326 audit(1751271120.813:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.181797][ T30] audit: type=1326 audit(1751271120.813:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.204174][ T30] audit: type=1326 audit(1751271120.813:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.219728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 290.228942][ T30] audit: type=1326 audit(1751271120.813:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.257084][ T30] audit: type=1326 audit(1751271120.813:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.279021][ T30] audit: type=1326 audit(1751271120.813:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 290.301015][ T30] audit: type=1326 audit(1751271120.823:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.24" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 291.078470][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.085854][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.447262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 291.547831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 292.264447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 292.465785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 292.975611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 294.813447][ T6066] ======================================================= [ 294.813447][ T6066] WARNING: The mand mount option has been deprecated and [ 294.813447][ T6066] and is ignored by this kernel. Remove the mand [ 294.813447][ T6066] option from the mount to silence this warning. [ 294.813447][ T6066] ======================================================= [ 294.848514][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.460308][ T6074] Bluetooth: MGMT ver 1.23 [ 296.982460][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 296.982541][ T30] audit: type=1326 audit(1751271127.831:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74539 code=0x7fc00000 [ 297.915466][ T6083] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 298.192916][ T1581] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.442247][ T1581] usb 2-1: Using ep0 maxpacket: 16 [ 298.475534][ T1581] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 298.484380][ T1581] usb 2-1: config 0 has no interface number 0 [ 298.490922][ T1581] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.679753][ T1581] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 298.689325][ T1581] usb 2-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 298.697760][ T1581] usb 2-1: Product: syz [ 298.702222][ T1581] usb 2-1: Manufacturer: syz [ 298.707010][ T1581] usb 2-1: SerialNumber: syz [ 298.879322][ T1581] usb 2-1: config 0 descriptor?? [ 298.948888][ T1581] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 298.958870][ T1581] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 [ 299.110379][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.121736][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.133765][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.142177][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.149600][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.158926][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.166446][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.174354][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.181838][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.189260][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 299.239377][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 299.248927][ T1581] usb 2-1: USB disconnect, device number 2 [ 299.264431][ T1581] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 302.734112][ T6111] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 302.792914][ T6114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.46'. [ 303.886487][ T5854] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 304.065436][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 304.091010][ T5854] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 304.100460][ T5854] usb 2-1: config 0 has no interface number 0 [ 304.107037][ T5854] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.213626][ T5854] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 304.223406][ T5854] usb 2-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 304.231778][ T5854] usb 2-1: Product: syz [ 304.236360][ T5854] usb 2-1: Manufacturer: syz [ 304.243170][ T5854] usb 2-1: SerialNumber: syz [ 304.300951][ T5854] usb 2-1: config 0 descriptor?? [ 304.336469][ T5854] cm109 2-1:0.8: invalid payload size 208, expected 4 [ 304.350593][ T5854] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 304.541337][ C1] cm109_urb_ctl_callback: 101 callbacks suppressed [ 304.541452][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.563246][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.571367][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.582425][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.590141][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.600430][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.608191][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.616660][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.624289][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.631911][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 304.680489][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 304.690047][ T5854] usb 2-1: USB disconnect, device number 3 [ 304.774767][ T5854] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 306.420090][ T6138] capability: warning: `syz.1.55' uses 32-bit capabilities (legacy support in use) [ 307.551583][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.582798][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.604108][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.636535][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.657003][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.775663][ T5801] Bluetooth: hci5: command tx timeout [ 310.002484][ T6146] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 310.010353][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 310.564160][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 310.596422][ T6152] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 311.852352][ T5801] Bluetooth: hci5: command tx timeout [ 313.933799][ T5801] Bluetooth: hci5: command tx timeout [ 313.976552][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.984279][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.991963][ T6141] bridge_slave_0: entered allmulticast mode [ 314.001176][ T6141] bridge_slave_0: entered promiscuous mode [ 314.017124][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.025813][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.033641][ T6141] bridge_slave_1: entered allmulticast mode [ 314.042391][ T6141] bridge_slave_1: entered promiscuous mode [ 314.396568][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.498905][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.798351][ T6141] team0: Port device team_slave_0 added [ 314.817480][ T6141] team0: Port device team_slave_1 added [ 314.951046][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.958516][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.985185][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.251896][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.259325][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.285959][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.647786][ T6141] hsr_slave_0: entered promiscuous mode [ 315.657253][ T6141] hsr_slave_1: entered promiscuous mode [ 315.665366][ T6141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.673266][ T6141] Cannot create hsr debugfs directory [ 316.014159][ T5801] Bluetooth: hci5: command tx timeout [ 318.083018][ T6141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.217044][ T6141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.341487][ T6141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.485949][ T6141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.672915][ T1581] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 318.873963][ T1581] usb 3-1: Using ep0 maxpacket: 16 [ 318.891403][ T1581] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.899944][ T1581] usb 3-1: config 0 has no interface number 0 [ 318.906413][ T1581] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.013809][ T1581] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 319.023315][ T1581] usb 3-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 