last executing test programs: 10m8.59244866s ago: executing program 3 (id=637): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6b6f9b7ecae0405dadc71feffb87fef31bfcfa430f4519439e5a85d51630b6f3c1edb546c01c076f7e7879334a1d71c6f2468ecd79c88649407ef1d53c291673", 0x40}], 0x1}, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m8.268349818s ago: executing program 3 (id=640): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6b6f9b7ecae0405dadc71feffb87fef31bfcfa430f4519439e5a85d51630b6f3c1edb546c01c076f7e7879334a1d71c6f2468ecd79c88649407ef1d53c", 0x3d}], 0x1}, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c054}, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m7.80585896s ago: executing program 3 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) 10m7.464022958s ago: executing program 3 (id=657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014000000"], 0xfdef) 10m4.619382978s ago: executing program 3 (id=658): statx(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x15) pwrite64(r2, 0x0, 0x0, 0xe7c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000740)="$eJzs3TFre1UUAPDzkjSJOqSIi+LwQAen0rq6NEoFsZMSQR002BYkCYUWAlY0duoncPR7+BFcXPwGgqvg1g6VJy/vvSa1SVtqrNL/7zed3nvPfSf3lrRLTj5/dTTYO0zi9PzXaLeTqG3HdlwksR61qHwXjQAAno6LLIvWgzIbtZUXAwA8ivzv/x9Z4a61D/s/AQD4v/nw40/e7+7u7nyQpu14uXM27iURMTob94r57kF8GcPYj83oxGVEdqWI331vdycaaW49Xh9Nxr08c/TZz+X+3d8jpvlb0Yn1xflbaeEq//mqujS6B2vVD514aXH+m3/Pj9Ekes1447W5+jeiE798EYcxjL3Ic2f5326l6TvZ9+dff5o/Js9PatFrTdfNZPVHuhIAAAAAAAAAAAAAAAAAAAAAAJ4BG2maFO17pv178qFp/5xxr345nd9IK/P9fSZVf6Ck2qjoD5RF2aJnksUPVX+dzTRNs3LhLL8RrzR8sQAAAAAAAAAAAAAAAAAAAADkjr86GfSHw/2jlQRVN4DqY/0P3Wd7NrIWEYN+ffmGrYjaPZ81320gr/XWxdFoxIqO5a7gubyele/cml3uR1EE1cXsJyt81otvF5ueDPppOVUd8qCf3HWG7erifpyfasY/LSyb/kpcZuXIN5Ffd7SvSr2e1VzRaTRfWDj1Z5Zl99vnrd+KOypHkmmLjfs9fa0MFr7APGjfvIuflm+49C2jvqr3HgAAAAAAAAAAAAAAAAAA4LrZh34XTJ7emlr714oCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEc2+/7/KmhHxPWRG8GkyE0iYumaMmjG0fF//RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+v4KAAD//8HoSHM=") getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r0, @ANYBLOB="2c75693d4018715abecf09f7b6a106b0a000000000e8803ed4f95f340f8fcd7341db4241a2edfe9da13ddcae11f60b4d8db7d8f924ccf63eeb045c92c98a42d8a8701b357cb9968abe5651bdc18f96c7f4404fd2f5b10914402cc7068b574490bb612e429fefe5430cbcd2587f9afd004a6f101a3c98d29b01426b32c828253a0c5eed8916237f115caaa7084d81e7e4723c", @ANYRESHEX=r1, @ANYBLOB=',mode=00000000000000000000052,mode=00000000000000000000005,appraise_type=imasig,fowner=', @ANYRESDEC=r3, @ANYBLOB=',subj_type=\x00,smackfstransmute=^:#&']) 10m4.102034031s ago: executing program 3 (id=663): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) statx(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x15) pwrite64(r7, 0x0, 0x0, 0xe7c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18010000120001002cbd700000000000ac1414240000000000000000000000000000000000003300e40006000a010100000000000000000000000000ff0200000000000000000000000000014e2100044e2200000a00a0003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000000000004d46c000000ac1e01010000000000000000000000000400000000000000e30e000000000000000000000000000085bb000000000000050000000090a2883a302a94e0000000c20000000000000008000000000000000008000000000000e900000000000000030000000000000003"], 0x118}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000740)="$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") getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB="2c75693d4018715abecf09f7b6a106b0a000000000e8803ed4f95f340f8fcd7341db4241a2edfe9da13ddcae11f60b4d8db7d8f924ccf63eeb045c92c98a42d8a8701b357cb9968abe5651bdc18f96c7f4404fd2f5b10914402cc7068b574490bb612e429fefe5430cbcd2587f9afd004a6f101a3c98d29b01426b32c828253a0c5eed8916237f115caaa7084d81e7e4723c", @ANYRESHEX=r3, @ANYBLOB=',mode=00000000000000000000052,mode=00000000000000000000005,appraise_type=imasig,fowner=', @ANYRESDEC=r9, @ANYBLOB=',subj_type=\x00,smackfstransmute=^:#&']) 9m48.232889312s ago: executing program 32 (id=663): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) statx(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x6000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mremap(&(0x7f0000318000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000542000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x15) pwrite64(r7, 0x0, 0x0, 0xe7c) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="18010000120001002cbd700000000000ac1414240000000000000000000000000000000000003300e40006000a010100000000000000000000000000ff0200000000000000000000000000014e2100044e2200000a00a0003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000000000004d46c000000ac1e01010000000000000000000000000400000000000000e30e000000000000000000000000000085bb000000000000050000000090a2883a302a94e0000000c20000000000000008000000000000000008000000000000e900000000000000030000000000000003"], 0x118}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005780)={0x2020}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000740)="$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") getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000540)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB="2c75693d4018715abecf09f7b6a106b0a000000000e8803ed4f95f340f8fcd7341db4241a2edfe9da13ddcae11f60b4d8db7d8f924ccf63eeb045c92c98a42d8a8701b357cb9968abe5651bdc18f96c7f4404fd2f5b10914402cc7068b574490bb612e429fefe5430cbcd2587f9afd004a6f101a3c98d29b01426b32c828253a0c5eed8916237f115caaa7084d81e7e4723c", @ANYRESHEX=r3, @ANYBLOB=',mode=00000000000000000000052,mode=00000000000000000000005,appraise_type=imasig,fowner=', @ANYRESDEC=r9, @ANYBLOB=',subj_type=\x00,smackfstransmute=^:#&']) 8m46.636533291s ago: executing program 5 (id=933): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0xc00, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000380)=[@register_looper], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='5\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf250300000008000500ffffffff1400060070696d3672656731000000000000000014000200fc"], 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8m42.492374294s ago: executing program 5 (id=947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 8m39.845361859s ago: executing program 5 (id=951): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x4, @empty, 'veth1_virt_wifi\x00'}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6b6f9b7ecae0405dadc71feffb87fef31bfcfa430f4519439e5a85d51630b6f3c1edb546c01c076f7e7879334a1d71c6f2468ecd79c88649407ef1d53c291673", 0x40}], 0x1}, 0x1) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c054}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m39.443223939s ago: executing program 5 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x40010) 8m39.008303029s ago: executing program 5 (id=961): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)="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", 0x147}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa83", 0xba}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m38.656952778s ago: executing program 5 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 8m22.668633912s ago: executing program 33 (id=964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 7.836302756s ago: executing program 2 (id=4217): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x6, 0x0, 0x0, 0x100, 0xe}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x22) lseek(r2, 0x80000010001, 0x0) 4.812396951s ago: executing program 1 (id=4236): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xa) ptrace$pokeuser(0x6, r0, 0x388, 0x100000000080008) 4.571878536s ago: executing program 2 (id=4241): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x7}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.405518711s ago: executing program 1 (id=4243): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x23, 0x6, {0x6, 0x22, "9e561c00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.953029582s ago: executing program 4 (id=4247): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,use']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xff, 0x5, 0x8, 0x7, 0x7, 0x0, 0x6, 0xc7, 0x8, 0x3d}, {0xe, 0x2, 0x1, 0x27, 0x7, 0x0, 0x4, 0xff, 0x3, 0x4, 0x6, 0xed, 0x20c}, {0x0, 0x7, 0x38, 0x3, 0x84, 0x2, 0x3, 0x4e, 0xc, 0x5, 0x4, 0x4, 0x6}], 0xdfffffff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.480379984s ago: executing program 4 (id=4248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "86"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0xfffffffe, 0xffff01c2, 0x2, 0xa}) 3.479616904s ago: executing program 0 (id=4258): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,use']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xff, 0x5, 0x8, 0x7, 0x7, 0x0, 0x6, 0xc7, 0x8, 0x3d}, {0xe, 0x2, 0x1, 0x27, 0x7, 0x0, 0x4, 0xff, 0x3, 0x4, 0x6, 0xed, 0x20c}, {0x0, 0x7, 0x38, 0x3, 0x84, 0x2, 0x3, 0x4e, 0xc, 0x5, 0x4, 0x4, 0x6}], 0xdfffffff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.22786064s ago: executing program 2 (id=4249): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {}, {0x8, 0x11, 0x2007ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, 0x0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) write$binfmt_elf64(r5, 0x0, 0x40000) dup(r3) sendto$inet_nvme_icreq_pdu(r0, &(0x7f00000000c0)={{0x0, 0x0, 0x80, 0x4}, 0x0, 0x0, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 3.163316981s ago: executing program 0 (id=4250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xe2c3}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000c00)=""/163, 0xa3}, {&(0x7f0000001cc0)=""/240, 0xf0}, {&(0x7f0000000e00)=""/88, 0x58}, {&(0x7f0000000e80)=""/180, 0xb4}, {&(0x7f0000001bc0)=""/248, 0xf8}, {&(0x7f0000001040)=""/57, 0x39}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x7}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000}], 0x4, 0x0, 0x0) 2.81305924s ago: executing program 2 (id=4253): r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40, 0x5, 0x1b, "27f4bb794f34191af20ee9922b9ad78dd5c1835cde571d79fb96ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2.456359049s ago: executing program 1 (id=4256): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2fb5b09040000014106cf0008240201000000000905c926"], 0x0) 2.323951032s ago: executing program 6 (id=4257): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000023c0)=0x5, 0x4) 2.173113596s ago: executing program 0 (id=4259): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2.112434517s ago: executing program 6 (id=4260): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfd66, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x19, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 2.020386359s ago: executing program 6 (id=4261): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,use']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x1, 0xc000, 0x4, 0xff, 0x5, 0x8, 0x7, 0x7, 0x0, 0x6, 0xc7, 0x8, 0x3d}, {0xe, 0x2, 0x1, 0x27, 0x7, 0x0, 0x4, 0xff, 0x3, 0x4, 0x6, 0xed, 0x20c}, {0x0, 0x7, 0x38, 0x3, 0x84, 0x2, 0x3, 0x4e, 0xc, 0x5, 0x4, 0x4, 0x6}], 0xdfffffff}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.938473131s ago: executing program 0 (id=4262): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) keyctl$link(0x8, 0x0, 0xffffffffffffffff) 1.571197131s ago: executing program 6 (id=4263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @remote, 0x3}, 0x1c) listen(r1, 0x3) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x724) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.100423182s ago: executing program 0 (id=4264): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 917.552197ms ago: executing program 1 (id=4265): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="8262b66f5d1a8899d48013adc5b91584a385dca45139c6e4aa7ac858", 0x1c, 0x40, 0x0, 0x0) 856.458128ms ago: executing program 1 (id=4266): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="0f01c30fc7390f01cbb9080b00000f320fc72d1454d498c4c2999aaddd8bceb38fe8eca2a8810000003766baf80cb8303fa984ef66bafc0ced660f38810b", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 720.290282ms ago: executing program 2 (id=4267): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) unshare(0x60000600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 616.986774ms ago: executing program 6 (id=4268): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000840)={0x1, 0x0, [{0x98a}]}) 418.572149ms ago: executing program 4 (id=4269): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @empty}}, 0x1e) 304.262532ms ago: executing program 4 (id=4270): bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x5e22, 0x3, @empty, 0x9}, 0x1c) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000b80)={{}, {@val, @max}}) listen(0xffffffffffffffff, 0x80000003) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001e00030e2bbd7022080000000a00000005000000000000dc461088001654d4c53ad87f3a5fa9e200f78a0000091cb61b2334f1b37bf613c219b4a87e226da3bc7006a5b5c07c5fbe30ac4a722e1260eea5cd90564e47248167a8d659937cbf3df64e395c26a225ebba967f5d0b94f88d919f", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) 245.785283ms ago: executing program 4 (id=4271): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x4007, 0x2, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 89.477377ms ago: executing program 4 (id=4272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 312.6µs ago: executing program 6 (id=4273): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,use']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 153.54µs ago: executing program 1 (id=4274): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) 91.449µs ago: executing program 0 (id=4275): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) 0s ago: executing program 2 (id=4276): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @any, 0x0, 0x2}, 0xe) kernel console output (not intermixed with test programs): 97][T13432] device veth1_vlan entered promiscuous mode [ 613.992157][T13432] device veth0_macvtap entered promiscuous mode [ 614.033728][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.173377][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.220307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.298851][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.356187][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 614.395110][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 614.403879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.424232][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.463159][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.476623][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.492763][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 614.513266][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 614.533880][T13432] device veth1_macvtap entered promiscuous mode [ 614.548780][T13771] device syzkaller0 entered promiscuous mode [ 614.640930][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.689309][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.707027][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.750065][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.784925][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.815158][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.836357][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.860397][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.883045][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.906094][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.935354][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.952726][T13784] device dummy0 left promiscuous mode [ 614.985094][T13789] netlink: 'syz.2.3065': attribute type 10 has an invalid length. [ 615.004733][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3065'. [ 615.020312][T13789] device dummy0 entered promiscuous mode [ 