last executing test programs: 13m42.628294781s ago: executing program 4 (id=49): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m42.048026424s ago: executing program 4 (id=51): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2(0x0, 0x80800) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'erspan0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x7, 0x8040, 0xb, 0x4, {{0x11, 0x4, 0x1, 0x32, 0x44, 0x67, 0x0, 0x29, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x1c, 0x23, 0x0, 0x7, [0x0, 0x1, 0x3, 0x8, 0x1, 0x2370]}, @generic={0xb3350157a4d6b2fa, 0x5, "f2abc4"}, @end, @generic={0x89, 0x2}, @ssrr={0x89, 0xb, 0xc0, [@remote, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000a00)) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', r1) 13m41.55170581s ago: executing program 4 (id=53): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2810) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) syz_open_dev$video4linux(0x0, 0x5, 0x20980) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00', 0x3, 0xfffffffffffffffd) 13m38.720036117s ago: executing program 4 (id=61): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13m36.041545561s ago: executing program 4 (id=69): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) prlimit64(r3, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r5, 0x0) setpgid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r6}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 13m35.513870925s ago: executing program 4 (id=71): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2810) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) syz_open_dev$video4linux(0x0, 0x5, 0x20980) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00', 0x3, 0xfffffffffffffffd) 13m20.41737395s ago: executing program 32 (id=71): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x2810) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) syz_open_dev$video4linux(0x0, 0x5, 0x20980) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00', 0x3, 0xfffffffffffffffd) 12m48.415945774s ago: executing program 5 (id=196): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0xa, @sliced={0x3, [0xf15d, 0x4, 0x200, 0x0, 0x4, 0xc, 0x8, 0x42, 0x6, 0xfeff, 0x9ff, 0x2, 0x1, 0x2, 0x9, 0x1, 0x1ff, 0xf20a, 0x653, 0x9, 0xa, 0xfffc, 0x9, 0x37, 0x5, 0x1, 0x2, 0x58aa, 0x3, 0x65, 0x3, 0x0, 0x4, 0x8, 0x9, 0x5f, 0x6, 0x7, 0xff, 0xdb, 0x7, 0x9a, 0x0, 0x101, 0x9, 0xf, 0x101, 0x3], 0x2}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000130001"], 0x68}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r5 = dup(r4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5, @ANYRESDEC], 0x50) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) 12m47.190944645s ago: executing program 5 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000580), 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 12m46.620266152s ago: executing program 5 (id=205): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "1f852253da9cff0e61e22d0c8d3e149f5e10295c42e7fc01731f18f71fd4402c111516c721c17d752b7261a8edc1b125a5d63549d7df3da4d8d12e7e74d0f398626a6af3d6bdafbb0cbab4d92844cff2eafae8bc82ed7291c0f4"}}, 0x0, 0x0, 0x0}, 0x0) 12m44.027099843s ago: executing program 5 (id=213): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f0002000000090505020006", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) 12m40.548302633s ago: executing program 5 (id=228): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r4, 0xf, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc7327c549849b5b690a5330", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r5}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 12m40.144583007s ago: executing program 5 (id=230): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x850003f3) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) syz_io_uring_setup(0x1714, 0x0, &(0x7f0000000100), 0x0) 12m25.05177309s ago: executing program 33 (id=230): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x850003f3) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) syz_io_uring_setup(0x1714, 0x0, &(0x7f0000000100), 0x0) 8m22.92403248s ago: executing program 1 (id=1131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="bfee05ab5ac3", @void, {@ipv6={0x86dd, @dccp_packet={0x3, 0x6, "ec820e", 0x10, 0x21, 0x0, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0xf, 0x0, 0x0, 0x5, 0x7, "03ae81", 0x85, "b925fd"}}}}}}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m22.268440535s ago: executing program 1 (id=1134): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) r2 = syz_usbip_server_init(0x0) r3 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x40}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x6000, @fd=r2, 0x8, 0xf7e0, 0xfecc, 0xa, 0x0, {0x5}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 8m20.58035662s ago: executing program 1 (id=1138): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='(I', 0x2) 8m17.352214524s ago: executing program 1 (id=1146): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x60000000, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m17.170322264s ago: executing program 1 (id=1148): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) r2 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9ca]}, 0x8) fcntl$setownex(r4, 0xf, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r5}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 8m16.833407934s ago: executing program 1 (id=1150): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x27, 0x7}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 8m1.193336976s ago: executing program 34 (id=1150): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x27, 0x7}]}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) 4m58.536512997s ago: executing program 0 (id=1568): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00', r0}, 0x10) 4m57.24809204s ago: executing program 0 (id=1570): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x7, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}], 0x1c) readv(r6, &(0x7f0000000000)=[{0x0}], 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r5, &(0x7f0000000540), 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) epoll_create1(0x80000) 4m50.117882242s ago: executing program 0 (id=1586): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 4m48.966197698s ago: executing program 0 (id=1589): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000004080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x75e7f000) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) 4m47.236140803s ago: executing program 0 (id=1592): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r3}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 4m47.027811062s ago: executing program 3 (id=1593): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0x513}, {&(0x7f0000000340)="4506a4fa9e8f87dd1d355c2ea4e6535f102328caf4a9e7fe016c3edb4ff9211e97f61b1611b7906d1a4e977b7233", 0x2e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001c40)="0349", 0x2}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) 4m45.916072556s ago: executing program 3 (id=1595): unshare(0x68040200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x6, 0xa, 0x3}) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(r5, &(0x7f0000000600)=[{0x0, 0x5f}, {&(0x7f0000000040)="8c5b72e4ba32", 0x6}], 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc']) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@empty, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0xb7, 0xffffffff, 0x5a8}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRES64=r6], 0x10) 4m45.782077998s ago: executing program 0 (id=1596): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x84000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xfffffffffffffd72, 0x1, 0x1}, 0x28) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) 4m42.583575255s ago: executing program 3 (id=1600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m41.664308469s ago: executing program 3 (id=1605): socket$netlink(0x10, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000880)="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"/361, 0x169) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000250075f2b5f5a40fb03fdf62004fbdf000"/42], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x11}) 4m40.180976343s ago: executing program 3 (id=1606): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846734b1681c4f720a964c46de1b57d7d7860bf95e9483415704678e24cbb01fc12ae3f5bbfc79b98d93a4f9935", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r3}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x14) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) 4m39.049851615s ago: executing program 3 (id=1609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 4m30.555196786s ago: executing program 35 (id=1596): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x84000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4083, 0x0, 0xfffffffffffffd72, 0x1, 0x1}, 0x28) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) 4m23.780517947s ago: executing program 36 (id=1609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) 2m16.692454682s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1m47.735206565s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1m27.132853697s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 1m10.273830049s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 54.806197635s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 24.043894605s ago: executing program 6 (id=1050): r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 11.940849253s ago: executing program 9 (id=2155): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000900)={0x18}) 10.671897503s ago: executing program 9 (id=2157): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 10.255735731s ago: executing program 9 (id=2158): mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff966, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 10.011922058s ago: executing program 8 (id=2160): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 9.34431153s ago: executing program 8 (id=2162): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 9.277434717s ago: executing program 9 (id=2164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x4c, 0x68, 0x59, 0x8, 0xbda, 0x129, 0xbe93, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x91, 0x80, 0xc2, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x55, 0x39, 0x49, 0xa}}]}}]}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x4, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, 0x0, 0x44000) 8.328361996s ago: executing program 8 (id=2165): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000040)={0x18, r1, 0xd2, 0x0, 0x0}) 7.382533361s ago: executing program 8 (id=2167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000002000040"]) 6.811726064s ago: executing program 8 (id=2169): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5.673742787s ago: executing program 8 (id=2170): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x54, 0x2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[@routing={0x0, 0x8, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x10001, 0x0, 0x201, 0xfffe, 0x2, 0x8, 0x200000000000002f, 0x200, 0x1, 0x100000001, 0xffffffff, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000f80)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) 5.500267449s ago: executing program 7 (id=2171): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, &(0x7f0000000200)) mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x23b) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="1700be8c00000000", 0x8) 4.380315444s ago: executing program 7 (id=2172): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 3.506567238s ago: executing program 2 (id=2174): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951b29064"], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 3.264057872s ago: executing program 7 (id=2175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xdp_devmap_xmit\x00'}, 0x18) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 2.371535337s ago: executing program 2 (id=2176): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001200)=ANY=[@ANYRES16], 0x0, 0x5, 0x0, 0x0, 0x0, 0x26}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140c", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 2.295902261s ago: executing program 2 (id=2177): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0x8}, {0x4, 0x2, 0x4, 0x6}}}}, 0x15) 2.102008577s ago: executing program 9 (id=2178): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0xa5, @loopback, 0x80000}, 0x1c) 1.903244695s ago: executing program 7 (id=2179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000002000040"]) 1.764261691s ago: executing program 2 (id=2180): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000004080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) 1.409696147s ago: executing program 2 (id=2181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0xc6) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 1.309060328s ago: executing program 7 (id=2182): r0 = socket$kcm(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000340)={r0}) 928.239273ms ago: executing program 9 (id=2183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 872.323238ms ago: executing program 7 (id=2184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 0s ago: executing program 2 (id=2185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) kernel console output (not intermixed with test programs): dv: batadv0: Removing interface: batadv_slave_0 [ 731.258931][T12251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.266396][T12251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.341771][T12251] veth1_macvtap: left promiscuous mode [ 731.347407][T12251] veth0_macvtap: left promiscuous mode [ 731.373572][T12251] veth1_vlan: left promiscuous mode [ 731.384095][T12251] veth0_vlan: left promiscuous mode [ 733.314174][T13565] overlayfs: failed to resolve './file1': -2 [ 734.070402][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 734.109746][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 734.129100][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 734.142316][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 734.169978][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 734.910155][T12251] team0 (unregistering): Port device team_slave_1 removed [ 734.976268][T12251] team0 (unregistering): Port device team_slave_0 removed [ 736.238762][T11000] Bluetooth: hci3: command tx timeout [ 736.721096][T13582] nfs: Unknown parameter 'fscquencer' [ 738.294710][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 738.312615][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 738.328634][T11000] Bluetooth: hci3: command tx timeout [ 738.364625][T13620] ceph: No mds server is up or the cluster is laggy [ 738.640711][T13567] chnl_net:caif_netlink_parms(): no params data found [ 739.978845][T13302] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 740.416851][T11000] Bluetooth: hci3: command tx timeout [ 740.884808][T13302] usb 3-1: config 0 has no interfaces? [ 740.907301][T13302] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 740.937896][T13302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.968600][ T5887] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 740.981606][T13567] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.989012][T13567] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.989750][T13302] usb 3-1: Product: syz [ 740.996306][T13567] bridge_slave_0: entered allmulticast mode [ 741.009997][T13567] bridge_slave_0: entered promiscuous mode [ 741.019697][T13567] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.026904][T13567] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.028584][T13302] usb 3-1: Manufacturer: syz [ 741.041204][T13567] bridge_slave_1: entered allmulticast mode [ 741.050114][T13567] bridge_slave_1: entered promiscuous mode [ 741.075807][T13302] usb 3-1: SerialNumber: syz [ 741.107446][T13567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.121670][T13567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.145313][T13302] usb 