319.031564][ T1581] usb 3-1: Product: syz [ 319.036159][ T1581] usb 3-1: Manufacturer: syz [ 319.040947][ T1581] usb 3-1: SerialNumber: syz [ 319.141740][ T1581] usb 3-1: config 0 descriptor?? [ 319.202443][ T1581] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 319.213893][ T1581] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 319.357188][ C0] cm109_urb_ctl_callback: 97 callbacks suppressed [ 319.357271][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.372659][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.380221][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.392254][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.407670][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.415154][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.422694][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.430093][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.437558][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.445027][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.577786][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 319.587245][ T1581] usb 3-1: USB disconnect, device number 2 [ 319.618572][ T1581] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 320.249186][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.722376][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.904547][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.912315][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.927784][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.935503][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.009511][ T6180] Zero length message leads to an empty skb [ 323.057460][ T6190] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 323.298424][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.309072][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.319756][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.337221][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.349223][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.656853][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.374139][ T5801] Bluetooth: hci6: command tx timeout [ 325.869363][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 327.476795][ T5801] Bluetooth: hci6: command tx timeout [ 328.495359][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 328.520604][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 328.543257][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 328.565265][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 328.588286][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 328.725509][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.733232][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.740929][ T6192] bridge_slave_0: entered allmulticast mode [ 328.751810][ T6192] bridge_slave_0: entered promiscuous mode [ 328.803377][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.810818][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.835617][ T6192] bridge_slave_1: entered allmulticast mode [ 328.845108][ T6192] bridge_slave_1: entered promiscuous mode [ 329.325866][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.387373][ T6141] veth0_vlan: entered promiscuous mode [ 329.584011][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.602436][ T5809] Bluetooth: hci6: command tx timeout [ 330.203579][ T5880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 330.280271][ T1012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.393083][ T6192] team0: Port device team_slave_0 added [ 330.434328][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 330.485271][ T5880] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 330.494612][ T5880] usb 4-1: config 0 has no interface number 0 [ 330.502469][ T5880] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 330.564581][ T1012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.674671][ T5880] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 330.686098][ T5880] usb 4-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 330.694953][ T5880] usb 4-1: Product: syz [ 330.699341][ T5880] usb 4-1: Manufacturer: syz [ 330.704273][ T5880] usb 4-1: SerialNumber: syz [ 330.728335][ T6192] team0: Port device team_slave_1 added [ 330.801953][ T1012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.813938][ T5801] Bluetooth: hci7: command tx timeout [ 330.878221][ T5880] usb 4-1: config 0 descriptor?? [ 330.921177][ T6141] veth1_vlan: entered promiscuous mode [ 330.948463][ T5880] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 330.958323][ T5880] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9 [ 331.057886][ T1012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.370289][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 331.391555][ C0] cm109_urb_ctl_callback: 346 callbacks suppressed [ 331.391632][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.409840][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.417351][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.424760][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.432342][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.439826][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.447300][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.454853][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.462280][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.469744][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.484954][ T5880] usb 4-1: USB disconnect, device number 2 [ 331.485120][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 331.640913][ T5880] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 331.650672][ T5801] Bluetooth: hci6: command tx timeout [ 332.103126][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.110274][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.137132][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.373286][ T6141] veth0_macvtap: entered promiscuous mode [ 332.418592][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.426586][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.453042][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.890340][ T6141] veth1_macvtap: entered promiscuous mode [ 332.933179][ T5801] Bluetooth: hci7: command tx timeout [ 333.413799][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.703637][ T1012] bridge_slave_1: left allmulticast mode [ 333.709483][ T1012] bridge_slave_1: left promiscuous mode [ 333.716267][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.787323][ T1012] bridge_slave_0: left allmulticast mode [ 333.793589][ T1012] bridge_slave_0: left promiscuous mode [ 333.800073][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.322588][ T6238] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 334.972563][ T5801] Bluetooth: hci7: command tx timeout [ 335.130868][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.223775][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.286522][ T1012] bond0 (unregistering): Released all slaves [ 335.597063][ T6240] vlan2: entered allmulticast mode [ 335.603220][ T6240] geneve1: entered allmulticast mode [ 335.845399][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 335.892245][ T6192] hsr_slave_0: entered promiscuous mode [ 335.901395][ T6192] hsr_slave_1: entered promiscuous mode [ 335.909589][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.917408][ T6192] Cannot create hsr debugfs directory [ 336.183856][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.517240][ T6245] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 337.022541][ T5880] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 337.065024][ T5801] Bluetooth: hci7: command tx timeout [ 337.085226][ T1012] hsr_slave_0: left promiscuous mode [ 337.128245][ T1012] hsr_slave_1: left promiscuous mode [ 337.139463][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.147503][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.218352][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 337.237773][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 337.249419][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 337.262843][ T5880] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 337.272346][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.296186][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.303995][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.397854][ T1012] veth1_macvtap: left promiscuous mode [ 337.403800][ T1012] veth0_macvtap: left promiscuous mode [ 337.409880][ T1012] veth1_vlan: left