615.142436][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.162761][T12877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.193834][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.217177][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.266019][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.313724][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.332378][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.362422][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.397921][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.421804][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.432078][T13432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.444828][T13432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.462782][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.478064][T13432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.487914][T13432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.509311][T13432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.529549][T13432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.558920][T13800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3070'. [ 615.588128][T13805] device dummy0 left promiscuous mode [ 615.626872][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.643721][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.667365][T13808] netlink: 'syz.0.3070': attribute type 10 has an invalid length. [ 615.682291][T13808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3070'. [ 615.714267][T13808] device dummy0 entered promiscuous mode [ 615.939238][ T5943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.957596][ T5943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.983693][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.057712][ T9246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.078884][ T9246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.117287][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 616.395602][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3074'. [ 616.426943][T13825] loop0: detected capacity change from 0 to 256 [ 617.271469][T13828] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2967'. [ 618.082846][T13836] device dummy0 left promiscuous mode [ 618.115294][T13836] netlink: 'syz.6.3080': attribute type 10 has an invalid length. [ 618.222676][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3080'. [ 618.272764][T13836] device dummy0 entered promiscuous mode [ 618.788563][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3084'. [ 618.850945][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 618.860799][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.868891][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.881278][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.893177][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 618.900523][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 619.071255][ T5776] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.161582][T13847] netlink: 'syz.4.3084': attribute type 10 has an invalid length. [ 619.175845][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3084'. [ 619.196561][T13847] device dummy0 entered promiscuous mode [ 619.297539][ T5776] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.508293][ T5776] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.698971][ T5776] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.702955][T13867] netlink: 'syz.6.3089': attribute type 72 has an invalid length. [ 620.153724][T13880] device dummy0 left promiscuous mode [ 620.255225][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 620.286515][T13883] loop0: detected capacity change from 0 to 256 [ 620.429967][T13880] netlink: 'syz.6.3093': attribute type 10 has an invalid length. [ 620.458728][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3093'. [ 620.547675][T13880] device dummy0 entered promiscuous mode [ 620.963152][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 622.160541][ T5776] tipc: Left network mode [ 623.013069][ T4381] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 623.042458][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 623.327577][T13844] chnl_net:caif_netlink_parms(): no params data found [ 623.410876][T13904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3097'. [ 623.565908][T13904] device dummy0 left promiscuous mode [ 623.622301][T13910] netlink: 'syz.6.3097': attribute type 10 has an invalid length. [ 623.680360][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3097'. [ 623.722416][T13910] device dummy0 entered promiscuous mode [ 623.927452][T13916] netlink: 'syz.1.3102': attribute type 72 has an invalid length. [ 624.138139][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.200867][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.336098][T13844] device bridge_slave_0 entered promiscuous mode [ 624.406993][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.416499][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.437391][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.499852][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.576242][T13844] device bridge_slave_1 entered promiscuous mode [ 624.819786][T13938] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3106'. [ 624.890899][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.980030][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.122257][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 625.231837][ T5776] bond2: (slave gretap1): Releasing active interface [ 625.397442][T13844] team0: Port device team_slave_0 added [ 625.426965][T13844] team0: Port device team_slave_1 added [ 625.495468][T13961] netlink: 'syz.4.3113': attribute type 72 has an invalid length. [ 625.803007][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.810208][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.906414][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.013632][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.041052][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.176863][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.365879][T13986] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3119'. [ 626.504776][ T5776] device hsr_slave_0 left promiscuous mode [ 626.554147][ T5776] device hsr_slave_1 left promiscuous mode [ 626.603955][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.611517][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.671598][ T5776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.689672][ T5776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.721052][ T5776] device bridge_slave_1 left promiscuous mode [ 626.750547][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.797155][ T5776] device bridge_slave_0 left promiscuous mode [ 626.810537][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.980783][ T5776] device veth1_macvtap left promiscuous mode [ 627.007703][ T5776] device veth0_macvtap left promiscuous mode [ 627.033527][ T5776] device veth1_vlan left promiscuous mode [ 627.050987][ T5776] device veth0_vlan left promiscuous mode [ 627.202350][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 627.634178][ T5776] bond0 (unregistering): (slave veth3): Releasing active interface [ 627.671032][ T5776] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 627.685634][ T5776] bond0 (unregistering): Released all slaves [ 627.710368][ T5776] bond5 (unregistering): Released all slaves [ 627.935858][ T5776] bond4 (unregistering): Released all slaves [ 628.046510][ T5776] bond3 (unregistering): Released all slaves [ 628.059127][ T5776] bond2 (unregistering): Released all slaves [ 628.070118][ T5776] bond1 (unregistering): Released all slaves [ 628.524067][ T5776] team0 (unregistering): Port device team_slave_1 removed [ 628.568046][ T5776] team0 (unregistering): Port device team_slave_0 removed [ 629.267245][T13844] device hsr_slave_0 entered promiscuous mode [ 629.322578][T13844] device hsr_slave_1 entered promiscuous mode [ 629.340321][T13844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.362322][T13844] Cannot create hsr debugfs directory [ 629.484024][T14032] device syzkaller0 entered promiscuous mode [ 629.693257][T14035] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.3126'. [ 629.716360][T14037] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 629.759564][T14037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.784257][T14040] device dummy0 left promiscuous mode [ 629.856636][T14040] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 629.970103][T14043] netlink: 'syz.1.3127': attribute type 10 has an invalid length. [ 630.022517][T14043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3127'. [ 630.051176][T14043] device dummy0 entered promiscuous mode [ 630.078833][T14043] bond0: (slave dummy0): Releasing backup interface [ 630.502498][T14060] netlink: 'syz.4.3133': attribute type 1 has an invalid length. [ 630.992029][T14070] device syzkaller0 entered promiscuous mode [ 631.309650][T13844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.440375][T13844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.469738][T13844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.545653][T14089] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3140'. [ 631.837306][T14072] bond0 (unregistering): Released all slaves [ 631.850575][T13844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.171943][T13844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.225609][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.265536][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.304713][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.435006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.465479][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.492030][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.499247][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.556298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.589724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.627147][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.634413][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.670845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.697111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.727701][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.748658][T14123] device syzkaller0 entered promiscuous mode [ 632.778434][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.817573][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.863399][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.029666][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.040218][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.065491][T13844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 633.123714][T13844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.193083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.222886][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.259190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 633.303028][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 633.332992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.760993][T14150] netlink: 'syz.0.3160': attribute type 1 has an invalid length. [ 633.896442][T14150] device macvlan2 entered promiscuous mode [ 633.904655][T14150] device bond0 entered promiscuous mode [ 633.910693][T14150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 633.993239][T14150] device bond0 left promiscuous mode [ 634.173913][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.181734][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.227787][T14140] bond0 (unregistering): (slave veth3): Releasing active interface [ 634.274772][T14140] bond0 (unregistering): Released all slaves [ 634.344503][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.418463][T14169] device syzkaller0 entered promiscuous mode [ 634.470327][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.494142][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.686530][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.738174][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.781538][T13844] device veth0_vlan entered promiscuous mode [ 634.801559][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.834627][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.868855][T13844] device veth1_vlan entered promiscuous mode [ 634.953642][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3168'. [ 635.037554][T14184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.131968][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.140997][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 635.181319][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.232534][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 635.304166][T14184] device dummy0 left promiscuous mode [ 635.327370][T14184] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 635.370608][T14191] netlink: 'syz.6.3168': attribute type 10 has an invalid length. [ 635.382323][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3168'. [ 635.391701][T14191] device dummy0 entered promiscuous mode [ 635.413090][T14191] bond0: (slave dummy0): Releasing backup interface [ 635.447179][T13844] device veth0_macvtap entered promiscuous mode [ 635.472483][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.516913][T13844] device veth1_macvtap entered promiscuous mode [ 635.608849][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.670038][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.720307][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.746604][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.770554][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.796600][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.815758][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.840026][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.862031][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.896608][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.939992][T13844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.996224][T14212] netlink: 'syz.6.3177': attribute type 1 has an invalid length. [ 636.247807][T14216] bond9: (slave veth7): Enslaving as an active interface with a down link [ 636.275040][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 636.296941][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.358206][T14221] bond8: (slave veth0_to_bond): Releasing active interface [ 636.379571][T14221] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 636.403056][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.426291][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.439229][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.463478][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.486293][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.497391][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.507763][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.519409][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.531608][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.546530][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.558513][T13844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.575567][T14206] device macvlan2 entered promiscuous mode [ 636.593971][T14206] device bond9 entered promiscuous mode [ 636.600235][T14206] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.616096][T14206] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 636.642699][T14206] device bond9 left promiscuous mode [ 636.686847][T14220] device syzkaller0 entered promiscuous mode [ 636.799334][T14210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.829638][T14210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.884114][T14210] bond0 (unregistering): Released all slaves [ 636.914076][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 