3-1: config 0 descriptor?? [ 741.175546][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 741.196368][T13567] team0: Port device team_slave_0 added [ 741.221422][T13567] team0: Port device team_slave_1 added [ 741.222361][ T5887] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 741.267521][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.277881][ T5887] usb 9-1: Product: syz [ 741.288977][ T5887] usb 9-1: Manufacturer: syz [ 741.293657][ T5887] usb 9-1: SerialNumber: syz [ 741.330098][ T5887] r8152-cfgselector 9-1: Unknown version 0x0000 [ 741.336399][ T5887] r8152-cfgselector 9-1: config 0 descriptor?? [ 741.876524][T13567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.958230][T13642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.968765][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.985936][T13642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.006134][T13567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.063950][T13567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.074719][T13567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.168961][T13567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.241294][ T5887] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 742.486199][T11000] Bluetooth: hci3: command tx timeout [ 742.934726][ T5878] usb 3-1: USB disconnect, device number 51 [ 742.974483][T13567] hsr_slave_0: entered promiscuous mode [ 743.015615][T13567] hsr_slave_1: entered promiscuous mode [ 743.213100][ T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 743.383407][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.397172][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.434503][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 743.445107][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 743.454829][ T24] usb 9-1: Manufacturer: syz [ 743.471029][ T24] usb 9-1: config 0 descriptor?? [ 743.732968][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.787293][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.121943][ T24] usb 9-1: USB disconnect, device number 3 [ 744.994514][T13684] nfs: Unknown parameter 'fscquencer' [ 747.220788][T13717] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1768'. [ 747.418207][T13717] vlan2: entered allmulticast mode [ 747.454146][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461822][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.528005][T13567] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 747.601500][T13567] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 747.643293][T13567] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 747.733071][T13567] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 747.812703][T13724] loop6: detected capacity change from 0 to 63 [ 747.875421][T13724] buffer_io_error: 1 callbacks suppressed [ 747.875441][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 747.958759][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.027903][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.138272][T13567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.187037][T13567] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.234759][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.279852][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.293059][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.300351][T12234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.335239][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.374164][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.394230][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.401518][T12234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.430247][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.438291][T13724] ldm_validate_partition_table(): Disk read failed. [ 748.445490][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.453889][T13724] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.462114][T13724] Dev loop6: unable to read RDB block 0 [ 748.468748][T13724] loop6: unable to read partition table [ 748.476187][T13724] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 748.708614][T12944] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 748.879257][T12944] usb 9-1: Using ep0 maxpacket: 16 [ 748.892967][T12944] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 748.904439][T12944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.922532][T12944] usb 9-1: Product: syz [ 748.927319][T12944] usb 9-1: Manufacturer: syz [ 748.941251][T12944] usb 9-1: SerialNumber: syz [ 748.996616][T12944] r8152-cfgselector 9-1: Unknown version 0x0000 [ 749.010235][T12944] r8152-cfgselector 9-1: config 0 descriptor?? [ 749.188975][T13567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.476005][T13736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.489146][T13736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.002024][T13755] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 750.012769][T13567] veth0_vlan: entered promiscuous mode [ 750.057485][T13567] veth1_vlan: entered promiscuous mode [ 750.089339][T13755] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.099215][T13755] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 750.117990][T13567] veth0_macvtap: entered promiscuous mode [ 750.148328][T13755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 750.162031][T13567] veth1_macvtap: entered promiscuous mode [ 750.188799][T13755] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 750.199852][T13755] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 750.220284][T13755] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 750.243957][T13567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.287403][T13567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.315539][ T24] r8152-cfgselector 9-1: USB disconnect, device number 4 [ 750.359648][T13567] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.381203][T13567] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.394715][T13567] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.414174][T13567] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.625088][T12251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.649280][T12251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.697742][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.706093][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.445155][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.585336][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.679460][T11000] Bluetooth: hci2: command 0x0c1a tx timeout [ 751.723487][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.937091][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.158637][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 752.158705][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 752.170627][T11000] Bluetooth: hci1: command 0x041b tx timeout [ 752.276020][ T49] bridge_slave_1: left allmulticast mode [ 752.282850][ T49] bridge_slave_1: left promiscuous mode [ 752.289200][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.311847][ T49] bridge_slave_0: left allmulticast mode [ 752.317619][ T49] bridge_slave_0: left promiscuous mode [ 752.324284][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.716832][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.728125][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.739814][ T49] bond0 (unregistering): Released all slaves [ 752.964321][ T49] hsr_slave_0: left promiscuous mode [ 752.971361][ T49] hsr_slave_1: left promiscuous mode [ 752.983191][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.991827][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.003455][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.011257][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.032163][ T49] veth1_macvtap: left promiscuous mode [ 753.037751][ T49] veth0_macvtap: left promiscuous mode [ 753.044054][ T49] veth1_vlan: left promiscuous mode [ 753.049832][ T49] veth0_vlan: left promiscuous mode [ 753.264548][T13781] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1781'. [ 753.564893][T13790] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 753.744797][T13794] overlayfs: failed to resolve './file0': -2 [ 754.657579][T13800] loop6: detected capacity change from 0 to 63 [ 754.707050][T13800] buffer_io_error: 13 callbacks suppressed [ 754.707080][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.779140][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.824258][T13804] nfs: Unknown parameter 'fscquencer' [ 754.833664][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.848056][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.856706][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.865938][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 754.902505][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.912879][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.921724][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.931466][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.940657][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.052240][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.113231][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.156925][T13800] ldm_validate_partition_table(): Disk read failed. [ 755.221491][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.276026][T13800] Buffer I/O error on dev loop6, logical block 0, async page read [ 755.342012][T13800] Dev loop6: unable to read RDB block 0 [ 755.372037][T13800] loop6: unable to read partition table [ 755.398859][T13800] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 755.974732][ T49] team0 (unregistering): Port device team_slave_1 removed [ 756.029377][ T49] team0 (unregistering): Port device team_slave_0 removed [ 756.300914][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1786'. [ 756.352806][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1786'. [ 756.596538][T13787] vlan2: entered allmulticast mode [ 756.872408][T13837] kvm: pic: non byte write [ 757.038979][ T51] Bluetooth: hci3: command tx timeout [ 757.470782][T13802] chnl_net:caif_netlink_parms(): no params data found [ 757.745643][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.774463][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.813767][T13802] bridge_slave_0: entered allmulticast mode [ 757.824996][T13802] bridge_slave_0: entered promiscuous mode [ 757.855034][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.871164][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.889460][T13802] bridge_slave_1: entered allmulticast mode [ 757.903154][T13802] bridge_slave_1: entered promiscuous mode [ 757.990695][T13802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.009310][ T5887] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 758.022969][T13802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.155294][T13802] team0: Port device team_slave_0 added [ 758.177081][T13802] team0: Port device team_slave_1 added [ 758.190615][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.209093][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 758.222779][ T5887] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 758.248514][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.289279][ T5887] usb 3-1: config 0 descriptor?? [ 758.295225][T13802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.310506][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.343176][T13802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.356372][T13802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.363739][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.390535][T13802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.459495][T13802] hsr_slave_0: entered promiscuous mode [ 758.466637][T13802] hsr_slave_1: entered promiscuous mode [ 758.571918][ T5887] usb 3-1: USB disconnect, device number 52 [ 758.624681][T13869] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 758.884427][T13873] loop6: detected capacity change from 0 to 63 [ 758.892676][T13873] ldm_validate_partition_table(): Disk read failed. [ 758.904182][T13873] Dev loop6: unable to read RDB block 0 [ 758.914869][T13873] loop6: unable to read partition table [ 758.924222][T13873] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 759.118970][ T51] Bluetooth: hci3: command tx timeout [ 759.331441][T13877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.340492][T13877] batadv_slave_0: entered promiscuous mode [ 759.346624][T13877] batadv_slave_0: entered allmulticast mode [ 759.422354][T13802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 759.646143][T13802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 759.877325][T13802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 760.012332][T13802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 760.166709][T13882] vlan2: entered allmulticast mode [ 760.172462][T13882] veth1: entered allmulticast mode [ 760.315752][T13895] ceph: No mds server is up or the cluster is laggy [ 760.404910][T13802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.564069][T13802] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.764189][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.771487][T12825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.199175][ T51] Bluetooth: hci3: command tx timeout [ 761.649863][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.657036][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.963063][T13802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.296464][T13920] loop6: detected capacity change from 0 to 63 [ 762.327544][T13310] buffer_io_error: 36 callbacks suppressed [ 762.327567][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.390960][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.410615][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.432783][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.473324][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.504289][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.524083][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.545153][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.566829][T13310] ldm_validate_partition_table(): Disk read failed. [ 762.576299][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.590174][T13310] Buffer I/O error on dev loop6, logical block 0, async page read [ 762.607309][T13310] Dev loop6: unable to read RDB block 0 [ 762.616395][T13310] loop6: unable to read partition table [ 762.630055][T13920] ldm_validate_partition_table(): Disk read failed. [ 762.671874][T13920] Dev loop6: unable to read RDB block 0 [ 762.678262][T13920] loop6: unable to read partition table [ 762.686946][T13920] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 763.279442][ T51] Bluetooth: hci3: command tx timeout [ 763.295088][T13802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.848743][ T5879] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 764.139329][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 764.163949][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 764.190059][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.203768][ T5879] usb 3-1: Product: syz [ 764.209354][ T5879] usb 3-1: Manufacturer: syz [ 764.218360][ T5879] usb 3-1: SerialNumber: syz [ 764.263330][ T5879] r8152-cfgselector 3-1: Unknown version 0x0000 [ 764.283665][ T5879] r8152-cfgselector 3-1: config 0 descriptor?? [ 764.710214][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.727089][T13802] veth0_vlan: entered promiscuous mode [ 764.747796][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.756477][T13802] veth1_vlan: entered promiscuous mode [ 764.817869][T13802] veth0_macvtap: entered promiscuous mode [ 764.853570][T13802] veth1_macvtap: entered promiscuous mode [ 764.899472][T13802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.906238][ T9] r8152-cfgselector 3-1: USB disconnect, device number 53 [ 