promiscuous mode [ 337.422779][ T1012] veth0_vlan: left promiscuous mode [ 337.465234][ T5880] usb 4-1: config 0 descriptor?? [ 338.275595][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.285987][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.928308][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 339.045976][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 339.649565][ T6141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.659013][ T6141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.668251][ T6141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.679799][ T6141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.812591][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 339.819435][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.974543][ T5880] usb 4-1: USB disconnect, device number 3 [ 341.676497][ T6192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.217681][ T6192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.424896][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.432940][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.443419][ T6220] bridge_slave_0: entered allmulticast mode [ 342.452502][ T6220] bridge_slave_0: entered promiscuous mode [ 342.559637][ T6192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.815221][ T6192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 342.985723][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.994155][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.002280][ T6220] bridge_slave_1: entered allmulticast mode [ 343.012493][ T6220] bridge_slave_1: entered promiscuous mode [ 343.834323][ T1581] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 344.066294][ T1581] usb 4-1: Using ep0 maxpacket: 16 [ 344.119214][ T1581] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 344.127930][ T1581] usb 4-1: config 0 has no interface number 0 [ 344.134880][ T1581] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 344.261593][ T1581] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 344.271060][ T1581] usb 4-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 344.283532][ T1581] usb 4-1: Product: syz [ 344.287867][ T1581] usb 4-1: Manufacturer: syz [ 344.293881][ T1581] usb 4-1: SerialNumber: syz [ 344.376275][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.472667][ T1581] usb 4-1: config 0 descriptor?? [ 344.559604][ T1581] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 344.569905][ T1581] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input10 [ 344.867213][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.081592][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 345.089872][ C0] cm109_urb_ctl_callback: 6 callbacks suppressed [ 345.089941][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.110268][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.119011][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.127071][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.135211][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.142765][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.150212][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.157677][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.165114][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.172665][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 345.262944][ T5855] usb 4-1: USB disconnect, device number 4 [ 345.263902][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 345.536633][ T5855] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 345.644042][ T6220] team0: Port device team_slave_0 added [ 345.735672][ T6220] team0: Port device team_slave_1 added [ 346.377319][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.386369][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.413168][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.765679][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.772941][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.799390][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.889200][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.553764][ T6298] netlink: 'syz.2.90': attribute type 1 has an invalid length. [ 347.831375][ T6220] hsr_slave_0: entered promiscuous mode [ 347.840611][ T6220] hsr_slave_1: entered promiscuous mode [ 347.848784][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.856718][ T6220] Cannot create hsr debugfs directory [ 347.942658][ T6298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.110786][ T6301] vlan2: entered allmulticast mode [ 348.116392][ T6301] geneve1: entered allmulticast mode [ 348.140032][ T6301] bond1: (slave vlan2): making interface the new active one [ 348.156605][ T6301] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 348.205774][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.417972][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.425501][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.668230][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.675775][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.661127][ T6220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 350.764547][ T6220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 351.005598][ T6220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 351.479452][ T6220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.520724][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.528024][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.732411][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 353.983958][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 354.123061][ T5880] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.131400][ T5880] usb 4-1: config 0 has no interface number 0 [ 354.138134][ T5880] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.233538][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.267561][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.321748][ T5880] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.331422][ T5880] usb 4-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 354.340366][ T5880] usb 4-1: Product: syz [ 354.345102][ T5880] usb 4-1: Manufacturer: syz [ 354.349865][ T5880] usb 4-1: SerialNumber: syz [ 354.586419][ T5880] usb 4-1: config 0 descriptor?? [ 354.689609][ T5880] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 354.700613][ T5880] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 354.783321][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.889850][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.897431][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.057362][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 355.068029][ C0] cm109_urb_ctl_callback: 175 callbacks suppressed [ 355.068100][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.089741][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.097611][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.105058][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.112584][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.120004][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.127430][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.139537][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.148900][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.156583][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 355.253773][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 355.263395][ T5880] usb 4-1: USB disconnect, device number 5 [ 355.300416][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.308000][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.385475][ T5880] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 357.167614][ T1012] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.427764][ T1012] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.674721][ T1012] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.935049][ T1012] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.589677][ T6366] warning: `syz.2.