636.934083][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.026910][T13844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.055818][T13844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.086523][T13844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.106992][T13844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.388002][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.416476][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.506255][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 637.516265][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 637.544732][T14255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.586891][T14256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3186'. [ 637.599215][T14259] device dummy0 left promiscuous mode [ 637.609074][ T5490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.639901][T14255] device dummy0 left promiscuous mode [ 637.645610][ T5490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.734937][T14255] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 637.751442][T14260] netlink: 'syz.4.3187': attribute type 10 has an invalid length. [ 637.761058][T14260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3187'. [ 637.779642][T14260] device dummy0 entered promiscuous mode [ 637.790029][T14260] bond0: (slave dummy0): Releasing backup interface [ 637.821728][T14256] netlink: 'syz.6.3186': attribute type 10 has an invalid length. [ 637.833291][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3186'. [ 637.844785][T14256] device dummy0 entered promiscuous mode [ 637.945811][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.421730][T14280] device syzkaller0 entered promiscuous mode [ 638.884929][T14296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.928314][T14296] device dummy0 left promiscuous mode [ 639.020256][T14296] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 639.048875][T14301] netlink: 'syz.0.3201': attribute type 10 has an invalid length. [ 639.067281][T14301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3201'. [ 639.130699][T14301] device dummy0 entered promiscuous mode [ 639.144279][T14301] bond1: (slave dummy0): Releasing backup interface [ 639.236208][T14307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'. [ 639.267328][T14311] device dummy0 left promiscuous mode [ 639.301128][T14312] netlink: 'syz.4.3202': attribute type 10 has an invalid length. [ 639.319606][T14312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3202'. [ 639.353239][T14312] device dummy0 entered promiscuous mode [ 639.575094][T14323] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3207'. [ 640.602386][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 640.633884][T14353] loop0: detected capacity change from 0 to 256 [ 640.668838][T14351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 642.267608][T14351] device dummy0 left promiscuous mode [ 642.314067][T14356] netlink: 'syz.4.3220': attribute type 10 has an invalid length. [ 642.520843][T14356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3220'. [ 642.665712][T14356] device dummy0 entered promiscuous mode [ 643.274920][ T4381] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.640307][T14365] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3222'. [ 643.757745][T14369] device syzkaller0 entered promiscuous mode [ 644.135377][T14383] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3229'. [ 644.504242][T14393] device syzkaller0 entered promiscuous mode [ 644.562822][T14383] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3229'. [ 644.894594][T14375] bond0 (unregistering): Released all slaves [ 645.332648][T14417] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3239'. [ 645.352763][T14416] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 645.456172][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3236'. [ 645.487783][T14420] loop2: detected capacity change from 0 to 256 [ 645.816919][T14416] device dummy0 left promiscuous mode [ 646.060558][T14421] netlink: 'syz.4.3237': attribute type 10 has an invalid length. [ 646.167510][T14421] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3237'. [ 646.272487][T14421] device dummy0 entered promiscuous mode [ 646.660169][T14430] device syzkaller0 entered promiscuous mode [ 646.883975][T14434] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 647.114095][T14433] bond1: (slave veth3): Enslaving as an active interface with a down link [ 647.202540][T14434] device macvlan2 entered promiscuous mode [ 647.258386][T14434] device bond1 entered promiscuous mode [ 647.286809][T14434] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 647.388831][T14434] device bond1 left promiscuous mode [ 647.749684][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3250'. [ 647.852981][T14454] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3252'. [ 647.876431][T14462] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 647.899424][T14462] device dummy0 left promiscuous mode [ 647.960164][T14462] netlink: 'syz.4.3253': attribute type 10 has an invalid length. [ 647.982744][T14462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3253'. [ 648.023743][T14462] device dummy0 entered promiscuous mode [ 648.120698][T14454] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3252'. [ 648.319375][T14472] device syzkaller0 entered promiscuous mode [ 648.513297][T14454] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3252'. [ 649.013674][T14493] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3265'. [ 649.733234][T14511] device syzkaller0 entered promiscuous mode [ 649.857180][T14515] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 650.072999][T14513] bond0: (slave veth3): Enslaving as an active interface with a down link [ 650.262693][T14529] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3279'. [ 651.057369][T14524] bond0 (unregistering): Released all slaves [ 651.330026][T14554] xt_hashlimit: overflow, try lower: 0/0 [ 651.358455][T14553] device syzkaller0 entered promiscuous mode [ 651.673850][T14566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3293'. [ 652.095376][T14570] 8021q: adding VLAN 0 to HW filter on device bond10 [ 652.175991][T14575] device dummy0 left promiscuous mode [ 652.291530][T14575] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 652.300623][T14580] netlink: 'syz.6.3295': attribute type 10 has an invalid length. [ 652.349254][T14580] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3295'. [ 652.372261][T14580] device dummy0 entered promiscuous mode [ 652.399761][T14580] bond10: (slave dummy0): Releasing backup interface [ 652.643436][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 652.733199][T14592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.744974][T14596] device dummy0 left promiscuous mode [ 652.755980][T14596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 652.766550][T14600] netlink: 'syz.1.3301': attribute type 10 has an invalid length. [ 652.820549][T14600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3301'. [ 652.850561][T14600] device dummy0 entered promiscuous mode [ 652.871861][T14600] bond0: (slave dummy0): Releasing backup interface [ 652.947891][T14601] netlink: 'syz.4.3303': attribute type 1 has an invalid length. [ 652.996859][T14606] bond0: (slave veth5): Enslaving as an active interface with a down link [ 653.144274][T14598] device macvlan2 entered promiscuous mode [ 653.151180][T14598] device bond0 entered promiscuous mode [ 653.166980][T14598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 653.251833][T14598] device bond0 left promiscuous mode [ 654.176755][T14614] bond0 (unregistering): Released all slaves [ 654.502431][T14641] 8021q: adding VLAN 0 to HW filter on device bond11 [ 654.513595][T14647] device dummy0 left promiscuous mode [ 654.542717][T14647] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 654.572634][T14641] netlink: 'syz.6.3314': attribute type 10 has an invalid length. [ 654.628613][T14641] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3314'. [ 654.647346][T14641] device dummy0 entered promiscuous mode [ 654.657095][T14641] bond11: (slave dummy0): Releasing backup interface [ 654.701241][T14637] device syzkaller0 entered promiscuous mode [ 655.226728][T14668] netlink: 'syz.4.3322': attribute type 1 has an invalid length. [ 655.579214][T14675] bond2: (slave veth7): Enslaving as an active interface with a down link [ 655.706383][T14687] device macvlan2 entered promiscuous mode [ 655.756246][T14687] device bond2 entered promiscuous mode [ 655.781406][T14687] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 655.825563][T14687] device bond2 left promiscuous mode [ 656.493193][T14702] device syzkaller0 entered promiscuous mode [ 656.617509][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3332'. [ 656.671220][T14707] device dummy0 left promiscuous mode [ 656.718420][T14707] netlink: 'syz.4.3332': attribute type 10 has an invalid length. [ 656.772432][T14707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3332'. [ 656.792601][T14707] device dummy0 entered promiscuous mode [ 657.849321][T14751] device syzkaller0 entered promiscuous mode [ 658.340583][T14768] netlink: 'syz.4.3352': attribute type 1 has an invalid length. [ 658.471796][T14768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.683175][T14778] device dummy0 left promiscuous mode [ 658.793738][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 658.826130][T14782] loop1: detected capacity change from 0 to 256 [ 658.932692][T14778] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 659.426684][T14768] netlink: 'syz.4.3352': attribute type 10 has an invalid length. [ 659.511083][T14768] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3352'. [ 659.558506][T14768] device dummy0 entered promiscuous mode [ 659.616281][T14768] bond3: (slave dummy0): Releasing backup interface [ 660.120478][T14791] device syzkaller0 entered promiscuous mode [ 661.255730][T14819] device syzkaller0 entered promiscuous mode [ 661.655329][T14831] device syzkaller0 entered promiscuous mode [ 661.740098][T14835] xt_hashlimit: overflow, try lower: 0/0 [ 661.949765][T14842] device dummy0 left promiscuous mode [ 662.004099][T14846] netlink: 'syz.0.3381': attribute type 10 has an invalid length. [ 662.012424][T14846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3381'. [ 662.133699][T14846] device dummy0 entered promiscuous mode [ 662.641599][T14865] device syzkaller0 entered promiscuous mode [ 662.687597][T14870] netlink: 'syz.2.3392': attribute type 1 has an invalid length. [ 662.746169][T14870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.823702][T14873] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 662.836058][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 662.868417][T14875] device syzkaller0 entered promiscuous mode [ 662.890172][T14870] netlink: 'syz.2.3392': attribute type 10 has an invalid length. [ 662.911244][T14870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3392'. [ 662.922542][T14870] device dummy0 entered promiscuous mode [ 662.940652][T14870] bond1: (slave dummy0): Releasing backup interface [ 663.407597][T14894] device dummy0 left promiscuous mode [ 663.451160][T14894] netlink: 'syz.0.3400': attribute type 10 has an invalid length. [ 663.502461][T14894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3400'. [ 663.542388][T14894] device dummy0 entered promiscuous mode [ 663.736355][T14904] device syzkaller0 entered promiscuous mode [ 663.918388][T14912] device syzkaller0 entered promiscuous mode [ 664.209618][T14917] netlink: 'syz.0.3410': attribute type 1 has an invalid length. [ 665.018935][T14917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.376533][T14942] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 665.514315][T14945] device dummy0 left promiscuous mode [ 665.520283][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3416'. [ 665.531209][T14950] netlink: 'syz.4.3418': attribute type 10 has an invalid length. [ 665.552156][T14950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3418'. [ 665.561338][T14950] device dummy0 entered promiscuous mode [ 665.611190][T14953] device macvlan2 entered promiscuous mode [ 665.635179][T14953] device bond3 entered promiscuous mode [ 665.645554][T14953] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 665.692579][T14953] device bond3 left promiscuous mode [ 665.778818][T14955] device syzkaller0 entered promiscuous mode [ 666.852429][T14973] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 666.971878][T14985] netlink: 'syz.6.3427': attribute type 1 has an invalid length. [ 667.118792][T14985] 8021q: adding VLAN 0 to HW filter on device bond12 [ 667.147785][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3424'. [ 667.160543][T14987] netlink: 'syz.6.3427': attribute type 10 has an invalid length. [ 667.181707][T14987] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3427'. [ 667.237814][T14988] device macvlan2 entered promiscuous mode [ 667.245528][T14994] xt_hashlimit: overflow, rate too high: 0 [ 667.259562][T14988] device bond2 entered promiscuous mode [ 667.288382][T14988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 667.326191][T14988] device bond2 left promiscuous mode [ 667.488078][T15000] device dummy0 left promiscuous mode [ 667.548961][T15000] netlink: 'syz.6.3433': attribute type 10 has an invalid length. [ 667.576889][T15000] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3433'. [ 667.588504][T15000] device dummy0 entered promiscuous mode [ 669.031550][T15030] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 669.116333][T15029] netlink: 'syz.2.3443': attribute type 1 has an invalid length. [ 669.250022][T15034] bond3: (slave veth3): Enslaving as an active interface with a down link [ 669.276004][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'. [ 669.300052][T15041] netlink: 'syz.0.3447': attribute type 1 has an invalid length. [ 669.346236][T15041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 669.381983][T15039] bond3: (slave veth0_to_bond): making interface the new active one [ 669.404293][T15039] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 669.418972][T15030] device macvlan2 entered promiscuous mode [ 669.427178][T15030] device bond0 entered promiscuous mode [ 669.433567][T15030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 669.450117][T15030] device bond0 left promiscuous mode [ 669.488442][T15042] netlink: 'syz.0.3447': attribute type 10 has an invalid length. [ 669.496584][T15042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3447'. [ 669.522417][T15045] device dummy0 left promiscuous mode [ 669.554157][T15046] netlink: 'syz.4.3448': attribute type 10 has an invalid length. [ 669.587357][T15046] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3448'. [ 669.612648][T15046] device dummy0 entered promiscuous mode [ 669.629623][T15029] device macvlan2 entered promiscuous mode [ 669.637049][T15029] device bond3 entered promiscuous mode [ 669.657526][T15029] device veth0_to_bond entered promiscuous mode [ 669.675623][T15029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 669.707872][T15029] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3 [ 669.740644][T15029] device bond3 left promiscuous mode [ 669.751899][T15029] device veth0_to_bond left promiscuous mode [ 670.779350][T15093] device dummy0 left promiscuous mode [ 670.943531][T15096] netlink: 'syz.6.3463': attribute type 10 has an invalid length. [ 670.951439][T15096] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3463'. [ 670.970324][T15094] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3464'. [ 670.980949][T15096] device dummy0 entered promiscuous mode [ 670.996329][T15099] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 671.139882][T15099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.755638][T15128] device syzkaller0 entered promiscuous mode [ 672.037048][T15135] device dummy0 left promiscuous mode [ 672.060850][T15134] netlink: 'syz.6.3478': attribute type 10 has an invalid length. [ 672.069919][T15134] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3478'. [ 