764.925127][T13802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.948010][T13802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.101281][T13802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.110634][T13802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.119619][T13802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.257842][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.275820][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.479515][T12253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.487436][T12253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.144625][T13958] overlayfs: failed to resolve './file0': -2 [ 767.572434][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 767.585410][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 767.615392][T13973] ceph: No mds server is up or the cluster is laggy [ 767.630709][T12227] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.849747][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 767.859303][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 768.331874][T12227] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.653229][T12227] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.762726][T12227] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.161842][T12227] bridge_slave_1: left allmulticast mode [ 769.167580][T12227] bridge_slave_1: left promiscuous mode [ 769.196983][T12227] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.234041][T12227] bridge_slave_0: left allmulticast mode [ 769.240172][T12227] bridge_slave_0: left promiscuous mode [ 769.246460][T12227] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.702761][T11000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.713569][T11000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.724750][T11000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.735980][T11000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.754772][T11000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.956640][T12227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.987241][T12227] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.018079][T12227] bond0 (unregistering): Released all slaves [ 772.154376][T13989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.202184][T13989] batadv_slave_0: entered promiscuous mode [ 772.208232][T13989] batadv_slave_0: entered allmulticast mode [ 772.608737][ T5879] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 772.828928][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 772.853757][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 772.885604][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.895368][ T5879] usb 3-1: Product: syz [ 772.915614][ T5879] usb 3-1: Manufacturer: syz [ 772.935725][ T5879] usb 3-1: SerialNumber: syz [ 772.974517][ T5879] r8152-cfgselector 3-1: Unknown version 0x0000 [ 772.994863][ T5879] r8152-cfgselector 3-1: config 0 descriptor?? [ 773.241205][T12227] hsr_slave_0: left promiscuous mode [ 773.288676][T12227] hsr_slave_1: left promiscuous mode [ 773.379740][T12227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.404399][T12227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.431839][T14013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.472147][T12227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.480101][T14013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.502455][T12227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.830154][T12227] veth1_macvtap: left promiscuous mode [ 773.835805][T12227] veth0_macvtap: left promiscuous mode [ 773.841499][ T51] Bluetooth: hci3: command tx timeout [ 773.842039][T12227] veth1_vlan: left promiscuous mode [ 773.852876][T12227] veth0_vlan: left promiscuous mode [ 774.459384][T14028] nfs: Unknown parameter 'fscquencer' [ 775.918810][ T51] Bluetooth: hci3: command tx timeout [ 775.947601][T14060] orangefs_mount: mount request failed with -4 [ 776.159783][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 54 [ 777.998616][ T51] Bluetooth: hci3: command tx timeout [ 779.717553][T12227] team0 (unregistering): Port device team_slave_1 removed [ 779.806376][T12227] team0 (unregistering): Port device team_slave_0 removed [ 780.090871][ T51] Bluetooth: hci3: command tx timeout [ 780.539505][T14083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.567181][T14083] batadv_slave_0: entered promiscuous mode [ 780.574850][T14083] batadv_slave_0: entered allmulticast mode [ 781.201061][T14007] chnl_net:caif_netlink_parms(): no params data found [ 782.229654][T14007] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.241412][T14007] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.304544][T14007] bridge_slave_0: entered allmulticast mode [ 782.351897][T14007] bridge_slave_0: entered promiscuous mode [ 782.476198][T14007] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.544651][T14007] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.566113][T14007] bridge_slave_1: entered allmulticast mode [ 782.581635][T14007] bridge_slave_1: entered promiscuous mode [ 782.764668][T14007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.841771][T14007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.084854][T14007] team0: Port device team_slave_0 added [ 783.204717][T14007] team0: Port device team_slave_1 added [ 783.457764][T14116] loop6: detected capacity change from 0 to 63 [ 783.529888][T14116] buffer_io_error: 29 callbacks suppressed [ 783.529916][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.594506][T14007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.637065][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.660733][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.696097][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.707096][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.720099][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.734143][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.746947][T14007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.755284][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.775639][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.784915][T14116] ldm_validate_partition_table(): Disk read failed. [ 783.817712][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.817771][T14007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.880532][T14007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.890692][T14116] Buffer I/O error on dev loop6, logical block 0, async page read [ 783.964139][T14116] Dev loop6: unable to read RDB block 0 [ 783.967331][T14007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.997657][T14116] loop6: unable to read partition table [ 784.051578][T14116] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 784.301690][T14007] hsr_slave_0: entered promiscuous mode [ 784.320047][T14007] hsr_slave_1: entered promiscuous mode [ 786.831243][T14148] nfs: Unknown parameter 'fscquencer' [ 788.125977][T14007] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 788.479305][T14007] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 788.595883][T14007] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 788.641630][T14195] loop6: detected capacity change from 0 to 63 [ 788.686603][T14007] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 788.778118][T14195] buffer_io_error: 13 callbacks suppressed [ 788.778132][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 788.844911][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 788.934287][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.075001][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.282469][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.355353][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.412422][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.438649][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.490625][T14195] ldm_validate_partition_table(): Disk read failed. [ 789.509192][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.517284][T14195] Buffer I/O error on dev loop6, logical block 0, async page read [ 789.586070][T14195] Dev loop6: unable to read RDB block 0 [ 789.604772][T14007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.624098][T14195] loop6: unable to read partition table [ 789.680032][T14195] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 789.693643][T14007] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.761230][T12253] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.768479][T12253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.837807][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.845018][T12253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.895007][T14007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.564479][ T5878] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 791.695197][T14234] random: crng reseeded on system resumption [ 792.408668][ T5878] usb 10-1: Using ep0 maxpacket: 8 [ 792.545088][ T5878] usb 10-1: config 10 has an invalid interface number: 193 but max is 0 [ 792.568563][ T5878] usb 10-1: config 10 has no interface number 0 [ 792.596150][ T5878] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 792.605594][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.647717][ T5878] usb 10-1: Product: syz [ 792.658714][ T5878] usb 10-1: Manufacturer: syz [ 792.663474][ T5878] usb 10-1: SerialNumber: syz [ 793.041417][T14007] veth0_vlan: entered promiscuous mode [ 793.073559][T14007] veth1_vlan: entered promiscuous mode [ 793.357012][T14007] veth0_macvtap: entered promiscuous mode [ 793.425548][T14007] veth1_macvtap: entered promiscuous mode [ 793.655279][ T5878] rtsx_usb 10-1:10.193: probe with driver rtsx_usb failed with error -22 [ 793.664232][T14007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.493616][T14252] nfs: Unknown parameter 'fscquencer' [ 794.625210][T14007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.662261][ T5878] usb 10-1: USB disconnect, device number 3 [ 794.759279][T14007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.788893][T14007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.809432][T14007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.819717][T14007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.082867][T14282] loop6: detected capacity change from 0 to 63 [ 795.143594][T14282] buffer_io_error: 13 callbacks suppressed [ 795.143615][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.188924][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.274792][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.379115][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.508770][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.517591][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.625772][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.731749][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.849783][T14282] ldm_validate_partition_table(): Disk read failed. [ 795.940268][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 795.954865][T14282] Buffer I/O error on dev loop6, logical block 0, async page read [ 796.015680][T14282] Dev loop6: unable to read RDB block 0 [ 796.057935][T14282] loop6: unable to read partition table [ 796.105424][T14282] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 796.179660][T12227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.218815][T12227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.393168][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.440476][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.166540][T12251] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.396846][T12251] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.582750][T12251] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.980228][T12251] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.584524][T12251] bridge_slave_1: left allmulticast mode [ 798.591872][T12251] bridge_slave_1: left promiscuous mode [ 798.629461][T12251] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.640783][T12251] bridge_slave_0: left allmulticast mode [ 798.688951][T12251] bridge_slave_0: left promiscuous mode [ 798.699885][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.315129][T12251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.326822][T12251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.338026][T12251] bond0 (unregistering): Released all slaves [ 799.917749][T14327] random: crng reseeded on system resumption [ 801.151794][T14334] loop6: detected capacity change from 0 to 63 [ 801.183271][T14335] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 801.236161][T14334] buffer_io_error: 13 callbacks suppressed [ 801.236183][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.370911][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.434363][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.519155][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.558932][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.592801][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.601459][T11000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 801.604735][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.626369][T11000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 801.636231][T11000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 801.648635][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.671591][T11000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 801.680034][T11000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 801.694147][T14334] ldm_validate_partition_table(): Disk read failed. [ 801.701061][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.711756][T14334] Buffer I/O error on dev loop6, logical block 0, async page read [ 801.720280][T14334] Dev loop6: unable to read RDB block 0 [ 801.726367][T14334] loop6: unable to read partition table [ 801.738572][T14334] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 801.881602][T12251] hsr_slave_0: left promiscuous mode [ 801.914823][T12251] hsr_slave_1: left promiscuous mode [ 801.935444][T12251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.964701][T12251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.993947][T12251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.009184][T12251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.093436][T12251] veth1_macvtap: left promiscuous mode [ 802.108900][T12251] veth0_macvtap: left promiscuous mode [ 802.124971][T12251] veth1_vlan: left promiscuous mode [ 802.138946][T12251] veth0_vlan: left promiscuous mode [ 802.145562][T14345] kvm: pic: non byte write [ 802.950774][T14354] nfs: Unknown parameter 'fscquencer' [ 803.768528][T11000] Bluetooth: hci3: command tx timeout [ 804.765964][T12251] team0 (unregistering): Port device team_slave_1 removed [ 804.875365][T12251] team0 (unregistering): Port device team_slave_0 removed [ 805.531124][T14403] nfs: Unknown parameter 'fscquencer' [ 805.838713][T11000] Bluetooth: hci3: command tx timeout [ 807.918711][T11000] Bluetooth: hci3: command tx timeout [ 808.068224][T14449] loop6: detected capacity change from 0 to 63 [ 808.105170][T14449] buffer_io_error: 13 callbacks suppressed [ 808.105191][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.126842][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.155903][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.173012][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.181860][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.190279][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.198808][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.206898][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.216339][T14449] ldm_validate_partition_table(): Disk read failed. [ 808.223610][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.232087][T14449] Buffer I/O error on dev loop6, logical block 0, async page read [ 808.243063][T14449] Dev loop6: unable to read RDB block 0 [ 808.249873][T14449] loop6: unable to read partition table [ 808.256115][T14449] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 808.892069][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.898390][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.580870][T14460] nfs: Unknown parameter 'fscquencer' [ 810.000690][T11000] Bluetooth: hci3: command tx timeout [ 810.898310][T14337] chnl_net:caif_netlink_parms(): no