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 358.946235][ T4279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.955784][ T4279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.307961][ T1012] bridge_slave_1: left allmulticast mode [ 359.314405][ T1012] bridge_slave_1: left promiscuous mode [ 359.321110][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.435844][ T1012] bridge_slave_0: left allmulticast mode [ 359.441792][ T1012] bridge_slave_0: left promiscuous mode [ 359.449234][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.570243][ T6374] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 360.083333][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.107758][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.122928][ T1012] bond0 (unregistering): Released all slaves [ 360.296384][ T6374] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.626444][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.689562][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.698125][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.122450][ T1012] hsr_slave_0: left promiscuous mode [ 361.137667][ T1012] hsr_slave_1: left promiscuous mode [ 361.145944][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.154073][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.231423][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.239611][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.396524][ T1012] veth1_macvtap: left promiscuous mode [ 361.403158][ T1012] veth0_macvtap: left promiscuous mode [ 361.409143][ T1012] veth1_vlan: left promiscuous mode [ 361.414938][ T1012] veth0_vlan: left promiscuous mode [ 362.258448][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 362.407189][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 363.197806][ T6192] veth0_vlan: entered promiscuous mode [ 363.656539][ T6192] veth1_vlan: entered promiscuous mode [ 363.880906][ T1012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.990811][ T6192] veth0_macvtap: entered promiscuous mode [ 364.094548][ T1012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.211633][ T6192] veth1_macvtap: entered promiscuous mode [ 364.366626][ T1012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.601032][ T1012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.837768][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.953833][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 365.012737][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.090778][ T6192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.101642][ T6192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.112359][ T6192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.121421][ T6192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.207792][ T5854] usb 3-1: config 0 interface 0 has no altsetting 0 [ 365.215501][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 365.225121][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.349934][ T5854] usb 3-1: config 0 descriptor?? [ 365.690494][ T1012] bridge_slave_1: left allmulticast mode [ 365.696912][ T1012] bridge_slave_1: left promiscuous mode [ 365.704726][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.804529][ T1012] bridge_slave_0: left allmulticast mode [ 365.810790][ T1012] bridge_slave_0: left promiscuous mode [ 365.818194][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.619098][ T5854] video4linux radio48: keene_cmd_set failed (-71) [ 366.626768][ T5854] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 366.718598][ T5854] usb 3-1: USB disconnect, device number 3 [ 367.163930][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.294836][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.360883][ T1012] bond0 (unregistering): Released all slaves [ 368.369297][ T6220] veth0_vlan: entered promiscuous mode [ 368.563918][ T1012] hsr_slave_0: left promiscuous mode [ 368.602939][ T1012] hsr_slave_1: left promiscuous mode [ 368.611224][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.619567][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.727060][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.735080][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.936680][ T1012] veth1_macvtap: left promiscuous mode [ 368.942885][ T1012] veth0_macvtap: left promiscuous mode [ 368.949025][ T1012] veth1_vlan: left promiscuous mode [ 368.954891][ T1012] veth0_vlan: left promiscuous mode [ 369.711209][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 369.804092][ T6450] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 370.189353][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 370.212396][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 371.383917][ T6450] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 371.769384][ T6220] veth1_vlan: entered promiscuous mode [ 372.344733][ T6220] veth0_macvtap: entered promiscuous mode [ 372.460547][ T6220] veth1_macvtap: entered promiscuous mode [ 372.813403][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.917014][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.029504][ T6220] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.038787][ T6220] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.048212][ T6220] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.058601][ T6220] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.429101][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 377.508173][ T3672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.516634][ T3672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.900970][ T4143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.909910][ T4143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.948343][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 380.173331][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 380.180500][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 380.181401][ T5854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 380.407407][ T5854] usb 7-1: Using ep0 maxpacket: 16 [ 380.461436][ T5854] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 380.470060][ T5854] usb 7-1: config 0 has no interface number 0 [ 380.476641][ T5854] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 380.664469][ T5854] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 380.674092][ T5854] usb 7-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 380.682667][ T5854] usb 7-1: Product: syz [ 380.687107][ T5854] usb 7-1: Manufacturer: syz [ 380.692225][ T5854] usb 7-1: SerialNumber: syz [ 380.839200][ T5854] usb 7-1: config 0 descriptor?? [ 380.917253][ T5854] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 380.986865][ T5854] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input12 [ 381.296157][ C1] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 381.303113][ T1581] usb 7-1: USB disconnect, device number 2 [ 381.303331][ C1] cm109 7-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 381.414758][ T1581] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 382.107882][ T4091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.116201][ T4091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.567732][ T4143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.577947][ T4143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.774825][ T6593] process 'syz.2.150' launched '/dev/fd/3' with NULL argv: empty string added [ 383.883484][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 383.886688][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.151'. [ 385.543809][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.154'. [ 386.342620][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 386.584078][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 386.628610][ T5854] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.637380][ T5854] usb 4-1: config 0 has no interface number 0 [ 386.644004][ T5854] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 386.819437][ T5854] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 386.829208][ T5854] usb 4-1: New USB device strings: Mfr=4, Product=24, SerialNumber=3 [ 386.837804][ T5854] usb 4-1: Product: syz [ 386.842438][ T5854] usb 4-1: Manufacturer: syz [ 386.847313][ T5854] usb 4-1: SerialNumber: syz [ 387.030244][ T5854] usb 4-1: config 0 descriptor?? [ 387.162230][ T5854] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 387.173538][ T5854] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13 [ 387.232808][ T5855] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 387.461457][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.473076][ T5855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.483380][ T5855] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 387.494641][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.574529][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 387.586076][ C1] cm109_urb_ctl_callback: 200 callbacks suppressed [ 