672.092361][T15134] device dummy0 entered promiscuous mode [ 672.278376][T15143] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3481'. [ 673.235128][T15179] device syzkaller0 entered promiscuous mode [ 673.418628][T15184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3493'. [ 673.432709][T15189] device dummy0 left promiscuous mode [ 673.439179][T15190] netlink: 'syz.1.3493': attribute type 10 has an invalid length. [ 673.508043][T15190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3493'. [ 673.530190][T15190] device dummy0 entered promiscuous mode [ 673.538743][T15188] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 673.584265][T15188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.877275][T15204] device syzkaller0 entered promiscuous mode [ 674.343007][T15225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3509'. [ 674.383771][T15225] device dummy0 left promiscuous mode [ 674.395783][T15225] netlink: 'syz.2.3509': attribute type 10 has an invalid length. [ 674.420956][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3509'. [ 674.512813][T15225] device dummy0 entered promiscuous mode [ 674.650673][T15236] device syzkaller0 entered promiscuous mode [ 674.852719][T15243] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 674.953296][T15243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 675.290455][T15255] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 675.411548][T15259] device syzkaller0 entered promiscuous mode [ 675.479990][T15260] bond2: (slave veth3): Enslaving as an active interface with a down link [ 675.531156][T15266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 675.576845][T15255] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 676.451674][T15266] device dummy0 left promiscuous mode [ 676.486291][T15266] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 676.509437][T15271] netlink: 'syz.0.3522': attribute type 10 has an invalid length. [ 676.537070][T15271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3522'. [ 676.546902][T15271] device dummy0 entered promiscuous mode [ 676.569507][T15271] bond5: (slave dummy0): Releasing backup interface [ 676.601746][T15255] device macvlan2 entered promiscuous mode [ 676.638306][T15255] device bond2 entered promiscuous mode [ 676.651143][T15255] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 676.687504][T15255] device bond2 left promiscuous mode [ 676.746862][T15274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3523'. [ 676.759899][T15277] device dummy0 left promiscuous mode [ 676.780186][T15280] netlink: 'syz.4.3523': attribute type 10 has an invalid length. [ 676.812607][T15280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3523'. [ 676.862568][T15280] device dummy0 entered promiscuous mode [ 676.982816][T15284] device syzkaller0 entered promiscuous mode [ 677.682173][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 677.756183][T15312] device dummy0 left promiscuous mode [ 678.507832][T15315] 8021q: adding VLAN 0 to HW filter on device bond13 [ 678.529123][T15318] device dummy0 left promiscuous mode [ 678.595156][T15318] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 678.606133][T15312] netlink: 'syz.1.3535': attribute type 10 has an invalid length. [ 678.614499][T15312] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3535'. [ 678.623896][T15312] device dummy0 entered promiscuous mode [ 678.734882][T15321] netlink: 'syz.6.3536': attribute type 10 has an invalid length. [ 678.772736][T15321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3536'. [ 678.781817][T15321] device dummy0 entered promiscuous mode [ 678.837498][T15321] bond13: (slave dummy0): Releasing backup interface [ 679.172684][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3543'. [ 679.216994][T15337] device dummy0 left promiscuous mode [ 679.243780][T15341] device syzkaller0 entered promiscuous mode [ 679.262466][T15337] netlink: 'syz.2.3543': attribute type 10 has an invalid length. [ 679.284318][T15337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3543'. [ 679.311466][T15337] device dummy0 entered promiscuous mode [ 679.815413][T15355] device dummy0 left promiscuous mode [ 680.004682][T15361] netlink: 'syz.6.3551': attribute type 10 has an invalid length. [ 680.032320][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3551'. [ 680.135123][T15361] device dummy0 entered promiscuous mode [ 680.167715][T15363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3553'. [ 680.183510][T15363] loop1: detected capacity change from 0 to 256 [ 681.004185][T15376] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3560'. [ 681.099121][T15376] device dummy0 left promiscuous mode [ 681.148999][T15380] netlink: 'syz.4.3560': attribute type 10 has an invalid length. [ 681.194371][T15380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3560'. [ 681.262332][T15380] device dummy0 entered promiscuous mode [ 681.331524][T15384] device syzkaller0 entered promiscuous mode [ 682.795563][T15382] bond0 (unregistering): Released all slaves [ 683.468356][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'. [ 683.536723][T15431] device dummy0 left promiscuous mode [ 683.563530][T15431] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 683.571410][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3580'. [ 683.590412][T15431] device dummy0 entered promiscuous mode [ 685.400038][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3598'. [ 685.443044][T15477] device dummy0 left promiscuous mode [ 685.471389][T15477] netlink: 'syz.4.3598': attribute type 10 has an invalid length. [ 685.490477][T15477] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 685.500432][T15477] device dummy0 entered promiscuous mode [ 685.895186][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3601'. [ 685.926093][T15488] loop1: detected capacity change from 0 to 256 [ 686.033035][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.039410][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.519914][T15504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3608'. [ 689.578868][T15512] device dummy0 left promiscuous mode [ 689.649030][T15512] netlink: 'syz.2.3608': attribute type 10 has an invalid length. [ 689.682501][T15512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3608'. [ 689.707043][T15512] device dummy0 entered promiscuous mode [ 690.158543][T15532] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3618'. [ 690.278190][T15537] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.3616'. [ 691.319381][T15544] device dummy0 left promiscuous mode [ 691.358980][T15547] netlink: 'syz.4.3621': attribute type 10 has an invalid length. [ 691.378864][T15547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3621'. [ 691.432368][T15547] device dummy0 entered promiscuous mode [ 691.606109][T15552] netlink: 'syz.2.3625': attribute type 1 has an invalid length. [ 691.695723][T15552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 691.741607][T15556] device dummy0 left promiscuous mode [ 691.781233][T15559] netlink: 'syz.2.3625': attribute type 10 has an invalid length. [ 691.809033][T15562] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.3629'. [ 691.831178][T15559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3625'. [ 691.860500][T15559] device dummy0 entered promiscuous mode [ 691.928357][T15566] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.3630'. [ 693.042386][ T4293] Bluetooth: hci1: command 0x0406 tx timeout [ 693.317571][T15596] device syzkaller0 entered promiscuous mode [ 693.328537][T15599] device dummy0 left promiscuous mode [ 693.383474][T15601] netlink: 'syz.2.3639': attribute type 10 has an invalid length. [ 693.402344][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3639'. [ 693.454387][T15601] device dummy0 entered promiscuous mode [ 693.595678][T15604] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3642'. [ 693.803462][T15610] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.3645'. [ 694.065608][T15617] netlink: 'syz.4.3648': attribute type 1 has an invalid length. [ 694.843580][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3647'. [ 694.874767][T15625] loop6: detected capacity change from 0 to 256 [ 697.279174][T15617] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 697.862673][T15640] device dummy0 left promiscuous mode [ 697.891868][T15640] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 697.910287][T15640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3655'. [ 697.920118][T15640] device dummy0 entered promiscuous mode [ 698.414918][T15657] device syzkaller0 entered promiscuous mode [ 698.590245][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 698.610315][T15663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3664'. [ 698.632907][T15664] device dummy0 left promiscuous mode [ 698.645648][ T4293] block nbd2: Receive control failed (result -1) [ 698.656606][T15663] netlink: 'syz.6.3664': attribute type 10 has an invalid length. [ 698.712438][T15663] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3664'. [ 698.731965][T15663] device dummy0 entered promiscuous mode [ 699.104515][T15646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.880926][T15646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.933869][T15646] bond0 (unregistering): Released all slaves [ 700.588172][T15700] device syzkaller0 entered promiscuous mode [ 700.875952][T15712] netlink: 'syz.1.3678': attribute type 1 has an invalid length. [ 700.945147][T15712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 700.962196][T15714] netlink: 'syz.1.3678': attribute type 10 has an invalid length. [ 700.970223][T15714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3678'. [ 702.239852][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 702.313668][ T4293] block nbd3: Receive control failed (result -1) [ 702.527576][T15741] device syzkaller0 entered promiscuous mode [ 702.993869][T15754] netlink: 'syz.2.3694': attribute type 1 has an invalid length. [ 703.113548][T15754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.158004][T15757] netlink: 'syz.2.3694': attribute type 10 has an invalid length. [ 703.242328][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3694'. [ 704.763951][T15782] device syzkaller0 entered promiscuous mode [ 705.209400][T15800] netlink: 'syz.2.3710': attribute type 1 has an invalid length. [ 705.301462][T15800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 705.334153][T15804] netlink: 'syz.2.3710': attribute type 10 has an invalid length. [ 705.350519][T15804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3710'. [ 706.751306][T15825] device syzkaller0 entered promiscuous mode [ 707.331903][T15851] netlink: 'syz.0.3727': attribute type 1 has an invalid length. [ 708.221267][T15851] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.263249][T15855] netlink: 'syz.0.3727': attribute type 10 has an invalid length. [ 708.289741][T15855] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3727'. [ 708.594363][T15874] device syzkaller0 entered promiscuous mode [ 708.721370][T15882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 708.747392][ T4293] block nbd4: Receive control failed (result -1) [ 708.768712][T15878] device dummy0 left promiscuous mode [ 708.827606][T15880] netlink: 'syz.0.3736': attribute type 10 has an invalid length. [ 708.862449][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3736'. [ 708.892017][T15880] device dummy0 entered promiscuous mode [ 709.519010][T15908] netlink: 'syz.6.3746': attribute type 1 has an invalid length. [ 709.974999][T15908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.157490][T15911] device dummy0 left promiscuous mode [ 710.367132][T15914] netlink: 'syz.6.3746': attribute type 10 has an invalid length. [ 710.400979][T15914] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3746'. [ 710.468391][T15914] device dummy0 entered promiscuous mode [ 710.699430][T15920] device syzkaller0 entered promiscuous mode [ 711.101853][T15939] netlink: 'syz.0.3757': attribute type 1 has an invalid length. [ 711.161575][T15939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 711.203603][T15944] device dummy0 left promiscuous mode [ 711.321113][T15944] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 711.380733][T15939] netlink: 'syz.0.3757': attribute type 10 has an invalid length. [ 711.574270][T15939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3757'. [ 711.659403][T15939] device dummy0 entered promiscuous mode [ 712.120215][T15939] bond7: (slave dummy0): Releasing backup interface [ 712.215144][T15955] device dummy0 left promiscuous mode [ 712.333689][T15954] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 712.407900][T15954] 8021q: adding VLAN 0 to HW filter on device bond6 [ 712.416486][T15956] netlink: 'syz.4.3761': attribute type 10 has an invalid length. [ 712.426152][T15956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3761'. [ 712.437790][T15956] device dummy0 entered promiscuous mode [ 712.446438][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3762'. [ 712.487349][T15964] device dummy0 left promiscuous mode [ 712.530450][T15958] netlink: 'syz.2.3762': attribute type 10 has an invalid length. [ 712.552361][T15958] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3762'. [ 712.596631][T15958] device dummy0 entered promiscuous mode [ 712.923070][T15941] bond0 (unregistering): Released all slaves [ 713.584139][T15997] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 714.474805][T15997] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.517215][T16003] netlink: 'syz.2.3775': attribute type 10 has an invalid length. [ 714.532210][T16003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3775'. [ 714.555409][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3778'. [ 714.617086][T16016] device dummy0 left promiscuous mode [ 714.712212][T16018] netlink: 'syz.4.3778': attribute type 10 has an invalid length. [ 714.752478][T16018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3778'. [ 714.818188][T16018] device dummy0 entered promiscuous mode [ 715.229998][T16036] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 715.333565][T16036] 8021q: adding VLAN 0 to HW filter on device bond7 [ 715.357585][T16041] device dummy0 left promiscuous mode [ 715.444033][T16041] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 715.531311][T16050] netlink: 'syz.0.3790': attribute type 10 has an invalid length. [ 715.604237][T16050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3790'. [ 715.669793][T16046] netlink: 'syz.0.3790': attribute type 1 has an invalid length. [ 716.407459][T16046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 716.465292][ T5490] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 716.537243][T16036] netlink: 'syz.4.3783': attribute type 10 has an invalid length. [ 716.552337][T16036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3783'. [ 716.599214][T16036] device dummy0 entered promiscuous mode [ 716.631414][T16036] bond7: (slave dummy0): Releasing backup interface [ 716.957810][T16075] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3795'. [ 717.019762][T16075] device dummy0 left promiscuous mode [ 717.092213][T16083] netlink: 'syz.1.3795': attribute type 10 has an invalid length. [ 717.101184][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3795'. [ 717.120758][T16083] device dummy0 entered promiscuous mode [ 717.574160][T16098] netlink: 'syz.2.3804': attribute type 1 has an invalid length. [ 717.775909][T16098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 718.042597][T16101] netlink: 'syz.2.3804': attribute type 10 has an invalid length. [ 718.462568][T16101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3804'. [ 718.642834][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 718.643251][T16105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 718.702306][T16108] device dummy0 left promiscuous mode [ 