params data found [ 811.488671][ T5879] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 811.673472][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 811.696653][T14337] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.849973][ T5879] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 812.042591][T14337] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.050054][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.071122][T14337] bridge_slave_0: entered allmulticast mode [ 812.077271][ T5879] usb 3-1: Product: syz [ 812.095115][ T5879] usb 3-1: Manufacturer: syz [ 812.102808][T14337] bridge_slave_0: entered promiscuous mode [ 812.111973][ T5879] usb 3-1: SerialNumber: syz [ 812.118707][T14337] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.138790][T14337] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.148986][T14337] bridge_slave_1: entered allmulticast mode [ 812.156441][T14337] bridge_slave_1: entered promiscuous mode [ 812.214128][ T5879] r8152-cfgselector 3-1: Unknown version 0x0000 [ 812.234043][ T5879] r8152-cfgselector 3-1: config 0 descriptor?? [ 812.452713][T14337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.570190][T14337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.620216][T14516] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1906'. [ 812.755719][T14516] vlan2: entered allmulticast mode [ 812.790847][T14525] loop6: detected capacity change from 0 to 63 [ 812.800894][T14525] ldm_validate_partition_table(): Disk read failed. [ 812.810857][T14525] Dev loop6: unable to read RDB block 0 [ 812.819086][T14525] loop6: unable to read partition table [ 812.828327][T14525] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 812.828863][T14337] team0: Port device team_slave_0 added [ 812.868078][T14337] team0: Port device team_slave_1 added [ 813.971858][T14536] nfs: Unknown parameter 'fscquencer' [ 814.222478][T14337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.232419][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.290522][T14337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.667916][T14337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.718592][T14337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.868681][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 55 [ 814.928100][T14337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.150983][T14337] hsr_slave_0: entered promiscuous mode [ 815.157928][T14337] hsr_slave_1: entered promiscuous mode [ 815.850753][T14573] overlayfs: failed to resolve './file0': -2 [ 816.623968][T14578] kvm: pic: non byte write [ 817.581701][T14337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 817.660435][T14337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 817.727025][T14337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.765173][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1921'. [ 817.777349][T14337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 817.906182][T14596] vlan2: entered allmulticast mode [ 818.209756][ T5878] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 818.427101][T14337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.467025][T14337] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.481730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.488955][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.500956][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.511311][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 818.529802][ T5878] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 818.539534][ T5878] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 818.547653][ T5878] usb 3-1: Manufacturer: syz [ 818.564004][ T5878] usb 3-1: config 0 descriptor?? [ 818.621582][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.628942][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.006959][T14613] nfs: Unknown parameter 'fscquencer' [ 819.350335][T14619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.499073][T14619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.984102][ T9] usb 3-1: USB disconnect, device number 56 [ 820.416237][T14337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.517514][T14654] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1927'. [ 821.479721][T14665] nfs: Unknown parameter 'fscquencer' [ 822.646158][T12944] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 822.678384][T14337] veth0_vlan: entered promiscuous mode [ 822.766072][T14337] veth1_vlan: entered promiscuous mode [ 822.849746][T12944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.884008][T12944] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 822.919622][T12944] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 822.929236][T12944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.940818][T12944] usb 3-1: config 0 descriptor?? [ 823.003668][T12944] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 823.018102][T12944] dvb-usb: bulk message failed: -22 (3/0) [ 823.029324][T12944] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 823.085634][T12944] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 823.117861][T12944] usb 3-1: media controller created [ 823.216264][T14337] veth0_macvtap: entered promiscuous mode [ 823.261022][T12944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.272879][T14698] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 823.308937][T14698] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 823.391594][T14698] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 823.405869][T14698] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 823.406976][T14337] veth1_macvtap: entered promiscuous mode [ 823.457963][T14698] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 823.492648][T12944] dvb-usb: bulk message failed: -22 (6/0) [ 823.499866][T14698] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 823.521614][T14337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.529967][T12944] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 823.563025][T14337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.573139][T12944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 823.607296][T12944] dvb-usb: schedule remote query interval to 150 msecs. [ 823.616104][T14337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.635529][T12944] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 823.637712][T14708] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1935'. [ 823.653960][T14337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.665250][T12944] usb 3-1: USB disconnect, device number 57 [ 823.700406][T14337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.704175][T14698] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 823.709926][T14337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.747499][T12944] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 823.790135][T14708] vlan2: entered allmulticast mode [ 824.960770][T14719] orangefs_mount: mount request failed with -4 [ 825.110580][T12243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.120207][T12234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.128071][T12234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.288748][T12243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.364398][T11000] Bluetooth: hci1: command 0x041b tx timeout [ 825.365774][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 825.442427][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 825.442441][T11000] Bluetooth: hci5: command 0x0c1a tx timeout [ 825.519124][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 825.995530][ T5878] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 826.198598][ T5878] usb 10-1: Using ep0 maxpacket: 16 [ 826.234745][ T5878] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 826.263882][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.294410][ T5878] usb 10-1: Product: syz [ 826.303837][ T5878] usb 10-1: Manufacturer: syz [ 826.358208][T12234] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.363235][ T5878] usb 10-1: SerialNumber: syz [ 826.411168][ T5878] r8152-cfgselector 10-1: Unknown version 0x0000 [ 826.417589][ T5878] r8152-cfgselector 10-1: config 0 descriptor?? [ 826.595312][T12234] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.777795][T12234] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.859756][T12234] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.064708][T12234] bridge_slave_1: left allmulticast mode [ 827.076101][T12234] bridge_slave_1: left promiscuous mode [ 827.083372][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.096297][T12234] bridge_slave_0: left allmulticast mode [ 827.103193][T12234] bridge_slave_0: left promiscuous mode [ 827.109567][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.677317][T12234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.692858][T12234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.703087][T12234] bond0 (unregistering): Released all slaves [ 827.711381][ T5887] r8152-cfgselector 10-1: USB disconnect, device number 4 [ 827.951106][T12234] hsr_slave_0: left promiscuous mode [ 827.957762][T12234] hsr_slave_1: left promiscuous mode [ 827.964043][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.971774][T12234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.984847][T12234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.992535][T12234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.013335][T12234] veth1_macvtap: left promiscuous mode [ 828.019889][T12234] veth0_macvtap: left promiscuous mode [ 828.026649][T12234] veth1_vlan: left promiscuous mode [ 828.032279][T12234] veth0_vlan: left promiscuous mode [ 829.068861][ T5878] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 829.260616][T11000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 829.271140][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.283498][T11000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 829.293494][T11000] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 829.308760][T11000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 829.320169][ T5878] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 829.329940][ T5878] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 829.339706][T11000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 829.346837][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.370204][ T5878] usb 10-1: config 0 descriptor?? [ 829.400389][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 829.407921][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 829.423634][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 829.441734][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 829.449620][ T5878] usb 10-1: media controller created [ 829.457175][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.593623][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 829.771146][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 830.003091][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39 [ 830.083246][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 830.100921][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 830.168579][ T5878] usb 10-1: USB disconnect, device number 5 [ 830.279100][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 830.379084][T12234] team0 (unregistering): Port device team_slave_1 removed [ 830.558366][T12234] team0 (unregistering): Port device team_slave_0 removed [ 831.090329][ T5879] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 831.252734][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 831.267711][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 831.295073][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 831.306295][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 831.325258][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 831.339574][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 831.360274][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 831.381427][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.438928][T11000] Bluetooth: hci3: command tx timeout [ 831.635868][ T5879] usb 3-1: usb_control_msg returned -32 [ 831.685940][ T5879] usbtmc 3-1:16.0: can't read capabilities [ 832.011712][T14793] usbtmc 3-1:16.0: control status returned 0 [ 832.091580][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 832.100066][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 832.213541][ T5879] usb 3-1: USB disconnect, device number 58 [ 832.272551][T14753] chnl_net:caif_netlink_parms(): no params data found [ 832.359359][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 832.365536][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 832.578966][T14753] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.590812][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.598284][T14753] bridge_slave_0: entered allmulticast mode [ 832.606870][T14753] bridge_slave_0: entered promiscuous mode [ 832.616354][T14753] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.769058][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.776526][T14753] bridge_slave_1: entered allmulticast mode [ 832.787248][T14753] bridge_slave_1: entered promiscuous mode [ 833.488924][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 833.495104][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 833.518959][T11000] Bluetooth: hci3: command tx timeout [ 833.768023][T14753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.808971][T14753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.855938][T14792] ceph: No mds server is up or the cluster is laggy [ 833.989735][T14753] team0: Port device team_slave_0 added [ 834.075915][T14753] team0: Port device team_slave_1 added [ 834.168683][ T5878] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 834.771462][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.784179][ T5878] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 834.801300][T14753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 834.825425][ T5878] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 834.836435][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.853777][ T5878] usb 10-1: config 0 descriptor?? [ 834.866478][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 834.884714][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.893845][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 834.989175][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 834.994503][T14753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.006065][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 835.015790][ T5878] usb 10-1: media controller created [ 835.025726][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.026945][T14753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.049536][T14833] fuse: Bad value for 'fd' [ 835.055609][T14753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.056258][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 835.086611][T14753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.099044][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 835.146475][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 835.182573][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 835.195529][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 835.210730][ T5878] usb 10-1: USB disconnect, device number 6 [ 835.268281][T14753] hsr_slave_0: entered promiscuous mode [ 835.281537][T14828] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 835.287983][T14753] hsr_slave_1: entered promiscuous mode [ 835.298232][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 835.301835][T14828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 835.366827][T14828] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 835.391871][T14828] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 835.414505][T14828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 835.428081][T14828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 835.522948][T14828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 835.635050][T14837] 9pnet_fd: Insufficient options for proto=fd [ 835.880603][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1971'. [ 835.902985][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1970'. [ 