387.586149][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.604022][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.613030][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.620746][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.628591][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.636179][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.643697][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.651147][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.658621][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.666137][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 387.673687][ T5854] usb 4-1: USB disconnect, device number 6 [ 387.673878][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 387.737848][ T5854] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 387.843195][ T5855] usb 6-1: config 0 descriptor?? [ 388.352453][ T5855] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 388.460538][ T5855] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 388.553871][ T5855] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE [ 388.971008][ T5855] cp2112 0003:10C4:EA90.0001: error setting SMBus config [ 389.076904][ T5855] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 389.224271][ T5855] usb 6-1: USB disconnect, device number 2 [ 390.215420][ T6623] fido_id[6623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 390.872328][ T5855] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 391.121771][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0 [ 391.129078][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 391.138755][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.314484][ T5855] usb 4-1: config 0 descriptor?? [ 392.265369][ T5855] video4linux radio48: keene_cmd_main failed (-71) [ 392.273024][ T5855] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 392.403436][ T5855] usb 4-1: USB disconnect, device number 7 [ 392.821645][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.164'. [ 394.473569][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 396.368065][ T5855] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 396.572460][ T5854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 396.627982][ T5855] usb 8-1: device descriptor read/64, error -71 [ 396.782920][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.794391][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.804704][ T5854] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 396.816011][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.932817][ T5855] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 397.113315][ T5854] usb 4-1: config 0 descriptor?? [ 397.125517][ T5855] usb 8-1: device descriptor read/64, error -71 [ 397.265656][ T5855] usb usb8-port1: attempt power cycle [ 397.655187][ T5854] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 397.732833][ T5855] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 397.765837][ T5854] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 397.817223][ T5855] usb 8-1: device descriptor read/8, error -71 [ 397.903543][ T5854] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 398.295173][ T5855] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 398.412765][ T5854] cp2112 0003:10C4:EA90.0002: error setting SMBus config [ 398.512782][ T5855] usb 8-1: device descriptor read/8, error -71 [ 398.616161][ T5854] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 398.665703][ T5855] usb usb8-port1: unable to enumerate USB device [ 398.794130][ T5854] usb 4-1: USB disconnect, device number 8 [ 401.660663][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.669904][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.680532][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.704871][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.735372][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 402.043591][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.053781][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.073818][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.086048][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.101524][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.955700][ T5854] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 403.349674][ T5854] usb 4-1: config 0 interface 0 has no altsetting 0 [ 403.356882][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 403.368605][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.617410][ T5854] usb 4-1: config 0 descriptor?? [ 403.621069][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 403.788701][ T6696] chnl_net:caif_netlink_parms(): no params data found [ 403.852367][ T5796] Bluetooth: hci0: command tx timeout [ 404.172892][ T5796] Bluetooth: hci2: command tx timeout [ 404.200981][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.177'. [ 404.642757][ T5854] video4linux radio48: keene_cmd_main failed (-71) [ 404.649631][ T5854] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 404.785763][ T5854] usb 4-1: USB disconnect, device number 9 [ 405.932275][ T5796] Bluetooth: hci0: command tx timeout [ 406.252929][ T5796] Bluetooth: hci2: command tx timeout [ 407.286153][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.180'. [ 407.518834][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ea39000: rx timeout, send abort [ 407.896437][ T6696] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.904249][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.912285][ T6696] bridge_slave_0: entered allmulticast mode [ 407.921086][ T6696] bridge_slave_0: entered promiscuous mode [ 407.956986][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.964677][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.980246][ T6699] bridge_slave_0: entered allmulticast mode [ 407.989158][ T6699] bridge_slave_0: entered promiscuous mode [ 408.014427][ T5796] Bluetooth: hci0: command tx timeout [ 408.217087][ T6696] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.224730][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.232884][ T6696] bridge_slave_1: entered allmulticast mode [ 408.241598][ T6696] bridge_slave_1: entered promiscuous mode [ 408.273865][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.290689][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.298539][ T6699] bridge_slave_1: entered allmulticast mode [ 408.307309][ T6699] bridge_slave_1: entered promiscuous mode [ 408.347606][ T5796] Bluetooth: hci2: command tx timeout [ 408.377887][ T6736] netlink: 52 bytes leftover after parsing attributes in process `syz.3.181'. [ 408.430253][ T4035] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.879648][ T4035] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.089800][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.158923][ T4035] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.287193][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.312935][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.388610][ T4035] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.463092][ T11] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 409.630998][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.654529][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.665866][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.675954][ T11] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 409.685298][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.858639][ T11] usb 8-1: config 0 descriptor?? [ 410.130827][ T5796] Bluetooth: hci0: command tx timeout [ 410.190256][ T6696] team0: Port device team_slave_0 added [ 410.209900][ T6696] team0: Port device team_slave_1 added [ 410.341125][ T11] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 410.403940][ T11] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 410.423811][ T5796] Bluetooth: hci2: command tx timeout [ 410.519835][ T11] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 410.562331][ T6699] team0: Port device team_slave_0 added [ 410.605896][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.613400][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.641671][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.851069][ T6699] team0: Port device team_slave_1 added [ 410.950286][ T11] cp2112 0003:10C4:EA90.0003: error setting SMBus config [ 411.085997][ T11] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 411.176815][ T11] usb 8-1: USB disconnect, device number 6 [ 411.574370][ T4035] bridge_slave_1: left allmulticast mode [ 411.580222][ T4035] bridge_slave_1: left promiscuous mode [ 411.586982][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.619567][ T6747] fido_id[6747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 411.735062][ T4035] bridge_slave_0: left allmulticast mode [ 411.741269][ T4035] bridge_slave_0: left promiscuous mode [ 