718.723165][T16108] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 718.738418][T16110] validate_nla: 1 callbacks suppressed [ 718.738509][T16110] netlink: 'syz.1.3806': attribute type 10 has an invalid length. [ 718.754141][T16110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3806'. [ 718.764234][T16110] device dummy0 entered promiscuous mode [ 718.782739][T16110] bond4: (slave dummy0): Releasing backup interface [ 719.416375][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3811'. [ 719.452864][T16145] loop0: detected capacity change from 0 to 256 [ 722.698491][T16179] netlink: 'syz.0.3824': attribute type 1 has an invalid length. [ 722.811370][T16183] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.3828'. [ 722.826213][T16179] 8021q: adding VLAN 0 to HW filter on device bond9 [ 722.852904][T16181] device dummy0 left promiscuous mode [ 722.985727][T16185] netlink: 'syz.0.3824': attribute type 10 has an invalid length. [ 723.014230][T16185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3824'. [ 723.039250][T16185] device dummy0 entered promiscuous mode [ 723.432990][T16198] netlink: 'syz.0.3831': attribute type 1 has an invalid length. [ 723.499451][T16198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 724.492651][T16213] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 724.609290][T16213] device syzkaller0 entered promiscuous mode [ 725.062040][T16228] netlink: 'syz.0.3841': attribute type 1 has an invalid length. [ 725.149121][T16228] 8021q: adding VLAN 0 to HW filter on device bond11 [ 725.189330][T16232] netlink: 'syz.0.3841': attribute type 10 has an invalid length. [ 725.219628][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3841'. [ 725.481518][T16241] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 725.569483][T16241] 8021q: adding VLAN 0 to HW filter on device bond8 [ 725.589558][T16247] device dummy0 left promiscuous mode [ 725.606244][T16250] netlink: 'syz.4.3845': attribute type 10 has an invalid length. [ 725.678897][T16250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3845'. [ 725.737611][T16250] device dummy0 entered promiscuous mode [ 726.795781][T16266] device syzkaller0 entered promiscuous mode [ 727.799758][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3860'. [ 727.835156][T16294] loop2: detected capacity change from 0 to 256 [ 730.322568][ T4381] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 730.951356][T16306] netlink: 'syz.6.3863': attribute type 1 has an invalid length. [ 731.070397][T16306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.141163][T16306] netlink: 'syz.6.3863': attribute type 10 has an invalid length. [ 731.162250][T16306] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3863'. [ 731.198950][T16309] device dummy0 left promiscuous mode [ 731.327802][T16316] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3865'. [ 731.564543][T16323] device syzkaller0 entered promiscuous mode [ 732.477320][T16351] netlink: 'syz.0.3877': attribute type 1 has an invalid length. [ 732.517929][T16351] 8021q: adding VLAN 0 to HW filter on device bond12 [ 732.553416][T16351] device dummy0 left promiscuous mode [ 732.658507][T16355] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 732.686105][T16354] netlink: 'syz.1.3878': attribute type 72 has an invalid length. [ 732.690502][T16355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3877'. [ 732.703914][T16355] device dummy0 entered promiscuous mode [ 733.417535][T16335] bond0 (unregistering): Released all slaves [ 733.627606][T16383] device syzkaller0 entered promiscuous mode [ 734.350038][T16418] netlink: 'syz.0.3893': attribute type 72 has an invalid length. [ 734.413552][T16422] netlink: 'syz.1.3895': attribute type 1 has an invalid length. [ 734.490372][T16422] 8021q: adding VLAN 0 to HW filter on device bond5 [ 734.581398][T16427] device dummy0 left promiscuous mode [ 734.584918][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'. [ 734.607790][T16431] netlink: 'syz.1.3895': attribute type 10 has an invalid length. [ 734.657100][T16431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3895'. [ 734.716928][T16431] device dummy0 entered promiscuous mode [ 735.465134][T16465] netlink: 'syz.0.3908': attribute type 72 has an invalid length. [ 735.813827][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3911'. [ 735.963421][T16481] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 736.009239][T16481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 736.029830][T16481] device dummy0 left promiscuous mode [ 736.179703][T16469] bond0 (unregistering): (slave veth5): Releasing active interface [ 736.209902][T16469] bond0 (unregistering): Released all slaves [ 736.260546][T16481] netlink: 'syz.1.3915': attribute type 10 has an invalid length. [ 736.273161][T16481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3915'. [ 736.298984][T16481] device dummy0 entered promiscuous mode [ 736.801711][T16504] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3921'. [ 737.194367][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'. [ 737.704621][T16535] netlink: 'syz.6.3930': attribute type 10 has an invalid length. [ 737.741117][T16535] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3930'. [ 737.784517][T16535] device dummy0 entered promiscuous mode [ 739.054175][T16547] device syzkaller0 entered promiscuous mode [ 739.253880][T16538] bond0 (unregistering): Released all slaves [ 740.186457][T16592] device syzkaller0 entered promiscuous mode [ 741.277813][T16597] device syzkaller0 entered promiscuous mode [ 741.322671][T16604] device dummy0 left promiscuous mode [ 741.372949][T16606] netlink: 'syz.2.3953': attribute type 10 has an invalid length. [ 741.414071][T16606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3953'. [ 741.458959][T16606] device dummy0 entered promiscuous mode [ 743.266688][T16649] device syzkaller0 entered promiscuous mode [ 743.521497][T16655] device dummy0 left promiscuous mode [ 743.582396][T16655] netlink: 'syz.2.3969': attribute type 10 has an invalid length. [ 743.598130][T16655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3969'. [ 743.638694][T16655] device dummy0 entered promiscuous mode [ 743.923273][T16664] device syzkaller0 entered promiscuous mode [ 744.242684][ T4293] Bluetooth: hci2: command 0x0406 tx timeout [ 744.620013][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3978'. [ 744.658683][T16683] loop1: detected capacity change from 0 to 256 [ 747.619171][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.639132][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.045971][T16693] device dummy0 left promiscuous mode [ 748.108332][T16696] netlink: 'syz.4.3984': attribute type 10 has an invalid length. [ 748.157098][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3984'. [ 748.178639][T16696] device dummy0 entered promiscuous mode [ 748.186374][T16701] device syzkaller0 entered promiscuous mode [ 748.548787][T16717] device syzkaller0 entered promiscuous mode [ 748.934009][T16729] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 748.957281][T16726] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3992'. [ 749.028733][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.097096][T16733] device dummy0 left promiscuous mode [ 749.162154][T16729] netlink: 'syz.4.3993': attribute type 10 has an invalid length. [ 749.170156][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3993'. [ 749.223522][T16729] device dummy0 entered promiscuous mode [ 749.771526][T16742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'. [ 749.806781][T16742] loop2: detected capacity change from 0 to 256 [ 753.185347][T16754] device syzkaller0 entered promiscuous mode [ 753.298384][T16756] device dummy0 left promiscuous mode [ 753.314372][T16760] netlink: 'syz.6.4002': attribute type 1 has an invalid length. [ 753.388802][T16760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.430947][T16761] device dummy0 left promiscuous mode [ 753.458388][T16761] bond0: (slave dummy0): making interface the new active one [ 753.478243][T16761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 753.491301][T16756] netlink: 'syz.1.3999': attribute type 10 has an invalid length. [ 753.508941][T16756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3999'. [ 753.519651][T16756] device dummy0 entered promiscuous mode [ 753.534462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 753.584123][T16766] device syzkaller0 entered promiscuous mode [ 754.563550][T16802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4009'. [ 754.599192][T16802] loop2: detected capacity change from 0 to 256 [ 755.669814][T16804] device syzkaller0 entered promiscuous mode [ 755.740230][T16809] netlink: 'syz.1.4017': attribute type 1 has an invalid length. [ 756.023760][T16809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.180738][T16812] device dummy0 left promiscuous mode [ 756.262351][T16812] bond0: (slave dummy0): making interface the new active one [ 756.302475][T16812] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 756.341898][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 756.443971][T16818] device syzkaller0 entered promiscuous mode [ 756.967932][T16825] bond0: (slave dummy0): Releasing active interface [ 757.041263][T16829] netlink: 'syz.1.4021': attribute type 10 has an invalid length. [ 757.080805][T16829] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4021'. [ 757.105404][T16829] device dummy0 entered promiscuous mode [ 757.891758][T16863] netlink: 'syz.0.4032': attribute type 1 has an invalid length. [ 757.924174][T16863] 8021q: adding VLAN 0 to HW filter on device bond13 [ 757.940203][T16866] device syzkaller0 entered promiscuous mode [ 758.038410][T16863] device dummy0 left promiscuous mode [ 758.095184][T16863] bond13: (slave dummy0): making interface the new active one [ 758.123630][T16863] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 758.157166][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 758.178560][T16870] device syzkaller0 entered promiscuous mode [ 758.709132][T16888] device dummy0 left promiscuous mode [ 758.762117][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 758.797566][T16889] loop0: detected capacity change from 0 to 256 [ 759.717204][T16890] netlink: 'syz.2.4040': attribute type 10 has an invalid length. [ 759.775196][T16890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4040'. [ 759.902815][T16890] device dummy0 entered promiscuous mode [ 760.720045][T16902] bond2: (slave veth0_to_bond): Releasing active interface [ 761.087305][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4047'. [ 761.119823][T16923] loop2: detected capacity change from 0 to 256 [ 762.635543][T16928] netlink: 'syz.0.4048': attribute type 1 has an invalid length. [ 762.724645][ T4381] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 763.272317][T16928] 8021q: adding VLAN 0 to HW filter on device bond14 [ 763.961113][T16950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4054'. [ 764.632316][ T4374] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 764.785075][T16975] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 764.856863][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.882299][ T4374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.919714][ T4374] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 764.944931][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.980280][ T4374] usb 3-1: config 0 descriptor?? [ 764.988251][ T4408] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 765.192429][ T4408] usb 1-1: Using ep0 maxpacket: 16 [ 765.206241][ T4408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 765.225450][ T4408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 765.239470][ T4408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 765.260598][ T4408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 765.270459][ T4408] usb 1-1: SerialNumber: syz [ 765.295070][ T4408] usb 1-1: 0:2 : does not exist [ 765.443424][ T4374] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 765.465274][ T4374] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 765.473480][ T4374] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 765.481008][ T4374] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 765.505290][ T4374] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 765.527436][T13175] usb 1-1: USB disconnect, device number 2 [ 765.548941][ T4374] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 766.038102][ T4374] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (3), disabling calibration. [ 766.069702][ T4374] playstation 0003:054C:0DF2.0001: Invalid gyro calibration data for axis (4), disabling calibration. [ 766.110940][ T4374] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0001/input/input6 [ 766.140077][ T4374] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0001/input/input7 [ 766.178576][ T4374] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0001/input/input8 [ 766.228161][ T4374] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 766.261558][ T4374] usb 3-1: USB disconnect, device number 2 [ 766.536257][T17015] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 766.640417][T17010] fido_id[17010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 767.273722][T13175] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 767.494942][T13175] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.509780][T17038] random: crng reseeded on system resumption [ 767.517599][T13175] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.577030][T13175] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 767.594149][T13175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 767.608777][T13175] usb 3-1: SerialNumber: syz [ 767.870338][T13175] usb 3-1: 0:2 : does not exist [ 767.876260][T13175] usb 3-1: unit 5: unexpected type 0x09 [ 767.936900][T13175] usb 3-1: USB disconnect, device number 3 [ 768.199439][T17014] udevd[17014]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.761239][T17049] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.658456][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4094'. [ 770.679715][T17064] erspan0: default FDB implementation only supports local addresses [ 770.897239][T17068] overlayfs: missing 'lowerdir' [ 771.340717][T17078] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 771.670336][T17090] input: syz1 as /devices/virtual/input/input9 [ 771.682477][T13175] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 771.782305][ T4374] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 771.882161][T13175] usb 1-1: Using ep0 maxpacket: 32 [ 771.894378][T13175] usb 1-1: config 2 has an invalid interface number: 88 but max is 0 [ 771.909976][T13175] usb 1-1: config 2 has no interface number 0 [ 771.927645][T13175] usb 1-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 771.939564][T13175] usb 1-1: config 2 interface 88 has no altsetting 0 [ 771.961345][T13175] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 771.972298][T13175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 771.980343][T13175] usb 1-1: Product: syz [ 771.983917][ T4374] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.985038][T13175] usb 1-1: Manufacturer: syz [ 772.000142][ T4374] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 772.006862][T13175] usb 1-1: SerialNumber: syz [ 772.034733][T17084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 772.039615][ T4374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.064795][ T4374] usb 3-1: config 0 descriptor?? [ 772.105612][ T4374] usb 3-1: bad CDC descriptors [ 772.115678][ T4374] usb 3-1: bad CDC descriptors [ 772.260705][T17084] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 772.300530][ T4374] usb 3-1: USB disconnect, device number 4 [ 772.515711][T13175] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 772.540145][T13175] asix: probe of 1-1:2.88 failed with error -71 [ 772.593686][T13175] usb 1-1: USB disconnect, device