836.028061][T14841] vlan2: entered allmulticast mode [ 836.239754][T12944] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 837.043145][T14753] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 837.058868][T12944] usb 9-1: Using ep0 maxpacket: 8 [ 837.086960][T12944] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 837.119195][T11000] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.155441][T14753] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 837.186186][T14753] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 837.268562][T12944] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.297947][T14753] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 837.308086][T12944] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.329114][T12944] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.341861][T12944] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.355374][T12944] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 837.364645][T11000] Bluetooth: hci5: command 0x0c1a tx timeout [ 837.365137][T12944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.371079][T11000] Bluetooth: hci1: command 0x041b tx timeout [ 837.438640][ T51] Bluetooth: hci3: command 0x0419 tx timeout [ 837.438730][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 837.613209][ T5935] libceph: connect (1)[c::]:6789 error -101 [ 837.643106][ T5935] libceph: mon0 (1)[c::]:6789 connect error [ 837.665019][T12944] usb 9-1: usb_control_msg returned -32 [ 837.681949][T12944] usbtmc 9-1:16.0: can't read capabilities [ 838.104222][T12944] libceph: connect (1)[c::]:6789 error -101 [ 838.445373][T14874] nfs: Unknown parameter 'fscquencer' [ 838.616729][T12944] libceph: mon0 (1)[c::]:6789 connect error [ 838.711618][T14875] usbtmc 9-1:16.0: control status returned 0 [ 838.968946][ T43] usb 9-1: USB disconnect, device number 5 [ 839.110021][T14753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.150388][T12944] libceph: connect (1)[c::]:6789 error -101 [ 839.223600][T12944] libceph: mon0 (1)[c::]:6789 connect error [ 839.467474][T14753] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.495161][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.502422][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.517455][T12253] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.524798][T12253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.532807][T11000] Bluetooth: hci3: command 0x0419 tx timeout [ 839.581299][T14865] ceph: No mds server is up or the cluster is laggy [ 840.578341][T14753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.151530][T14923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 841.221271][T14923] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 841.342224][T14923] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 841.387475][T14923] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 841.560575][T14923] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 842.655494][T14753] veth0_vlan: entered promiscuous mode [ 842.703265][T14753] veth1_vlan: entered promiscuous mode [ 842.991379][T14753] veth0_macvtap: entered promiscuous mode [ 843.045054][T14753] veth1_macvtap: entered promiscuous mode [ 843.136499][T14753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.209960][T11000] Bluetooth: hci2: command 0x0c1a tx timeout [ 843.288973][T11000] Bluetooth: hci1: command 0x041b tx timeout [ 843.309215][T14753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.341649][T14753] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.358765][T11000] Bluetooth: hci5: command 0x0c1a tx timeout [ 843.375835][T14753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.400244][T14753] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.438760][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 843.498537][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 843.620144][T11000] Bluetooth: hci3: command 0x0419 tx timeout [ 844.288933][T14753] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.354139][T14950] orangefs_mount: mount request failed with -4 [ 844.448537][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 844.474300][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 844.488826][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 844.504302][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 844.514895][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 844.534152][T12225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.567013][T12225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.574837][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 844.636271][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 844.669492][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.693514][T12225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.715530][T12225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.454207][T14962] nfs: Unknown parameter 'fscquencer' [ 845.609473][ T9] usb 10-1: usb_control_msg returned -32 [ 845.615310][ T9] usbtmc 10-1:16.0: can't read capabilities [ 845.694950][T11000] Bluetooth: hci3: command 0x0419 tx timeout [ 846.840272][T12232] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.922030][T12944] usb 10-1: USB disconnect, device number 7 [ 847.214460][T12232] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.364832][T12232] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.432644][T12232] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.546144][T12232] bridge_slave_1: left allmulticast mode [ 847.552280][T12232] bridge_slave_1: left promiscuous mode [ 847.558045][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.570642][T12232] bridge_slave_0: left allmulticast mode [ 847.576347][T12232] bridge_slave_0: left promiscuous mode [ 847.582454][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.938250][T12232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.953481][T12232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.963553][T12232] bond0 (unregistering): Released all slaves [ 848.182748][T12232] hsr_slave_0: left promiscuous mode [ 848.191490][T12232] hsr_slave_1: left promiscuous mode [ 848.197473][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.205405][T12232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.217832][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.225634][T12232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.248614][T12232] veth1_macvtap: left promiscuous mode [ 848.254256][T12232] veth0_macvtap: left promiscuous mode [ 848.260006][T12232] veth1_vlan: left promiscuous mode [ 848.265365][T12232] veth0_vlan: left promiscuous mode [ 848.765980][T12232] team0 (unregistering): Port device team_slave_1 removed [ 848.815453][T12232] team0 (unregistering): Port device team_slave_0 removed [ 851.438740][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 852.092226][T15034] overlayfs: failed to resolve './file0': -2 [ 852.166375][T15005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 852.175157][T15005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 852.182125][T15005] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 852.188842][T15005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 852.248708][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 852.269402][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 852.281465][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 852.302723][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 852.315376][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 852.498544][ T5935] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 852.625759][ T30] audit: type=1326 audit(1751472279.713:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 852.692061][T15031] chnl_net:caif_netlink_parms(): no params data found [ 852.711399][ T30] audit: type=1326 audit(1751472279.713:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 852.749636][ T5935] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.778694][ T30] audit: type=1326 audit(1751472279.753:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 852.798731][ T5935] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 852.832249][ T5935] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 852.888490][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.908502][ T30] audit: type=1326 audit(1751472279.753:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 853.088977][ T5935] usb 9-1: config 0 descriptor?? [ 853.108154][ T5935] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 853.126943][ T5935] dvb-usb: bulk message failed: -22 (3/0) [ 853.174538][ T30] audit: type=1326 audit(1751472279.753:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 853.175739][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 853.239009][ T30] audit: type=1326 audit(1751472279.753:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3d64d8e929 code=0x7ffc0000 [ 853.260967][ T30] audit: type=1326 audit(1751472279.763:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d64d2ab19 code=0x7ffc0000 [ 853.286020][ T30] audit: type=1326 audit(1751472279.763:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d64d2ab19 code=0x7ffc0000 [ 853.332850][ T30] audit: type=1326 audit(1751472279.763:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d64d2ab19 code=0x7ffc0000 [ 853.421630][ T30] audit: type=1326 audit(1751472279.763:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15042 comm="syz.2.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d64d2ab19 code=0x7ffc0000 [ 853.466747][ T5935] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 853.481935][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.500492][ T5935] usb 9-1: media controller created [ 853.508042][T15031] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.522582][T15031] bridge_slave_0: entered allmulticast mode [ 853.531049][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.533167][T15031] bridge_slave_0: entered promiscuous mode [ 853.551808][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.563267][T15031] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.575798][T15031] bridge_slave_1: entered allmulticast mode [ 853.586465][T15031] bridge_slave_1: entered promiscuous mode [ 853.598797][T11000] Bluetooth: hci2: command 0x0c1a tx timeout [ 853.612130][ T5935] dvb-usb: bulk message failed: -22 (6/0) [ 853.644793][ T5935] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 853.702596][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input41 [ 853.766444][ T5935] dvb-usb: schedule remote query interval to 150 msecs. [ 853.800382][ T5935] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 853.842748][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.884519][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.960577][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 853.981533][ T5935] dvb-usb: error while querying for an remote control event. [ 854.065642][T15031] team0: Port device team_slave_0 added [ 854.104028][T15031] team0: Port device team_slave_1 added [ 854.168874][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 854.195570][ T5935] dvb-usb: error while querying for an remote control event. [ 854.238693][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 854.239213][ T5827] Bluetooth: hci1: command 0x041b tx timeout [ 854.252835][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 854.315535][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.324390][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.353292][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.381215][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.388613][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.430183][ T51] Bluetooth: hci3: command tx timeout [ 854.438912][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.447524][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 854.455579][ T5935] dvb-usb: error while querying for an remote control event. [ 854.469161][T12944] usb 9-1: USB disconnect, device number 6 [ 854.660873][T15031] hsr_slave_0: entered promiscuous mode [ 854.671681][T12944] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 854.686038][T15031] hsr_slave_1: entered promiscuous mode [ 855.041475][T12944] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 855.218853][T12944] usb 9-1: Using ep0 maxpacket: 8 [ 855.230924][T12944] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 855.241648][T12944] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 855.268531][T12944] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 855.293548][T12944] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 855.333443][T12944] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.381130][T12944] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 855.406194][T12944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.640542][T12944] usb 9-1: usb_control_msg returned -32 [ 855.662589][T12944] usbtmc 9-1:16.0: can't read capabilities [ 855.961016][T15031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 856.056782][T15071] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 856.256306][T15031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 856.362755][T15031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 856.369849][T15072] usbtmc 9-1:16.0: control status returned 0 [ 856.400641][T15031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 856.478916][ T51] Bluetooth: hci3: command tx timeout [ 857.118742][T15085] nfs: Unknown parameter 'fscquencer' [ 857.443299][ T5878] usb 9-1: USB disconnect, device number 7 [ 858.267518][T15031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.347411][T15031] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.386747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.393998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.454380][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.461695][T12234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.558777][ T51] Bluetooth: hci3: command tx timeout [ 859.849403][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.238787][T15112] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 860.245103][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 860.640574][ T51] Bluetooth: hci3: command tx timeout [ 861.058472][T15112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 861.085214][T15112] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 861.119197][T15112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 861.136372][T15112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 861.178700][T15112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 861.193128][T15112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 861.488778][T12944] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 861.513906][T15031] veth0_vlan: entered promiscuous mode [ 861.594495][T15031] veth1_vlan: entered promiscuous mode [ 861.696329][T12944] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.708696][T12944] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 861.727300][T15031] veth0_macvtap: entered promiscuous mode [ 861.735116][T12944] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 861.766805][T12944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.779869][T15031] veth1_macvtap: entered promiscuous mode [ 861.809724][T12944] usb 10-1: config 0 descriptor?? [ 861.853514][T12944] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 861.867632][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.879163][T12944] dvb-usb: bulk message failed: -22 (3/0) [ 861.918067][T12944] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 861.930010][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.973104][T12944] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 861.995274][T15031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.008502][T12944] usb 10-1: media controller created [ 862.015907][T12944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 862.026388][ T30] kauditd_printk_skb: 1886 callbacks suppressed [ 862.026408][ T30] audit: type=1326 audit(1751472289.123:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618eb8e929 code=0x7ffc0000 [ 862.033610][T15031] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.083338][ T30] audit: type=1326 audit(1751472289.183:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f618eb8e929 code=0x7ffc0000 [ 862.111352][ T30] audit: type=1326 audit(1751472289.183:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618eb8e929 code=0x7ffc0000 [ 862.134038][T12944] dvb-usb: bulk message failed: -22 (6/0) [ 862.150205][T12944] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 862.168154][ T30] audit: type=1326 audit(1751472289.183:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618eb8e929 code=0x7ffc0000 [ 862.194177][T12944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input42 [ 862.216274][ T30] audit: type=1326 audit(1751472289.183:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f618eb8e929 code=0x7ffc0000 [ 862.226061][T15031] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.279310][T12944] dvb-usb: schedule remote query interval to 150 msecs. [ 862.339393][ T30] audit: type=1326 audit(1751472289.183:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f618eb2ab19 code=0x7ffc0000 [ 862.438541][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 862.461420][T15153] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 862.487552][T12944] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 862.498507][T15031] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.581934][ T30] audit: type=1326 audit(1751472289.183:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f618eb2ab19 code=0x7ffc0000 [ 862.605073][ T30] audit: type=1326 audit(1751472289.183:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f618eb2ab19 code=0x7ffc0000 [ 862.627104][ T30] audit: type=1326 audit(1751472289.183:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f618eb2ab19 code=0x7ffc0000 [ 862.639813][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 862.667932][ T30] audit: type=1326 audit(1751472289.183:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15150 comm="syz.8.