411.752645][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.586815][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.808563][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.823008][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.845006][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.874908][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.911235][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.926442][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.938692][ T4035] bond0 (unregistering): Released all slaves [ 413.027519][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.035029][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.062057][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.210825][ T6751] netlink: 96 bytes leftover after parsing attributes in process `syz.3.185'. [ 413.251324][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.258753][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.287541][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.675167][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.682532][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.713142][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.971158][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.978504][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.486872][ T4035] hsr_slave_0: left promiscuous mode [ 414.522479][ T4035] hsr_slave_1: left promiscuous mode [ 414.535144][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.543358][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.550957][ T5857] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 414.620623][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.632579][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.757406][ T5857] usb 8-1: config 0 interface 0 has no altsetting 0 [ 414.764636][ T5857] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 414.774875][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.797603][ T4035] veth1_macvtap: left promiscuous mode [ 414.804369][ T4035] veth0_macvtap: left promiscuous mode [ 414.810175][ T4035] veth1_vlan: left promiscuous mode [ 414.816154][ T4035] veth0_vlan: left promiscuous mode [ 414.906148][ T5857] usb 8-1: config 0 descriptor?? [ 415.063564][ T5796] Bluetooth: hci4: command tx timeout [ 416.118968][ T5857] video4linux radio48: keene_cmd_main failed (-71) [ 416.126226][ T5857] radio-keene 8-1:0.0: V4L2 device registered as radio48 [ 416.237950][ T5857] usb 8-1: USB disconnect, device number 7 [ 416.360978][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 416.429057][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 417.133237][ T5796] Bluetooth: hci4: command tx timeout [ 417.143595][ T6696] hsr_slave_0: entered promiscuous mode [ 417.153314][ T6696] hsr_slave_1: entered promiscuous mode [ 417.161236][ T6696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.169079][ T6696] Cannot create hsr debugfs directory [ 417.224246][ T6699] hsr_slave_0: entered promiscuous mode [ 417.233489][ T6699] hsr_slave_1: entered promiscuous mode [ 417.241369][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.249378][ T6699] Cannot create hsr debugfs directory [ 418.638634][ T4035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.842542][ T4035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.946233][ T5857] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 418.969876][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 419.070260][ T4035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.207356][ T5857] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.219682][ T5857] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.230632][ T5857] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 419.244447][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.299808][ T5796] Bluetooth: hci4: command tx timeout [ 419.345120][ T5857] usb 8-1: config 0 descriptor?? [ 419.461587][ T4035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.727570][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 419.839057][ T6789] netlink: 'syz.3.194': attribute type 1 has an invalid length. [ 419.875904][ T5857] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 419.985547][ T5857] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 420.089520][ T5857] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 420.278453][ T6789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.514776][ T5857] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 420.561311][ T5857] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 420.724261][ T5857] usb 8-1: USB disconnect, device number 8 [ 420.940160][ T4035] bridge_slave_1: left allmulticast mode [ 420.947156][ T4035] bridge_slave_1: left promiscuous mode [ 420.955157][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.029491][ T6795] fido_id[6795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 421.085737][ T4035] bridge_slave_0: left allmulticast mode [ 421.091682][ T4035] bridge_slave_0: left promiscuous mode [ 421.099756][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.415995][ T5796] Bluetooth: hci4: command tx timeout [ 421.906352][ T4035] bond1 (unregistering): (slave vlan2): Releasing active interface [ 422.063501][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.148865][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.253435][ T4035] bond0 (unregistering): Released all slaves [ 422.273252][ T4035] bond1 (unregistering): Released all slaves [ 422.292832][ T4035] bond2 (unregistering): Released all slaves [ 422.779200][ T6699] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 422.973783][ T6696] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.999302][ T6699] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 423.355012][ T6696] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.556642][ T6699] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 423.612936][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.620569][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.628668][ T6757] bridge_slave_0: entered allmulticast mode [ 423.640966][ T6757] bridge_slave_0: entered promiscuous mode [ 423.654152][ T6699] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 423.724688][ T6696] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.853489][ T4035] hsr_slave_0: left promiscuous mode [ 423.897683][ T4035] hsr_slave_1: left promiscuous mode [ 423.912585][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.920260][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.030571][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.038640][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.136346][ T4035] veth1_macvtap: left promiscuous mode [ 424.142468][ T4035] veth0_macvtap: left promiscuous mode [ 424.148331][ T4035] veth1_vlan: left promiscuous mode [ 424.156147][ T4035] veth0_vlan: left promiscuous mode [ 425.449080][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 425.475667][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 425.710066][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.718442][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.726615][ T6757] bridge_slave_1: entered allmulticast mode [ 425.736458][ T6757] bridge_slave_1: entered promiscuous mode [ 425.904587][ T6696] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 426.449678][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'. [ 426.554855][ T6830] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 426.809177][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.924558][ T6830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.942857][ T1581] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 426.995086][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.157806][ T1581] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.169280][ T1581] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.180292][ T1581] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 427.189848][ T1581] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.238553][ T6757] team0: Port device team_slave_0 added [ 427.293326][ T1581] usb 8-1: config 0 descriptor?? [ 427.367948][ T6757] team0: Port device team_slave_1 added [ 427.811860][ T1581] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 427.890173][ T1581] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 427.917127][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.925069][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.955137][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.092405][ T1581] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 