number 3 [ 773.002405][T17115] binder: BINDER_SET_CONTEXT_MGR already set [ 773.012007][T17115] binder: 17113:17115 ioctl 4018620d 2000000004c0 returned -16 [ 773.328547][T17127] fuse: Bad value for 'fd' [ 773.818539][T17116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 773.825237][T17116] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 773.837261][T17116] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 773.846783][T17116] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 773.854158][T17116] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 773.866019][T17116] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 773.873321][T17116] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 773.879363][T17116] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 773.887899][T17116] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 773.895228][T17116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 773.901178][T17116] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 773.910175][T17116] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 773.964470][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 773.981277][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 773.990508][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 773.999842][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.009173][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 774.016844][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 774.202498][ T4408] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 774.238284][T17135] user requested TSC rate below hardware speed [ 774.256423][T17135] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 774.369699][T17117] chnl_net:caif_netlink_parms(): no params data found [ 774.392188][ T4408] usb 1-1: Using ep0 maxpacket: 16 [ 774.400308][ T4408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.413248][ T4408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 774.438877][ T4408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.448278][ T4408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.456713][ T4408] usb 1-1: Product: syz [ 774.461003][ T4408] usb 1-1: Manufacturer: syz [ 774.481296][ T4408] usb 1-1: SerialNumber: syz [ 774.597655][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.605291][T17117] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.616478][T17117] device bridge_slave_0 entered promiscuous mode [ 774.631517][T17117] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.639471][T17117] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.648655][T17117] device bridge_slave_1 entered promiscuous mode [ 774.686787][T17117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.699968][T17117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.717311][ T4408] usb 1-1: 0:2 : does not exist [ 774.737366][ T4408] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 774.771428][T17117] team0: Port device team_slave_0 added [ 774.788897][ T4408] usb 1-1: USB disconnect, device number 4 [ 774.867240][T17117] team0: Port device team_slave_1 added [ 774.964093][T17117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.979078][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.046889][T17117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.082338][T17117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.109729][T17117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.138769][ T4292] Bluetooth: hci0: command 0x0c1a tx timeout [ 775.147535][T17014] udevd[17014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.260956][T17117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.314926][T17165] futex_wake_op: syz.2.4129 tries to shift op by 144; fix this program [ 775.413631][T17117] device hsr_slave_0 entered promiscuous mode [ 775.432569][T17117] device hsr_slave_1 entered promiscuous mode [ 775.459455][T17117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.482339][T17117] Cannot create hsr debugfs directory [ 775.778086][T17117] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.864498][T17117] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.903686][T17159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 775.909819][T17159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.937884][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 775.937892][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 775.946904][T17159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.972306][T17117] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.982284][T17159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 775.988770][T17159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 775.995698][T17159] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 776.002803][T17159] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 776.131746][T17117] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.150880][T17179] capability: warning: `syz.2.4135' uses deprecated v2 capabilities in a way that may be insecure [ 776.273015][T13177] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 776.292405][T16147] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 776.378134][T17117] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 776.389554][T17117] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 776.399483][T17117] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 776.410534][T17117] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 776.452287][T13177] usb 1-1: Using ep0 maxpacket: 16 [ 776.460108][T13177] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 776.479256][T13177] usb 1-1: config 0 has no interface number 0 [ 776.496039][T13177] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 776.517591][T13177] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 776.521326][T16147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.550731][T17117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.560013][T16147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.560279][T13177] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 776.591070][T17117] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.609961][T13177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.618478][T16147] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 776.629835][T13177] usb 1-1: Product: syz [ 776.637396][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 776.638664][T13177] usb 1-1: Manufacturer: syz [ 776.651477][T16147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.652172][T13177] usb 1-1: SerialNumber: syz [ 776.664244][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 776.681692][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 776.696764][T13177] usb 1-1: config 0 descriptor?? [ 776.703103][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 776.704246][T17169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 776.712533][T16147] usb 2-1: config 0 descriptor?? [ 776.738688][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.745884][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.751494][T17169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 776.767207][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 776.783416][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 776.795278][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.802495][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.810629][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 776.837327][ T7508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 776.865438][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.895895][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 776.918788][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.936329][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 776.961984][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 776.984057][T17169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 776.991402][T17169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 777.002826][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 777.016373][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.025649][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.038459][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.048151][T11572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.064125][T17117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 777.195765][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.206201][T13177] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 777.220227][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.242255][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.252941][T13176] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 777.258024][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.268867][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.276864][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.320590][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.336829][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.347601][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.361378][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.374270][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.390509][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.427035][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.442159][ T4293] Bluetooth: hci0: command 0x0c1a tx timeout [ 777.452718][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.468195][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.472125][T13176] usb 5-1: Using ep0 maxpacket: 16 [ 777.476168][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.490537][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.498235][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.503540][T13176] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 777.506261][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.521419][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.529431][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.537214][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.544768][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.552416][T13176] usb 5-1: config 0 has no interface number 0 [ 777.558343][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.558565][T13176] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 777.575943][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.589049][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.614735][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.622651][T13176] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 777.627332][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.651390][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.654130][T13176] usb 5-1: config 0 interface 41 has no altsetting 0 [ 777.659390][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.667794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 777.681233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 777.682028][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.693652][T13176] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 777.704531][T17117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.712340][T13176] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.720395][T13176] usb 5-1: Product: syz [ 777.725398][T13176] usb 5-1: Manufacturer: syz [ 777.730426][T13176] usb 5-1: SerialNumber: syz [ 777.730704][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.745092][T13176] usb 5-1: config 0 descriptor?? [ 777.755573][T17191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 777.755706][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.770449][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.773194][T17191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 777.785340][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.802896][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.810195][T13177] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 777.810554][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.831002][T13177] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 777.837635][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.858068][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.879504][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.888711][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.892310][T13177] asix: probe of 1-1:0.34 failed with error -71 [ 777.905323][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.919074][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 777.922282][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 777.954593][T13177] usb 1-1: USB disconnect, device number 5 [ 777.962347][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.003309][ T4293] Bluetooth: hci3: command 0x041b tx timeout [ 778.004682][ T4292] Bluetooth: hci2: command 0x0c1a tx timeout [ 778.009964][ T4293] Bluetooth: hci4: command 0x0c1a tx timeout [ 778.044164][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.049804][T17191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 778.051740][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.072252][T17191] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 778.146245][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.176796][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.188674][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.201563][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.228851][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.259609][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.268667][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.283753][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.291289][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.309538][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.320118][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.331938][T13176] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 778.339633][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.349276][T13176] CoreChips: probe of 5-1:0.41 failed with error -71 [ 778.362546][T13176] usb 5-1: USB disconnect, device number 2 [ 778.382474][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.420745][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.451195][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.492326][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.499798][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.519961][T17210] support for cryptoloop has been removed. Use dm-crypt instead. [ 778.528341][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.541249][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.577772][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.592236][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.599790][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.611752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 778.629269][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.666803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 778.675209][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.713382][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.722400][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.737076][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.752809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 778.766458][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.773530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 778.781877][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.790635][T17117] device veth0_vlan entered promiscuous mode [ 778.800022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 778.804196][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.815670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 778.853840][T17117] device veth1_vlan entered promiscuous mode [ 