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f618eb2ab19 code=0x7ffc0000 [ 862.678195][ T5935] dvb-usb: error while querying for an remote control event. [ 862.879294][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 862.888483][ T5878] dvb-usb: error while querying for an remote control event. [ 862.917760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.951472][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.047741][T12232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.064217][T12232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.069794][T12944] dvb-usb: bulk message failed: -22 (1/0) [ 863.082706][T12944] dvb-usb: error while querying for an remote control event. [ 863.119066][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 863.199907][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 863.206139][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 863.269312][T12944] dvb-usb: bulk message failed: -22 (1/0) [ 863.296949][T12944] dvb-usb: error while querying for an remote control event. [ 863.349687][ T5878] usb 10-1: USB disconnect, device number 8 [ 863.444566][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 863.704384][T12243] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.085168][T12243] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.456638][T12243] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.598630][T12243] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.909506][T12243] bridge_slave_1: left allmulticast mode [ 864.920139][T12243] bridge_slave_1: left promiscuous mode [ 864.929462][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.951543][T12243] bridge_slave_0: left allmulticast mode [ 864.957266][T12243] bridge_slave_0: left promiscuous mode [ 864.970781][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.516287][T12243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.528159][T12243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.539604][T12243] bond0 (unregistering): Released all slaves [ 865.790389][T12243] hsr_slave_0: left promiscuous mode [ 865.796638][T12243] hsr_slave_1: left promiscuous mode [ 865.802923][T12243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.811974][T12243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.820819][T12243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.828303][T12243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.851964][T12243] veth1_macvtap: left promiscuous mode [ 865.857530][T12243] veth0_macvtap: left promiscuous mode [ 865.864616][T12243] veth1_vlan: left promiscuous mode [ 865.870110][T12243] veth0_vlan: left promiscuous mode [ 866.330135][T15172] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2030'. [ 866.764340][T15179] ubi31: attaching mtd0 [ 866.785807][T15179] ubi31: scanning is finished [ 866.791044][T15179] ubi31: empty MTD device detected [ 867.250874][T15179] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 868.197961][T12243] team0 (unregistering): Port device team_slave_1 removed [ 868.254822][T12243] team0 (unregistering): Port device team_slave_0 removed [ 869.022248][T15181] vlan2: entered allmulticast mode [ 869.090798][T15166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 869.115137][T15166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 869.122076][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 869.141212][T15166] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 869.148985][T15166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 869.319364][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 869.331298][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 869.352090][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.388963][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.409113][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 870.280967][T15209] overlayfs: failed to resolve './file0': -2 [ 870.292204][ T5935] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 870.307450][ T30] kauditd_printk_skb: 2602 callbacks suppressed [ 870.307470][ T30] audit: type=1326 audit(1751472297.403:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4818e929 code=0x7ffc0000 [ 870.361272][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.369047][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.398765][ T30] audit: type=1326 audit(1751472297.403:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4818e929 code=0x7ffc0000 [ 870.424373][ T30] audit: type=1326 audit(1751472297.443:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0b4818e929 code=0x7ffc0000 [ 870.446982][ T30] audit: type=1326 audit(1751472297.443:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4818e929 code=0x7ffc0000 [ 870.574747][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.601070][ T30] audit: type=1326 audit(1751472297.453:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0b4818e929 code=0x7ffc0000 [ 870.605851][ T5935] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 870.677133][T15189] chnl_net:caif_netlink_parms(): no params data found [ 870.699920][ T30] audit: type=1326 audit(1751472297.503:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4812ab19 code=0x7ffc0000 [ 870.766241][ T30] audit: type=1326 audit(1751472297.503:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4812ab19 code=0x7ffc0000 [ 870.808817][ T5935] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 870.848485][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.850885][ T30] audit: type=1326 audit(1751472297.503:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4812ab19 code=0x7ffc0000 [ 870.958491][ T30] audit: type=1326 audit(1751472297.503:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4812ab19 code=0x7ffc0000 [ 871.037691][ T30] audit: type=1326 audit(1751472297.503:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15211 comm="syz.9.2040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4812ab19 code=0x7ffc0000 [ 871.118528][T11000] Bluetooth: hci2: command 0x0c1a tx timeout [ 871.193049][ T5935] usb 3-1: config 0 descriptor?? [ 871.198756][T11000] Bluetooth: hci0: command 0x0405 tx timeout [ 871.205050][T11000] Bluetooth: hci5: command 0x0c1a tx timeout [ 871.207143][ T5827] Bluetooth: hci1: command 0x041b tx timeout [ 871.231327][ T5935] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 871.293251][ T5935] dvb-usb: bulk message failed: -22 (3/0) [ 871.385810][ T5935] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 871.451738][ T5935] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 871.518576][ T51] Bluetooth: hci3: command tx timeout [ 871.552232][ T5935] usb 3-1: media controller created [ 871.612492][T15189] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.655297][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 871.667191][T15189] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.720538][T15189] bridge_slave_0: entered allmulticast mode [ 871.737676][ T5935] dvb-usb: bulk message failed: -22 (6/0) [ 871.783816][T15189] bridge_slave_0: entered promiscuous mode [ 871.791674][ T5935] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 871.826204][T15189] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.835988][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input43 [ 871.852794][T15189] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.884055][ T5935] dvb-usb: schedule remote query interval to 150 msecs. [ 871.893703][T15189] bridge_slave_1: entered allmulticast mode [ 871.924564][ T5935] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 871.933288][T15189] bridge_slave_1: entered promiscuous mode [ 872.078587][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 872.108610][ T5935] dvb-usb: error while querying for an remote control event. [ 872.186513][T15189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.257290][T15189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.308709][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 872.331746][ T5935] dvb-usb: error while querying for an remote control event. [ 872.486430][T15189] team0: Port device team_slave_0 added [ 872.528649][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 872.540570][ T5878] dvb-usb: error while querying for an remote control event. [ 872.542729][T15189] team0: Port device team_slave_1 added [ 872.728709][T12944] dvb-usb: bulk message failed: -22 (1/0) [ 872.759638][T12944] dvb-usb: error while querying for an remote control event. [ 872.762927][ T5894] usb 3-1: USB disconnect, device number 59 [ 872.789091][ T5935] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 872.832703][T15189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.857270][T15189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.916604][ T5894] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 872.951253][T15189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.970106][ T5935] usb 10-1: Using ep0 maxpacket: 8 [ 872.974507][T15189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.985833][T15189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.013698][ T5935] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 873.013711][T15189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.080565][ T5935] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 873.121474][ T5935] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 873.161817][ T5935] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 873.164599][T15189] hsr_slave_0: entered promiscuous mode [ 873.203196][ T5935] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.210721][T15189] hsr_slave_1: entered promiscuous mode [ 873.256486][ T5935] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 873.287847][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.536348][ T5935] usb 10-1: usb_control_msg returned -32 [ 873.547483][ T5935] usbtmc 10-1:16.0: can't read capabilities [ 873.602743][ T51] Bluetooth: hci3: command tx timeout [ 873.758808][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 873.883363][T15234] vlan2: entered allmulticast mode [ 873.889740][T15234] bridge4: port 1(vlan2) entered blocking state [ 873.896954][T15234] bridge4: port 1(vlan2) entered disabled state [ 873.906335][T15234] vlan2: entered promiscuous mode [ 873.912361][T15234] veth1: entered promiscuous mode [ 873.923251][T15236] usbtmc 10-1:16.0: control status returned 0 [ 874.915947][ T5935] usb 10-1: USB disconnect, device number 9 [ 875.243067][T15189] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 875.261267][T15189] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 875.282961][T15189] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 875.301587][T15189] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 875.340462][T15241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 875.362972][T15241] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 875.385231][T15241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 875.400484][T15241] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 875.428951][T15241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 875.459363][T15241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 875.509248][T15241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 875.609144][T15189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.663148][T15189] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.693116][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.700439][T12234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.737723][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.744924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.817122][T15189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 875.862913][T15256] random: crng reseeded on system resumption [ 876.285075][T15189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.538688][ T5878] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 876.865251][ T5878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.886034][ T5878] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 876.899634][ T5878] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 876.963184][T15277] overlayfs: failed to resolve './file0': -2 [ 876.980636][ T5878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.044760][ T5878] usb 10-1: config 0 descriptor?? [ 877.083697][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 877.120923][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 877.122290][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 877.243373][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 877.307585][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 877.342912][ T5878] usb 10-1: media controller created [ 877.369704][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.422553][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 877.440302][ T5827] Bluetooth: hci3: command 0x0419 tx timeout [ 877.446608][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 877.451104][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 877.453157][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 877.465971][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 877.524579][T15189] veth0_vlan: entered promiscuous mode [ 877.541488][T15189] veth1_vlan: entered promiscuous mode [ 877.556625][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input44 [ 877.610864][T15189] veth0_macvtap: entered promiscuous mode [ 877.641677][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 877.650448][T15189] veth1_macvtap: entered promiscuous mode [ 877.673713][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 877.694436][T15189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.743655][ T5878] usb 10-1: USB disconnect, device number 10 [ 877.744735][T15189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.778032][T15189] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.796204][T15189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.817679][T15189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.859363][T15189] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.970009][ T5878] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 