428.254771][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.262316][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.289094][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.360685][ T1581] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 428.431693][ T1581] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71 [ 428.519239][ T1581] usb 8-1: USB disconnect, device number 9 [ 428.591635][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.131659][ T6757] hsr_slave_0: entered promiscuous mode [ 429.141190][ T6757] hsr_slave_1: entered promiscuous mode [ 429.158971][ T6839] fido_id[6839]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 429.209415][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.344987][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.352748][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.661598][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.669629][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.925585][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.264912][ T6696] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.531373][ T6699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.563555][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.571145][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.922961][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.930569][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.374209][ T5809] Bluetooth: hci5: command 0x0406 tx timeout [ 432.864968][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 432.981479][ T6870] netlink: 'syz.3.211': attribute type 1 has an invalid length. [ 433.130778][ T6870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.628464][ T6874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.637199][ T6874] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.653583][ T6874] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 434.220105][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.301205][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.553949][ T6757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 434.701043][ T6757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.835664][ T6757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.995639][ T6757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.203233][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 435.450861][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.462623][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.472901][ T5854] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 435.482409][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.667107][ T5854] usb 4-1: config 0 descriptor?? [ 436.210030][ T5854] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 436.349064][ T5854] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 436.453795][ T5854] cp2112 0003:10C4:EA90.0006: Part Number: 0x82 Device Version: 0xFE [ 436.715769][ T5854] cp2112 0003:10C4:EA90.0006: error requesting SMBus config [ 436.840824][ T5854] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 436.968421][ T5854] usb 4-1: USB disconnect, device number 10 [ 437.308971][ T6757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.423403][ T6898] fido_id[6898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 437.624075][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.781016][ T4143] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.788773][ T4143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.992224][ T4143] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.999885][ T4143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.058050][ T6696] veth0_vlan: entered promiscuous mode [ 439.068421][ T6699] veth0_vlan: entered promiscuous mode [ 439.248516][ T6699] veth1_vlan: entered promiscuous mode [ 439.266206][ T6696] veth1_vlan: entered promiscuous mode [ 439.877402][ T4035] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.091848][ T6919] netlink: 52 bytes leftover after parsing attributes in process `syz.7.218'. [ 440.109428][ T4035] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.177394][ T6699] veth0_macvtap: entered promiscuous mode [ 440.222977][ T6696] veth0_macvtap: entered promiscuous mode [ 440.307010][ T4035] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.393997][ T6699] veth1_macvtap: entered promiscuous mode [ 440.458839][ T4035] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.559918][ T6696] veth1_macvtap: entered promiscuous mode [ 440.767933][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.885885][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.906673][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.928572][ T6696] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.937945][ T6696] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.949429][ T6696] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.959017][ T6696] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.303707][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.547271][ T4035] bridge_slave_1: left allmulticast mode [ 441.553598][ T4035] bridge_slave_1: left promiscuous mode [ 441.564372][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.663958][ T4035] bridge_slave_0: left allmulticast mode [ 441.669929][ T4035] bridge_slave_0: left promiscuous mode [ 441.677153][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.183929][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.7.220'. [ 442.285108][ T6933] netlink: 'syz.7.220': attribute type 1 has an invalid length. [ 442.576111][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.648584][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.665660][ T4035] bond0 (unregistering): Released all slaves [ 442.692223][ T6699] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.701409][ T6699] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.710888][ T6699] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.720062][ T6699] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.859879][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.013373][ T6934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.021639][ T6934] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 443.039317][ T6934] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 443.361406][ T6757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.119717][ T4035] hsr_slave_0: left promiscuous mode [ 444.171574][ T4035] hsr_slave_1: left promiscuous mode [ 444.180870][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.188921][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.255201][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.264633][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.293436][ T5884] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 444.375842][ T4035] veth1_macvtap: left promiscuous mode [ 444.381817][ T4035] veth0_macvtap: left promiscuous mode [ 444.388205][ T4035] veth1_vlan: left promiscuous mode [ 444.394017][ T4035] veth0_vlan: left promiscuous mode [ 444.787598][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.800942][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.812629][ T5884] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 444.824550][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.888913][ T5884] usb 8-1: config 0 descriptor?? [ 445.441095][ T5884] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 445.460422][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 445.484990][ T5884] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 445.513578][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 445.912992][ T5884] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 445.928807][ T5884] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 445.990189][ T5884] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 446.010366][ T5884] usb 8-1: USB disconnect, device number 10 [ 446.313374][ T6957] fido_id[6957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 447.793632][ T5884] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 448.033401][ T5884] usb 4-1: config 0 interface 0 has no altsetting 0 [ 448.040417][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 448.051358][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.152398][ T5884] usb 4-1: config 0 descriptor?? [ 448.698973][ T6757] veth0_vlan: entered promiscuous mode [ 448.934191][ T6757] veth1_vlan: entered promiscuous mode [ 449.043937][ T5884] video4linux radio48: keene_cmd_main failed (-71) [ 449.050902][ T5884] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 449.136209][ T5884] usb 4-1: USB disconnect, device number 11 [ 449.468281][ T6757] veth0_macvtap: entered promiscuous mode [ 449.527877][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.7.230'. [ 449.565137][ T6757] veth1_macvtap: entered promiscuous mode [ 449.602737][ T6994] netlink: 'syz.7.230': attribute type 1 has an invalid length. [ 449.763750][ T6994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 449.995164][ T6996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 450.004516][ T6996] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 450.024367][ T6996] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 450.288818][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.437673][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.490539][ T6757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.503621][ T6757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.512841][ T6757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.522397][ T6757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.887637][ T5809] Bluetooth: hci7: command 0x0406 tx timeout [ 452.293800][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.301822][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.803092][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 452.857230][ T5441] ===================================================== [ 452.865845][ T5441] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 452.872454][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.873881][ T5441] _copy_to_iter+0xf0e/0x33f0 [ 452.881171][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.886176][ T5441] __skb_datagram_iter+0x196/0x12c0 [ 452.886316][ T5441] skb_copy_datagram_iter+0x5b/0x1e0 [ 452.886435][ T5441] netlink_recvmsg+0x4bb/0xfe0 [ 452.911150][ T5441] sock_recvmsg+0x2dc/0x390 [ 452.917114][ T5441] ____sys_recvmsg+0x193/0x610 [ 452.922875][ T5441] ___sys_recvmsg+0x20b/0x850 [ 452.929751][ T5441] __x64_sys_recvmsg+0x20e/0x3d0 [ 452.935606][ T5441] x64_sys_call+0x11ff/0x3db0 [ 452.940546][ T5441] do_syscall_64+0xd9/0x210 [ 452.945508][ T5441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.951633][ T5441] [ 452.956257][ T5441] Uninit was stored to memory at: [ 452.961609][ T5441] pskb_expand_head+0x310/0x1610 [ 452.966921][ T5441] netlink_trim+0x496/0x500 [ 452.971620][ T5441] netlink_broadcast_filtered+0x80/0x2370 [ 452.979718][ T5441] nlmsg_notify+0x15b/0x2f0 [ 452.985488][ T5441] rtnl_notify+0xba/0x100 [ 452.990091][ T5441] wireless_nlevent_process+0xfe/0x290 [ 452.995995][ T5441] process_scheduled_works+0xb8e/0x1d80 [ 453.001814][ T5441] worker_thread+0xedf/0x1590 [ 453.007012][ T5441] kthread+0xd5c/0xf00 [ 453.011289][ T5441] ret_from_fork+0x1e0/0x310 [ 453.016327][ T5441] ret_from_fork_asm+0x1a/0x30 [ 453.021391][ T5441] [ 453.024047][ T5441] Uninit was stored to memory at: [ 453.031618][ T5441] wireless_send_event+0x67f/0x1530 [ 453.037819][ T5441] ioctl_standard_iw_point+0x12b0/0x13f0 [ 453.043909][ T5441] compat_standard_call+0x188/0x4c0 [ 453.049374][ T5441] wext_ioctl_dispatch+0x192/0x7a0 [ 453.054934][ T5441] compat_wext_handle_ioctl+0x1a1/0x300 [ 453.060750][ T5441] compat_sock_ioctl+0x20c/0xff0 [ 453.066775][ T5441] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 453.072763][ T5441] ia32_sys_call+0x2d07/0x42c0 [ 453.077741][ T5441] __do_fast_syscall_32+0xb0/0x150 [ 453.083251][ T5441] do_fast_syscall_32+0x38/0x80 [ 453.088336][ T5441] do_SYSENTER_32+0x1f/0x30 [ 453.093284][ T5441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 453.099881][ T5441] [ 453.102504][ T5441] Local variable iwp created at: [ 453.107587][ T5441] compat_standard_call+0x4a/0x4c0 [ 453.113077][ T5441] wext_ioctl_dispatch+0x192/0x7a0 [ 453.118438][ T5441] [ 453.120891][ T5441] Bytes 60-63 of 64 are uninitialized [ 453.126573][ T5441] Memory access of size 64 starts at ffff88811c00b700 [ 453.135531][ T5441] Data copied to user address 00007ffe7a6fccf0 [ 453.141840][ T5441] [ 453.145145][ T5441] CPU: 1 UID: 101 PID: 5441 Comm: dhcpcd Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(undef) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 453.156461][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.166910][ T5441] ===================================================== [ 453.174189][ T5441] Disabling lock debugging due to kernel taint [ 453.180503][ T5441] Kernel panic - not syncing: kmsan.panic set ... [ 453.187132][ T5441] CPU: 1 UID: 101 PID: 5441 Comm: dhcpcd Tainted: G B 6.16.0-rc4-syzkaller #0 PREEMPT(undef) [ 453.199125][ T5441] Tainted: [B]=BAD_PAGE [ 453.203433][ T5441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.213685][ T5441] Call Trace: [ 453.217124][ T5441] [ 453.220197][ T5441] __dump_stack+0x26/0x30 [ 453.224750][ T5441] dump_stack_lvl+0x53/0x270 [ 453.229552][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.235634][ T5441] dump_stack+0x1e/0x25 [ 453.240005][ T5441] panic+0x4bd/0xd50 [ 453.244179][ T5441] kmsan_report+0x31c/0x320 [ 453.248924][ T5441] ? kmsan_internal_check_memory+0x1e1/0x230 [ 453.255143][ T5441] ? kmsan_copy_to_user+0xf1/0x190 [ 453.260485][ T5441] ? _copy_to_iter+0xf0e/0x33f0 [ 453.265525][ T5441] ? __skb_datagram_iter+0x196/0x12c0 [ 453.271091][ T5441] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 453.276748][ T5441] ? netlink_recvmsg+0x4bb/0xfe0 [ 453.281889][ T5441] ? sock_recvmsg+0x2dc/0x390 [ 453.286801][ T5441] ? ____sys_recvmsg+0x193/0x610 [ 453.291942][ T5441] ? ___sys_recvmsg+0x20b/0x850 [ 453.297000][ T5441] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 453.302477][ T5441] ? x64_sys_call+0x11ff/0x3db0 [ 453.307571][ T5441] ? do_syscall_64+0xd9/0x210 [ 453.312451][ T5441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.318766][ T5441] ? resched_curr_lazy+0x20/0x40 [ 453.323947][ T5441] ? check_preempt_wakeup_fair+0x12d1/0x1c10 [ 453.330146][ T5441] ? psi_task_change+0x2ed/0x530 [ 453.335316][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.340699][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.346056][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.351405][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.357472][ T5441] kmsan_internal_check_memory+0x1e1/0x230 [ 453.363532][ T5441] kmsan_copy_to_user+0xf1/0x190 [ 453.368725][ T5441] _copy_to_iter+0xf0e/0x33f0 [ 453.373611][ T5441] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 453.380185][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.385546][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.391617][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.396974][ T5441] ? __pfx_kmsan_internal_set_shadow_origin+0x1/0x10 [ 453.403899][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.409269][ T5441] __skb_datagram_iter+0x196/0x12c0 [ 453.414694][ T5441] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 453.420568][ T5441] skb_copy_datagram_iter+0x5b/0x1e0 [ 453.426052][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.432143][ T5441] netlink_recvmsg+0x4bb/0xfe0 [ 453.437175][ T5441] ? __pfx_netlink_recvmsg+0x10/0x10 [ 453.442694][ T5441] sock_recvmsg+0x2dc/0x390 [ 453.447427][ T5441] ____sys_recvmsg+0x193/0x610 [ 453.452392][ T5441] ? setup_fault_attr+0x2b0/0x300 [ 453.457627][ T5441] ? stack_depot_save_flags+0x35/0x7b0 [ 453.463344][ T5441] ___sys_recvmsg+0x20b/0x850 [ 453.468263][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.474326][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.479676][ T5441] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 453.485742][ T5441] __x64_sys_recvmsg+0x20e/0x3d0 [ 453.490897][ T5441] ? kmsan_get_metadata+0xfb/0x160 [ 453.496294][ T5441] x64_sys_call+0x11ff/0x3db0 [ 453.501239][ T5441] do_syscall_64+0xd9/0x210 [ 453.505959][ T5441] ? irqentry_exit+0x16/0x60 [ 453.510815][ T5441] ? clear_bhb_loop+0x40/0x90 [ 453.515720][ T5441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.521835][ T5441] RIP: 0033:0x7f6bf8a9b407 [ 453.526438][ T5441] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 453.546294][ T5441] RSP: 002b:00007ffe7a6fcbe0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 453.554934][ T5441] RAX: ffffffffffffffda RBX: 00007f6bf8a11740 RCX: 00007f6bf8a9b407 [ 453.563083][ T5441] RDX: 0000000000000040 RSI: 00007ffe7a6fcc60 RDI: 0000000000000009 [ 453.571221][ T5441] RBP: 0000561a0b084aa0 R08: 0000000000000000 R09: 0000000000000000 [ 453.579357][ T5441] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 453.587488][ T5441] R13: 00007ffe7a700dc0 R14: 0000000000000001 R15: 00007ffe7a700db0 [ 453.595661][ T5441] [ 453.599106][ T5441] Kernel Offset: disabled [ 453.603527][ T5441] Rebooting in 86400 seconds..