778.872308][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.879785][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.912196][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.933964][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 778.950314][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.962375][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 778.985013][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 778.993831][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 779.010517][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.023409][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 779.040388][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.057225][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.059371][T17117] device veth0_macvtap entered promiscuous mode [ 779.071988][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.087827][T17117] device veth1_macvtap entered promiscuous mode [ 779.091167][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.118967][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.139213][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.159483][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.171073][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.173139][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.187035][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.196975][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.202012][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.209512][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.228508][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.234766][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.239405][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.257144][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.266218][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.271109][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.285489][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285544][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285567][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285590][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285612][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285633][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.285655][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.303857][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.335504][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.349107][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.349131][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.349148][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.349165][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.401670][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.415405][T13176] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 779.425657][T17117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.436407][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 779.441971][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.462261][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.472949][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 779.479620][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.488058][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 779.495731][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.499302][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 779.517065][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.518611][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.549422][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.554741][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.566751][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.566773][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.566792][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.566805][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.566822][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.601812][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.620056][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.638240][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.650776][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.661433][T17117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.670438][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.673236][T13176] usb 1-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 779.691277][T17117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.700120][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.703106][T17117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.722358][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.723013][T13176] usb 1-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.735569][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.753771][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 779.761559][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.771214][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 779.773009][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.780686][T13176] usb 1-1: config 0 interface 0 has no altsetting 0 [ 779.797190][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.804381][T17117] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.810249][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.818957][T17117] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.834197][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.839150][T13176] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 779.850647][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850877][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850903][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850925][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850947][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850969][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.850992][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851013][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851035][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851057][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851080][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851101][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851123][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851145][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851167][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851188][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851211][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.851234][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.879040][T17117] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.961642][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 779.981246][T13176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.004088][T17202] Bluetooth: hci1: command 0x0c1a tx timeout [ 780.040249][T13176] usb 1-1: config 0 descriptor?? [ 780.048945][T17225] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 780.049085][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.064732][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.072268][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.077034][T17117] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.079848][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.096101][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 780.105810][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.113599][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.122854][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.130288][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.137832][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.145472][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.154358][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.161802][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.169537][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.177052][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.184627][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.192252][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.199831][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.207310][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.215125][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.222648][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.230251][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.248900][T16147] hid-generic 0003:0458:5016.0002: unknown main item tag 0x0 [ 780.266639][T16147] hid-generic 0003:0458:5016.0002: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 780.345472][T16147] usb 2-1: USB disconnect, device number 2 [ 780.559232][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 780.573324][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 780.580441][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 780.586702][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.588345][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 780.602852][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x0 [ 780.610047][T13176] itetech 0003:258A:6A88.0003: unknown main item tag 0x5 [ 780.610080][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.617700][T13176] itetech 0003:258A:6A88.0003: item fetching failed at offset 20/40 [ 780.634002][T13176] itetech: probe of 0003:258A:6A88.0003 failed with error -22 [ 780.687210][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 780.782619][T11572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.790506][T11572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.811005][ T4339] usb 1-1: USB disconnect, device number 6 [ 780.823816][T16924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 780.904980][T17238] fido_id[17238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 781.342310][T13177] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 781.567241][T13177] usb 5-1: Using ep0 maxpacket: 32 [ 781.580326][T13177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.619085][T13177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.640431][T13177] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 781.649703][T13177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.681548][T13177] usb 5-1: config 0 descriptor?? [ 781.714241][T13177] hub 5-1:0.0: USB hub found [ 781.905794][T13177] hub 5-1:0.0: 1 port detected [ 782.087945][ T4285] Bluetooth: hci1: command 0x0401 tx timeout [ 782.110495][T17272] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4167'. [ 782.172304][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 782.529871][T13177] hub 5-1:0.0: activate --> -90 [ 782.932185][ T4325] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 782.956518][ T4339] usb 5-1: USB disconnect, device number 3 [ 782.962669][T13177] usb 5-1-port1: cannot disable (err = -71) [ 783.140919][ T4325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.178790][ T4325] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.193622][ T4325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.201773][ T4325] usb 7-1: Product: syz [ 783.210026][ T4325] usb 7-1: Manufacturer: syz [ 783.217022][ T4325] usb 7-1: SerialNumber: syz [ 784.242189][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 784.280078][ T4325] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 784.295087][ T4325] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 784.320112][ T4325] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 784.488049][ T4325] cdc_ncm 7-1:1.0: setting tx_max = 48 [ 785.411143][T17309] raw_sendmsg: syz.4.4179 forgot to set AF_INET. Fix it! [ 785.632548][ T4325] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 785.717381][ T4325] usb 7-1: USB disconnect, device number 2 [ 785.754226][ T4325] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 786.322483][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 786.328894][ T4374] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 786.524961][ T4374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.555415][ T4374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.605068][ T4374] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 786.646581][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.668193][ T4374] usb 5-1: config 0 descriptor?? [ 786.848561][T17348] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4192'. [ 786.972835][ T4408] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 786.980526][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 787.094685][ T4374] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 787.109091][ T4374] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 787.124743][T17348] bond0: (slave bond_slave_1): Releasing backup interface [ 787.128629][ T4374] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 787.153837][ T4374] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 787.169216][ T4374] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 787.190940][ T4374] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 787.207153][ T4408] usb 3-1: Using ep0 maxpacket: 8 [ 787.214654][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.233576][ T4408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 787.251723][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.266705][ T4408] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.282127][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.302142][ T4408] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 787.316793][ T4374] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0 [ 787.345802][ T4374] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 787.356105][ T41] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.365868][ T4408] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 787.375671][ T4374] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 787.385244][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.393822][ T4408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.401942][ T4374] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 787.412665][ T41] usb 1-1: config 0 descriptor?? [ 787.428649][ T4408] usb 3-1: config 0 descriptor?? [ 787.439924][ T4374] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 787.537866][ T4374] usb 5-1: USB disconnect, device number 4 [ 787.719645][T17363] fido_id[17363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 787.858513][ T41] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 787.880089][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 787.902643][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 787.925412][ T41] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 787.939514][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 787.962176][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 