878.283869][T12225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.384310][T12225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.483916][T12225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.494067][T12225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.272036][T12225] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.380602][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 879.466995][T12225] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.568605][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 879.600848][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 879.638220][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 879.668603][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 879.699205][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 879.737543][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 879.753439][T12225] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.753477][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 879.775341][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.004612][ T9] usb 10-1: usb_control_msg returned -32 [ 880.011757][ T9] usbtmc 10-1:16.0: can't read capabilities [ 880.048855][T12225] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.164498][T12225] bridge_slave_1: left allmulticast mode [ 880.172759][T12225] bridge_slave_1: left promiscuous mode [ 880.179170][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.190028][T12225] bridge_slave_0: left allmulticast mode [ 880.195813][T12225] bridge_slave_0: left promiscuous mode [ 880.202689][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.405402][T15294] usbtmc 10-1:16.0: control status returned 0 [ 880.593245][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.596266][ T5878] usb 10-1: USB disconnect, device number 11 [ 880.619873][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.631364][T12225] bond0 (unregistering): Released all slaves [ 880.891276][T12225] hsr_slave_0: left promiscuous mode [ 880.897306][T12225] hsr_slave_1: left promiscuous mode [ 880.905927][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.916745][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.925345][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.933358][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.954321][T12225] veth1_macvtap: left promiscuous mode [ 880.960087][T12225] veth0_macvtap: left promiscuous mode [ 880.965790][T12225] veth1_vlan: left promiscuous mode [ 880.971301][T12225] veth0_vlan: left promiscuous mode [ 881.505100][T12225] team0 (unregistering): Port device team_slave_1 removed [ 881.553975][T12225] team0 (unregistering): Port device team_slave_0 removed [ 884.191817][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.202669][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.232318][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.251188][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 884.263288][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.270653][ T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 884.434156][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.455230][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 884.464655][ T9] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 884.474329][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.495329][ T9] usb 9-1: config 0 descriptor?? [ 884.522832][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 884.530982][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 884.562987][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 884.584051][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 884.612688][ T9] usb 9-1: media controller created [ 884.621033][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.657326][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 884.672320][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 884.696134][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input45 [ 884.755665][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 884.764231][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 884.799109][ T9] usb 9-1: USB disconnect, device number 8 [ 884.910265][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 886.755650][ T51] Bluetooth: hci3: command tx timeout [ 887.085061][T15348] overlayfs: failed to resolve './file0': -2 [ 887.644331][T15325] chnl_net:caif_netlink_parms(): no params data found [ 888.274203][T15325] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.304960][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.313889][T15363] kvm: pic: non byte write [ 888.324670][T15325] bridge_slave_0: entered allmulticast mode [ 888.337707][T15325] bridge_slave_0: entered promiscuous mode [ 888.356128][T15325] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.363657][T15325] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.372015][T15325] bridge_slave_1: entered allmulticast mode [ 888.385890][T15325] bridge_slave_1: entered promiscuous mode [ 888.507895][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 888.522050][T15325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.567315][T15325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.730273][T15325] team0: Port device team_slave_0 added [ 888.744274][T15325] team0: Port device team_slave_1 added [ 888.799671][ T51] Bluetooth: hci3: command tx timeout [ 888.824389][T15325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.832571][T15325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.861290][T15325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.877862][T15325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.888088][T15325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 888.920072][T15325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.077672][T15325] hsr_slave_0: entered promiscuous mode [ 889.096474][T15325] hsr_slave_1: entered promiscuous mode [ 890.886130][ T51] Bluetooth: hci3: command tx timeout [ 892.976579][ T51] Bluetooth: hci3: command tx timeout [ 894.267239][T15325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 894.322534][T15325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 894.502326][T15422] usb usb8: usbfs: process 15422 (syz.7.2095) did not claim interface 0 before use [ 894.546612][T15325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 895.355476][T15325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 895.919818][T15439] vivid-004: disconnect [ 895.947802][T15428] vivid-004: reconnect [ 896.296152][T15325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.406003][T15325] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.794347][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.801678][ T6521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.101011][T15454] syz_tun: entered allmulticast mode [ 897.114889][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.122216][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.888954][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2106'. [ 898.064991][T15453] syz_tun: left allmulticast mode [ 898.144986][T15466] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 898.156796][T15466] CUSE: unknown device info "3ܟ,̘" [ 898.162839][T15466] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 898.162839][T15466] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 898.181907][T15466] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 898.193336][T15466] CUSE: DEVNAME unspecified [ 898.962838][T15471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 898.969526][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.977891][T15471] vhci_hcd vhci_hcd.0: Device attached [ 899.008743][T15471] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 899.015429][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 899.039951][T15471] vhci_hcd vhci_hcd.0: Device attached [ 899.062354][T15471] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 899.069037][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 899.080260][T15325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.106390][T15471] vhci_hcd vhci_hcd.0: Device attached [ 899.107232][T15485] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 899.174093][T15471] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 899.180790][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 899.198702][T15471] vhci_hcd vhci_hcd.0: Device attached [ 899.249711][ T5935] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 899.592017][T15471] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 899.598798][T15471] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 899.770727][T15471] vhci_hcd vhci_hcd.0: Device attached [ 899.777952][T15485] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(27) [ 899.784624][T15485] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 899.813356][T15493] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(30) [ 899.820055][T15493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 899.850837][T15497] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(33) [ 899.857523][T15497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 899.886294][T15497] vhci_hcd vhci_hcd.0: Device attached [ 899.943943][T15485] vhci_hcd vhci_hcd.0: Device attached [ 900.062898][T15492] vhci_hcd: connection closed [ 900.063231][T15482] vhci_hcd: connection closed [ 900.063257][T15486] vhci_hcd: connection closed [ 900.073421][T15494] vhci_hcd: connection closed [ 900.082682][T15475] vhci_hcd: connection reset by peer [ 900.097449][T15479] vhci_hcd: connection closed [ 900.099028][T12249] vhci_hcd: stop threads [ 900.109840][T15493] vhci_hcd vhci_hcd.0: Device attached [ 900.344150][T12249] vhci_hcd: release socket [ 900.466719][T12249] vhci_hcd: disconnect device [ 900.637293][T12249] vhci_hcd: stop threads [ 900.678666][T12249] vhci_hcd: release socket [ 900.688587][T12249] vhci_hcd: disconnect device [ 900.698808][T12249] vhci_hcd: stop threads [ 900.714976][T12249] vhci_hcd: release socket [ 900.741243][T12249] vhci_hcd: disconnect device [ 900.761480][T12249] vhci_hcd: stop threads [ 900.765803][T12249] vhci_hcd: release socket [ 900.798598][T12249] vhci_hcd: disconnect device [ 900.829001][T12249] vhci_hcd: stop threads [ 900.829040][T12249] vhci_hcd: release socket [ 900.829094][T12249] vhci_hcd: disconnect device [ 900.832403][T12249] vhci_hcd: stop threads [ 900.832422][T12249] vhci_hcd: release socket [ 900.832473][T12249] vhci_hcd: disconnect device [ 901.027486][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2114'. [ 901.152569][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2114'. [ 903.865696][T15325] veth0_vlan: entered promiscuous mode [ 903.959407][T15502] vhci_hcd: connection closed [ 903.959666][T15496] vhci_hcd: connection closed [ 903.988852][T12829] vhci_hcd: stop threads [ 903.993266][T15325] veth1_vlan: entered promiscuous mode [ 903.993618][T12829] vhci_hcd: release socket [ 904.047334][T15325] veth0_macvtap: entered promiscuous mode [ 904.052841][T12829] vhci_hcd: disconnect device [ 904.069267][T12829] vhci_hcd: stop threads [ 904.073626][T12829] vhci_hcd: release socket [ 904.116811][T12829] vhci_hcd: disconnect device [ 904.198475][T15325] veth1_macvtap: entered promiscuous mode [ 904.347304][T15325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.028799][ T5935] vhci_hcd: vhci_device speed not set [ 905.106407][T15325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.162714][T15325] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.238794][T15325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.264053][T15325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.274341][T15325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.299520][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2119'. [ 905.514670][T12829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.544949][T12829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.607532][T12829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.631786][T12829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.668625][ T5878] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 906.296023][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.311656][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.324987][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.349140][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.362068][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.374517][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.387269][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.399676][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.412098][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 906.425079][T15545] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 907.035384][ T5878] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 907.051446][ T5878] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 907.062093][ T5878] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 907.099385][ T5878] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.112770][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.121478][ T5878] usb 9-1: Product: syz [ 907.125695][ T5878] usb 9-1: Manufacturer: syz [ 907.133118][ T5878] usb 9-1: SerialNumber: syz [ 907.300210][ T24] usb usb38-port1: attempt power cycle [ 907.610484][ T5878] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 908.430255][ T24] usb usb38-port1: unable to enumerate USB device [ 909.503747][ T5878] usb 9-1: 2:1: cannot get freq at ep 0x82 [ 910.011485][ T5878] usb 9-1: USB disconnect, device number 9 [ 910.294546][T12232] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.496513][T12232] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.601828][T12232] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.687936][T12232] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.897607][T12232] bridge_slave_1: left allmulticast mode [ 910.903577][T12232] bridge_slave_1: left promiscuous mode [ 910.913170][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.936657][T12232] bridge_slave_0: left allmulticast mode [ 910.942902][T12232] bridge_slave_0: left promiscuous mode [ 910.950874][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.366939][T12232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 911.379483][T12232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.390390][T12232] bond0 (unregistering): Released all slaves [ 911.691972][T12232] hsr_slave_0: left promiscuous mode [ 911.698035][T12232] hsr_slave_1: left promiscuous mode [ 911.705663][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.713436][T12232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.724005][T12232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.731947][T12232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.753010][T12232] veth1_macvtap: left promiscuous mode [ 911.759058][T12232] veth0_macvtap: left promiscuous mode [ 911.764695][T12232] veth1_vlan: left promiscuous mode [ 911.770150][T12232] veth0_vlan: left promiscuous mode [ 912.295106][T12232] team0 (unregistering): Port device team_slave_1 removed [ 912.342393][T12232] team0 (unregistering): Port device team_slave_0 removed [ 912.629418][T15573] vivid-004: disconnect [ 912.636673][T15572] vivid-004: reconnect [ 914.166268][T15594] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 915.570453][T15588] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.577432][T15588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.586880][T15588] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 915.590000][T15601] netlink: 'syz.7.2135': attribute type 3 has an invalid length. [ 915.604733][T15588] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 915.663823][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 915.683938][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 915.770923][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 915.780018][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 915.790565][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 917.168608][T15615] vivid-000: disconnect [ 917.175156][T15614] vivid-000: reconnect [ 917.205902][T15618] fuse: Bad value for 'fd' [ 917.316323][T15593] chnl_net:caif_netlink_parms(): no params data found [ 917.616485][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 917.624165][ T51] Bluetooth: hci1: command 0x041b tx timeout [ 917.631557][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 917.679271][ T5827] Bluetooth: hci0: command 0x0405 tx timeout [ 917.740347][T15627] block device autoloading is deprecated and will be removed. [ 917.754694][T15627] syz.9.2146: attempt to access beyond end of device [ 917.754694][T15627] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 917.911124][ T5827] Bluetooth: hci3: command tx timeout [ 918.546912][T15593] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.577119][T15593] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.657713][T15593] bridge_slave_0: entered allmulticast mode [ 918.774373][T15593] bridge_slave_0: entered promiscuous mode [ 918.918954][T15593] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.996418][T15593] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.072756][T15593] bridge_slave_1: entered allmulticast mode [ 919.195576][T15593] bridge_slave_1: entered promiscuous mode [ 919.711088][T15593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.743412][T15593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.767716][T15643] hub 9-0:1.0: USB hub found [ 919.784872][T15643] hub 9-0:1.0: 1 port detected [ 919.823972][T15593] team0: Port device team_slave_0 added [ 919.854000][T15593] team0: Port device team_slave_1 added [ 919.978183][T15593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.986960][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.014139][ T5827] Bluetooth: hci3: command tx timeout [ 920.093093][T15593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.252161][T15593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.333777][T15593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.359759][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.830756][T15593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.971341][T15593] hsr_slave_0: entered promiscuous mode [ 922.004396][T15593] hsr_slave_1: entered promiscuous mode [ 922.078874][ T5827] Bluetooth: hci3: command tx timeout [ 923.175293][T15661] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 923.305240][T15664] vivid-004: disconnect [ 923.346240][T15663] vivid-004: reconnect [ 923.788281][T15669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 924.164871][ T5827] Bluetooth: hci3: command tx timeout [ 925.638813][ T5879] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 926.321066][T15690] orangefs_mount: mount request failed with -4 [ 926.458636][ T5879] usb 10-1: Using ep0 maxpacket: 8 [ 926.468976][ T5879] usb 10-1: config 10 has an invalid interface number: 193 but max is 0 [ 926.479079][ T5879] usb 10-1: config 10 has no interface number 0 [ 926.499312][ T5879] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=be.93 [ 926.508985][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.529264][ T5879] usb 10-1: Product: syz [ 926.539199][ T5879] usb 10-1: Manufacturer: syz [ 926.558682][ T5879] usb 10-1: SerialNumber: syz [ 926.774270][T15593] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 926.824424][T15593] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 926.952384][T15593] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 927.038706][T15593] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 927.058583][ T9] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 927.423054][T15710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 928.167813][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.167841][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 928.167897][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 928.167916][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.182862][ T9] usb 3-1: config 0 descriptor?? [ 928.263272][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 928.263324][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 928.279913][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 928.289405][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 928.289463][ T9] usb 3-1: media controller created [ 928.292263][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.329116][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 928.329233][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 928.339066][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 928.360490][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 928.360518][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 928.365296][T15593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.519931][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 928.519992][ T9] dvb-usb: error while querying for an remote control event. [ 928.547244][T15593] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.108934][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 929.108970][ T9] dvb-usb: error while querying for an remote control event. [ 929.163603][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.163845][T12234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.253612][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.253788][T12234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.268526][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 929.268564][ T5887] dvb-usb: error while querying for an remote control event. [ 929.438603][ T5887] dvb-usb: bulk message failed: -22 (1/0) [ 929.438644][ T5887] dvb-usb: error while querying for an remote control event. [ 929.598835][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 929.598873][ T9] dvb-usb: error while querying for an remote control event. [ 929.693497][ T9] usb 3-1: USB disconnect, device number 60 [ 929.924377][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 930.419425][ T5827] Bluetooth: hci2: Malformed Event: 0x02 [ 931.562781][T15593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.633369][ T5879] rtsx_usb 10-1:10.193: probe with driver rtsx_usb failed with error -22 [ 931.730664][ T5879] usb 10-1: USB disconnect, device number 12 [ 931.756957][ T5827] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 931.776351][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.783142][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.097766][T15761] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 933.791646][T15760] [ 933.794383][T15760] ============================= [ 933.799402][T15760] WARNING: suspicious RCU usage [ 933.804342][T15760] 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 Not tainted [ 933.807389][T15593] veth0_vlan: entered promiscuous mode [ 933.811523][T15760] ----------------------------- [ 933.811541][T15760] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 933.811559][T15760] [ 933.811559][T15760] other info that might help us debug this: [ 933.811559][T15760] [ 933.811569][T15760] [ 933.811569][T15760] rcu_scheduler_active = 2, debug_locks = 1 [ 933.811595][T15760] 1 lock held by syz.7.2184/15760: [ 933.855326][T15760] #0: ffffffff8e13f000 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 933.866200][T15760] [ 933.866200][T15760] stack backtrace: [ 933.872322][T15760] CPU: 1 UID: 0 PID: 15760 Comm: syz.7.2184 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 933.872353][T15760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 933.872372][T15760] Call Trace: [ 933.872385][T15760] [ 933.872396][T15760] dump_stack_lvl+0x189/0x250 [ 933.872436][T15760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.872466][T15760] ? __pfx__printk+0x10/0x10 [ 933.872497][T15760] ? print_lock_name+0xde/0x100 [ 933.872537][T15760] lockdep_rcu_suspicious+0x140/0x1d0 [ 933.872573][T15760] task_cls_state+0x1a5/0x1d0 [ 933.872602][T15760] bpf_get_cgroup_classid_curr+0x18/0x60 [ 933.872635][T15760] bpf_prog_841aec7193f618b3+0x1b/0x21 [ 933.872655][T15760] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 933.872685][T15760] bpf_prog_test_run_syscall+0x312/0x4b0 [ 933.872714][T15760] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 933.872738][T15760] ? __fget_files+0x2a/0x420 [ 933.872774][T15760] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 933.872799][T15760] bpf_prog_test_run+0x2c7/0x340 [ 933.872831][T15760] __sys_bpf+0x4a4/0x860 [ 933.872861][T15760] ? __pfx___sys_bpf+0x10/0x10 [ 933.872910][T15760] ? rcu_is_watching+0x15/0xb0 [ 933.872951][T15760] __x64_sys_bpf+0x7c/0x90 [ 933.872976][T15760] do_syscall_64+0xfa/0x3b0 [ 933.873007][T15760] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.873048][T15760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.873070][T15760] ? clear_bhb_loop+0x60/0xb0 [ 933.873098][T15760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.873119][T15760] RIP: 0033:0x7f2dcbd8e929 [ 933.873138][T15760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.873158][T15760] RSP: 002b:00007f2dccc6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 933.873182][T15760] RAX: ffffffffffffffda RBX: 00007f2dcbfb5fa0 RCX: 00007f2dcbd8e929 [ 933.873200][T15760] RDX: 0000000000000039 RSI: 0000200000000500 RDI: 000000000000000a [ 933.873214][T15760] RBP: 00007f2dcbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 933.873229][T15760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 933.873242][T15760] R13: 0000000000000000 R14: 00007f2dcbfb5fa0 R15: 00007ffdffaa3808 [ 933.873275][T15760] [ 934.608505][ T5879] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 935.447919][T12225] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.861878][T12225] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.041289][T12225] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.132372][ T5879] usb 10-1: device descriptor read/all, error -71 [ 936.143427][T12225] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.602732][T12225] bridge_slave_1: left allmulticast mode [ 936.623078][T12225] bridge_slave_1: left promiscuous mode [ 936.630226][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.661245][T12225] bridge_slave_0: left allmulticast mode [ 936.666967][T12225] bridge_slave_0: left promiscuous mode [ 936.681725][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.183416][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.194880][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.210247][T12225] bond0 (unregistering): Released all slaves [ 937.461487][T12225] hsr_slave_0: left promiscuous mode [ 937.467609][T12225] hsr_slave_1: left promiscuous mode [ 937.473989][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.482003][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.490300][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.510071][T12225] veth1_macvtap: left promiscuous mode [ 937.515672][T12225] veth0_macvtap: left promiscuous mode [ 937.522366][T12225] veth1_vlan: left promiscuous mode [ 937.527707][T12225] veth0_vlan: left promiscuous mode [ 938.020648][T12225] team0 (unregistering): Port device team_slave_1 removed [ 938.067311][T12225] team0 (unregistering): Port device team_slave_0 removed [ 938.914879][T12225] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.020376][T12225] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.094886][T12225] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.170510][T12225] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.703523][T12225] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.769413][T12225] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.846988][T12225] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.898743][T12225] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.077987][T12225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.145991][T12225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.207052][T12225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.278181][T12225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.404153][T12225] bridge_slave_1: left allmulticast mode [ 940.414563][T12225] bridge_slave_1: left promiscuous mode [ 940.425018][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.435917][T12225] bridge_slave_0: left allmulticast mode [ 940.442168][T12225] bridge_slave_0: left promiscuous mode [ 940.447944][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.462853][T12225] bridge_slave_1: left allmulticast mode [ 940.468820][T12225] bridge_slave_1: left promiscuous mode [ 940.474673][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.486355][T12225] bridge_slave_0: left allmulticast mode [ 940.492350][T12225] bridge_slave_0: left promiscuous mode [ 940.498073][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.511481][T12225] bridge_slave_1: left allmulticast mode [ 940.517341][T12225] bridge_slave_1: left promiscuous mode [ 940.524314][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.533757][T12225] bridge_slave_0: left allmulticast mode [ 940.540762][T12225] bridge_slave_0: left promiscuous mode [ 940.546494][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.560820][T12225] bridge_slave_1: left allmulticast mode [ 940.566528][T12225] bridge_slave_1: left promiscuous mode [ 940.574445][T12225] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.584495][T12225] bridge_slave_0: left allmulticast mode [ 940.590398][T12225] bridge_slave_0: left promiscuous mode [ 940.596126][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.610434][T12225] vlan2: left promiscuous mode [ 940.615798][T12225] veth1: left promiscuous mode [ 940.621971][T12225] bridge4: port 1(vlan2) entered disabled state [ 941.105470][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.116593][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.127674][T12225] bond0 (unregistering): Released all slaves [ 941.471409][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.482730][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.493627][T12225] bond0 (unregistering): Released all slaves [ 941.896599][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.908739][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.919569][T12225] bond0 (unregistering): Released all slaves [ 942.546847][T12225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.557650][T12225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.569882][T12225] bond0 (unregistering): Released all slaves [ 943.309497][T12225] hsr_slave_0: left promiscuous mode [ 943.315460][T12225] hsr_slave_1: left promiscuous mode [ 943.321755][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.332978][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.341737][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.354032][T12225] hsr_slave_0: left promiscuous mode [ 943.360204][T12225] hsr_slave_1: left promiscuous mode [ 943.366090][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.374071][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.385507][T12225] hsr_slave_0: left promiscuous mode [ 943.393676][T12225] hsr_slave_1: left promiscuous mode [ 943.399691][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.407297][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.416022][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.423883][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.438100][T12225] hsr_slave_0: left promiscuous mode [ 943.448211][T12225] hsr_slave_1: left promiscuous mode [ 943.454713][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.462755][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.470376][T12225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.523204][T12225] veth1_macvtap: left promiscuous mode [ 943.529005][T12225] veth0_macvtap: left promiscuous mode [ 943.534603][T12225] veth1_vlan: left promiscuous mode [ 943.540272][T12225] veth0_vlan: left promiscuous mode [ 943.546945][T12225] veth0_vlan: left promiscuous mode [ 943.553763][T12225] veth1_macvtap: left promiscuous mode [ 943.559445][T12225] veth0_macvtap: left promiscuous mode [ 943.565150][T12225] veth1_vlan: left promiscuous mode [ 943.570645][T12225] veth0_vlan: left promiscuous mode [ 943.577207][T12225] veth1_macvtap: left promiscuous mode [ 943.582940][T12225] veth0_macvtap: left promiscuous mode [ 943.588676][T12225] veth1_vlan: left promiscuous mode [ 943.594059][T12225] veth0_vlan: left promiscuous mode