787.991706][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.023570][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.031030][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.060769][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.099342][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.114980][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.152652][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.201000][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.246538][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.277429][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.325504][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.347779][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.368807][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.386497][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.405143][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.431036][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.444623][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.454350][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.461654][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.477283][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.486240][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.494112][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.501504][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.520116][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.530830][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.546711][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.565473][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.582999][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.594262][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.601447][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.618237][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.626854][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.634180][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.678002][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.686303][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.702141][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.712478][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.729783][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.745526][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.762177][ T4408] lenovo 0003:17EF:6062.0006: unknown main item tag 0x0 [ 788.783688][ T4408] lenovo 0003:17EF:6062.0006: hidraw1: USB HID v80.09 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 788.881598][ T4408] usb 3-1: USB disconnect, device number 5 [ 789.137027][T17393] WARNING! power/level is deprecated; use power/control instead [ 789.160590][T17388] fido_id[17388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 789.181882][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 789.246141][T17395] device syzkaller1 entered promiscuous mode [ 789.382881][T17401] random: crng reseeded on system resumption [ 789.481207][T11975] Bluetooth: hci5: Frame reassembly failed (-84) [ 789.565546][T17403] overlayfs: workdir and upperdir must be separate subtrees [ 790.332229][ T4374] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 790.539176][ T4374] usb 1-1: device firmware changed [ 790.547484][ T4339] usb 1-1: USB disconnect, device number 7 [ 790.722284][T13176] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 790.752242][ T4339] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 790.870858][T17432] device syzkaller0 entered promiscuous mode [ 790.914871][T13176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.942588][T13176] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.963913][T13176] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 790.973122][T13176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.988933][T13176] usb 5-1: config 0 descriptor?? [ 791.331183][T17442] overlayfs: workdir and upperdir must be separate subtrees [ 791.522255][T17202] Bluetooth: hci5: command 0x1003 tx timeout [ 791.529019][ T4285] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 791.806048][T13176] hid-led 0003:27B8:01ED.0007: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 791.851866][T13176] hid-led 0003:27B8:01ED.0007: ThingM blink(1) initialized [ 792.010821][ T4325] usb 5-1: USB disconnect, device number 5 [ 792.022148][T13177] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 792.105921][T17449] fido_id[17449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 792.224254][T13177] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 792.243660][T13177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 792.267062][T13177] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 792.290662][T13177] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 792.325698][T13177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.351370][T13177] usb 2-1: config 0 descriptor?? [ 792.357343][T17448] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 792.776742][T13177] hid-thrustmaster 0003:044F:B65D.0008: ignoring exceeding usage max [ 792.787917][T13177] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x4 [ 792.801071][T13177] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 792.926399][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.953956][ T4339] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 792.973527][ T4339] usb 1-1: can't read configurations, error -71 [ 792.979974][T13177] hid-thrustmaster 0003:044F:B65D.0008: setup data couldn't be sent [ 792.994043][ C0] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 793.008211][T13177] usb 2-1: USB disconnect, device number 3 [ 793.153826][T17462] fido_id[17462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 793.769020][T17475] 9pnet: p9_errstr2errno: server reported unknown error [ 794.714364][ T4339] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 794.912316][ T4339] usb 2-1: Using ep0 maxpacket: 32 [ 794.919814][ T4339] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 794.979974][ T4339] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 795.012278][ T4339] usb 2-1: config 0 interface 0 has no altsetting 0 [ 795.032191][ T4339] usb 2-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 795.051766][ T4339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.072793][ T4339] usb 2-1: config 0 descriptor?? [ 795.622161][ T4325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 795.696543][ T4339] usb 2-1: string descriptor 0 read error: -71 [ 795.716991][ T4339] uclogic 0003:5543:004D.0009: failed retrieving string descriptor #200: -71 [ 795.730168][T17535] tipc: Started in network mode [ 795.733887][ T4339] uclogic 0003:5543:004D.0009: failed retrieving pen parameters: -71 [ 795.756301][T17535] tipc: Node identity 2007ff, cluster identity 4711 [ 795.759671][ T4339] uclogic 0003:5543:004D.0009: failed probing pen v2 parameters: -71 [ 795.771843][ T4339] uclogic 0003:5543:004D.0009: failed probing parameters: -71 [ 795.776523][T17535] tipc: Node number set to 2099199 [ 795.790417][ T4339] uclogic: probe of 0003:5543:004D.0009 failed with error -71 [ 795.830789][ T7508] tipc: Subscription rejected, illegal request [ 795.836271][ T4339] usb 2-1: USB disconnect, device number 4 [ 795.863926][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.886069][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.932280][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.982818][ T4325] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 795.991931][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.020971][ T4325] usb 5-1: config 0 descriptor?? [ 796.292367][T16147] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 796.456033][ T4325] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 796.490253][ T4325] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 796.493328][T16147] usb 3-1: not running at top speed; connect to a high speed hub [ 796.538138][T16147] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.571390][T16147] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 796.589475][T16147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.622215][ T4374] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 796.658979][T16147] usb 3-1: Found UVC 1.00 device (046d:0825) [ 796.843849][ T4374] usb 2-1: Using ep0 maxpacket: 8 [ 796.857101][ T4374] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 796.868930][ T4374] usb 2-1: config 0 has no interface number 1 [ 796.887037][ T4374] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 796.909850][ T4374] usb 2-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 796.926274][ T4374] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 796.940446][ T4374] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC9, skipping [ 796.969794][ T4374] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 796.982527][ T4374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.990609][ T4374] usb 2-1: Product: syz [ 797.022165][ T4374] usb 2-1: Manufacturer: syz [ 797.026892][ T4374] usb 2-1: SerialNumber: syz [ 797.034078][ T4374] usb 2-1: config 0 descriptor?? [ 797.040154][T17548] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 797.072025][ T4374] snd-usb-audio: probe of 2-1:0.151 failed with error -2 [ 797.121894][ T4374] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 797.189616][T17014] udevd[17014]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.284579][T13176] usb 2-1: USB disconnect, device number 5 [ 797.469165][T16147] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 797.490569][T16147] uvcvideo 3-1:1.1: Failed to initialize the device (-5). [ 797.517127][T16147] usb 3-1: USB disconnect, device number 6 [ 797.792593][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 797.805061][T16147] usb 5-1: USB disconnect, device number 6 [ 798.466277][T17588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 798.477719][T17588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4270'. [ 798.511915][T17569] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 798.529066][T17569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 798.535903][T17569] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 798.543956][T17569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 798.560616][T17569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 798.586967][T17569] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 798.599173][T17569] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 798.875986][T17597] mmap: syz.0.4275 (17597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 798.933975][T17597] [ 798.936367][T17597] ====================================================== [ 798.943406][T17597] WARNING: possible circular locking dependency detected [ 798.950444][T17597] syzkaller #0 Not tainted [ 798.954878][T17597] ------------------------------------------------------ [ 798.961915][T17597] syz.0.4275/17597 is trying to acquire lock: [ 798.968004][T17597] ffff8880521dfa80 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 798.978872][T17597] [ 798.978872][T17597] but task is already holding lock: [ 798.986261][T17597] ffff888027504c58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 798.996386][T17597] [ 798.996386][T17597] which lock already depends on the new lock. [ 798.996386][T17597] [ 799.006816][T17597] [ 799.006816][T17597] the existing dependency chain (in reverse order) is: [ 799.015847][T17597] [ 799.015847][T17597] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 799.023441][T17597] down_read_killable+0x4c/0x340 [ 799.028938][T17597] mmap_read_lock_killable+0x1d/0x60 [ 799.034783][T17597] lock_mm_and_find_vma+0x2b1/0x2f0 [ 799.040535][T17597] do_user_addr_fault+0x2e8/0xb20 [ 799.046132][T17597] exc_page_fault+0x60/0x100 [ 799.051254][T17597] asm_exc_page_fault+0x22/0x30 [ 799.056631][T17597] fault_in_readable+0x13e/0x1f0 [ 799.062198][T17597] fault_in_iov_iter_readable+0xbf/0x2f0 [ 799.068406][T17597] generic_perform_write+0x1f1/0x5c0 [ 799.074262][T17597] __generic_file_write_iter+0x148/0x2a0 [ 799.080461][T17597] generic_file_write_iter+0xab/0x2e0 [ 799.086374][T17597] vfs_write+0x482/0x9a0 [ 799.091187][T17597] ksys_write+0x14d/0x260 [ 799.096144][T17597] do_syscall_64+0x4c/0xa0 [ 799.101089][T17597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.107515][T17597] [ 799.107515][T17597] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 799.116213][T17597] __lock_acquire+0x2d18/0x7c40 [ 799.121614][T17597] lock_acquire+0x1bb/0x4a0 [ 799.126646][T17597] down_write+0x36/0x60 [ 799.131339][T17597] process_measurement+0x3af/0x1c40 [ 799.137087][T17597] ima_file_mmap+0xe9/0x140 [ 799.142143][T17597] __se_sys_remap_file_pages+0x55a/0x7b0 [ 799.148315][T17597] do_syscall_64+0x4c/0xa0 [ 799.153268][T17597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.159697][T17597] [ 799.159697][T17597] other info that might help us debug this: [ 799.159697][T17597] [ 799.170010][T17597] Possible unsafe locking scenario: [ 799.170010][T17597] [ 799.177478][T17597] CPU0 CPU1 [ 799.182843][T17597] ---- ---- [ 799.188204][T17597] lock(&mm->mmap_lock); [ 799.192539][T17597] lock(&sb->s_type->i_mutex_key#13); [ 799.200531][T17597] lock(&mm->mmap_lock); [ 799.207421][T17597] lock(&sb->s_type->i_mutex_key#13); [ 799.212893][T17597] [ 799.212893][T17597] *** DEADLOCK *** [ 799.212893][T17597] [ 799.221126][T17597] 1 lock held by syz.0.4275/17597: [ 799.226238][T17597] #0: ffff888027504c58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 799.236699][T17597] [ 799.236699][T17597] stack backtrace: [ 799.242585][T17597] CPU: 0 PID: 17597 Comm: syz.0.4275 Not tainted syzkaller #0 [ 799.250045][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.260108][T17597] Call Trace: [ 799.263468][T17597] [ 799.266454][T17597] dump_stack_lvl+0x188/0x24e [ 799.271189][T17597] ? load_image+0x410/0x410 [ 799.275701][T17597] ? show_regs_print_info+0x12/0x12 [ 799.280912][T17597] ? print_circular_bug+0x12b/0x1a0 [ 799.286131][T17597] check_noncircular+0x296/0x330 [ 799.291079][T17597] ? look_up_lock_class+0x75/0x140 [ 799.296198][T17597] ? add_chain_block+0x9b0/0x9b0 [ 799.301143][T17597] ? lockdep_lock+0xf1/0x1f0 [ 799.305743][T17597] ? _find_first_zero_bit+0xd2/0x100 [ 799.311039][T17597] __lock_acquire+0x2d18/0x7c40 [ 799.315902][T17597] ? ima_match_policy+0x10d/0x21b0 [ 799.321022][T17597] ? __lock_acquire+0x7c40/0x7c40 [ 799.326053][T17597] ? verify_lock_unused+0x140/0x140 [ 799.331265][T17597] ? ima_match_policy+0x10d/0x21b0 [ 799.336384][T17597] ? ima_match_policy+0x211c/0x21b0 [ 799.341600][T17597] lock_acquire+0x1bb/0x4a0 [ 799.346118][T17597] ? process_measurement+0x3af/0x1c40 [ 799.351500][T17597] ? __might_sleep+0xd0/0xd0 [ 799.356149][T17597] ? read_lock_is_recursive+0x10/0x10 [ 799.361532][T17597] ? ima_get_action+0x71/0xa0 [ 799.366222][T17597] down_write+0x36/0x60 [ 799.370392][T17597] ? process_measurement+0x3af/0x1c40 [ 799.375774][T17597] process_measurement+0x3af/0x1c40 [ 799.380982][T17597] ? ima_file_mmap+0x140/0x140 [ 799.386184][T17597] ? aa_file_perm+0x112/0xf00 [ 799.390923][T17597] ? mtree_load+0x100/0xa70 [ 799.395440][T17597] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 799.401605][T17597] ima_file_mmap+0xe9/0x140 [ 799.406120][T17597] ? ima_file_free+0x3e0/0x3e0 [ 799.410892][T17597] ? common_file_perm+0x171/0x1c0 [ 799.415954][T17597] ? bpf_lsm_mmap_file+0x5/0x10 [ 799.420859][T17597] ? security_mmap_file+0x11b/0x180 [ 799.426090][T17597] __se_sys_remap_file_pages+0x55a/0x7b0 [ 799.431783][T17597] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 799.437548][T17597] ? lock_chain_count+0x20/0x20 [ 799.442437][T17597] ? lockdep_hardirqs_on+0x94/0x140 [ 799.447658][T17597] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 799.453394][T17597] do_syscall_64+0x4c/0xa0 [ 799.457829][T17597] ? clear_bhb_loop+0x60/0xb0 [ 799.462512][T17597] ? clear_bhb_loop+0x60/0xb0 [ 799.467199][T17597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.473105][T17597] RIP: 0033:0x7f500ff9e0d9 [ 799.477598][T17597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.497250][T17597] RSP: 002b:00007f5010ee2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 799.505698][T17597] RAX: ffffffffffffffda RBX: 00007f5010225fa0 RCX: 00007f500ff9e0d9 [ 799.513672][T17597] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000 [ 799.521646][T17597] RBP: 00007f5010035024 R08: 0000000004000000 R09: 0000000000000000 [ 799.529624][T17597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.537598][T17597] R13: 00007f5010226038 R14: 00007f5010225fa0 R15: 00007fffffbc9ed8 [ 799.545583][T17597] [ 799.762233][ T4285] Bluetooth: hci0: command 0x0c1a tx timeout [ 800.562500][ T4292] Bluetooth: hci3: command 0x0c1a tx timeout [ 800.563143][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 800.568654][ T4292] Bluetooth: hci4: command 0x0c1a tx timeout [ 800.575039][T17202] Bluetooth: hci1: command 0x0c1a tx timeout [ 802.652722][T17610] Bluetooth: hci3: command 0x0406 tx timeout [ 808.724561][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.730954][ T1280] ieee802154 phy1 wpan1: encryption failed: -22